This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft File: eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json) Hash identifier: /rfKZziy/umdPnewOgwu6f7ZKpisHql4XpB09I+COVc= Subject key identifier: F7:1A:B9:8A:AD:1D:BD:96:00:15:B7:AA:2F:84:1C:2A:6F:22:19:E0 Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE Certificate issuer: /CN=7832d060932d4785a10ca47de8002f65c1ef33ae Certificate serial: 019B59ACD2A61C67F293AF1E2DCF9D19470E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft Manifest number: 1295 Signing time: Fri 26 Dec 2025 08:00:56 +0000 Manifest this update: Fri 26 Dec 2025 08:00:56 +0000 Manifest next update: Sat 27 Dec 2025 08:00:56 +0000 Files and hashes: 1: UkvE1AtgzFaEZZjsZiVXyyLbs5o.roa (hash: y7S6KVTG3N2Xe5Mq5Th3G1Pm17a7WWjgGUAMC2Q3dUs=) 2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: Pow2NZFiXaEIaskrHiLXNIdUjyNnr3RFWyquL0MiryA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:d2:a6:1c:67:f2:93:af:1e:2d:cf:9d:19:47:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae Validity Not Before: Dec 26 08:00:56 2025 GMT Not After : Dec 27 08:00:56 2025 GMT Subject: CN=f71ab98aad1dbd960015b7aa2f841c2a6f2219e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:a1:5e:72:08:1a:95:bb:61:b2:64:3c:68: b0:0b:ae:f8:b4:00:8f:68:96:44:77:3c:61:2f:34: d0:60:84:70:94:c4:09:71:e3:87:df:3c:2a:16:fb: 83:e2:9e:4f:68:14:19:e9:09:09:8c:73:71:22:d2: 6a:1e:2a:30:6a:66:fc:74:89:2d:27:2b:20:11:28: 91:8e:7c:ad:1e:fa:8d:6f:c2:22:96:24:0d:f5:a1: 94:6c:3e:11:87:40:03:25:d5:f5:4c:11:2c:e8:4c: fe:bc:bf:02:9a:cf:8c:96:06:4b:67:ea:90:9d:b0: 66:89:2f:1a:46:3e:20:ab:0a:40:41:8a:8d:a1:cc: a8:8a:d8:8f:b3:bf:4d:e5:a7:af:2c:f3:a1:60:57: 9c:f5:88:a9:31:41:c3:5a:5a:6c:93:e4:c1:1c:4d: aa:cd:14:f3:f3:a5:6d:c8:f5:da:15:02:77:c4:59: 04:1d:93:2a:8a:27:a7:82:02:7b:8f:06:31:af:4d: 55:95:c7:bd:37:27:a2:da:d7:ef:8e:b1:97:86:97: 07:66:54:ef:e8:0b:c1:4b:6f:d1:f5:cd:57:0d:ce: 60:7a:30:41:ee:1f:f3:f9:d4:5f:0f:f3:ea:b5:5e: a1:ec:d4:9e:17:22:c9:ee:84:b7:a5:d6:f5:b3:ae: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1A:B9:8A:AD:1D:BD:96:00:15:B7:AA:2F:84:1C:2A:6F:22:19:E0 X509v3 Authority Key Identifier: keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0b:f3:6d:c9:e7:ab:3f:28:b1:6c:28:ec:41:59:47:0e:1a: 17:26:1d:6a:5e:4e:f5:35:ee:2b:ee:40:e1:15:ea:be:19:43: 