This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft File: 7edmLVl_r8lt12VXdQjD7QKdZWc.mft (raw, json) Hash identifier: IHHz+DRvfzAo6WbUUcFc2pkPjUu58UcuTYUg7G5R3KA= Subject key identifier: 81:AE:32:43:9A:E3:CF:14:D7:B2:C0:07:43:B6:1F:44:2D:C4:6D:1B Authority key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67 Certificate issuer: /CN=ede7662d597fafc96dd765577508c3ed029d6567 Certificate serial: 019B4A71B7E8B6E749FE48ACF1AD5127FDA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 09:02:05 +0000 Manifest this update: Tue 23 Dec 2025 09:02:05 +0000 Manifest next update: Wed 24 Dec 2025 09:02:05 +0000 Files and hashes: 1: 7edmLVl_r8lt12VXdQjD7QKdZWc.crl (hash: YWKIT0x0pIAUza0KdIQyDKMfhBAsASqyFcOGdk8G8+k=) 2: FQLYEgJnBcxXVB0fnnabFYqwVJ4.roa (hash: V3224FLOv1W7X3uBW6dltktQIsCoHudHe1QUTyJjYBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:b7:e8:b6:e7:49:fe:48:ac:f1:ad:51:27:fd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede7662d597fafc96dd765577508c3ed029d6567 Validity Not Before: Dec 23 09:02:05 2025 GMT Not After : Dec 24 09:02:05 2025 GMT Subject: CN=81ae32439ae3cf14d7b2c00743b61f442dc46d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:58:54:b5:b4:c5:7b:2e:f1:08:97:e3:35:4c: d8:16:38:83:f8:72:48:e5:6b:c1:83:78:10:f8:58: ec:be:85:73:fc:d9:e6:30:87:43:75:30:6c:b7:6b: 97:49:2a:2e:69:ac:e7:ca:56:36:e7:29:4d:b4:94: 00:14:97:3f:12:6d:37:be:60:50:43:9e:2e:5a:d4: 92:50:82:f8:9f:cd:0b:c4:d4:b6:f5:12:b6:f7:37: 98:7e:82:25:fe:86:11:67:9c:ea:2c:ed:3c:3c:61: 01:81:dd:fa:ae:60:8b:d1:6c:8d:b6:42:c1:dd:d1: d0:21:45:4a:0a:b0:37:c0:ab:77:de:65:99:aa:a1: 5e:de:99:04:c6:fe:10:9e:81:11:bf:7a:6c:5f:4f: 61:41:d6:75:9c:53:99:f8:e0:f5:ba:c0:ec:57:40: 3b:47:e1:6e:4f:6d:29:c3:39:e0:be:70:30:78:4d: 8b:19:f6:2e:f9:9a:13:53:28:0b:71:f0:88:e4:da: 27:f6:b9:e1:94:6f:74:c2:17:66:3c:ce:b2:bf:c5: 05:9d:13:d5:39:94:89:5f:80:2a:23:12:c4:79:7b: 5f:2b:c3:3e:f1:d9:3d:09:9e:8c:fb:b2:ef:81:e2: 37:a1:af:86:96:8a:2a:74:d0:4b:07:f1:13:50:b3: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:AE:32:43:9A:E3:CF:14:D7:B2:C0:07:43:B6:1F:44:2D:C4:6D:1B X509v3 Authority Key Identifier: keyid:ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9c:1e:11:9e:2d:97:f9:46:75:37:89:40:83:7a:4c:4c:85: e5:24:01:be:30:ec:9b:55:76:d7:9f:7b:a8:e4:68:a8:f2:06: a7:58:57:5a:ca:29:cf:cf:f3:49:9d:81:5d:8c:2a:d8:2b:54: 23:c6:05:8e:01:29:77:df:43:07:96:12:40:7f:76:a1:cc:00: 55:78:a9:c8:d2:95:ab:dd:c8:34:76:c6:60:9a:97:53:4a:b9: ab:65:15:cd:c8:a1:46:2b:bf:b8:80:17:1e:5c:2a:95:39:e9: d8:a9:a2:a8:27:a2:5f:6b:2c:6a:f6:07:77:fa:cc:25:6d:e1: b2:dd:51:df:b3:20:dd:85:a9:83:22:f5:ca:70:25:d6:79:95: 3c:f0:fb:73:eb:fa:ed:c4:fc:76:1c:a9:4a:e3:e5:0e:e6:c5: 70:fb:ae:3c:f6:8f:7c:00:db:4a:63:b2:16:86:3c:85:2d:34: b4:9f:35:9e:a4:7c:ec:78:48:ac:fd:3e:1d:0f:c5:10:3b:58: 5c:96:82:da:e5:ea:3c:ee:a3:ac:4d:00:37:f6:74:93:7d:df: 1a:ce:39:26:1f:06:ca:35:20:40:ff:26:c0:01:25:e1:90:75: 1e:19:25:85:f9:af:2c:fb:14:03:c4:b0:b8:19:d6:b6:64:5e: 22:10:8e:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcbfotudJ/kis8a1RJ/2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZTc2NjJkNTk3ZmFmYzk2ZGQ3NjU1Nzc1MDhjM2VkMDI5 ZDY1NjcwHhcNMjUxMjIzMDkwMjA1WhcNMjUxMjI0MDkwMjA1WjAzMTEwLwYDVQQD Eyg4MWFlMzI0MzlhZTNjZjE0ZDdiMmMwMDc0M2I2MWY0NDJkYzQ2ZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FhUtbTFey7xCJfjNUzYFjiD+HJI 5WvBg3gQ+FjsvoVz/NnmMIdDdTBst2uXSSouaaznylY25ylNtJQAFJc/Em03vmBQ Q54uWtSSUIL4n80LxNS29RK29zeYfoIl/oYRZ5zqLO08PGEBgd36rmCL0WyNtkLB 3dHQIUVKCrA3wKt33mWZqqFe3pkExv4QnoERv3psX09hQdZ1nFOZ+OD1usDsV0A7 R+FuT20pwzngvnAweE2LGfYu+ZoTUygLcfCI5Non9rnhlG90whdmPM6yv8UFnRPV OZSJX4AqIxLEeXtfK8M+8dk9CZ6M+7LvgeI3oa+GlooqdNBLB/ETULMm1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGuMkOa488U17LAB0O2H0QtxG0bMB8GA1UdIwQY MBaAFO3nZi1Zf6/JbddlV3UIw+0CnWVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTIt ZDM1N2Y1YWVlYjg1LzEvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTItZDM1N2Y1YWVlYjg1 LzEvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJweEZ4t l/lGdTeJQIN6TEyF5SQBvjDsm1V21597qORoqPIGp1hXWsopz8/zSZ2BXYwq2CtU I8YFjgEpd99DB5YSQH92ocwAVXipyNKVq93INHbGYJqXU0q5q2UVzcihRiu/uIAX HlwqlTnp2KmiqCeiX2ssavYHd/rMJW3hst1R37Mg3YWpgyL1ynAl1nmVPPD7c+v6 7cT8dhypSuPlDubFcPuuPPaPfADbSmOyFoY8hS00tJ81nqR87HhIrP0+HQ/FEDtY XJaC2uXqPO6jrE0AN/Z0k33fGs45Jh8GyjUgQP8mwAEl4ZB1HhklhfmvLPsUA8Sw uBnWtmReIhCOqg== -----END CERTIFICATE-----Generated at Tue Dec 23 16:51:13 2025 by rpki-client