This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft File: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft (raw, json) Hash identifier: Vd8McNJgyFKfKpJ9lud9a76DbAS6m014rtExc4wxPhk= Subject key identifier: AA:83:1A:6D:B7:86:09:02:23:46:90:F6:CC:FF:FF:3B:B7:49:7E:EC Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5 Certificate issuer: /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5 Certificate serial: 019B4ADEA6DB7D3BF587ACADF9DDCA33C367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft Manifest number: 1723 Signing time: Tue 23 Dec 2025 11:01:04 +0000 Manifest this update: Tue 23 Dec 2025 11:01:04 +0000 Manifest next update: Wed 24 Dec 2025 11:01:04 +0000 Files and hashes: 1: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl (hash: 7Xd50ZFET8GNIV5VaSLfPS8G6ekALvKcJpbfIcJyf0o=) 2: FTO-WxW7sPayKFxLz7VzC8cq9-I.roa (hash: cBwaO5bj6Q5Qg6BTkhA0mco8iqfNRZ8ycLxM+09RwRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:a6:db:7d:3b:f5:87:ac:ad:f9:dd:ca:33:c3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5 Validity Not Before: Dec 23 11:01:04 2025 GMT Not After : Dec 24 11:01:04 2025 GMT Subject: CN=aa831a6db7860902234690f6ccffff3bb7497eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:fb:e6:04:fa:ae:a6:0f:01:02:06:75:70: a9:04:dc:cf:2e:b9:d3:a2:1e:d8:6d:dd:80:23:08: d7:ff:9a:88:fe:6d:50:00:2b:8c:66:29:65:f8:f8: 88:77:50:8d:5a:1a:87:ad:ba:b6:8d:a5:74:c7:2d: ed:09:bf:77:e2:da:3a:cc:2b:77:b7:08:d8:ac:a2: 9a:58:72:fe:9b:0d:2d:17:33:53:8e:f1:c7:72:15: 51:69:56:49:69:ff:10:ae:1f:4a:49:60:bc:a9:6c: 58:81:83:46:1c:42:be:43:bc:d0:c8:6e:09:a9:33: a2:19:f6:af:d3:57:f6:b9:22:7b:bd:37:a1:59:38: 9f:fc:bb:f7:ee:78:96:13:ea:57:48:70:fc:f2:2a: 67:2f:20:11:09:22:91:27:2a:be:bc:21:01:bc:f5: 38:77:d6:65:e7:13:ba:9a:43:7c:e0:0e:e5:ba:43: 0f:df:65:9e:e0:ef:a3:5b:51:a6:05:aa:5b:9f:0d: 5a:b4:89:74:49:2c:d7:b8:e2:83:f4:0b:2d:21:67: 4c:8f:f1:35:a0:87:2c:2b:23:a3:07:4d:f2:f8:3a: 6c:25:a6:bc:2b:9a:0d:c6:ec:90:3f:09:f5:31:f3: 08:82:84:86:59:2d:49:ab:2d:6e:7f:e0:0a:27:63: 25:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:83:1A:6D:B7:86:09:02:23:46:90:F6:CC:FF:FF:3B:B7:49:7E:EC X509v3 Authority Key Identifier: keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4c:f3:98:6b:6a:b3:9f:02:0e:63:6f:63:bd:d9:49:fa:c0: 2f:27:52:56:21:22:67:ec:70:a7:4e:4e:d4:88:f0:89:d0:76: