This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft File: eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json) Hash identifier: RzsqhoPpdZ7AGHYbj+rzYUPFsTc4Inuz2GZifnVzvFY= Subject key identifier: 39:3B:82:46:46:F0:DC:DA:82:03:95:03:E6:13:0C:59:CB:36:F4:F8 Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE Certificate issuer: /CN=7832d060932d4785a10ca47de8002f65c1ef33ae Certificate serial: 019B4E1656594DF329768C992E260EA29A3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft Manifest number: 128F Signing time: Wed 24 Dec 2025 02:00:45 +0000 Manifest this update: Wed 24 Dec 2025 02:00:45 +0000 Manifest next update: Thu 25 Dec 2025 02:00:45 +0000 Files and hashes: 1: UkvE1AtgzFaEZZjsZiVXyyLbs5o.roa (hash: y7S6KVTG3N2Xe5Mq5Th3G1Pm17a7WWjgGUAMC2Q3dUs=) 2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: OCAxreiz4awcsDsuyfgV1kq+GxCupv9vddIxiozM84M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:56:59:4d:f3:29:76:8c:99:2e:26:0e:a2:9a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae Validity Not Before: Dec 24 02:00:45 2025 GMT Not After : Dec 25 02:00:45 2025 GMT Subject: CN=393b824646f0dcda82039503e6130c59cb36f4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:3c:0a:fa:80:eb:00:7b:3c:7b:bf:c8:bc: 9b:2f:f0:36:be:7a:7e:2a:73:07:21:15:a2:c8:57: 46:3e:57:8f:76:00:e2:4b:d8:0d:c7:e6:2e:12:a1: d1:2f:ec:a6:c7:6e:27:63:34:f6:02:8f:66:a7:0b: b3:58:f1:c3:cb:ee:e0:94:a8:ac:a9:ff:e5:b7:cc: 58:b4:f8:40:83:28:b0:57:78:38:ed:b0:87:ef:8d: ec:63:a8:94:98:22:fc:36:b1:3a:33:d2:2d:61:e0: 3e:b4:14:92:cf:47:20:2d:dd:04:d9:48:59:92:13: 2c:ff:db:fa:9b:b8:2c:95:6c:9b:a2:66:cb:d5:5f: 3c:ba:01:25:96:0e:5b:15:2f:f0:0c:69:d8:ae:64: fd:3b:f6:c4:09:0a:99:12:d6:00:8b:cc:85:1c:f0: df:07:13:b4:57:6d:74:bd:75:95:38:3d:80:59:f1: 4b:e2:5a:46:3a:a2:b0:fc:21:e2:82:90:08:bb:4b: e8:15:35:1d:d8:48:05:02:dc:11:5e:ad:48:4f:08: 78:c6:c0:f0:87:c9:51:6c:c9:dc:4a:cb:14:88:5a: 2e:67:53:22:a9:85:f6:1c:c7:44:3d:2c:7e:3b:d2: cd:3c:af:0f:cd:0f:ad:67:bf:41:69:85:e1:58:27: b2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3B:82:46:46:F0:DC:DA:82:03:95:03:E6:13:0C:59:CB:36:F4:F8 X509v3 Authority Key Identifier: keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:78:c6:90:b2:18:7c:60:ae:4c:49:3e:c9:ff:1e:0c:4a:76: bb:d2:0f:7e:8c:7c:e6:f9:1e:3f:0a:93:86:cb:5f:6b:c0:61: c0:c7:27:7a:0c:23:02:02:70:89:c8:c9:f4:27:68:f0:6c:e4: ee:35:fa:59:1e:4e:03:88:ba:4a:ad:79:c3:38:db:6e:30:b8: 12:c4:56:cd:76:60:0c:bc:8f:fe:1d:da:de:7d:8e:4b:70:38: 02:96:d8:6c:52:ad:48:d3:61:76:17:d0:54:93:6d:b9:1a:a5: 85:d9:22:c3:99:71:a6:b5:df:af:e2:86:a0:06:c4:cc:88:d0: 6f:e8:40:c8:5a:50:6f:9e:d0:0e:c6:f3:7e:b9:e0:94:4e:12: 59:12:ec:d6:59:ea:0c:b1:fd:61:1c:1d:59:e1:db:df:08:25: 4c:a7:a8:5c:52:1f:a6:22:41:49:4b:ee:69:b6:39:ea:ed:9a: 38:8a:12:08:61:6a:77:a0:09:81:1b:f3:f1:d0:ee:0c:48:ce: 6b:e8:7a:d1:fd:1c:96:84:25:b0:b5:04:c8:f1:b4:9a:bb:3f: 3c:be:0d:e3:fc:af:6d:ce:c4:9c:8b:11:38:b9:f8:e9:2b:4d: 36:bb:d8:19:fe:13:13:64:9d:a2:84:5e:ab:a3:b3:93:fa:e2: eb:8d:54:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFlZZTfMpdoyZLiYOopo6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MzJkMDYwOTMyZDQ3ODVhMTBjYTQ3ZGU4MDAyZjY1YzFl ZjMzYWUwHhcNMjUxMjI0MDIwMDQ1WhcNMjUxMjI1MDIwMDQ1WjAzMTEwLwYDVQQD EygzOTNiODI0NjQ2ZjBkY2RhODIwMzk1MDNlNjEzMGM1OWNiMzZmNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojs8CvqA6wB7PHu/yLybL/A2vnp+ KnMHIRWiyFdGPlePdgDiS9gNx+YuEqHRL+ymx24nYzT2Ao9mpwuzWPHDy+7glKis qf/lt8xYtPhAgyiwV3g47bCH743sY6iUmCL8NrE6M9ItYeA+tBSSz0cgLd0E2UhZ khMs/9v6m7gslWybombL1V88ugEllg5bFS/wDGnYrmT9O/bECQqZEtYAi8yFHPDf BxO0V210vXWVOD2AWfFL4lpGOqKw/CHigpAIu0voFTUd2EgFAtwRXq1ITwh4xsDw h8lRbMncSssUiFouZ1MiqYX2HMdEPSx+O9LNPK8PzQ+tZ79BaYXhWCeyYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDk7gkZG8NzaggOVA+YTDFnLNvT4MB8GA1UdIwQY MBaAFHgy0GCTLUeFoQykfegAL2XB7zOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZURMUVlKTXRSNFdoREtSOTZBQXZaY0h2TTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hYTAzN2MtMzJjZS00NDA2LWIwYmMt ODk5NDlmY2M3YWZiLzEvZURMUVlKTXRSNFdoREtSOTZBQXZaY0h2TTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9hYTAzN2MtMzJjZS00NDA2LWIwYmMtODk5NDlmY2M3YWZi LzEvZURMUVlKTXRSNFdoREtSOTZBQXZaY0h2TTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHjGkLIY fGCuTEk+yf8eDEp2u9IPfox85vkePwqThstfa8BhwMcnegwjAgJwicjJ9Cdo8Gzk 7jX6WR5OA4i6Sq15wzjbbjC4EsRWzXZgDLyP/h3a3n2OS3A4ApbYbFKtSNNhdhfQ VJNtuRqlhdkiw5lxprXfr+KGoAbEzIjQb+hAyFpQb57QDsbzfrnglE4SWRLs1lnq DLH9YRwdWeHb3wglTKeoXFIfpiJBSUvuabY56u2aOIoSCGFqd6AJgRvz8dDuDEjO a+h60f0cloQlsLUEyPG0mrs/PL4N4/yvbc7EnIsROLn46StNNrvYGf4TE2SdooRe q6Ozk/ri641UcQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:09:42 2025 by rpki-client