This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft File: edad2YMzVYQB7dGmAWgmXdGg2Vg.mft (raw, json) Hash identifier: oVq/H7LBWnkhUhBmkuy1RF1oOO1kPauoiaT8par8gBw= Subject key identifier: AE:CE:FD:EB:68:06:A3:FE:97:13:06:85:06:C8:C6:03:A6:D0:D5:5E Authority key identifier: 79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58 Certificate issuer: /CN=79d69dd98333558401edd1a60168265dd1a0d958 Certificate serial: 019B5F77FE0D6F3D24705B01C510343056FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 11:00:57 +0000 Manifest this update: Sat 27 Dec 2025 11:00:57 +0000 Manifest next update: Sun 28 Dec 2025 11:00:57 +0000 Files and hashes: 1: edad2YMzVYQB7dGmAWgmXdGg2Vg.crl (hash: 6ry9eRoTq0mWWhrOsmWP4yQqax2zH1wsqptrwIUgRl4=) 2: hqnI55-BtuuM4vFpZ56v79LAU1E.roa (hash: de3zBJnkxcrGTCeqUEM+8xu6xpr3xr2UbYA58RD5CTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:77:fe:0d:6f:3d:24:70:5b:01:c5:10:34:30:56:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79d69dd98333558401edd1a60168265dd1a0d958 Validity Not Before: Dec 27 11:00:57 2025 GMT Not After : Dec 28 11:00:57 2025 GMT Subject: CN=aecefdeb6806a3fe9713068506c8c603a6d0d55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1c:a0:ec:44:a2:13:4a:f9:9f:06:65:49:3e: 66:7d:e2:1a:a2:de:be:00:a2:c3:22:f5:f1:ec:e4: eb:0d:71:43:a9:da:cb:52:62:90:60:70:7a:c5:bf: ee:74:b3:ef:33:13:33:3d:31:e5:be:73:40:5b:58: 87:3a:6b:a9:c2:53:c3:4f:22:54:22:2a:88:b7:81: 49:3f:0d:81:ef:d5:7e:37:76:0b:f4:da:3c:b8:26: 04:e8:35:ef:58:cd:52:fe:9c:fc:df:50:61:dc:b5: 27:6e:09:b8:46:a8:8b:5e:5f:99:57:93:f4:b9:c9: 10:66:5e:6a:9e:89:5f:df:82:64:08:da:19:35:4c: 03:1a:19:50:1c:10:fb:b0:5a:7a:bb:28:3d:6a:9b: cc:13:6a:df:88:a7:e9:a5:33:e1:c7:1d:3a:46:f2: 22:df:96:37:c1:6c:69:48:32:4e:c5:d5:ef:a3:f8: 75:a2:00:0f:bc:eb:84:f5:29:0c:68:bd:1a:de:59: d6:c4:63:3d:96:74:bc:06:f2:ac:56:0a:3d:2d:c2: 25:7c:f9:c8:26:15:8a:2a:f2:65:18:12:8f:fd:58: 6e:6b:94:a2:16:b5:8b:0c:08:db:2e:46:f3:88:6e: 97:3c:4c:50:4d:69:e5:86:f9:c7:1a:97:d0:c4:45: 7b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CE:FD:EB:68:06:A3:FE:97:13:06:85:06:C8:C6:03:A6:D0:D5:5E X509v3 Authority Key Identifier: keyid:79:D6:9D:D9:83:33:55:84:01:ED:D1:A6:01:68:26:5D:D1:A0:D9:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edad2YMzVYQB7dGmAWgmXdGg2Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a46be7-317e-4708-a016-4fd6b7d76a2f/1/edad2YMzVYQB7dGmAWgmXdGg2Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0c:07:b7:df:48:52:d1:8c:d4:c6:36:39:20:aa:aa:63:1e: 