This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft File: edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json) Hash identifier: kUmz2dNzCAKj6D8GlpNbqHAVhGGk5e2Qn13lITKKFBk= Subject key identifier: E8:E0:0E:F3:D6:A1:D5:3F:9B:B6:79:D7:C3:C2:C5:EB:67:33:BA:4C Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB Certificate issuer: /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab Certificate serial: 019B3B350E35E3EF75BBD170C50CB84EED00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 10:01:31 +0000 Manifest this update: Sat 20 Dec 2025 10:01:31 +0000 Manifest next update: Sun 21 Dec 2025 10:01:31 +0000 Files and hashes: 1: V7sEyI8F_t4vSol_353f4Qx9U_8.roa (hash: 4ldqZs123aYTDkKfZo5JSLa9NcK75X2sS/vo6vIQh/0=) 2: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: 1dhfymfKsNZXkBxtVakMweLnT93/hRj0Wsq7beHgsGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:0e:35:e3:ef:75:bb:d1:70:c5:0c:b8:4e:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab Validity Not Before: Dec 20 10:01:31 2025 GMT Not After : Dec 21 10:01:31 2025 GMT Subject: CN=e8e00ef3d6a1d53f9bb679d7c3c2c5eb6733ba4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:c1:d6:4c:7d:08:97:bf:b3:5a:b9:45:b2: f7:70:be:4f:81:37:46:f8:88:d9:a7:a1:c5:3c:31: 95:81:33:61:31:34:e8:c6:3a:d1:95:c3:59:21:12: 02:2d:cb:03:4c:6b:b5:2f:b7:68:b4:77:8b:bc:01: 64:c3:6b:dd:b5:2f:40:57:75:3c:ff:b2:37:86:d8: 81:7e:31:7e:f3:ba:21:59:40:6f:0c:9c:83:c8:62: 9a:de:02:1c:a3:6c:db:20:fd:57:9b:a4:d3:c5:e3: be:a1:a4:21:70:2e:e3:e2:7f:8e:de:93:5c:87:83: 80:f8:34:84:49:21:ca:7e:23:51:4f:33:ff:ba:73: fa:72:58:e3:c0:e2:c9:e8:66:49:bf:20:64:b6:df: b3:45:77:cd:20:c1:05:93:a1:04:f0:91:dc:5c:c6: 76:00:35:a6:ca:8c:0a:87:ee:e4:d3:c7:0c:f0:3e: 16:31:78:44:27:74:8e:bf:ee:12:05:dc:cf:d7:89: 06:0e:10:36:8a:66:8e:d8:fe:fb:07:59:6a:d2:6b: ef:29:cb:a2:de:c3:3f:88:e3:0e:72:c8:be:8d:10: 56:cb:8c:75:5a:62:d5:a8:a7:76:02:35:ab:72:32: aa:e1:6f:47:dc:e5:f2:78:5e:28:cc:4d:2d:62:14: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E0:0E:F3:D6:A1:D5:3F:9B:B6:79:D7:C3:C2:C5:EB:67:33:BA:4C X509v3 Authority Key Identifier: keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:26:bd:a2:a7:7b:95:b0:c3:98:ff:ef:11:18:a6:76:6f:9a: 51:4f:12:89:da:82:6a:25:04:78:0b:f2:8b:26:54:82:14:46: 59:18:a4:be:3b:5e:5c:46:1e:1d:6c:e9:f3:fe:48:96:69:d4: 4d:1d:9c:14:7e:82:39:38:d4:b1:b2:e9:24:2b:32:98:82:19: 5b:b4:8b:ed:42:69:09:65:ac:d0:2f:11:56:f5:ee:4f:8d:fd: 28:64:f7:62:d2:ad:0b:74:50:d6:1f:b2:13:23:83:bd:a8:82: 98:8d:32:df:ef:7e:84:65:c0:82:6d:43:da:a2:12:5d:32:d8: 19:b4:20:f0:e8:d6:3e:0f:2a:c2:7b:63:de:61:8b:94:66:e4: fd:ee:a3:5e:9e:d6:80:83:22:c5:83:f6:7c:57:0a:4f:5d:46: 85:8a:10:1c:aa:ca:a0:52:21:b8:09:63:92:9f:63:5f:46:1a: 7d:c1:50:41:ef:8c:f4:60:93:c0:ee:96:96:55:8d:1d:cc:59: 9d:01:5f:98:b5:3f:e1:7c:0d:27:f8:77:a7:5d:b2:89:f7:9d: d5:c2:63:54:86:1c:21:67:35:4d:43:d9:16:fe:c6:45:be:2e: a7:3c:9a:40:96:6f:51:1a:1e:dc:e4:aa:d1:06:c2:3a:c1:fc: 57:ce:58:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQ414+91u9FwxQy4Tu0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZDE1Nzg2ZTY0NGQ0OTdjYjdhMmIzMjUzYmQ0M2Q5MmU0 OWM1YWIwHhcNMjUxMjIwMTAwMTMxWhcNMjUxMjIxMTAwMTMxWjAzMTEwLwYDVQQD EyhlOGUwMGVmM2Q2YTFkNTNmOWJiNjc5ZDdjM2MyYzVlYjY3MzNiYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XfB1kx9CJe/s1q5RbL3cL5PgTdG +IjZp6HFPDGVgTNhMTToxjrRlcNZIRICLcsDTGu1L7dotHeLvAFkw2vdtS9AV3U8 /7I3htiBfjF+87ohWUBvDJyDyGKa3gIco2zbIP1Xm6TTxeO+oaQhcC7j4n+O3pNc h4OA+DSESSHKfiNRTzP/unP6cljjwOLJ6GZJvyBktt+zRXfNIMEFk6EE8JHcXMZ2 ADWmyowKh+7k08cM8D4WMXhEJ3SOv+4SBdzP14kGDhA2imaO2P77B1lq0mvvKcui 3sM/iOMOcsi+jRBWy4x1WmLVqKd2AjWrcjKq4W9H3OXyeF4ozE0tYhSyvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjgDvPWodU/m7Z518PCxetnM7pMMB8GA1UdIwQY MBaAFHnRV4bmRNSXy3orMlO9Q9kuScWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWRGWGh1WkUxSmZMZWlzeVU3MUQyUzVKeGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85NzJkYTEtYzJjMy00NjRlLWIxM2Yt ZjJhZjUxMTYzYTYwLzEvZWRGWGh1WkUxSmZMZWlzeVU3MUQyUzVKeGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS85NzJkYTEtYzJjMy00NjRlLWIxM2YtZjJhZjUxMTYzYTYw LzEvZWRGWGh1WkUxSmZMZWlzeVU3MUQyUzVKeGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCa9oqd7 lbDDmP/vERimdm+aUU8SidqCaiUEeAvyiyZUghRGWRikvjteXEYeHWzp8/5IlmnU TR2cFH6COTjUsbLpJCsymIIZW7SL7UJpCWWs0C8RVvXuT439KGT3YtKtC3RQ1h+y EyODvaiCmI0y3+9+hGXAgm1D2qISXTLYGbQg8OjWPg8qwntj3mGLlGbk/e6jXp7W gIMixYP2fFcKT11GhYoQHKrKoFIhuAljkp9jX0YafcFQQe+M9GCTwO6WllWNHcxZ nQFfmLU/4XwNJ/h3p12yifed1cJjVIYcIWc1TUPZFv7GRb4upzyaQJZvURoe3OSq 0QbCOsH8V85Ykg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:08:49 2025 by rpki-client