This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json) Hash identifier: Yrpawxftwg1wLsH4n6ThJ0p3iUalcvuIemmKuYCY4ew= Subject key identifier: 8D:19:E2:B7:70:5F:E9:1B:FA:F0:6F:AD:BC:BC:46:1C:BD:58:B4:03 Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Certificate serial: 019B39EAE13B378A3C60D3BD3FD2156F0B15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft Manifest number: 1561 Signing time: Sat 20 Dec 2025 04:00:52 +0000 Manifest this update: Sat 20 Dec 2025 04:00:52 +0000 Manifest next update: Sun 21 Dec 2025 04:00:52 +0000 Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=) 2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: OgmdBAsxzVsiNVMJ501TbGaz9CHaPOSp1OILbefVhmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:e1:3b:37:8a:3c:60:d3:bd:3f:d2:15:6f:0b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Validity Not Before: Dec 20 04:00:52 2025 GMT Not After : Dec 21 04:00:52 2025 GMT Subject: CN=8d19e2b7705fe91bfaf06fadbcbc461cbd58b403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:ba:ca:53:6c:fb:d0:b5:40:e9:6f:20:13: df:12:54:b0:6a:b7:60:4f:5d:91:6d:d6:49:75:fa: e7:07:ee:6e:34:16:04:28:01:27:28:5c:ff:36:85: 3d:e0:63:b8:73:e6:50:bb:45:a1:53:ac:9c:f8:be: cf:7d:3b:f5:1d:8b:2c:5d:75:90:85:29:76:e9:e3: d6:4d:a2:75:2b:9b:a6:23:c1:5e:74:8a:9a:28:e7: ad:64:c5:ea:fd:e3:75:1e:30:25:cb:0c:52:5a:5d: f3:bf:13:34:2a:5f:a6:94:0a:46:48:39:31:b8:98: 5d:87:6c:6f:17:c8:4c:6a:41:a0:b1:16:75:3f:b8: 8b:a0:5c:4d:4e:b0:45:c9:a5:54:74:7e:f5:a9:ac: 47:14:03:a8:d4:21:05:08:2d:e8:a2:e7:6f:ae:d4: f6:88:98:55:a6:88:8e:96:a3:a8:d1:a2:d0:a6:9e: ff:d8:5e:53:c8:89:be:6b:97:dc:48:d0:b9:03:49: fd:8c:4e:a6:de:e5:f9:d3:dc:1e:c3:a2:30:c4:32: 39:79:aa:4c:1f:84:33:06:fb:3d:81:57:b8:d3:f4: 60:81:32:f1:78:56:40:6a:fa:5a:3a:ba:b6:ca:0e: d7:45:39:1a:2b:15:67:75:a8:f7:5a:9c:2c:bb:33: 58:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:19:E2:B7:70:5F:E9:1B:FA:F0:6F:AD:BC:BC:46:1C:BD:58:B4:03 X509v3 Authority Key Identifier: keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e3:b8:aa:9f:05:d7:4f:92:c5:ab:3a:e8:62:89:3c:0f:94: bf:5e:a5:bb:73:4e:1b:ea:69:87:0b:4f:bc:8d:e4:2d:74:ca: a3:61:a5:10:83:2d:6f:f5:18:1d:f2:69:d6:d7:71:2a:d0:6e: b7:7a:29:c6:6a:97:33:3c:b7:7f:5f:5f:3a:38:c3:91:09:0f: 09:cf:60:c7:9e:fa:03:92:95:39:5c:93:a6:93:43:78:99:ea: 8f:89:99:09:60:91:12:5a:14:f0:50:5a:62:15:47:fb:14:03: ce:0d:dd:f3:91:6b:cb:c6:80:ef:ed:32:74:5c:cb:4c:66:1a: ab:fb:ce:90:1a:34:27:a8:0a:82:5f:3c:6c:ca:78:d9:4d:2f: c4:14:68:9c:9d:56:21:3a:6c:63:18:69:29:8b:34:67:dc:46: f0:50:10:df:1f:a1:a5:bc:43:f8:80:bd:52:80:45:c6:78:90: 4c:9e:92:ba:18:2f:15:71:20:c9:6e:a0:eb:0f:99:d5:0f:a1: 20:e6:a3:e7:78:4f:f3:9c:d2:93:c4:60:b8:3d:34:9b:c5:bc: 67:fd:e0:df:9f:33:10:a4:1f:04:32:e1:69:59:b2:86:95:42: 3c:b7:41:25:cb:7a:b3:45:23:f8:bd:ef:f0:04:35:a5:67:b3: 44:5d:87:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56uE7N4o8YNO9P9IVbwsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDBlMzA3ZDEyY2UwNTY4YzI5OWUxN2NkNjVhNjZiMjZj ZGIwNGQwHhcNMjUxMjIwMDQwMDUyWhcNMjUxMjIxMDQwMDUyWjAzMTEwLwYDVQQD Eyg4ZDE5ZTJiNzcwNWZlOTFiZmFmMDZmYWRiY2JjNDYxY2JkNThiNDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QG6ylNs+9C1QOlvIBPfElSwardg T12RbdZJdfrnB+5uNBYEKAEnKFz/NoU94GO4c+ZQu0WhU6yc+L7PfTv1HYssXXWQ hSl26ePWTaJ1K5umI8FedIqaKOetZMXq/eN1HjAlywxSWl3zvxM0Kl+mlApGSDkx uJhdh2xvF8hMakGgsRZ1P7iLoFxNTrBFyaVUdH71qaxHFAOo1CEFCC3ooudvrtT2 iJhVpoiOlqOo0aLQpp7/2F5TyIm+a5fcSNC5A0n9jE6m3uX509wew6IwxDI5eapM H4QzBvs9gVe40/RggTLxeFZAavpaOrq2yg7XRTkaKxVndaj3WpwsuzNYjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0Z4rdwX+kb+vBvrby8Rhy9WLQDMB8GA1UdIwQY MBaAFJxA4wfRLOBWjCmeF81lpmsmzbBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGIt OGZiMzc3OWI4NzA0LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGItOGZiMzc3OWI4NzA0 LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeO4qp8F 10+Sxas66GKJPA+Uv16lu3NOG+pphwtPvI3kLXTKo2GlEIMtb/UYHfJp1tdxKtBu t3opxmqXMzy3f19fOjjDkQkPCc9gx576A5KVOVyTppNDeJnqj4mZCWCREloU8FBa YhVH+xQDzg3d85Fry8aA7+0ydFzLTGYaq/vOkBo0J6gKgl88bMp42U0vxBRonJ1W ITpsYxhpKYs0Z9xG8FAQ3x+hpbxD+IC9UoBFxniQTJ6SuhgvFXEgyW6g6w+Z1Q+h IOaj53hP85zSk8RguD00m8W8Z/3g358zEKQfBDLhaVmyhpVCPLdBJct6s0Uj+L3v 8AQ1pWezRF2H9Q== -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:45 2025 by rpki-client