This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft File: edQ3WEq9tIITYw3KpfAMnSw8wXk.mft (raw, json) Hash identifier: 4mOFHDd+MqIHs9f9vV5lTAQywXbuna/kUrNUrK0tshI= Subject key identifier: A6:02:C8:C2:0C:F4:C3:1E:61:F1:ED:9A:DA:46:58:C6:30:00:07:62 Authority key identifier: 79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79 Certificate issuer: /CN=79d437584abdb48213630dcaa5f00c9d2c3cc179 Certificate serial: 019B59E3EE8C97BFE3FE55DFC2661261C5E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft Manifest number: 1246 Signing time: Fri 26 Dec 2025 09:01:08 +0000 Manifest this update: Fri 26 Dec 2025 09:01:08 +0000 Manifest next update: Sat 27 Dec 2025 09:01:08 +0000 Files and hashes: 1: _6bJkuzxLJMC8zZKQrB-nCnecco.roa (hash: GqXUAXRZkYfH9YlSLUwHS7QBNR7+ywl2PUwYOYs72Io=) 2: edQ3WEq9tIITYw3KpfAMnSw8wXk.crl (hash: KT51cz1S9Qb8dj125Rlm674DH9LJ1gn3ZvuoIqfG/t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:ee:8c:97:bf:e3:fe:55:df:c2:66:12:61:c5:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79d437584abdb48213630dcaa5f00c9d2c3cc179 Validity Not Before: Dec 26 09:01:08 2025 GMT Not After : Dec 27 09:01:08 2025 GMT Subject: CN=a602c8c20cf4c31e61f1ed9ada4658c630000762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:92:8d:83:8a:11:ef:95:b0:35:35:df:4d:85: 3a:92:25:4e:b9:74:bc:c6:65:dc:29:e4:1e:dc:75: 48:89:cb:49:35:2f:88:19:60:38:2e:73:a5:f6:fc: 72:b4:c3:61:d8:83:ca:84:80:ed:ba:81:bd:c1:6c: ba:0f:84:07:94:45:0f:93:ea:36:a8:c5:b5:ee:0b: 09:85:93:2d:49:5e:4f:b5:ca:54:d5:39:ab:c8:51: 60:0c:a7:6a:1a:16:4c:1d:02:a6:7e:60:62:5b:da: 14:53:2b:ba:a7:f2:62:b1:b1:05:09:59:04:90:61: 59:d1:22:3b:c5:50:df:14:0c:a0:89:fa:d9:92:31: d1:58:41:43:9c:d6:cf:8b:86:38:a7:98:94:56:b5: 4b:0d:64:df:2d:06:82:bb:57:88:57:c1:f0:21:52: d5:c0:6e:a0:cf:ec:b7:48:20:08:65:1d:d5:ca:68: 55:18:e7:eb:56:2b:6e:c0:84:db:72:f3:f7:fe:07: 2b:a4:fe:c1:eb:93:81:d2:09:e6:55:5a:6b:ea:45: a7:97:04:e7:d3:ea:5b:d3:37:0d:a9:ce:1e:53:15: d8:b0:6e:bd:8a:b8:67:06:e8:cf:69:49:67:6d:02: 08:e4:b5:5a:99:ea:3d:63:3c:3f:10:d5:d4:f3:8e: fe:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:02:C8:C2:0C:F4:C3:1E:61:F1:ED:9A:DA:46:58:C6:30:00:07:62 X509v3 Authority Key Identifier: keyid:79:D4:37:58:4A:BD:B4:82:13:63:0D:CA:A5:F0:0C:9D:2C:3C:C1:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edQ3WEq9tIITYw3KpfAMnSw8wXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3496a4-cc9f-4419-ad81-aaa2380982bc/1/edQ3WEq9tIITYw3KpfAMnSw8wXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8f:08:58:01:da:04:89:a5:17:8f:e8:28:f2:68:47:b6:60: 