This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft File: 7edmLVl_r8lt12VXdQjD7QKdZWc.mft (raw, json) Hash identifier: Dm+daJ7hk7r1HSsyifR9x87foWD8JabYX+jkHzy8Dds= Subject key identifier: 3D:E7:67:FB:2A:26:50:B6:A4:F1:59:16:E7:EA:FC:AE:A1:FF:7C:45 Authority key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67 Certificate issuer: /CN=ede7662d597fafc96dd765577508c3ed029d6567 Certificate serial: 019B59E3DD034D45A712564E6E3125E23717 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 09:01:03 +0000 Manifest this update: Fri 26 Dec 2025 09:01:03 +0000 Manifest next update: Sat 27 Dec 2025 09:01:03 +0000 Files and hashes: 1: 7edmLVl_r8lt12VXdQjD7QKdZWc.crl (hash: rCjt2RzKKBOTz7C6YgVAckea0jZERum1ZZyJMfOCov0=) 2: FQLYEgJnBcxXVB0fnnabFYqwVJ4.roa (hash: V3224FLOv1W7X3uBW6dltktQIsCoHudHe1QUTyJjYBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:dd:03:4d:45:a7:12:56:4e:6e:31:25:e2:37:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede7662d597fafc96dd765577508c3ed029d6567 Validity Not Before: Dec 26 09:01:03 2025 GMT Not After : Dec 27 09:01:03 2025 GMT Subject: CN=3de767fb2a2650b6a4f15916e7eafcaea1ff7c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2f:37:25:21:0b:6f:d5:fe:3c:34:20:1a:f9: a8:93:fb:3f:ad:89:8d:01:6b:6d:4c:46:23:45:36: dc:96:44:6f:59:1a:73:e1:11:cb:6c:43:0d:45:cd: 79:77:cf:05:6d:7a:e8:ee:27:94:b0:41:11:3d:90: 4c:85:7b:1b:05:d7:57:ee:cc:dd:46:44:b8:8a:49: 32:59:32:e8:90:79:41:38:f7:10:e6:f5:c4:0c:6d: 47:78:0a:34:e8:f7:9f:f7:7f:b2:55:5a:47:71:c3: be:13:bf:02:7e:23:8f:84:fd:a5:1a:29:0f:b5:d5: 06:c1:2b:a5:43:d0:ae:15:4d:56:b6:06:08:1e:e8: 38:6d:85:66:67:33:9e:fd:3b:79:59:44:74:6a:f0: 4d:0c:06:8f:8f:ec:ce:87:a5:1b:eb:12:c2:71:0a: 99:8c:d9:17:66:6d:a3:91:a8:f9:54:97:f5:f2:b3: 68:9b:18:da:80:5d:3f:22:35:80:0e:6e:d9:bf:6c: d8:9f:d9:8b:f7:57:e3:c2:bb:43:23:43:f3:9d:8a: 9f:17:89:eb:2c:43:4c:8d:40:94:01:e5:12:8e:2c: 4c:ec:85:6c:00:d1:4e:3b:de:ad:ad:20:79:63:32: ef:00:3a:1c:98:f4:c9:fe:e8:7e:e2:56:4a:33:d4: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E7:67:FB:2A:26:50:B6:A4:F1:59:16:E7:EA:FC:AE:A1:FF:7C:45 X509v3 Authority Key Identifier: keyid:ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9e:20:f5:51:62:a1:7a:f0:ae:ac:23:57:57:a7:c5:ab:c4: e0:99:21:9a:7e:7d:50:82:5b:7d:c5:cf:e1:50:8f:1d:6a:3d: f4:ee:06:3a:45:b2:e1:72:38:62:bd:2b:a3:58:19:da:09:70: 58:8e:92:22:1d:7b:a8:4c:10:75:6f:34:95:27:e0:bc:2b:05: 50:20:d8:19:55:9b:8e:a5:60:f4:a2:91:5d:a5:02:0e:2d:bb: 8c:6c:25:7a:68:c3:e1:91:c7:80:09:cd:d4:8d:07:3b:cc:93: 3d:2e:a0:49:3b:bd:5f:1e:f8:0e:12:e3:51:ea:6f:f1:82:b8: 6d:ec:cb:42:64:87:6a:52:78:db:ae:07:03:e4:b0:ff:07:5b: c5:dc:f3:8b:77:65:98:5b:1a:23:1c:a0:a8:34:7c:d9:58:51: 7d:bf:7d:8c:50:7f:07:26:d3:0d:5e:96:5e:5d:e6:85:26:99: 6e:5a:48:36:1d:82:17:24:e8:d6:60:ac:29:7f:76:6d:57:ee: 3b:0a:04:11:b3:ee:e4:2c:bf:29:1a:d2:aa:00:53:4c:53:3e: 37:ba:28:c5:0a:33:73:e9:b9:b7:37:2f:8b:12:06:c2:14:71: 59:49:e3:93:1d:f4:21:17:94:c9:4b:af:28:4b:38:c2:ad:47: ca:36:91:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ490DTUWnElZObjEl4jcXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZTc2NjJkNTk3ZmFmYzk2ZGQ3NjU1Nzc1MDhjM2VkMDI5 ZDY1NjcwHhcNMjUxMjI2MDkwMTAzWhcNMjUxMjI3MDkwMTAzWjAzMTEwLwYDVQQD EygzZGU3NjdmYjJhMjY1MGI2YTRmMTU5MTZlN2VhZmNhZWExZmY3YzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S83JSELb9X+PDQgGvmok/s/rYmN AWttTEYjRTbclkRvWRpz4RHLbEMNRc15d88FbXro7ieUsEERPZBMhXsbBddX7szd RkS4ikkyWTLokHlBOPcQ5vXEDG1HeAo06Pef93+yVVpHccO+E78CfiOPhP2lGikP tdUGwSulQ9CuFU1WtgYIHug4bYVmZzOe/Tt5WUR0avBNDAaPj+zOh6Ub6xLCcQqZ jNkXZm2jkaj5VJf18rNomxjagF0/IjWADm7Zv2zYn9mL91fjwrtDI0PznYqfF4nr LENMjUCUAeUSjixM7IVsANFOO96trSB5YzLvADocmPTJ/uh+4lZKM9RX7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3nZ/sqJlC2pPFZFufq/K6h/3xFMB8GA1UdIwQY MBaAFO3nZi1Zf6/JbddlV3UIw+0CnWVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTIt ZDM1N2Y1YWVlYjg1LzEvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yZGNlMDQtNzQ3YS00YTRkLTk2YTItZDM1N2Y1YWVlYjg1 LzEvN2VkbUxWbF9yOGx0MTJWWGRRakQ3UUtkWldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkp4g9VFi oXrwrqwjV1enxavE4Jkhmn59UIJbfcXP4VCPHWo99O4GOkWy4XI4Yr0ro1gZ2glw WI6SIh17qEwQdW80lSfgvCsFUCDYGVWbjqVg9KKRXaUCDi27jGwlemjD4ZHHgAnN 1I0HO8yTPS6gSTu9Xx74DhLjUepv8YK4bezLQmSHalJ4264HA+Sw/wdbxdzzi3dl mFsaIxygqDR82VhRfb99jFB/BybTDV6WXl3mhSaZblpINh2CFyTo1mCsKX92bVfu OwoEEbPu5Cy/KRrSqgBTTFM+N7ooxQozc+m5tzcvixIGwhRxWUnjkx30IReUyUuv KEs4wq1HyjaRCg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:25 2025 by rpki-client