This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft File: EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft (raw, json) Hash identifier: nqXqs+PEWVb17gzxruUfpt8q7RQ5fAMdv9jVGUMDd/M= Subject key identifier: FD:5D:83:70:D1:1E:5F:85:53:43:3F:01:B2:D0:2E:C0:E3:18:32:73 Authority key identifier: 10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93 Certificate issuer: /CN=1038d7a2954a32d2afd16b88b363b390681cd593 Certificate serial: 019B32D7AF1E4E18D28DE1750D712280910B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft Manifest number: 1056 Signing time: Thu 18 Dec 2025 19:02:34 +0000 Manifest this update: Thu 18 Dec 2025 19:02:34 +0000 Manifest next update: Fri 19 Dec 2025 19:02:34 +0000 Files and hashes: 1: EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl (hash: bolOC3WM799hHJRRJM43/v4z6dKMgR+LamuNxJeeduI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:af:1e:4e:18:d2:8d:e1:75:0d:71:22:80:91:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1038d7a2954a32d2afd16b88b363b390681cd593 Validity Not Before: Dec 18 19:02:34 2025 GMT Not After : Dec 19 19:02:34 2025 GMT Subject: CN=fd5d8370d11e5f8553433f01b2d02ec0e3183273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:53:7a:16:70:8e:bc:b2:a8:c4:e1:1a:e7: 5c:04:4a:88:06:cc:14:f6:08:20:8d:61:ba:ab:5a: e2:6d:af:0a:58:c9:c0:3b:e7:4a:5d:f9:3c:b6:61: 44:79:85:2d:17:bd:8b:00:92:a0:48:d6:41:8c:3f: f0:1c:18:a2:6d:43:c3:b6:af:a4:4b:fc:56:56:ec: 7b:e4:f5:21:05:80:2b:f6:be:d6:6d:2f:e2:46:98: 5d:a7:6e:80:58:73:f3:d0:c6:ac:67:97:97:0b:15: d0:9d:dd:e1:71:0c:02:af:64:7b:ca:36:3a:8c:f1: 02:6a:f2:57:46:32:83:48:94:66:e8:fb:c3:45:4e: d5:dd:96:f0:be:3f:76:ad:b3:59:ce:9e:03:7c:cb: f6:a3:3c:1e:5a:d4:03:8e:ac:70:9d:03:7b:7e:5b: b9:6c:45:cf:b9:11:37:f1:e4:b8:5d:e8:89:05:54: 56:a4:a5:4e:ca:0f:90:d8:61:3b:04:d9:b4:28:d2: fb:bc:fd:a4:83:8b:80:50:c7:a0:19:d9:e0:35:a4: 64:cc:4a:2c:be:84:20:31:47:30:05:ae:2d:49:cd: a6:92:7c:d5:de:5d:c0:07:31:54:48:76:81:1c:00: 4b:f6:74:b7:db:c1:43:4c:a6:da:f1:20:7c:3d:36: eb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5D:83:70:D1:1E:5F:85:53:43:3F:01:B2:D0:2E:C0:E3:18:32:73 X509v3 Authority Key Identifier: keyid:10:38:D7:A2:95:4A:32:D2:AF:D1:6B:88:B3:63:B3:90:68:1C:D5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDjXopVKMtKv0WuIs2OzkGgc1ZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/627557-78a8-4b4e-a3b8-9a818ddd1558/1/EDjXopVKMtKv0WuIs2OzkGgc1ZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:07:db:ae:93:c4:9c:a8:e6:48:9c:a8:d4:09:81:47:28:02: 68:27:23:94:c5:f7:db:1b:c7:8f:c5:99:a6:07:71:0c:af:f4: 93:fb:6b:90:03:6a:cc:7f:f8:03:ed:10:89:ea:22:e2:4a:a5: a4:fa:d1:d8:78:89:28:5d:fd:1e:94:64:7a:db:1b:8c:20:c4: 0c:1c:81:3c:0a:0e:80:0e:26:8e:0f:6c:03:ea:f9:9e:de:f4: 25:a5:af:79:45:6e:46:30:dc:d1:84:dc:b5:76:f5:f5:db:d9: 9d:b1:57:19:7c:97:e3:18:f1:28:80:d4:1c:c0:74:21:05:66: 64:b6:cd:00:87:8d:65:da:95:cb:05:37:d9:3e:6b:69:54:a1: ee:f5:1a:97:0b:ac:b8:75:b9:6a:f7:e6:70:c1:e4:38:e6:6d: 6a:8f:c5:ff:f6:82:ed:08:1e:08:ff:8b:77:e1:70:12:1c:26: fd:eb:4d:af:14:84:32:73:bc:a1:c7:49:88:87:3b:6b:94:d3: 97:65:f1:37:7e:6e:4e:8e:9e:66:7a:f3:50:41:03:72:dd:30: 85:f7:33:ee:a1:b5:3a:0e:e5:f5:f8:c5:5b:8b:0c:5f:36:45: 39:37:7b:56:32:38:e7:9b:44:83:45:b9:ba:db:c3:fd:e2:2f: 60:e4:4e:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy168eThjSjeF1DXEigJELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMzhkN2EyOTU0YTMyZDJhZmQxNmI4OGIzNjNiMzkwNjgx Y2Q1OTMwHhcNMjUxMjE4MTkwMjM0WhcNMjUxMjE5MTkwMjM0WjAzMTEwLwYDVQQD EyhmZDVkODM3MGQxMWU1Zjg1NTM0MzNmMDFiMmQwMmVjMGUzMTgzMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGdTehZwjryyqMThGudcBEqIBswU 9gggjWG6q1riba8KWMnAO+dKXfk8tmFEeYUtF72LAJKgSNZBjD/wHBiibUPDtq+k S/xWVux75PUhBYAr9r7WbS/iRphdp26AWHPz0MasZ5eXCxXQnd3hcQwCr2R7yjY6 jPECavJXRjKDSJRm6PvDRU7V3Zbwvj92rbNZzp4DfMv2ozweWtQDjqxwnQN7flu5 bEXPuRE38eS4XeiJBVRWpKVOyg+Q2GE7BNm0KNL7vP2kg4uAUMegGdngNaRkzEos voQgMUcwBa4tSc2mknzV3l3ABzFUSHaBHABL9nS328FDTKba8SB8PTbrRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1dg3DRHl+FU0M/AbLQLsDjGDJzMB8GA1UdIwQY MBaAFBA416KVSjLSr9FriLNjs5BoHNWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82Mjc1NTctNzhhOC00YjRlLWEzYjgt OWE4MThkZGQxNTU4LzEvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82Mjc1NTctNzhhOC00YjRlLWEzYjgtOWE4MThkZGQxNTU4 LzEvRURqWG9wVktNdEt2MFd1SXMyT3prR2djMVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAfbrpPE nKjmSJyo1AmBRygCaCcjlMX32xvHj8WZpgdxDK/0k/trkANqzH/4A+0Qieoi4kql pPrR2HiJKF39HpRketsbjCDEDByBPAoOgA4mjg9sA+r5nt70JaWveUVuRjDc0YTc tXb19dvZnbFXGXyX4xjxKIDUHMB0IQVmZLbNAIeNZdqVywU32T5raVSh7vUalwus uHW5avfmcMHkOOZtao/F//aC7QgeCP+Ld+FwEhwm/etNrxSEMnO8ocdJiIc7a5TT l2XxN35uTo6eZnrzUEEDct0whfcz7qG1Og7l9fjFW4sMXzZFOTd7VjI455tEg0W5 utvD/eIvYOROow== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:34 2025 by rpki-client