57:d9:35:04:80:8c:91:a9:ba:90:7a:8b:32:eb:ca:11:70:f9: b4:53:84:24:e2:5e:30:10:22:0c:e1:d9:ec:02:de:f5:39:bd: 34:18:5d:66:a7:66:34:bb:1c:bb:ce:33:3d:83:67:7a:57:d0: ab:c9:24:ba:a2:62:a9:b7:a1:0e:96:c6:a6:a4:d8:5d:0e:53: 0c:b0:d2:f0:0e:46:e2:a4:32:15:1e:e1:2b:60:2a:89:be:36: be:be:28:cb:40:ab:5f:ef:6e:b4:4a:55:73:f2:68:3b:b9:75: fe:b6:74:f5:44:9f:c5:16:7a:63:f9:6f:3d:8a:f4:95:46:1e: 34:40:a7:27:89:8c:7b:0c:16:d7:cf:7f:3c:07:c5:1a:73:41: 9e:00:8c:9f:93:8f:b1:ae:57:67:2f:e4:32:e6:7e:c3:51:bb: 26:16:a2:4e:ae:69:0d:52:bb:67:89:53:a6:50:b8:0a:bd:01: ef:db:9d:b8:2b:65:f4:07:c0:5d:39:a3:a9:6e:59:09:05:56: 4a:3c:63:3e:56:1e:79:ef:fa:8d:ef:1d:bc:3d:8d:08:4d:c0: 27:48:b9:41:9f:20:69:94:52:f5:77:bd:43:87:85:ca:92:e6: 71:1f:7b:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4+6Ml7/j/lXfwmYSYcXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZDQzNzU4NGFiZGI0ODIxMzYzMGRjYWE1ZjAwYzlkMmMz Y2MxNzkwHhcNMjUxMjI2MDkwMTA4WhcNMjUxMjI3MDkwMTA4WjAzMTEwLwYDVQQD EyhhNjAyYzhjMjBjZjRjMzFlNjFmMWVkOWFkYTQ2NThjNjMwMDAwNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpKNg4oR75WwNTXfTYU6kiVOuXS8 xmXcKeQe3HVIictJNS+IGWA4LnOl9vxytMNh2IPKhIDtuoG9wWy6D4QHlEUPk+o2 qMW17gsJhZMtSV5PtcpU1TmryFFgDKdqGhZMHQKmfmBiW9oUUyu6p/JisbEFCVkE kGFZ0SI7xVDfFAygifrZkjHRWEFDnNbPi4Y4p5iUVrVLDWTfLQaCu1eIV8HwIVLV wG6gz+y3SCAIZR3VymhVGOfrVituwITbcvP3/gcrpP7B65OB0gnmVVpr6kWnlwTn 0+pb0zcNqc4eUxXYsG69irhnBujPaUlnbQII5LVameo9Yzw/ENXU847+hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYCyMIM9MMeYfHtmtpGWMYwAAdiMB8GA1UdIwQY MBaAFHnUN1hKvbSCE2MNyqXwDJ0sPMF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNDk2YTQtY2M5Zi00NDE5LWFkODEt YWFhMjM4MDk4MmJjLzEvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNDk2YTQtY2M5Zi00NDE5LWFkODEtYWFhMjM4MDk4MmJj LzEvZWRRM1dFcTl0SUlUWXczS3BmQU1uU3c4d1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYo8IWAHa BImlF4/oKPJoR7ZgV9k1BICMkam6kHqLMuvKEXD5tFOEJOJeMBAiDOHZ7ALe9Tm9 NBhdZqdmNLscu84zPYNnelfQq8kkuqJiqbehDpbGpqTYXQ5TDLDS8A5G4qQyFR7h K2Aqib42vr4oy0CrX+9utEpVc/JoO7l1/rZ09USfxRZ6Y/lvPYr0lUYeNECnJ4mM ewwW189/PAfFGnNBngCMn5OPsa5XZy/kMuZ+w1G7JhaiTq5pDVK7Z4lTplC4Cr0B 79uduCtl9AfAXTmjqW5ZCQVWSjxjPlYeee/6je8dvD2NCE3AJ0i5QZ8gaZRS9Xe9 Q4eFypLmcR97+w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:41 2025 by rpki-client