This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft File: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft (raw, json) Hash identifier: WiW6r5XxZwS+qyzgNnDkBe16EL2x29LqeczOCGPbRCE= Subject key identifier: AA:8A:E9:EA:AF:E0:59:BB:97:A2:E8:93:60:05:DF:68:9A:29:2B:C0 Authority key identifier: 11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66 Certificate issuer: /CN=11dd0ebff5ba38a8758b794d04d62905194a3266 Certificate serial: 019B620BA9DFC16FB8C70AC64EE6C45BC0C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft Manifest number: 12AF Signing time: Sat 27 Dec 2025 23:01:30 +0000 Manifest this update: Sat 27 Dec 2025 23:01:30 +0000 Manifest next update: Sun 28 Dec 2025 23:01:30 +0000 Files and hashes: 1: Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl (hash: 7ITqNt0rbB1cuBPqoCQKrhTgzO9LUpEwcH3Szh3qAts=) 2: HfwZH-0Lv6Ty3b-JyanUXRcRv4M.roa (hash: tXi7iyniS0PtgxKru69nf5MitATyW1mHStve5TknjLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:a9:df:c1:6f:b8:c7:0a:c6:4e:e6:c4:5b:c0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11dd0ebff5ba38a8758b794d04d62905194a3266 Validity Not Before: Dec 27 23:01:30 2025 GMT Not After : Dec 28 23:01:30 2025 GMT Subject: CN=aa8ae9eaafe059bb97a2e8936005df689a292bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:88:67:07:c6:b5:77:a5:de:12:9c:2b:9f:cb: bd:b2:fa:a9:e2:c0:9b:9a:e7:90:b6:08:4a:e7:6d: 5d:e1:41:d5:b6:3f:ab:86:8f:3a:38:0e:85:81:1f: 9a:be:fa:25:c4:84:69:9c:a8:11:b6:76:f7:c1:7b: e4:9f:68:21:66:76:80:0a:8f:91:29:81:6f:f6:be: c2:93:8d:2a:db:b0:17:ed:68:fd:69:38:52:d5:97: de:3b:ed:8b:b5:4d:12:a4:97:9e:2f:af:7d:86:2f: f5:7a:a6:15:e7:fa:e7:c7:57:23:5d:5c:ae:58:52: be:54:b1:34:cd:a1:00:41:41:ba:12:94:89:ca:78: 7e:16:46:f1:66:5e:b1:de:60:5d:86:e2:43:32:a7: 92:d1:9b:80:aa:b0:b4:33:1c:0d:29:5f:ca:7c:9f: 90:15:22:fc:6f:a6:09:2f:af:93:16:28:a9:a4:1c: 35:90:b1:ff:df:38:35:88:b7:8c:97:db:82:4c:55: 12:0e:5c:99:04:ec:12:62:ee:05:e7:a6:0e:b3:67: 4c:49:ac:6e:de:b2:58:f9:81:e0:82:8d:67:1c:36: b6:12:32:80:33:93:b8:79:5f:02:8a:c9:a0:df:9a: 68:a6:6f:1a:2c:62:f0:ff:ba:15:9d:d7:2e:e4:77: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8A:E9:EA:AF:E0:59:BB:97:A2:E8:93:60:05:DF:68:9A:29:2B:C0 X509v3 Authority Key Identifier: keyid:11:DD:0E:BF:F5:BA:38:A8:75:8B:79:4D:04:D6:29:05:19:4A:32:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/a66a29-51cc-4ba9-884f-f17613ea49e7/1/Ed0Ov_W6OKh1i3lNBNYpBRlKMmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:86:01:2b:98:55:75:24:01:a3:df:d5:a3:49:03:0c:11:6d: 