This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft File: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft (raw, json) Hash identifier: zC6G2y9iDob02CGENrAfeHFoh5DgYjCvk7QfGym4Akg= Subject key identifier: A5:3F:0C:72:89:81:F9:FA:41:24:E8:DA:AA:4B:B4:22:53:6F:63:14 Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5 Certificate issuer: /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5 Certificate serial: 019B3D5A32DB851829DA76901A86C903CBFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft Manifest number: 171C Signing time: Sat 20 Dec 2025 20:01:19 +0000 Manifest this update: Sat 20 Dec 2025 20:01:19 +0000 Manifest next update: Sun 21 Dec 2025 20:01:19 +0000 Files and hashes: 1: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl (hash: yWkBpq7AA2rLUFF6Mrdm4AxqNF3KjfA1n3NL/L8U+OA=) 2: FTO-WxW7sPayKFxLz7VzC8cq9-I.roa (hash: cBwaO5bj6Q5Qg6BTkhA0mco8iqfNRZ8ycLxM+09RwRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:32:db:85:18:29:da:76:90:1a:86:c9:03:cb:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5 Validity Not Before: Dec 20 20:01:19 2025 GMT Not After : Dec 21 20:01:19 2025 GMT Subject: CN=a53f0c728981f9fa4124e8daaa4bb422536f6314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:99:fd:4d:33:b3:b1:39:eb:69:03:53:b4:b8: f1:3d:ab:7d:37:90:8a:76:ab:ae:7b:bb:10:e4:4e: 7b:b4:29:91:35:54:7f:0e:3b:36:3a:d9:a0:c8:dc: d3:76:23:fc:da:b5:1a:8c:9c:fb:dd:df:e3:0f:27: cf:53:4e:94:8a:b3:a3:d4:ef:74:f4:54:6f:df:e3: 17:da:2b:5a:f4:99:72:d0:6e:80:e6:ec:81:2c:24: c6:32:5f:14:09:9e:75:e2:fd:97:65:2e:89:f6:e6: 2a:db:e4:db:a9:17:a1:96:7f:95:df:0c:1b:34:2f: f7:8d:0c:e7:a3:50:d1:b2:ce:fe:b4:5f:e6:59:ed: ff:31:d3:99:ff:14:6f:d0:6a:01:22:1f:d9:5b:85: 4e:0a:c2:5e:ed:2c:1d:52:2a:05:bf:7a:b2:23:a9: 30:28:27:b8:25:25:52:13:e5:49:db:16:39:cb:b7: 8f:3e:9b:c7:2d:44:89:ef:0d:5f:78:9c:e7:93:7d: 5a:ba:8f:31:c3:98:e6:37:65:16:71:7f:f7:26:b0: 45:c8:b9:41:02:a4:d2:e3:ae:a1:1d:60:e1:61:ec: 34:fc:73:9a:19:da:4d:9d:2e:7a:21:04:e0:13:d6: 3e:7d:ef:4a:97:6e:24:93:2d:bf:0e:5c:83:18:50: 23:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3F:0C:72:89:81:F9:FA:41:24:E8:DA:AA:4B:B4:22:53:6F:63:14 X509v3 Authority Key Identifier: keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:93:4e:b4:47:c0:d0:1c:7e:d1:2d:38:6f:9d:f6:36:9b:16: 1c:18:cb:5b:aa:11:92:cb:d6:51:9a:8b:4f:b8:75:d5:41:11: ba:56:44:63:94:2a:5c:67:9a:bb:95:f9:37:13:62:31:4e:32: 00:b3:f9:a4:20:8b:d1:ae:8a:ab:63:7d:a5:c4:46:32:c2:c0: c0:84:c4:6c:db:bf:a6:1d:64:82:0a:d1:b8:b8:5b:53:cf:df: a6:6f:57:af:a7:10:34:8b:59:40:4d:73:6b:66:ce:5a:8c:72: 25:18:f5:45:1d:62:27:29:ec:81:d4:36:a9:a7:e7:b7:89:d3: 30:0c:f0:c0:1b:87:6e:e4:89:5f:9e:15:b1:b8:3a:48:bd:68: 1f:08:2a:2b:36:dd:63:a0:be:2d:b4:2d:7c:bb:e0:9c:d9:9f: 4e:32:ea:3d:63:f2:6e:a3:1a:25:e2:6d:96:3a:40:72:3c:78: 4d:81:08:23:7b:1d:17:ca:51:28:b3:63:8c:3f:51:eb:92:32: 75:91:b0:d5:4e:f3:7c:e6:22:4b:39:f5:64:27:d1:68:59:ea: 58:f3:5d:22:f3:9a:9c:b4:6c:e5:7e:b5:ec:68:1c:da:11:99: 67:1a:92:15:47:b0:bc:9f:db:0b:71:f1:44:63:55:52:90:df: 2f:62:ab:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WjLbhRgp2naQGobJA8v8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZDQ3OTEyZWZkNDA5YTQ2ZjdjZDQyNzQxODA0YzdkNGY1 ZTFhZDUwHhcNMjUxMjIwMjAwMTE5WhcNMjUxMjIxMjAwMTE5WjAzMTEwLwYDVQQD EyhhNTNmMGM3Mjg5ODFmOWZhNDEyNGU4ZGFhYTRiYjQyMjUzNmY2MzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Zn9TTOzsTnraQNTtLjxPat9N5CK dquue7sQ5E57tCmRNVR/Djs2OtmgyNzTdiP82rUajJz73d/jDyfPU06UirOj1O90 9FRv3+MX2ita9Jly0G6A5uyBLCTGMl8UCZ514v2XZS6J9uYq2+TbqRehln+V3wwb NC/3jQzno1DRss7+tF/mWe3/MdOZ/xRv0GoBIh/ZW4VOCsJe7SwdUioFv3qyI6kw KCe4JSVSE+VJ2xY5y7ePPpvHLUSJ7w1feJznk31auo8xw5jmN2UWcX/3JrBFyLlB AqTS466hHWDhYew0/HOaGdpNnS56IQTgE9Y+fe9Kl24kky2/DlyDGFAjrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKU/DHKJgfn6QSTo2qpLtCJTb2MUMB8GA1UdIwQY MBaAFBHUeRLv1Amkb3zUJ0GATH1PXhrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWRSNUV1X1VDYVJ2Zk5RblFZQk1mVTllR3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84MDI1ZjYtNWYzOC00ZGRmLTkxN2Qt MTE0YzI0MDBjM2UzLzEvRWRSNUV1X1VDYVJ2Zk5RblFZQk1mVTllR3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84MDI1ZjYtNWYzOC00ZGRmLTkxN2QtMTE0YzI0MDBjM2Uz LzEvRWRSNUV1X1VDYVJ2Zk5RblFZQk1mVTllR3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZNOtEfA 0Bx+0S04b532NpsWHBjLW6oRksvWUZqLT7h11UERulZEY5QqXGeau5X5NxNiMU4y ALP5pCCL0a6Kq2N9pcRGMsLAwITEbNu/ph1kggrRuLhbU8/fpm9Xr6cQNItZQE1z a2bOWoxyJRj1RR1iJynsgdQ2qafnt4nTMAzwwBuHbuSJX54Vsbg6SL1oHwgqKzbd Y6C+LbQtfLvgnNmfTjLqPWPybqMaJeJtljpAcjx4TYEII3sdF8pRKLNjjD9R65Iy dZGw1U7zfOYiSzn1ZCfRaFnqWPNdIvOanLRs5X617Ggc2hGZZxqSFUewvJ/bC3Hx RGNVUpDfL2Krgw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:10 2025 by rpki-client