This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft File: eDdfthaLNUhBuR0wX50M3AyxUB0.mft (raw, json) Hash identifier: o5r3FIQx/aXZ/j5HKWJ3cZF+erit4/ZiM6EJ6e7wo8M= Subject key identifier: 87:C7:07:6A:D6:DE:B4:6F:30:B3:B9:11:5E:21:75:8A:4D:10:4A:35 Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D Certificate issuer: /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d Certificate serial: 019B3DFED2B1720AB23B120BF39DB651C721 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 23:01:08 +0000 Manifest this update: Sat 20 Dec 2025 23:01:08 +0000 Manifest next update: Sun 21 Dec 2025 23:01:08 +0000 Files and hashes: 1: eDdfthaLNUhBuR0wX50M3AyxUB0.crl (hash: NNh03xUlgGOdA82lpt4zcOlcXPBk9cvqJk/dAYgsYao=) 2: yISIjc9YgTnf71Z4E-nlNbitu7U.roa (hash: LtZh6f0jmex3FPPUw/azkOX7onGzwYw39L6cN+bX6NE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:d2:b1:72:0a:b2:3b:12:0b:f3:9d:b6:51:c7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d Validity Not Before: Dec 20 23:01:08 2025 GMT Not After : Dec 21 23:01:08 2025 GMT Subject: CN=87c7076ad6deb46f30b3b9115e21758a4d104a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:56:ef:70:47:ee:14:df:42:3c:37:71:8b:5d: f9:54:b8:c0:a5:3a:06:39:92:5b:83:a1:a7:bb:6a: 57:e0:b5:a2:f5:50:be:23:53:87:81:a7:bc:d0:b8: e2:1b:13:67:3c:c4:09:6c:e2:5e:e3:d3:7d:ad:7d: 61:b0:6a:ef:fc:91:4a:a4:f1:9e:c4:57:87:a8:3d: 94:74:67:66:2b:b8:6e:05:ca:51:26:90:f0:de:f6: 41:31:53:5f:4a:d4:f0:5d:86:cd:f9:cf:b8:77:32: 28:46:2f:ea:c8:1c:a4:ec:68:69:aa:37:90:59:33: 85:2a:34:7c:55:e5:11:f5:3e:be:67:0b:7d:3e:6e: bc:5c:74:69:91:51:3a:a1:f3:fd:7f:f8:4d:9f:6b: c1:b7:6f:ed:78:ff:53:39:a0:8e:fd:db:94:a3:d5: 5f:a8:2d:36:6d:4c:6c:91:6f:24:cd:51:63:55:c9: 54:a6:2e:82:69:6c:a6:b7:79:54:81:da:23:03:60: 71:4c:95:19:4b:ac:78:6a:a6:70:b7:51:d0:04:16: 33:65:8c:60:35:72:87:09:c8:f4:80:08:4f:a0:a0: cf:c8:3d:8e:3e:9f:9d:b0:aa:35:93:0c:5a:56:2f: da:b4:42:59:e3:ff:62:20:f0:c6:76:b0:49:2a:db: cd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C7:07:6A:D6:DE:B4:6F:30:B3:B9:11:5E:21:75:8A:4D:10:4A:35 X509v3 Authority Key Identifier: keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fc:8b:cf:85:27:ec:af:9a:ac:ce:8c:87:5e:49:24:26:93: fc:22:7e:4b:d7:72:5a:9a:0d:06:60:09:15:e8:be:99:7d:14: f6:20:f7:91:aa:d8:00:b9:04:9d:a0:2f:79:86:67:cd:1a:df: 32:43:68:3a:f1:06:bf:73:3d:b6:1f:fb:e5:b0:c2:95:b6:5c: 80:23:3b:36:8b:81:fa:43:91:da:78:c4:1f:1c:bb:43:08:c9: 2e:26:e9:15:24:aa:aa:b5:ca:0e:27:69:5b:0e:bf:e7:a7:15: f0:4b:50:f0:f8:a5:9b:51:2f:a4:6c:0c:f2:d5:40:9e:c0:2e: 51:73:d8:0e:25:7b:3a:21:23:3d:d9:4d:33:a3:f4:e3:8c:55: e2:db:ce:e8:09:ff:28:2b:39:65:ff:7e:28:4f:dc:70:d3:83: 2b:d2:3f:43:00:a7:c0:b2:ec:eb:c0:5c:99:92:58:d8:bd:d5: bf:ef:72:f4:4b:bc:7b:84:f4:40:45:54:75:7b:9d:5c:da:25: 96:4a:4d:b7:c4:e1:6e:6b:b0:dd:49:b3:51:e5:44:aa:b5:f8: 1e:71:f0:ab:e6:f7:09:1b:7b:6e:bf:5d:7e:94:af:38:bd:9a: 26:12:59:dc:dd:95:52:0c:25:d9:2f:f4:d3:63:ae:50:64:70: 56:48:3e:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tKxcgqyOxIL8522UcchMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4Mzc1ZmI2MTY4YjM1NDg0MWI5MWQzMDVmOWQwY2RjMGNi MTUwMWQwHhcNMjUxMjIwMjMwMTA4WhcNMjUxMjIxMjMwMTA4WjAzMTEwLwYDVQQD Eyg4N2M3MDc2YWQ2ZGViNDZmMzBiM2I5MTE1ZTIxNzU4YTRkMTA0YTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFbvcEfuFN9CPDdxi135VLjApToG OZJbg6Gnu2pX4LWi9VC+I1OHgae80LjiGxNnPMQJbOJe49N9rX1hsGrv/JFKpPGe xFeHqD2UdGdmK7huBcpRJpDw3vZBMVNfStTwXYbN+c+4dzIoRi/qyByk7GhpqjeQ WTOFKjR8VeUR9T6+Zwt9Pm68XHRpkVE6ofP9f/hNn2vBt2/teP9TOaCO/duUo9Vf qC02bUxskW8kzVFjVclUpi6CaWymt3lUgdojA2BxTJUZS6x4aqZwt1HQBBYzZYxg NXKHCcj0gAhPoKDPyD2OPp+dsKo1kwxaVi/atEJZ4/9iIPDGdrBJKtvNnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfHB2rW3rRvMLO5EV4hdYpNEEo1MB8GA1UdIwQY MBaAFHg3X7YWizVIQbkdMF+dDNwMsVAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iNThiYmUtYjUwZi00ODU3LTg3MWMt MWMwZTMxZGUzMWM3LzEvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9iNThiYmUtYjUwZi00ODU3LTg3MWMtMWMwZTMxZGUzMWM3 LzEvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/yLz4Un 7K+arM6Mh15JJCaT/CJ+S9dyWpoNBmAJFei+mX0U9iD3karYALkEnaAveYZnzRrf MkNoOvEGv3M9th/75bDClbZcgCM7NouB+kOR2njEHxy7QwjJLibpFSSqqrXKDidp Ww6/56cV8EtQ8Pilm1EvpGwM8tVAnsAuUXPYDiV7OiEjPdlNM6P044xV4tvO6An/ KCs5Zf9+KE/ccNODK9I/QwCnwLLs68BcmZJY2L3Vv+9y9Eu8e4T0QEVUdXudXNol lkpNt8Thbmuw3UmzUeVEqrX4HnHwq+b3CRt7br9dfpSvOL2aJhJZ3N2VUgwl2S/0 02OuUGRwVkg+SA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:38:53 2025 by rpki-client