This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json) Hash identifier: 3SXpXIRj1PWKcVgoMhUM0IUaLpOLFADfhWozpA4QjZk= Subject key identifier: 03:61:68:44:49:E3:5A:2B:A3:FB:82:A3:4B:A8:34:B8:B4:77:85:A2 Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece Certificate serial: 019AF38937ED18710DC537309CA7D46A4989 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 12:00:47 +0000 Manifest this update: Sat 06 Dec 2025 12:00:47 +0000 Manifest next update: Sun 07 Dec 2025 12:00:47 +0000 Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: GOnvz9PhXN/i4R21fKY/hCz+vaKNSYAWZgrHRnT76yI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:37:ed:18:71:0d:c5:37:30:9c:a7:d4:6a:49:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece Validity Not Before: Dec 6 12:00:47 2025 GMT Not After : Dec 7 12:00:47 2025 GMT Subject: CN=0361684449e35a2ba3fb82a34ba834b8b47785a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:89:18:24:ea:4f:f8:36:3b:33:dd:91:be: 99:2c:32:92:b1:3b:2f:86:bb:76:02:76:45:46:b8: 5b:ed:38:71:dd:be:60:90:f4:49:67:a7:d9:f9:9f: 98:0c:c9:6d:c3:23:64:e4:e1:95:af:5e:15:4d:0c: 71:06:65:c7:13:73:4f:33:1b:f7:10:ce:7e:20:c2: a4:7e:b9:f1:af:79:49:99:cf:9e:81:24:a6:7e:43: fd:a6:02:c8:5b:99:ff:ff:03:d2:5f:96:84:6b:d6: 3c:50:44:68:49:eb:75:fe:d2:25:e8:c6:01:36:4e: 56:41:89:3a:50:0b:55:57:6c:a5:ec:41:f3:8d:0e: 7b:e8:3c:97:f6:47:47:4c:31:af:f6:79:0a:50:a7: eb:e9:07:14:91:00:ed:5f:8a:b9:08:01:81:5a:a0: b4:53:27:44:b3:d9:3b:3a:b9:1f:0d:35:b1:f2:ea: 2c:e7:6d:15:86:c7:14:9e:82:7d:7c:dd:e6:25:ad: 47:f7:b7:c5:cf:a6:54:2f:e1:d5:9f:ce:36:8c:bd: d9:a3:72:63:c7:6e:08:a6:61:3e:af:c6:6d:59:54: f3:31:39:2c:7c:94:08:b8:18:3a:24:54:a4:99:9a: 58:6d:75:51:7a:09:24:b6:03:95:45:e8:bb:8b:af: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:61:68:44:49:E3:5A:2B:A3:FB:82:A3:4B:A8:34:B8:B4:77:85:A2 X509v3 Authority Key Identifier: keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b6:4a:b9:bd:65:2a:86:cb:c5:04:70:dc:ab:0d:c8:ba:b5: ee:0d:e4:cc:46:49:9b:b2:45:a6:0d:bf:73:8e:91:bc:47:e8: b9:35:99:bd:48:0e:72:6f:6d:0f:a5:c6:fd:a2:8b:fd:af:63: 2d:a2:b8:96:7f:83:d6:f4:7f:c0:9d:3a:08:67:e6:69:1e:ef: 36:51:f9:87:25:6d:a6:d2:a2:c1:6d:1c:0f:fc:c4:04:7c:4d: 34:e3:77:db:f0:db:ad:2a:90:4e:aa:75:3d:2b:09:0c:e2:51: cc:16:31:cb:91:50:f6:fb:59:f3:50:a7:d6:02:83:d4:58:98: ef:46:6f:8c:a2:75:25:46:9e:35:cc:b9:a8:82:44:4f:6e:34: 77:1f:98:c1:51:ad:25:93:ef:13:66:11:53:cf:27:2f:f9:62: 2c:3f:48:2f:7d:19:c7:da:c3:e8:73:d0:20:1e:10:83:4d:f5: 27:fc:5c:27:e4:ac:f9:85:2a:43:3e:91:16:b3:2a:fa:09:0a: eb:8d:95:40:c2:3d:9d:3a:b8:35:4d:da:ff:2d:db:aa:42:0c: 79:ef:33:36:6d:d2:38:ba:e7:ca:8d:4d:b9:1a:97:4d:af:16: d9:db:b2:0a:96:9c:5f:cb:14:5b:e4:75:fe:0c:60:c2:81:48: 03:06:fb:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTftGHENxTcwnKfUakmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNDBkMWY5Yzk3YmU0NjZlMGJkZWFjODQ5Mjg5ZTJhM2Nj YTllY2UwHhcNMjUxMjA2MTIwMDQ3WhcNMjUxMjA3MTIwMDQ3WjAzMTEwLwYDVQQD EygwMzYxNjg0NDQ5ZTM1YTJiYTNmYjgyYTM0YmE4MzRiOGI0Nzc4NWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgaJGCTqT/g2OzPdkb6ZLDKSsTsv hrt2AnZFRrhb7Thx3b5gkPRJZ6fZ+Z+YDMltwyNk5OGVr14VTQxxBmXHE3NPMxv3 EM5+IMKkfrnxr3lJmc+egSSmfkP9pgLIW5n//wPSX5aEa9Y8UERoSet1/tIl6MYB Nk5WQYk6UAtVV2yl7EHzjQ576DyX9kdHTDGv9nkKUKfr6QcUkQDtX4q5CAGBWqC0 UydEs9k7OrkfDTWx8uos520VhscUnoJ9fN3mJa1H97fFz6ZUL+HVn842jL3Zo3Jj x24IpmE+r8ZtWVTzMTksfJQIuBg6JFSkmZpYbXVRegkktgOVRei7i6+E5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANhaERJ41oro/uCo0uoNLi0d4WiMB8GA1UdIwQY MBaAFPBA0fnJe+Rm4L3qyEkonio8yp7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYt ODk1M2VjOGRkZDRhLzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYtODk1M2VjOGRkZDRh LzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7ZKub1l KobLxQRw3KsNyLq17g3kzEZJm7JFpg2/c46RvEfouTWZvUgOcm9tD6XG/aKL/a9j LaK4ln+D1vR/wJ06CGfmaR7vNlH5hyVtptKiwW0cD/zEBHxNNON32/DbrSqQTqp1 PSsJDOJRzBYxy5FQ9vtZ81Cn1gKD1FiY70ZvjKJ1JUaeNcy5qIJET240dx+YwVGt JZPvE2YRU88nL/liLD9IL30Zx9rD6HPQIB4Qg031J/xcJ+Ss+YUqQz6RFrMq+gkK 642VQMI9nTq4NU3a/y3bqkIMee8zNm3SOLrnyo1NuRqXTa8W2duyCpacX8sUW+R1 /gxgwoFIAwb7uQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:52 2025 by rpki-client