This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft File: EADA16WawvWYBOfDUV8UzS_VDZc.mft (raw, json) Hash identifier: CZBxYMMOAy8upi9OSsRZtnPwm98fpN410qRBJvWOk/g= Subject key identifier: 89:04:BC:0C:43:9A:7E:A3:AA:63:04:79:20:E5:9E:0A:1F:B6:29:13 Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97 Certificate issuer: /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97 Certificate serial: 019B397D5ACF01EF446819B07113FC005278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 02:01:15 +0000 Manifest this update: Sat 20 Dec 2025 02:01:15 +0000 Manifest next update: Sun 21 Dec 2025 02:01:15 +0000 Files and hashes: 1: EADA16WawvWYBOfDUV8UzS_VDZc.crl (hash: UIAWrspn5v+6KMb8CM0fJVzJdsneisr1G7eEw3IQIkI=) 2: Pjo3RDAsopUeM78b85_QPN1-7VI.roa (hash: I/2zLP79cKW8Js/ksFDd8QdVZcG00HVdVbP2kBa1g/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:5a:cf:01:ef:44:68:19:b0:71:13:fc:00:52:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97 Validity Not Before: Dec 20 02:01:15 2025 GMT Not After : Dec 21 02:01:15 2025 GMT Subject: CN=8904bc0c439a7ea3aa63047920e59e0a1fb62913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:32:50:18:e6:57:24:86:2c:05:8a:dc:06: 2a:ab:7d:cd:5f:97:f8:bc:ad:90:f5:80:26:6e:78: aa:bf:cb:ec:f0:69:ce:cf:9b:ef:d1:2c:61:a3:74: e6:e7:35:63:49:ad:8f:2b:8b:ce:c4:e6:d4:82:7d: d9:e2:a5:68:94:2b:fa:6b:62:bf:0f:f0:83:e1:77: 44:93:c5:45:1f:ed:f1:bc:b7:49:0e:e6:46:ba:00: 47:0b:28:9a:23:7e:41:dc:80:42:01:b3:51:db:f3: fd:35:a7:31:be:49:27:05:fa:db:39:a2:84:fd:ea: dc:3a:2c:f0:93:be:2a:b5:45:a8:14:5d:5c:30:96: ef:99:96:3d:1c:a8:10:8e:2d:cc:ca:49:5f:a5:a3: 75:61:f1:c0:03:d6:fa:93:1f:7d:96:18:8a:3b:dd: 49:1a:6c:e1:d3:62:28:63:43:2e:e2:80:31:a6:57: 49:ff:d0:5f:0b:6d:d0:eb:f7:a7:9f:10:f3:03:b1: 6e:e4:57:9a:5e:19:97:14:7c:26:04:9a:de:65:72: 14:f6:d9:de:c5:6b:5f:3f:02:3e:02:bd:45:de:00: 9c:47:eb:3a:ac:d6:3e:e4:12:7b:91:d7:46:b7:9d: df:5e:cc:f9:e1:a8:fd:76:de:a2:04:f6:2c:39:0d: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:04:BC:0C:43:9A:7E:A3:AA:63:04:79:20:E5:9E:0A:1F:B6:29:13 X509v3 Authority Key Identifier: keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2e:0e:dc:0a:33:32:b2:3c:8f:14:df:a4:df:48:9f:72:b4: dc:8f:a4:6f:79:3d:8c:0a:39:b3:48:00:fa:a2:65:0d:d9:ac: d1:32:1e:e3:01:2d:27:48:f6:62:24:b3:87:69:08:48:d0:1f: 28:54:fa:2a:d1:c3:ea:dc:c2:3a:c2:ff:0d:05:d5:cf:b3:8b: cf:92:21:c2:3c:b1:40:3d:33:17:d0:06:46:93:ec:0b:fa:20: 93:55:cd:56:37:15:2c:e0:da:ca:cd:5a:00:56:d7:f4:42:72: 81:b7:96:7d:94:79:85:d3:ac:5c:9f:d9:a4:6d:ac:25:f5:4e: d6:06:35:95:90:c7:9d:c6:5e:9a:12:74:4a:32:6a:46:8b:17: 4b:b3:a5:61:1c:db:6e:bc:d9:34:33:3b:64:d0:56:e3:91:a2: d1:65:cb:16:3e:de:ec:6a:be:21:a0:a8:ee:73:fa:35:30:19: 3e:d6:3d:54:c4:90:a4:bc:1c:8e:ec:dc:ab:7d:af:e6:cd:53: 23:4d:51:17:45:f4:7d:f4:b7:0e:91:5c:24:8a:f9:43:d1:49: d6:0a:f8:03:1d:42:b8:8c:74:9b:2f:4b:cf:e8:89:dd:40:69: 78:df:50:49:90:18:f7:98:76:e7:2e:13:24:e1:f7:51:c6:03: 60:dc:7a:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fVrPAe9EaBmwcRP8AFJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMDBjMGQ3YTU5YWMyZjU5ODA0ZTdjMzUxNWYxNGNkMmZk NTBkOTcwHhcNMjUxMjIwMDIwMTE1WhcNMjUxMjIxMDIwMTE1WjAzMTEwLwYDVQQD Eyg4OTA0YmMwYzQzOWE3ZWEzYWE2MzA0NzkyMGU1OWUwYTFmYjYyOTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13IyUBjmVySGLAWK3AYqq33NX5f4 vK2Q9YAmbniqv8vs8GnOz5vv0Sxho3Tm5zVjSa2PK4vOxObUgn3Z4qVolCv6a2K/ D/CD4XdEk8VFH+3xvLdJDuZGugBHCyiaI35B3IBCAbNR2/P9NacxvkknBfrbOaKE /ercOizwk74qtUWoFF1cMJbvmZY9HKgQji3MyklfpaN1YfHAA9b6kx99lhiKO91J Gmzh02IoY0Mu4oAxpldJ/9BfC23Q6/ennxDzA7Fu5FeaXhmXFHwmBJreZXIU9tne xWtfPwI+Ar1F3gCcR+s6rNY+5BJ7kddGt53fXsz54aj9dt6iBPYsOQ2ExwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkEvAxDmn6jqmMEeSDlngoftikTMB8GA1UdIwQY MBaAFBAAwNelmsL1mATnw1FfFM0v1Q2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2It ZWEzODQyMGIyNTc5LzEvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zZTkzOTQtZTI3MS00OWFiLWIzN2ItZWEzODQyMGIyNTc5 LzEvRUFEQTE2V2F3dldZQk9mRFVWOFV6U19WRFpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJi4O3Aoz MrI8jxTfpN9In3K03I+kb3k9jAo5s0gA+qJlDdms0TIe4wEtJ0j2YiSzh2kISNAf KFT6KtHD6tzCOsL/DQXVz7OLz5IhwjyxQD0zF9AGRpPsC/ogk1XNVjcVLODays1a AFbX9EJygbeWfZR5hdOsXJ/ZpG2sJfVO1gY1lZDHncZemhJ0SjJqRosXS7OlYRzb brzZNDM7ZNBW45Gi0WXLFj7e7Gq+IaCo7nP6NTAZPtY9VMSQpLwcjuzcq32v5s1T I01RF0X0ffS3DpFcJIr5Q9FJ1gr4Ax1CuIx0my9Lz+iJ3UBpeN9QSZAY95h25y4T JOH3UcYDYNx6rQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:38:54 2025 by rpki-client