This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json) Hash identifier: 6upJ6X8f1U9H0U8Y/4OfrFgoXJyjXFANdwcMuO7Vo8U= Subject key identifier: B4:44:85:AD:33:5B:0E:AA:5D:9E:DA:CB:2E:D4:3D:D5:88:BA:0B:85 Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Certificate serial: 019B05C6845981E8074D36B09319D8A78069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft Manifest number: 1546 Signing time: Wed 10 Dec 2025 01:00:54 +0000 Manifest this update: Wed 10 Dec 2025 01:00:54 +0000 Manifest next update: Thu 11 Dec 2025 01:00:54 +0000 Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=) 2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: 7y9aoznHF/Nb0LUS0W2iRHLwkJw/qsRiKdXGTVnLtew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 21:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:84:59:81:e8:07:4d:36:b0:93:19:d8:a7:80:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Validity Not Before: Dec 10 01:00:54 2025 GMT Not After : Dec 11 01:00:54 2025 GMT Subject: CN=b44485ad335b0eaa5d9edacb2ed43dd588ba0b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:a2:92:7b:75:d6:df:a2:60:d4:4c:3e:06: bd:11:70:5b:e5:ae:33:8a:e9:71:33:4e:f9:0d:eb: 9a:62:8d:21:e7:3b:fc:01:0b:bd:be:b8:6c:74:93: 0a:f2:22:f6:b7:08:6b:97:45:95:de:f6:94:1f:61: 99:ea:dd:8a:6a:b9:87:3a:12:28:d0:66:ad:7c:e3: ce:c9:24:a3:f8:e3:56:7e:ec:67:c2:16:ed:a2:cd: cd:ad:6c:11:ea:91:27:ea:b9:76:73:03:e3:4d:2f: 0a:9b:b0:80:0b:e7:60:9b:bf:d7:86:c6:57:e8:f3: 67:a9:57:98:4b:68:2b:07:c2:f8:b2:35:32:44:52: f2:58:37:da:32:39:2f:ed:10:b1:96:76:7d:ad:e5: 63:60:14:48:e8:a5:44:56:11:cf:24:12:fd:5f:b9: 96:0f:5b:35:9e:71:47:42:da:30:db:21:8e:f8:11: 8e:bd:c5:64:4f:a7:d7:a0:90:c2:28:bd:19:24:3a: bf:22:66:10:28:37:90:76:f2:b8:23:92:31:c8:8b: da:3f:ef:32:04:43:fe:ac:11:fa:8f:a1:27:dd:8f: f5:3d:41:ff:4b:1d:44:ba:be:0f:36:65:ee:c6:b2: 1e:0d:8b:2b:75:22:46:dd:52:8a:d0:01:89:c2:ae: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:44:85:AD:33:5B:0E:AA:5D:9E:DA:CB:2E:D4:3D:D5:88:BA:0B:85 X509v3 Authority Key Identifier: keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a4:80:0d:a5:b5:79:fa:40:d7:76:81:3a:8f:90:84:1d:b9: 17:0f:ba:bd:cc:64:88:44:99:b3:9b:1f:7d:90:1f:8a:b4:c3: fd:b4:06:f4:7d:20:f7:5b:93:d6:33:1b:fa:ac:1d:0a:a5:bc: ac:1f:7c:19:79:5b:bf:fa:55:97:cc:7e:9a:f7:b5:16:2a:60: a8:c8:5a:4f:5d:27:0a:61:54:a1:16:b8:02:3f:09:11:fc:e0: 28:65:9c:55:3e:78:c1:cc:50:3d:6a:81:c4:01:a6:61:f3:5e: d3:ed:e6:d6:f3:a4:d4:a4:18:8e:8e:ac:39:0e:b1:12:bf:21: 04:1e:57:99:20:fb:48:d1:1b:37:06:bd:7f:42:80:d2:87:99: d6:b6:d3:d9:b7:b8:84:a1:e5:6a:f1:2b:06:f4:d7:47:ea:b9: 61:16:06:e8:a8:28:01:e0:6e:82:38:03:cb:d1:de:a5:2b:6d: 6a:ce:be:02:eb:46:fe:4c:ed:cc:40:bc:95:db:70:d8:39:87: 41:91:3f:fd:0b:91:b8:5c:67:c7:46:ce:14:6d:e3:41:f5:2d: 84:98:52:06:5e:0f:a0:62:53:ed:9f:c9:5e:c5:a8:5d:a0:fe: ba:4c:48:89:ad:74:17:97:2f:d1:a4:8c:70:2d:66:fd:25:e6: fe:6b:4f:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxoRZgegHTTawkxnYp4BpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDBlMzA3ZDEyY2UwNTY4YzI5OWUxN2NkNjVhNjZiMjZj ZGIwNGQwHhcNMjUxMjEwMDEwMDU0WhcNMjUxMjExMDEwMDU0WjAzMTEwLwYDVQQD EyhiNDQ0ODVhZDMzNWIwZWFhNWQ5ZWRhY2IyZWQ0M2RkNTg4YmEwYjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBmiknt11t+iYNRMPga9EXBb5a4z iulxM075DeuaYo0h5zv8AQu9vrhsdJMK8iL2twhrl0WV3vaUH2GZ6t2KarmHOhIo 0GatfOPOySSj+ONWfuxnwhbtos3NrWwR6pEn6rl2cwPjTS8Km7CAC+dgm7/XhsZX 6PNnqVeYS2grB8L4sjUyRFLyWDfaMjkv7RCxlnZ9reVjYBRI6KVEVhHPJBL9X7mW D1s1nnFHQtow2yGO+BGOvcVkT6fXoJDCKL0ZJDq/ImYQKDeQdvK4I5IxyIvaP+8y BEP+rBH6j6En3Y/1PUH/Sx1Eur4PNmXuxrIeDYsrdSJG3VKK0AGJwq5v2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLREha0zWw6qXZ7ayy7UPdWIuguFMB8GA1UdIwQY MBaAFJxA4wfRLOBWjCmeF81lpmsmzbBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGIt OGZiMzc3OWI4NzA0LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGItOGZiMzc3OWI4NzA0 LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaSADaW1 efpA13aBOo+QhB25Fw+6vcxkiESZs5sffZAfirTD/bQG9H0g91uT1jMb+qwdCqW8 rB98GXlbv/pVl8x+mve1FipgqMhaT10nCmFUoRa4Aj8JEfzgKGWcVT54wcxQPWqB xAGmYfNe0+3m1vOk1KQYjo6sOQ6xEr8hBB5XmSD7SNEbNwa9f0KA0oeZ1rbT2be4 hKHlavErBvTXR+q5YRYG6KgoAeBugjgDy9HepSttas6+AutG/kztzEC8ldtw2DmH QZE//QuRuFxnx0bOFG3jQfUthJhSBl4PoGJT7Z/JXsWoXaD+ukxIia10F5cv0aSM cC1m/SXm/mtPeA== -----END CERTIFICATE-----Generated at Wed Dec 10 02:27:47 2025 by rpki-client