07:be:6b:18:fe:89:9c:23:09:47:74:17:4c:2e:19:05:c1:78: 3c:f3:16:8a:5b:09:91:bf:75:e5:71:e7:ce:c5:b4:c1:72:45: cb:a1:b9:ad:d0:82:d8:c7:3c:58:37:0f:52:62:d1:9a:ca:f2: d3:05:ab:06:8f:df:48:d8:7c:ec:19:87:a1:89:ce:39:61:53: ba:ed:5b:a6:66:85:70:bd:c1:96:5d:dc:54:4c:ea:6d:78:88: ac:dd:ef:06:57:5d:9a:67:17:c1:01:79:de:ec:69:a3:00:e1: e8:5a:ff:81:26:22:dc:d9:45:4c:e3:f1:ce:dd:e4:cc:ea:07: 93:d4:3b:33:7b:fa:92:3f:75:cc:aa:53:9a:2b:a1:40:a3:de: 4e:ac:e1:29:ea:b6:ee:66:da:85:e6:b0:10:49:5e:c0:34:4d: c6:fe:23:ab:28:38:19:a0:55:02:ff:52:d1:91:99:9d:ac:ef: 49:be:b2:3f:97:e3:e2:b9:d7:f0:8c:8b:1f:32:3d:e2:6a:4f: 94:35:97:31:45:6a:9f:53:3c:15:e1:33:43:d8:fd:a9:e5:9d: cd:b3:ae:5f:9b:0e:52:7c:bf:d3:f4:fd:f3:49:1c:0f:a2:72: 4e:e1:e2:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiC6nfwW+4xwrGTubEW8DIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZGQwZWJmZjViYTM4YTg3NThiNzk0ZDA0ZDYyOTA1MTk0 YTMyNjYwHhcNMjUxMjI3MjMwMTMwWhcNMjUxMjI4MjMwMTMwWjAzMTEwLwYDVQQD EyhhYThhZTllYWFmZTA1OWJiOTdhMmU4OTM2MDA1ZGY2ODlhMjkyYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIhnB8a1d6XeEpwrn8u9svqp4sCb mueQtghK521d4UHVtj+rho86OA6FgR+avvolxIRpnKgRtnb3wXvkn2ghZnaACo+R KYFv9r7Ck40q27AX7Wj9aThS1ZfeO+2LtU0SpJeeL699hi/1eqYV5/rnx1cjXVyu WFK+VLE0zaEAQUG6EpSJynh+FkbxZl6x3mBdhuJDMqeS0ZuAqrC0MxwNKV/KfJ+Q FSL8b6YJL6+TFiippBw1kLH/3zg1iLeMl9uCTFUSDlyZBOwSYu4F56YOs2dMSaxu 3rJY+YHggo1nHDa2EjKAM5O4eV8Cismg35popm8aLGLw/7oVndcu5HdAhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqK6eqv4Fm7l6Lok2AF32iaKSvAMB8GA1UdIwQY MBaAFBHdDr/1ujiodYt5TQTWKQUZSjJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYt ZjE3NjEzZWE0OWU3LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9hNjZhMjktNTFjYy00YmE5LTg4NGYtZjE3NjEzZWE0OWU3 LzEvRWQwT3ZfVzZPS2gxaTNsTkJOWXBCUmxLTW1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYYBK5hV dSQBo9/Vo0kDDBFtB75rGP6JnCMJR3QXTC4ZBcF4PPMWilsJkb915XHnzsW0wXJF y6G5rdCC2Mc8WDcPUmLRmsry0wWrBo/fSNh87BmHoYnOOWFTuu1bpmaFcL3Bll3c VEzqbXiIrN3vBlddmmcXwQF53uxpowDh6Fr/gSYi3NlFTOPxzt3kzOoHk9Q7M3v6 kj91zKpTmiuhQKPeTqzhKeq27mbaheawEElewDRNxv4jqyg4GaBVAv9S0ZGZnazv Sb6yP5fj4rnX8IyLHzI94mpPlDWXMUVqn1M8FeEzQ9j9qeWdzbOuX5sOUny/0/T9 80kcD6JyTuHiwQ== -----END CERTIFICATE-----Generated at Sun Dec 28 05:55:01 2025 by rpki-client