This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft File: eDdfthaLNUhBuR0wX50M3AyxUB0.mft (raw, json) Hash identifier: q4EKbQ0j+YoYQMoLJkI0bbLe2nKbi7yBrbcTwCY2M7w= Subject key identifier: 3E:09:C5:B4:4E:93:7A:D1:26:C4:7B:FE:A6:CA:23:C2:36:3A:B4:0D Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D Certificate issuer: /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d Certificate serial: 019AF0BF1117AD5E3F3682F6338625F21030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:00:44 +0000 Manifest this update: Fri 05 Dec 2025 23:00:44 +0000 Manifest next update: Sat 06 Dec 2025 23:00:44 +0000 Files and hashes: 1: eDdfthaLNUhBuR0wX50M3AyxUB0.crl (hash: DiK70OxrpDKCnBmE9k8WBRvAdIbXGjlFWwfcqPvqbHw=) 2: yISIjc9YgTnf71Z4E-nlNbitu7U.roa (hash: LtZh6f0jmex3FPPUw/azkOX7onGzwYw39L6cN+bX6NE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:11:17:ad:5e:3f:36:82:f6:33:86:25:f2:10:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d Validity Not Before: Dec 5 23:00:44 2025 GMT Not After : Dec 6 23:00:44 2025 GMT Subject: CN=3e09c5b44e937ad126c47bfea6ca23c2363ab40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:05:37:70:62:5c:44:5f:9c:2e:d4:62:7d: d3:4b:d8:85:e0:be:37:8d:15:42:1a:d0:ee:18:c3: 90:3b:ef:b9:45:d8:eb:f4:c0:84:58:8f:31:c4:19: 90:69:e5:7e:95:41:df:47:d2:25:39:ca:50:1b:88: 39:6a:8c:fd:09:21:8b:6c:76:2c:06:60:97:fa:eb: 66:19:9d:5e:d0:e5:1a:47:3d:db:9f:a1:95:a5:1e: fd:ab:0a:a9:eb:66:2f:56:f8:8e:48:0c:90:cf:38: b6:cf:91:e3:23:b1:ce:cb:a9:e8:4d:65:90:6c:b5: e3:be:df:24:9c:65:2a:cc:86:5c:3b:78:f7:87:35: 56:ca:a2:ca:3f:c4:80:52:f0:e7:1f:12:e2:37:84: d8:b2:da:d4:70:a0:c0:a4:e4:02:5e:6d:7b:08:0e: 02:57:74:c9:d1:c4:20:ea:c1:f8:37:f2:1e:25:e2: 79:02:c9:94:a4:f1:4c:07:d9:9d:f6:1d:1a:8b:b6: 40:2d:5c:8c:db:09:c8:c3:07:83:15:a6:58:ef:1c: 47:66:70:22:c4:71:c1:9a:aa:f0:29:f7:3e:02:d9: 44:ab:dd:45:57:22:3f:a1:69:44:71:2a:06:bc:23: 9d:70:c2:3f:8d:a2:47:84:55:f4:36:96:f8:e1:1c: 37:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:09:C5:B4:4E:93:7A:D1:26:C4:7B:FE:A6:CA:23:C2:36:3A:B4:0D X509v3 Authority Key Identifier: keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:53:7c:a2:03:61:52:ee:8c:0b:6a:23:71:0e:96:80:21:6f: d0:58:79:ee:1d:ed:b9:67:b7:92:87:1a:2e:b8:f9:b1:2f:c4: 7b:54:c4:be:82:44:1e:e8:75:ab:8a:f9:22:b6:e3:b1:70:db: 1f:fa:9b:33:b2:db:aa:2c:3a:86:43:9e:2d:1b:41:0f:dc:35: 88:f1:08:fe:f3:5f:ad:4b:1e:47:be:ee:d1:16:21:23:93:8a: c1:fb:fc:fb:25:aa:dd:66:49:56:29:6f:c2:b2:a0:d5:16:3b: 0c:0d:5a:84:6c:72:d0:9c:f1:a7:02:a4:bd:15:3f:73:f2:16: ae:51:53:7c:98:af:6c:c8:eb:ed:b4:b4:dd:a6:16:f5:75:72: 28:4e:c5:92:31:7d:1a:74:5b:f5:41:c3:9b:22:cb:42:32:04: 32:2b:77:d8:03:14:d1:81:80:91:29:b6:ec:09:dc:07:b8:bb: e7:75:31:7f:c4:fb:33:55:e1:24:2e:0d:d3:72:85:c5:24:ee: 53:9f:ab:49:6b:7f:b8:a7:69:67:23:17:00:c5:10:82:f1:59: 97:73:af:79:66:00:da:ab:f5:5e:4c:74:b6:a9:1d:89:5b:1a: 38:33:ae:bd:fc:c8:21:75:f1:36:84:ee:0d:b6:6e:20:55:03: 42:aa:24:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxEXrV4/NoL2M4Yl8hAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4Mzc1ZmI2MTY4YjM1NDg0MWI5MWQzMDVmOWQwY2RjMGNi MTUwMWQwHhcNMjUxMjA1MjMwMDQ0WhcNMjUxMjA2MjMwMDQ0WjAzMTEwLwYDVQQD EygzZTA5YzViNDRlOTM3YWQxMjZjNDdiZmVhNmNhMjNjMjM2M2FiNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCsFN3BiXERfnC7UYn3TS9iF4L43 jRVCGtDuGMOQO++5Rdjr9MCEWI8xxBmQaeV+lUHfR9IlOcpQG4g5aoz9CSGLbHYs BmCX+utmGZ1e0OUaRz3bn6GVpR79qwqp62YvVviOSAyQzzi2z5HjI7HOy6noTWWQ bLXjvt8knGUqzIZcO3j3hzVWyqLKP8SAUvDnHxLiN4TYstrUcKDApOQCXm17CA4C V3TJ0cQg6sH4N/IeJeJ5AsmUpPFMB9md9h0ai7ZALVyM2wnIwweDFaZY7xxHZnAi xHHBmqrwKfc+AtlEq91FVyI/oWlEcSoGvCOdcMI/jaJHhFX0Npb44Rw3iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4JxbROk3rRJsR7/qbKI8I2OrQNMB8GA1UdIwQY MBaAFHg3X7YWizVIQbkdMF+dDNwMsVAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iNThiYmUtYjUwZi00ODU3LTg3MWMt MWMwZTMxZGUzMWM3LzEvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iNThiYmUtYjUwZi00ODU3LTg3MWMtMWMwZTMxZGUzMWM3 LzEvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFN8ogNh Uu6MC2ojcQ6WgCFv0Fh57h3tuWe3kocaLrj5sS/Ee1TEvoJEHuh1q4r5IrbjsXDb H/qbM7Lbqiw6hkOeLRtBD9w1iPEI/vNfrUseR77u0RYhI5OKwfv8+yWq3WZJVilv wrKg1RY7DA1ahGxy0JzxpwKkvRU/c/IWrlFTfJivbMjr7bS03aYW9XVyKE7FkjF9 GnRb9UHDmyLLQjIEMit32AMU0YGAkSm27AncB7i753Uxf8T7M1XhJC4N03KFxSTu U5+rSWt/uKdpZyMXAMUQgvFZl3OveWYA2qv1Xkx0tqkdiVsaODOuvfzIIXXxNoTu DbZuIFUDQqokcA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:23 2025 by rpki-client