This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft File: EDfew086MutlAvFmKoKiD4teohw.mft (raw, json) Hash identifier: x3i798HD7Kvr7xVPMwqSjWFAW2M8gIM5RjsDU0XkOto= Subject key identifier: 53:AB:45:3E:DB:9A:04:3D:B4:00:9A:26:01:06:A4:6C:46:0E:95:94 Authority key identifier: 10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C Certificate issuer: /CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c Certificate serial: 019B2F67733A19A15EFA7B03C06229EFA1CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 03:01:07 +0000 Manifest this update: Thu 18 Dec 2025 03:01:07 +0000 Manifest next update: Fri 19 Dec 2025 03:01:07 +0000 Files and hashes: 1: EDfew086MutlAvFmKoKiD4teohw.crl (hash: R1W+AqeqMNs5j93Z9SYmBVF8dlqa/BAU84wttuaVK+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:73:3a:19:a1:5e:fa:7b:03:c0:62:29:ef:a1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c Validity Not Before: Dec 18 03:01:07 2025 GMT Not After : Dec 19 03:01:07 2025 GMT Subject: CN=53ab453edb9a043db4009a260106a46c460e9594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:34:a8:64:02:3a:54:8f:3b:d2:6c:0e:eb: 10:56:ea:8d:72:4f:16:b7:72:9e:4b:85:ca:5c:d7: 05:bf:3c:5e:8f:10:40:64:cc:02:08:79:83:92:46: 94:da:4b:98:b8:fe:b1:7a:6c:17:5f:54:47:8f:77: fb:1a:04:fe:d1:55:b0:0c:be:b8:38:4a:f2:83:b1: 64:44:fc:c0:61:fe:77:82:9a:f8:1c:8b:07:cb:21: e0:40:69:85:dd:41:7f:4e:f6:ab:9e:8c:84:e5:62: b7:da:16:0c:4f:80:7f:b4:42:b9:4a:ce:e6:f9:33: 0f:6f:97:aa:4f:42:9f:da:9b:5b:6a:c0:dd:4f:d3: 24:cd:41:6a:1b:da:ea:9c:5c:49:72:fa:6f:07:4c: ba:28:df:d9:e9:d7:ba:98:e3:cc:ce:79:e6:d1:49: df:e8:7f:0c:b5:2c:46:22:35:ae:b3:ab:71:9d:d4: bd:2e:98:1a:c2:03:58:27:5f:14:6b:5c:97:54:b9: bf:96:0f:e1:92:00:7b:11:5d:ee:1d:c5:56:a5:cf: 56:f6:94:2d:5b:b5:66:10:8b:b7:15:e5:12:84:4d: 42:e3:30:03:27:dc:31:e8:1a:59:00:10:c5:68:26: c1:aa:a2:11:d0:94:ef:9a:56:2c:2b:26:52:3a:70: f7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AB:45:3E:DB:9A:04:3D:B4:00:9A:26:01:06:A4:6C:46:0E:95:94 X509v3 Authority Key Identifier: keyid:10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:af:7f:34:c3:aa:70:63:28:2b:1f:97:c9:7a:a6:78:01:a1: 91:ea:0a:2a:64:4f:77:0c:ea:dd:e5:03:7b:0a:0e:c6:1a:3b: e0:e9:a3:9e:d6:15:84:b0:1e:c0:d9:bd:cc:18:13:22:72:eb: e3:dd:72:95:cb:7f:e5:50:79:f9:ac:31:f0:96:7f:03:91:b0: c9:39:3e:00:52:73:07:ac:95:db:09:00:14:32:50:24:dc:84: 54:55:68:52:78:7f:dd:a6:0f:4a:4e:a0:05:8c:bb:f7:c2:66: f0:49:78:49:4a:cd:c0:b0:77:3a:25:13:d7:66:38:b2:0d:6b: 54:39:2b:94:0c:cf:88:ff:02:b6:35:a1:e0:28:50:23:cf:db: c8:3a:6c:93:f7:70:dc:48:82:12:57:28:9e:59:9d:38:36:6f: 06:00:aa:cb:1b:6f:c0:98:d1:6e:31:e8:dd:ac:5e:be:15:76: 0e:0a:5d:31:1e:1b:28:4d:c5:b9:ab:fb:d6:62:a6:8e:c1:f2: b8:6d:2d:b4:27:5e:4b:d9:e4:af:84:85:33:16:ec:f7:82:5f: b9:f2:5a:fd:01:c5:e6:28:20:29:97:a4:ce:b8:f9:29:74:ee: 56:4c:b5:80:83:2e:57:c4:42:2d:15:8a:60:6f:4c:b5:66:71: 03:8b:68:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ3M6GaFe+nsDwGIp76HKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMzdkZWMzNGYzYTMyZWI2NTAyZjE2NjJhODJhMjBmOGI1 ZWEyMWMwHhcNMjUxMjE4MDMwMTA3WhcNMjUxMjE5MDMwMTA3WjAzMTEwLwYDVQQD Eyg1M2FiNDUzZWRiOWEwNDNkYjQwMDlhMjYwMTA2YTQ2YzQ2MGU5NTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpo0qGQCOlSPO9JsDusQVuqNck8W t3KeS4XKXNcFvzxejxBAZMwCCHmDkkaU2kuYuP6xemwXX1RHj3f7GgT+0VWwDL64 OEryg7FkRPzAYf53gpr4HIsHyyHgQGmF3UF/TvarnoyE5WK32hYMT4B/tEK5Ss7m +TMPb5eqT0Kf2ptbasDdT9MkzUFqG9rqnFxJcvpvB0y6KN/Z6de6mOPMznnm0Unf 6H8MtSxGIjWus6txndS9LpgawgNYJ18Ua1yXVLm/lg/hkgB7EV3uHcVWpc9W9pQt W7VmEIu3FeUShE1C4zADJ9wx6BpZABDFaCbBqqIR0JTvmlYsKyZSOnD3fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOrRT7bmgQ9tACaJgEGpGxGDpWUMB8GA1UdIwQY MBaAFBA33sNPOjLrZQLxZiqCog+LXqIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRURmZXcwODZNdXRsQXZGbUtvS2lENHRlb2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iNjgwYWYtZDVhYi00YjJmLWE4Mzct MGQ0MWE2NGU5MGVjLzEvRURmZXcwODZNdXRsQXZGbUtvS2lENHRlb2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iNjgwYWYtZDVhYi00YjJmLWE4MzctMGQ0MWE2NGU5MGVj LzEvRURmZXcwODZNdXRsQXZGbUtvS2lENHRlb2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXK9/NMOq cGMoKx+XyXqmeAGhkeoKKmRPdwzq3eUDewoOxho74OmjntYVhLAewNm9zBgTInLr 491ylct/5VB5+awx8JZ/A5GwyTk+AFJzB6yV2wkAFDJQJNyEVFVoUnh/3aYPSk6g BYy798Jm8El4SUrNwLB3OiUT12Y4sg1rVDkrlAzPiP8CtjWh4ChQI8/byDpsk/dw 3EiCElconlmdODZvBgCqyxtvwJjRbjHo3axevhV2DgpdMR4bKE3Fuav71mKmjsHy uG0ttCdeS9nkr4SFMxbs94JfufJa/QHF5iggKZekzrj5KXTuVky1gIMuV8RCLRWK YG9MtWZxA4toAg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:52:03 2025 by rpki-client