This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json) Hash identifier: sON6BdNCP08j0GPBFT2th2fzNlBuc7DtHae9RbT+qbU= Subject key identifier: A7:C5:16:C5:C0:E3:34:58:94:BB:BD:BF:BF:E1:5C:1F:69:8F:1D:0D Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Certificate serial: 019B3042C0818C2A72C3C3094AEBB7D48ACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft Manifest number: 155C Signing time: Thu 18 Dec 2025 07:00:39 +0000 Manifest this update: Thu 18 Dec 2025 07:00:39 +0000 Manifest next update: Fri 19 Dec 2025 07:00:39 +0000 Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=) 2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: gR953IfsQ1vPqmcqEEyC55GNuRPQUUtDBpC+k828enU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:c0:81:8c:2a:72:c3:c3:09:4a:eb:b7:d4:8a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Validity Not Before: Dec 18 07:00:39 2025 GMT Not After : Dec 19 07:00:39 2025 GMT Subject: CN=a7c516c5c0e3345894bbbdbfbfe15c1f698f1d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:58:e7:e4:d8:79:5b:68:62:44:4a:f6:bb:a6: 4c:22:5c:3f:b1:e6:05:1c:58:ef:2d:78:49:7c:39: 75:0d:58:e2:36:45:25:4a:91:e3:99:d1:d4:5a:e2: d9:35:1a:07:a5:44:74:46:93:2d:c3:0c:ed:1e:47: 6a:ed:3f:97:83:d1:0b:40:68:95:78:a6:f2:c2:03: 32:8a:90:6f:b8:5b:6b:67:39:78:b4:31:88:ef:cd: 95:ff:24:24:50:ed:d2:6e:e2:19:7b:d6:fb:c6:bb: 61:2d:25:67:0c:26:bf:a5:85:8d:71:00:73:d9:54: 42:5d:d8:a1:ef:f3:eb:80:a6:66:e1:ff:29:b1:2f: 9a:1b:14:4e:cb:96:0c:32:11:fb:9d:8c:45:29:c3: e8:90:2c:ea:de:8d:41:b0:a7:5c:39:83:15:4b:c5: 87:88:bf:28:02:3a:7f:b4:a4:c6:32:2a:9c:f5:6a: 95:1b:de:93:da:91:49:94:c3:b8:d1:ff:b4:a1:7b: dd:aa:40:9c:d2:2f:45:fd:65:34:50:b6:4c:84:b6: dc:cf:c5:a8:eb:3c:0c:59:9f:e5:ba:34:90:df:71: 32:62:09:f3:b9:7c:37:62:ad:13:a9:9a:8e:ec:65: ae:a9:67:f0:47:5a:c9:8d:98:a4:46:62:3b:16:ee: 9a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C5:16:C5:C0:E3:34:58:94:BB:BD:BF:BF:E1:5C:1F:69:8F:1D:0D X509v3 Authority Key Identifier: keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ab:60:3c:bf:48:ce:29:c3:d3:7e:26:b7:15:6c:a2:52:f2: 55:8f:4d:d4:6d:b0:8c:36:7c:4a:1a:3c:3b:02:ea:a4:df:1a: 8a:ac:8d:2c:c9:5e:e1:76:b3:07:ea:16:6e:29:95:d0:e5:a4: 14:22:13:21:93:70:04:f9:30:4f:3b:72:4e:9b:85:be:3f:ad: 1f:01:11:17:45:6d:07:59:22:43:c0:69:f0:56:ed:ce:03:b7: 10:2c:a7:ec:03:07:be:3a:15:d3:88:40:93:c7:13:13:35:24: 18:0b:ed:e5:92:42:c3:20:9d:0c:70:1b:3e:1b:d5:11:74:48: 21:75:76:85:dc:38:44:16:d9:78:7f:ed:f9:d6:80:b1:15:fb: 69:84:00:e8:b0:17:69:49:ca:2a:1d:27:dd:ce:3d:06:4a:3c: 44:82:d4:3e:66:47:5b:39:5f:4a:12:13:c8:04:4d:4b:04:06: a9:0d:c6:9c:f4:a0:0e:05:9d:8d:5a:86:f9:82:10:0d:6d:e9: 4f:40:31:7f:03:79:99:1d:6c:6d:f9:9b:dd:ad:77:5f:d8:af: 30:e4:f3:18:57:b3:c6:7f:d9:00:60:a4:98:eb:87:7c:25:82: 18:66:96:65:2f:ed:e3:83:e8:af:28:bc:71:81:e1:82:25:2b: ac:fe:66:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQsCBjCpyw8MJSuu31IrPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDBlMzA3ZDEyY2UwNTY4YzI5OWUxN2NkNjVhNjZiMjZj ZGIwNGQwHhcNMjUxMjE4MDcwMDM5WhcNMjUxMjE5MDcwMDM5WjAzMTEwLwYDVQQD EyhhN2M1MTZjNWMwZTMzNDU4OTRiYmJkYmZiZmUxNWMxZjY5OGYxZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqljn5Nh5W2hiREr2u6ZMIlw/seYF HFjvLXhJfDl1DVjiNkUlSpHjmdHUWuLZNRoHpUR0RpMtwwztHkdq7T+Xg9ELQGiV eKbywgMyipBvuFtrZzl4tDGI782V/yQkUO3SbuIZe9b7xrthLSVnDCa/pYWNcQBz 2VRCXdih7/PrgKZm4f8psS+aGxROy5YMMhH7nYxFKcPokCzq3o1BsKdcOYMVS8WH iL8oAjp/tKTGMiqc9WqVG96T2pFJlMO40f+0oXvdqkCc0i9F/WU0ULZMhLbcz8Wo 6zwMWZ/lujSQ33EyYgnzuXw3Yq0TqZqO7GWuqWfwR1rJjZikRmI7Fu6agwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfFFsXA4zRYlLu9v7/hXB9pjx0NMB8GA1UdIwQY MBaAFJxA4wfRLOBWjCmeF81lpmsmzbBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGIt OGZiMzc3OWI4NzA0LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGItOGZiMzc3OWI4NzA0 LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqtgPL9I zinD034mtxVsolLyVY9N1G2wjDZ8Sho8OwLqpN8aiqyNLMle4XazB+oWbimV0OWk FCITIZNwBPkwTztyTpuFvj+tHwERF0VtB1kiQ8Bp8FbtzgO3ECyn7AMHvjoV04hA k8cTEzUkGAvt5ZJCwyCdDHAbPhvVEXRIIXV2hdw4RBbZeH/t+daAsRX7aYQA6LAX aUnKKh0n3c49Bko8RILUPmZHWzlfShITyARNSwQGqQ3GnPSgDgWdjVqG+YIQDW3p T0AxfwN5mR1sbfmb3a13X9ivMOTzGFezxn/ZAGCkmOuHfCWCGGaWZS/t44Poryi8 cYHhgiUrrP5mMw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:31:18 2025 by rpki-client