77:f6:87:59:a8:97:2f:de:ca:1e:86:46:c3:80:15:f9:ba:82: ea:dd:6e:39:bb:09:75:05:34:82:a2:1f:0d:50:f5:33:92:6a: 0c:46:66:33:22:d6:33:8f:ca:d4:2e:ad:31:25:30:f8:d0:ee: e4:a0:5a:c6:31:42:a1:4a:1d:4a:da:2a:93:20:0a:d8:d3:05: 83:ed:9c:aa:9b:1f:29:76:07:06:9c:79:64:63:b1:eb:40:2d: 03:89:7e:41:b5:10:61:91:56:b7:a4:d6:8d:2b:b3:5c:37:1a: 7a:0f:5b:f8:fd:ae:e6:0f:ba:1e:0e:c3:0a:f4:d2:89:fc:9f: 71:f4:5a:6d:c7:b2:1b:ec:f4:c3:33:2e:85:e6:3d:3e:5e:50: 4e:ae:35:dd:62:3a:c4:65:99:96:5a:6e:67:3e:0b:9e:6b:a0: 89:9d:bf:66:03:2d:74:21:64:cf:0a:60:7a:48:f6:ce:c5:1d: d1:01:cf:e6:70:3d:6c:9b:fd:1c:46:59:7d:5b:0e:61:90:79: b1:fd:41:6f:92:eb:cd:50:36:d5:44:0c:22:ac:0b:2f:d3:5d: b4:9b:e5:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrNKmHGfyk68eLc+dGUcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MzJkMDYwOTMyZDQ3ODVhMTBjYTQ3ZGU4MDAyZjY1YzFl ZjMzYWUwHhcNMjUxMjI2MDgwMDU2WhcNMjUxMjI3MDgwMDU2WjAzMTEwLwYDVQQD EyhmNzFhYjk4YWFkMWRiZDk2MDAxNWI3YWEyZjg0MWMyYTZmMjIxOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5mhXnIIGpW7YbJkPGiwC674tACP aJZEdzxhLzTQYIRwlMQJceOH3zwqFvuD4p5PaBQZ6QkJjHNxItJqHiowamb8dIkt JysgESiRjnytHvqNb8IiliQN9aGUbD4Rh0ADJdX1TBEs6Ez+vL8Cms+MlgZLZ+qQ nbBmiS8aRj4gqwpAQYqNocyoitiPs79N5aevLPOhYFec9YipMUHDWlpsk+TBHE2q zRTz86VtyPXaFQJ3xFkEHZMqiienggJ7jwYxr01Vlce9Nyei2tfvjrGXhpcHZlTv 6AvBS2/R9c1XDc5gejBB7h/z+dRfD/PqtV6h7NSeFyLJ7oS3pdb1s64uBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcauYqtHb2WABW3qi+EHCpvIhngMB8GA1UdIwQY MBaAFHgy0GCTLUeFoQykfegAL2XB7zOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZURMUVlKTXRSNFdoREtSOTZBQXZaY0h2TTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hYTAzN2MtMzJjZS00NDA2LWIwYmMt ODk5NDlmY2M3YWZiLzEvZURMUVlKTXRSNFdoREtSOTZBQXZaY0h2TTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9hYTAzN2MtMzJjZS00NDA2LWIwYmMtODk5NDlmY2M3YWZi LzEvZURMUVlKTXRSNFdoREtSOTZBQXZaY0h2TTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQvzbcnn qz8osWwo7EFZRw4aFyYdal5O9TXuK+5A4RXqvhlDd/aHWaiXL97KHoZGw4AV+bqC 6t1uObsJdQU0gqIfDVD1M5JqDEZmMyLWM4/K1C6tMSUw+NDu5KBaxjFCoUodStoq kyAK2NMFg+2cqpsfKXYHBpx5ZGOx60AtA4l+QbUQYZFWt6TWjSuzXDcaeg9b+P2u 5g+6Hg7DCvTSifyfcfRabceyG+z0wzMuheY9Pl5QTq413WI6xGWZllpuZz4Lnmug iZ2/ZgMtdCFkzwpgekj2zsUd0QHP5nA9bJv9HEZZfVsOYZB5sf1Bb5LrzVA21UQM IqwLL9NdtJvlRQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:39 2025 by rpki-client