This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft File: EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json) Hash identifier: Q2JTq0PSDHumbEgWdOACiuhH7h+m9be74ZxwwUTL5Ak= Subject key identifier: 5A:17:A0:09:22:4E:E6:74:13:6E:C5:0D:8C:16:FC:2A:19:A7:79:7D Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35 Certificate issuer: /CN=103aa909e8db00f8377a450dbca57d051f4bf435 Certificate serial: 019B620B7EE42B4A929FC981D7CC96B26FFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft Manifest number: 179C Signing time: Sat 27 Dec 2025 23:01:19 +0000 Manifest this update: Sat 27 Dec 2025 23:01:19 +0000 Manifest next update: Sun 28 Dec 2025 23:01:19 +0000 Files and hashes: 1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: M6BgWG2e1KTS/RO0s9bIoa+7A8xbCyIfmaULBpHz9NE=) 2: WTVR86vnYs7BPStSbSDyoGuvJtI.roa (hash: +qhM9WKUBA3B9KCtQwGX3HjXjyrEypbbBCjk+fK/rjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:7e:e4:2b:4a:92:9f:c9:81:d7:cc:96:b2:6f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435 Validity Not Before: Dec 27 23:01:19 2025 GMT Not After : Dec 28 23:01:19 2025 GMT Subject: CN=5a17a009224ee674136ec50d8c16fc2a19a7797d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:27:83:d2:e7:82:b8:69:33:47:a1:30:dd:db: f0:d7:85:f2:29:82:57:a2:1e:f2:c4:4f:e4:4f:e9: 46:16:84:e3:88:0f:63:08:e5:42:69:a2:29:57:3b: e2:31:32:84:90:9f:c8:6c:f3:15:13:57:67:ab:89: 0e:5f:75:ad:84:93:4d:c3:6d:50:b1:28:8b:da:72: 7e:49:4e:48:7e:5c:f2:9f:87:17:de:13:d5:a2:1c: b5:aa:a4:44:b4:66:bf:86:16:66:34:ca:53:a5:68: 1d:0f:12:40:69:c1:ff:1f:b8:97:b3:5e:70:70:ea: 8e:01:7c:30:b9:c7:7a:62:4f:e1:5f:01:d1:82:71: fe:30:42:b5:40:3d:de:82:74:38:87:9e:26:1a:54: f9:40:67:8b:92:f0:fe:da:1a:7a:70:c5:82:27:83: db:95:69:38:61:37:cf:fe:1d:87:98:6e:ad:4d:d2: 26:97:42:ab:3e:fc:26:1d:31:ee:26:0f:46:06:89: c0:53:1c:97:41:80:06:53:38:51:49:79:68:9a:04: cc:60:73:96:5d:c3:a7:e4:22:14:31:61:d4:33:cf: b0:36:2c:6a:00:91:05:5a:68:24:67:a4:5a:3d:14: ab:29:82:1f:2a:90:8f:60:0c:b2:59:5a:99:f0:71: 39:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:17:A0:09:22:4E:E6:74:13:6E:C5:0D:8C:16:FC:2A:19:A7:79:7D X509v3 Authority Key Identifier: keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:38:32:80:06:41:0d:ee:04:bc:e6:b9:16:97:7e:66:d3:1e: 11:f4:f8:84:bf:ed:7c:30:72:8b:90:98:15:1f:c3:88:09:94: b7:5f:40:c8:41:51:db:39:ca:a1:c7:0d:65:fd:b4:6e:75:01: d5:5e:0e:7a:80:ec:a1:ef:cb:f8:64:81:dc:45:71:ba:26:fc: 42:bc:e9:75:35:26:3b:ab:ed:64:e7:09:ed:06:e3:14:87:ec: 9e:ec:24:e3:49:e1:0e:a7:2c:f7:00:78:39:cc:ea:db:9e:d0: bd:f5:aa:89:05:46:66:e5:28:90:6a:41:21:3e:14:ff:35:c5: 0b:26:7b:55:8d:11:4a:45:13:2a:b5:8f:58:fa:5e:af:6d:b6: 4d:47:a8:7d:06:0d:36:31:64:54:92:95:17:df:2c:81:d1:71: f8:8c:bd:f3:a6:83:85:6a:3e:c6:19:2d:b8:68:6e:64:f2:8a: d0:dd:3f:e6:2d:0a:3b:a2:ff:30:a4:1e:be:7d:c6:8b:38:9d: 99:82:c0:65:a5:ac:c0:df:ef:5d:7d:0f:5f:2c:e0:ce:ad:0c: bd:65:c9:94:6f:ff:d1:36:33:7b:64:9a:d8:0d:cd:f8:f7:98: d5:31:4e:9d:94:85:43:31:eb:40:77:7d:5c:a8:99:c9:37:57: 83:1e:75:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiC37kK0qSn8mB18yWsm/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwM2FhOTA5ZThkYjAwZjgzNzdhNDUwZGJjYTU3ZDA1MWY0 YmY0MzUwHhcNMjUxMjI3MjMwMTE5WhcNMjUxMjI4MjMwMTE5WjAzMTEwLwYDVQQD Eyg1YTE3YTAwOTIyNGVlNjc0MTM2ZWM1MGQ4YzE2ZmMyYTE5YTc3OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyeD0ueCuGkzR6Ew3dvw14XyKYJX oh7yxE/kT+lGFoTjiA9jCOVCaaIpVzviMTKEkJ/IbPMVE1dnq4kOX3WthJNNw21Q sSiL2nJ+SU5Iflzyn4cX3hPVohy1qqREtGa/hhZmNMpTpWgdDxJAacH/H7iXs15w cOqOAXwwucd6Yk/hXwHRgnH+MEK1QD3egnQ4h54mGlT5QGeLkvD+2hp6cMWCJ4Pb lWk4YTfP/h2HmG6tTdIml0KrPvwmHTHuJg9GBonAUxyXQYAGUzhRSXlomgTMYHOW XcOn5CIUMWHUM8+wNixqAJEFWmgkZ6RaPRSrKYIfKpCPYAyyWVqZ8HE5WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoXoAkiTuZ0E27FDYwW/CoZp3l9MB8GA1UdIwQY MBaAFBA6qQno2wD4N3pFDbylfQUfS/Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yZjdjNzktM2Y2Yi00NDRhLThlYzUt N2JkY2E3NTE2ZTc1LzEvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yZjdjNzktM2Y2Yi00NDRhLThlYzUtN2JkY2E3NTE2ZTc1 LzEvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjgygAZB De4EvOa5Fpd+ZtMeEfT4hL/tfDByi5CYFR/DiAmUt19AyEFR2znKoccNZf20bnUB 1V4OeoDsoe/L+GSB3EVxuib8QrzpdTUmO6vtZOcJ7QbjFIfsnuwk40nhDqcs9wB4 Oczq257QvfWqiQVGZuUokGpBIT4U/zXFCyZ7VY0RSkUTKrWPWPper222TUeofQYN NjFkVJKVF98sgdFx+Iy986aDhWo+xhktuGhuZPKK0N0/5i0KO6L/MKQevn3Gizid mYLAZaWswN/vXX0PXyzgzq0MvWXJlG//0TYze2Sa2A3N+PeY1TFOnZSFQzHrQHd9 XKiZyTdXgx51uA== -----END CERTIFICATE-----Generated at Sun Dec 28 05:48:29 2025 by rpki-client