96:3e:9d:34:27:e9:ce:65:3b:44:3d:31:61:35:b0:ae:4b:10: 99:b4:b2:a4:08:09:0a:83:d8:01:fc:22:1f:5d:a4:9a:19:18: b4:9a:d1:1d:c4:06:0b:96:da:62:0e:20:db:06:1d:8e:6d:4e: 3d:c4:9c:7e:cb:4c:fe:70:11:eb:5c:07:ec:cb:c2:c7:03:e4: d1:15:a5:f6:ef:2c:af:df:dc:f9:2c:fc:43:1c:ee:8a:41:18: 3b:91:c6:c2:c5:1f:0b:c5:e0:36:09:a2:5d:2b:22:53:01:3d: 54:84:4c:54:51:8c:f1:97:fa:a6:13:da:a7:42:13:d9:7d:45: 80:19:6a:df:39:f3:c7:fe:6f:38:62:37:d5:de:de:64:d3:20: 7b:6e:83:71:1c:48:ec:50:11:a1:03:83:65:c6:08:63:f6:f6: df:63:11:4a:72:a8:0c:39:5e:3a:fd:4b:0d:07:8a:0e:b6:24: 66:d1:df:c6:71:76:e7:49:e4:49:26:b8:23:b9:66:4b:fa:0f: 73:51:ef:83:c6:87:f0:70:1c:2e:35:75:c9:0e:0a:98:c3:c8: 2c:08:bb:36:c4:89:a7:b7:96:54:db:72:41:89:b5:0f:2a:74: 17:b1:11:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfd/4Nbz0kcFsBxRA0MFb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZDY5ZGQ5ODMzMzU1ODQwMWVkZDFhNjAxNjgyNjVkZDFh MGQ5NTgwHhcNMjUxMjI3MTEwMDU3WhcNMjUxMjI4MTEwMDU3WjAzMTEwLwYDVQQD EyhhZWNlZmRlYjY4MDZhM2ZlOTcxMzA2ODUwNmM4YzYwM2E2ZDBkNTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxyg7ESiE0r5nwZlST5mfeIaot6+ AKLDIvXx7OTrDXFDqdrLUmKQYHB6xb/udLPvMxMzPTHlvnNAW1iHOmupwlPDTyJU IiqIt4FJPw2B79V+N3YL9No8uCYE6DXvWM1S/pz831Bh3LUnbgm4RqiLXl+ZV5P0 uckQZl5qnolf34JkCNoZNUwDGhlQHBD7sFp6uyg9apvME2rfiKfppTPhxx06RvIi 35Y3wWxpSDJOxdXvo/h1ogAPvOuE9SkMaL0a3lnWxGM9lnS8BvKsVgo9LcIlfPnI JhWKKvJlGBKP/Vhua5SiFrWLDAjbLkbziG6XPExQTWnlhvnHGpfQxEV74QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7O/etoBqP+lxMGhQbIxgOm0NVeMB8GA1UdIwQY MBaAFHnWndmDM1WEAe3RpgFoJl3RoNlYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hNDZiZTctMzE3ZS00NzA4LWEwMTYt NGZkNmI3ZDc2YTJmLzEvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hNDZiZTctMzE3ZS00NzA4LWEwMTYtNGZkNmI3ZDc2YTJm LzEvZWRhZDJZTXpWWVFCN2RHbUFXZ21YZEdnMlZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgwHt99I UtGM1MY2OSCqqmMelj6dNCfpzmU7RD0xYTWwrksQmbSypAgJCoPYAfwiH12kmhkY tJrRHcQGC5baYg4g2wYdjm1OPcScfstM/nAR61wH7MvCxwPk0RWl9u8sr9/c+Sz8 QxzuikEYO5HGwsUfC8XgNgmiXSsiUwE9VIRMVFGM8Zf6phPap0IT2X1FgBlq3znz x/5vOGI31d7eZNMge26DcRxI7FARoQODZcYIY/b232MRSnKoDDleOv1LDQeKDrYk ZtHfxnF250nkSSa4I7lmS/oPc1Hvg8aH8HAcLjV1yQ4KmMPILAi7NsSJp7eWVNty QYm1Dyp0F7ERcw== -----END CERTIFICATE-----Generated at Sat Dec 27 21:01:08 2025 by rpki-client