This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json) Hash identifier: 1bAFDTgAzNBwxeVprNb1yYF/bQ9ihEGhHiigR4ou12A= Subject key identifier: 78:AA:C1:1F:D0:37:E9:B6:58:F9:D8:9D:03:81:E5:83:3B:8E:04:FB Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79 Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179 Certificate serial: 019B5418B718B9CCC18DF1C5AD640509CF95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft Manifest number: 1243 Signing time: Thu 25 Dec 2025 06:01:04 +0000 Manifest this update: Thu 25 Dec 2025 06:01:04 +0000 Manifest next update: Fri 26 Dec 2025 06:01:04 +0000 Files and hashes: 1: _6bJkuzxLJMC8zZKQrB-nCnecco.roa (hash: GqXUAXRZkYfH9YlSLUwHS7QBNR7+ywl2PUwYOYs72Io=) 2: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: fBYaILRwaPqA0/CuKs6ofuIHubqrw0VOjoQEHAnFAYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:b7:18:b9:cc:c1:8d:f1:c5:ad:64:05:09:cf:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179 Validity Not Before: Dec 25 06:01:04 2025 GMT Not After : Dec 26 06:01:04 2025 GMT Subject: CN=78aac11fd037e9b658f9d89d0381e5833b8e04fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:f0:46:56:6b:2b:ab:29:1b:5d:00:40:b1: 59:a8:ee:36:fc:12:1f:e3:c8:e6:9d:0f:d8:07:d8: 28:21:2a:c6:22:a3:3b:92:cd:95:a8:a2:a2:ba:d0: d8:e9:68:f1:69:12:7d:e9:d6:2a:a7:6f:cd:d5:9a: 8a:2b:3f:14:3e:36:d9:d0:3d:00:f7:44:8d:3c:29: e9:07:da:4c:2f:01:d5:99:93:16:ef:f2:15:4c:c6: 89:40:9c:6f:43:f7:28:87:c8:e6:33:2e:ca:0f:21: b4:1e:34:9c:fd:6d:47:7f:3e:ba:2a:98:b7:5f:ce: 79:a2:d1:a6:8b:29:a7:ee:78:5d:6c:5b:6e:44:cb: b5:a4:c5:89:fd:5f:dc:76:f6:2d:c2:ce:ce:b7:c4: df:1e:5d:2a:5e:ba:88:59:84:9e:91:4e:03:8e:09: 99:2f:ab:53:6c:3c:1e:ea:b4:e2:53:8c:97:5a:9d: b8:c2:ef:3e:c3:d4:a3:9a:08:c1:4a:50:91:18:4a: 5e:19:72:53:2f:8f:ed:7c:48:fd:cf:ff:4f:ca:7b: 28:24:3b:89:5c:5e:f7:af:d3:47:66:3a:86:d7:e7: cf:25:06:05:f1:b5:ad:eb:45:87:da:d0:17:59:1e: 41:b0:23:58:62:d4:84:e6:70:19:2c:00:d8:a2:83: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AA:C1:1F:D0:37:E9:B6:58:F9:D8:9D:03:81:E5:83:3B:8E:04:FB X509v3 Authority Key Identifier: keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:80:4a:01:54:75:26:a2:85:21:9d:fb:86:39:8c:5c:bb:74: fa:f0:6f:fa:a6:9d:7f:46:03:02:86:c3:a7:c1:ab:7a:db:2b: 12:0d:98:40:be:fa:86:db:74:fe:b1:89:d9:d3:73:a2:dd:22: a8:fc:7e:99:c3:28:f7:70:00:73:7c:84:bf:8a:8f:1c:5f:ad: a8:7d:e0:e5:b7:f9:ff:1f:0f:0f:36:7c:4f:b4:b9:db:98:95: e3:79:3b:b0:78:c9:55:8f:63:94:d0:66:64:f5:d9:00:97:2a: 1e:b6:be:37:d9:f3:1d:ff:e4:e6:22:f4:2a:a6:dc:b9:b0:00: a9:32:93:ef:14:49:f6:c9:dd:87:73:30:51:b7:a5:cc:5f:52: 5d:f1:c3:26:90:7e:67:04:93:25:14:65:aa:dd:04:c8:e9:f8: 72:8c:6c:f0:98:2a:5d:09:e9:7a:44:ef:8f:2a:37:93:aa:6f: 0f:ad:48:67:cf:ac:6c:ea:3c:15:08:e3:9c:2e:6a:b1:72:96: 0f:86:80:50:d0:b4:a0:c0:91:a0:d8:31:33:7a:ea:93:27:6e: 91:d2:59:f8:fb:5f:5f:5d:d5:31:ba:4e:8d:2c:c9:5c:8d:4a: bd:ff:6a:9d:2c:02:78:3e:13:2e:42:27:2e:ad:c9:d8:ef:45: 5e:dc:fd:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGLcYuczBjfHFrWQFCc+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZDQzNzU4NGFiZGI0ODIxMzYzMGRjYWE1ZjAwYzlkMmMz Y2MxNzkwHhcNMjUxMjI1MDYwMTA0WhcNMjUxMjI2MDYwMTA0WjAzMTEwLwYDVQQD Eyg3OGFhYzExZmQwMzdlOWI2NThmOWQ4OWQwMzgxZTU4MzNiOGUwNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtHwRlZrK6spG10AQLFZqO42/BIf 48jmnQ/YB9goISrGIqM7ks2VqKKiutDY6WjxaRJ96dYqp2/N1ZqKKz8UPjbZ0D0A 90SNPCnpB9pMLwHVmZMW7/IVTMaJQJxvQ/coh8jmMy7KDyG0HjSc/W1Hfz66Kpi3 X855otGmiymn7nhdbFtuRMu1pMWJ/V/cdvYtws7Ot8TfHl0qXrqIWYSekU4DjgmZ L6tTbDwe6rTiU4yXWp24wu8+w9SjmgjBSlCRGEpeGXJTL4/tfEj9z/9PynsoJDuJ XF73r9NHZjqG1+fPJQYF8bWt60WH2tAXWR5BsCNYYtSE5nAZLADYooPNlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiqwR/QN+m2WPnYnQOB5YM7jgT7MB8GA1UdIwQY MBaAFHnUN1hKvbSCE2MNyqXwDJ0sPMF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNDk2YTQtY2M5Zi00NDE5LWFkODEt YWFhMjM4MDk4MmJjLzEvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNDk2YTQtY2M5Zi00NDE5LWFkODEtYWFhMjM4MDk4MmJj LzEvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYBKAVR1 JqKFIZ37hjmMXLt0+vBv+qadf0YDAobDp8GretsrEg2YQL76htt0/rGJ2dNzot0i qPx+mcMo93AAc3yEv4qPHF+tqH3g5bf5/x8PDzZ8T7S525iV43k7sHjJVY9jlNBm ZPXZAJcqHra+N9nzHf/k5iL0KqbcubAAqTKT7xRJ9sndh3MwUbelzF9SXfHDJpB+ ZwSTJRRlqt0EyOn4coxs8JgqXQnpekTvjyo3k6pvD61IZ8+sbOo8FQjjnC5qsXKW D4aAUNC0oMCRoNgxM3rqkydukdJZ+PtfX13VMbpOjSzJXI1Kvf9qnSwCeD4TLkIn Lq3J2O9FXtz9gw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:51 2025 by rpki-client