db:32:50:14:c8:3f:04:6d:f6:2c:59:c9:96:c8:a7:2c:6c:b9: ca:ff:90:0b:72:68:e6:2c:78:3a:b3:e4:b2:db:03:5e:b7:f9: 41:17:5c:77:15:f3:63:5e:27:c2:1c:e1:4a:64:3a:9a:e2:7b: 13:89:0f:24:19:d3:00:9d:ff:18:10:6f:d2:3f:2b:bd:bb:50: 3c:91:03:27:92:07:fb:8b:de:d5:69:31:bb:26:a6:c2:56:f3: 95:59:f2:81:43:5b:c7:1b:4d:f8:0c:d3:b6:cd:c1:c9:d2:f3: c2:70:7d:ea:f6:61:6b:ad:87:80:9d:7a:ac:3b:a4:09:2c:fe: 02:58:1a:cf:4b:47:09:57:89:b5:f5:92:03:0d:69:b0:cf:ef: 66:85:fc:40:26:3d:d9:bd:de:d4:b6:bf:77:94:8a:be:b8:b6: b8:7f:1a:42:11:30:5d:dd:74:c6:37:94:35:61:99:47:38:2d: 15:41:cc:70:2a:81:81:56:1b:6c:3f:df:52:f9:77:9f:19:55: 02:8f:12:56:99:6c:85:fd:1f:61:3e:7e:12:66:ed:39:8d:67: 2d:a2:e0:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3qbbfTv1h6yt+d3KM8NnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZDQ3OTEyZWZkNDA5YTQ2ZjdjZDQyNzQxODA0YzdkNGY1 ZTFhZDUwHhcNMjUxMjIzMTEwMTA0WhcNMjUxMjI0MTEwMTA0WjAzMTEwLwYDVQQD EyhhYTgzMWE2ZGI3ODYwOTAyMjM0NjkwZjZjY2ZmZmYzYmI3NDk3ZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxb75gT6rqYPAQIGdXCpBNzPLrnT oh7Ybd2AIwjX/5qI/m1QACuMZill+PiId1CNWhqHrbq2jaV0xy3tCb934to6zCt3 twjYrKKaWHL+mw0tFzNTjvHHchVRaVZJaf8Qrh9KSWC8qWxYgYNGHEK+Q7zQyG4J qTOiGfav01f2uSJ7vTehWTif/Lv37niWE+pXSHD88ipnLyARCSKRJyq+vCEBvPU4 d9Zl5xO6mkN84A7lukMP32We4O+jW1GmBapbnw1atIl0SSzXuOKD9AstIWdMj/E1 oIcsKyOjB03y+DpsJaa8K5oNxuyQPwn1MfMIgoSGWS1Jqy1uf+AKJ2MlzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqDGm23hgkCI0aQ9sz//zu3SX7sMB8GA1UdIwQY MBaAFBHUeRLv1Amkb3zUJ0GATH1PXhrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWRSNUV1X1VDYVJ2Zk5RblFZQk1mVTllR3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84MDI1ZjYtNWYzOC00ZGRmLTkxN2Qt MTE0YzI0MDBjM2UzLzEvRWRSNUV1X1VDYVJ2Zk5RblFZQk1mVTllR3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84MDI1ZjYtNWYzOC00ZGRmLTkxN2QtMTE0YzI0MDBjM2Uz LzEvRWRSNUV1X1VDYVJ2Zk5RblFZQk1mVTllR3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUzzmGtq s58CDmNvY73ZSfrALydSViEiZ+xwp05O1IjwidB22zJQFMg/BG32LFnJlsinLGy5 yv+QC3Jo5ix4OrPkstsDXrf5QRdcdxXzY14nwhzhSmQ6muJ7E4kPJBnTAJ3/GBBv 0j8rvbtQPJEDJ5IH+4ve1WkxuyamwlbzlVnygUNbxxtN+AzTts3BydLzwnB96vZh a62HgJ16rDukCSz+Algaz0tHCVeJtfWSAw1psM/vZoX8QCY92b3e1La/d5SKvri2 uH8aQhEwXd10xjeUNWGZRzgtFUHMcCqBgVYbbD/fUvl3nxlVAo8SVplshf0fYT5+ EmbtOY1nLaLgdA== -----END CERTIFICATE-----Generated at Tue Dec 23 17:18:11 2025 by rpki-client