This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json) Hash identifier: NICdqy6kDSvlwLOdUvYO2BeUB3caFjQrciVyvcl5j08= Subject key identifier: E2:6B:29:E2:C7:9E:6D:79:95:01:37:C1:88:3A:67:2B:CA:50:B4:85 Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93 Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593 Certificate serial: 019AF12DE7EE7151666DBA9E8DC71CA499D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft Manifest number: 1034 Signing time: Sat 06 Dec 2025 01:01:48 +0000 Manifest this update: Sat 06 Dec 2025 01:01:48 +0000 Manifest next update: Sun 07 Dec 2025 01:01:48 +0000 Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: +oZGxnSndclfy9Ad/4n15HgU6F8ZljFbdKA2CFHsCm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e7:ee:71:51:66:6d:ba:9e:8d:c7:1c:a4:99:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593 Validity Not Before: Dec 6 01:01:48 2025 GMT Not After : Dec 7 01:01:48 2025 GMT Subject: CN=e26b29e2c79e6d79950137c1883a672bca50b485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0b:b1:35:c8:af:df:49:97:a4:b3:f3:88:11: bf:91:a9:f2:ed:f0:93:86:64:98:15:e5:40:0a:10: 46:0c:da:f0:3f:11:bb:f7:5a:00:1c:de:b5:87:93: 5d:bb:b3:1b:85:19:93:c0:f0:f3:87:0d:c9:61:1c: e8:b5:ad:a0:59:62:7c:56:7b:9b:c2:60:e7:7b:9a: 98:0f:92:6a:bd:83:8c:05:b8:9a:2d:88:10:59:37: 52:a4:1b:e7:2f:37:e3:10:37:57:3a:78:c7:52:2a: ed:d5:f7:0d:7a:2b:0f:c6:78:79:e7:5e:f1:01:47: 54:a8:ca:f9:07:2e:6c:5f:2a:cf:5c:7a:ba:0a:be: 3f:32:5e:e4:21:2d:b2:8a:a3:e2:45:7f:9f:15:63: 71:fe:ab:cf:73:0f:43:4d:de:af:e6:8d:2b:f8:3f: 3d:0e:00:7b:11:20:b2:2e:59:db:0e:4c:fc:8a:41: 2a:c3:fd:ac:76:d8:1a:cd:7f:27:5e:95:6e:45:fc: 8a:7e:d1:b9:e4:60:98:33:ce:0b:e4:69:57:20:6d: 47:08:c3:cb:6f:64:21:28:3e:09:fe:2f:10:b8:cf: 09:da:49:f4:15:05:24:86:cd:e4:f8:fa:74:12:24: d0:f6:56:d8:59:d9:36:0a:7a:ee:75:98:d4:40:05: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6B:29:E2:C7:9E:6D:79:95:01:37:C1:88:3A:67:2B:CA:50:B4:85 X509v3 Authority Key Identifier: keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:4b:15:11:99:1a:ca:70:79:f5:ee:af:dc:62:3d:1b:32:fd: a7:46:0e:a8:3c:17:93:3a:7a:5d:7b:8e:3b:33:b9:dc:1b:49: 4f:9f:8b:0a:40:33:5e:81:89:98:51:af:25:1c:8f:66:88:ca: f9:da:c3:a2:e0:e2:b7:b3:e7:3d:42:8b:15:df:20:e5:67:4c: c0:08:5c:bc:91:14:db:a3:e8:85:4d:55:6f:38:17:ca:58:8a: 1b:ca:e6:20:2a:6e:e0:f3:0c:a7:4e:f8:3c:f4:d4:63:47:02: 7c:93:5a:f0:74:a6:91:4d:42:03:72:c5:e0:e1:b0:11:96:54: 64:e5:1a:e4:09:15:96:83:3e:ae:39:25:9a:b9:97:24:11:cf: 3a:bd:0c:1b:fd:30:e4:15:9f:1c:9a:b4:2f:61:0c:27:fc:65: e3:a7:0b:ba:9e:7a:9b:9c:3e:ac:32:56:b1:23:16:8f:ba:c1: df:4c:7c:d6:8d:54:7d:9c:39:6c:5a:08:68:e0:02:eb:41:96: 83:84:42:98:7a:bd:82:6d:5d:c8:aa:99:cd:01:ce:aa:fb:88: 62:04:ba:f6:5f:37:4b:ae:79:65:f1:c5:f2:67:50:45:25:54: 30:24:97:3a:00:f9:db:c8:c3:65:e2:76:c1:bf:be:d6:19:0e: fd:2d:e6:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLefucVFmbbqejcccpJnSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMzhkN2EyOTU0YTMyZDJhZmQxNmI4OGIzNjNiMzkwNjgx Y2Q1OTMwHhcNMjUxMjA2MDEwMTQ4WhcNMjUxMjA3MDEwMTQ4WjAzMTEwLwYDVQQD EyhlMjZiMjllMmM3OWU2ZDc5OTUwMTM3YzE4ODNhNjcyYmNhNTBiNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wuxNciv30mXpLPziBG/kany7fCT hmSYFeVAChBGDNrwPxG791oAHN61h5Ndu7MbhRmTwPDzhw3JYRzota2gWWJ8Vnub wmDne5qYD5JqvYOMBbiaLYgQWTdSpBvnLzfjEDdXOnjHUirt1fcNeisPxnh5517x AUdUqMr5By5sXyrPXHq6Cr4/Ml7kIS2yiqPiRX+fFWNx/qvPcw9DTd6v5o0r+D89 DgB7ESCyLlnbDkz8ikEqw/2sdtgazX8nXpVuRfyKftG55GCYM84L5GlXIG1HCMPL b2QhKD4J/i8QuM8J2kn0FQUkhs3k+Pp0EiTQ9lbYWdk2CnrudZjUQAW5MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJrKeLHnm15lQE3wYg6ZyvKULSFMB8GA1UdIwQY MBaAFBA416KVSjLSr9FriLNjs5BoHNWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82Mjc1NTctNzhhOC00YjRlLWEzYjgt OWE4MThkZGQxNTU4LzEvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82Mjc1NTctNzhhOC00YjRlLWEzYjgtOWE4MThkZGQxNTU4 LzEvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA00sVEZka ynB59e6v3GI9GzL9p0YOqDwXkzp6XXuOOzO53BtJT5+LCkAzXoGJmFGvJRyPZojK +drDouDit7PnPUKLFd8g5WdMwAhcvJEU26PohU1VbzgXyliKG8rmICpu4PMMp074 PPTUY0cCfJNa8HSmkU1CA3LF4OGwEZZUZOUa5AkVloM+rjklmrmXJBHPOr0MG/0w 5BWfHJq0L2EMJ/xl46cLup56m5w+rDJWsSMWj7rB30x81o1UfZw5bFoIaOAC60GW g4RCmHq9gm1dyKqZzQHOqvuIYgS69l83S655ZfHF8mdQRSVUMCSXOgD528jDZeJ2 wb++1hkO/S3mpA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:20 2025 by rpki-client