This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json) Hash identifier: ZN5AEZGoNQa+k/lW2FL0qqQbglhaIAAXZ8FiUtc8G4Q= Subject key identifier: 5B:42:03:86:A1:46:38:A1:C5:B4:1B:74:CC:BA:CE:A3:D2:E5:44:08 Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece Certificate serial: 019B42B7052E39D94708A049264A4D31C7DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft Manifest number: 1786 Signing time: Sun 21 Dec 2025 21:00:49 +0000 Manifest this update: Sun 21 Dec 2025 21:00:49 +0000 Manifest next update: Mon 22 Dec 2025 21:00:49 +0000 Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: oNlev/qsM8eUOh84JBdtxC5PTWYOkAYrU7tq7oLTqMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:05:2e:39:d9:47:08:a0:49:26:4a:4d:31:c7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece Validity Not Before: Dec 21 21:00:49 2025 GMT Not After : Dec 22 21:00:49 2025 GMT Subject: CN=5b420386a14638a1c5b41b74ccbacea3d2e54408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a3:d8:a0:39:b4:5c:a2:65:ab:00:14:b2:5b: f1:aa:07:f6:8c:2f:3c:23:8d:47:84:8e:60:4c:2a: c8:18:88:bc:c3:7b:6a:5b:ec:23:d3:72:28:ad:c5: 2e:b9:20:db:7c:e0:26:ab:e7:c4:c7:4e:fb:b9:35: a5:3f:ce:b0:c9:01:cc:d2:a9:80:75:d7:6e:1d:eb: 7c:23:53:b7:1d:fb:a6:fb:9e:85:64:6a:72:ad:d9: 69:50:8e:69:9d:30:45:ce:2b:56:99:7b:3f:ac:0b: 56:62:fa:6d:87:62:a8:26:68:12:ff:66:f4:c3:1a: 12:fa:79:18:01:b7:8b:56:4c:36:77:ad:c6:65:1b: 51:40:c8:b6:cd:1e:34:53:42:be:87:b8:9d:f3:5b: 10:bc:e6:88:1a:dc:c6:67:92:36:30:b5:a2:44:21: b9:fb:e2:d4:fb:17:de:cb:1c:69:8c:28:00:2a:64: 96:3d:5d:60:07:61:2b:37:77:f5:82:a6:c8:44:ab: 85:3c:a7:de:5b:b1:1a:5d:5a:ee:dd:d2:fe:bf:ce: 8c:dc:cb:bf:2d:8a:89:e5:34:29:70:21:89:ce:44: 9a:58:33:5f:fe:53:30:cd:99:8a:90:dd:d2:92:53: 1b:87:28:03:3f:63:ec:7d:f5:69:d7:d3:d0:93:89: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:42:03:86:A1:46:38:A1:C5:B4:1B:74:CC:BA:CE:A3:D2:E5:44:08 X509v3 Authority Key Identifier: keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:16:13:4a:6e:51:6b:f8:40:4f:29:c5:64:a6:10:5c:a0:c0: 9e:48:d7:4d:90:1d:4c:9f:99:fe:2d:97:58:45:08:b3:0d:3b: b7:c4:3c:61:89:0b:6a:df:55:20:38:6d:02:6e:56:eb:2d:23: 95:c2:9f:a4:6c:02:aa:f0:f1:de:f0:e3:68:72:c7:11:cd:cf: a2:b3:87:98:03:9b:1f:d6:0d:01:c2:1a:5a:13:65:73:ac:9f: b9:4b:8c:72:19:e2:00:e7:57:06:b0:5c:0b:13:e3:1b:40:c2: 15:24:74:40:79:2e:15:fb:4d:7f:e7:6d:a9:be:db:7d:3a:f9: d1:fb:a5:80:ea:bd:73:ec:28:1d:0e:34:ed:e2:22:85:64:01: a6:ae:f5:e9:e8:b8:5a:d5:da:3b:8f:49:b0:fa:55:71:ed:3a: 22:a2:d6:2c:2b:6b:ed:5c:9d:75:f6:78:87:c8:b8:fb:43:d8: c3:cc:a4:6d:b3:b1:30:e4:5f:69:a3:04:00:51:a2:b2:00:cf: d1:3f:ce:4b:d8:2f:61:45:80:60:ba:94:ba:e5:f7:d6:9c:d2: c9:64:d4:cf:ce:dc:38:61:ed:39:42:76:04:56:fb:0f:54:79: dc:c2:a7:80:2c:1f:aa:dc:50:71:84:f4:67:41:3d:3e:ba:e0: c1:5f:46:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtwUuOdlHCKBJJkpNMcffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNDBkMWY5Yzk3YmU0NjZlMGJkZWFjODQ5Mjg5ZTJhM2Nj YTllY2UwHhcNMjUxMjIxMjEwMDQ5WhcNMjUxMjIyMjEwMDQ5WjAzMTEwLwYDVQQD Eyg1YjQyMDM4NmExNDYzOGExYzViNDFiNzRjY2JhY2VhM2QyZTU0NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aPYoDm0XKJlqwAUslvxqgf2jC88 I41HhI5gTCrIGIi8w3tqW+wj03IorcUuuSDbfOAmq+fEx077uTWlP86wyQHM0qmA ddduHet8I1O3Hfum+56FZGpyrdlpUI5pnTBFzitWmXs/rAtWYvpth2KoJmgS/2b0 wxoS+nkYAbeLVkw2d63GZRtRQMi2zR40U0K+h7id81sQvOaIGtzGZ5I2MLWiRCG5 ++LU+xfeyxxpjCgAKmSWPV1gB2ErN3f1gqbIRKuFPKfeW7EaXVru3dL+v86M3Mu/ LYqJ5TQpcCGJzkSaWDNf/lMwzZmKkN3SklMbhygDP2PsffVp19PQk4nTowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtCA4ahRjihxbQbdMy6zqPS5UQIMB8GA1UdIwQY MBaAFPBA0fnJe+Rm4L3qyEkonio8yp7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYt ODk1M2VjOGRkZDRhLzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8zYzJmM2ItNTU5YS00MDViLTkyMTYtODk1M2VjOGRkZDRh LzEvOEVEUi1jbDc1R2JndmVySVNTaWVLanpLbnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBYTSm5R a/hATynFZKYQXKDAnkjXTZAdTJ+Z/i2XWEUIsw07t8Q8YYkLat9VIDhtAm5W6y0j lcKfpGwCqvDx3vDjaHLHEc3PorOHmAObH9YNAcIaWhNlc6yfuUuMchniAOdXBrBc CxPjG0DCFSR0QHkuFftNf+dtqb7bfTr50fulgOq9c+woHQ407eIihWQBpq716ei4 WtXaO49JsPpVce06IqLWLCtr7VyddfZ4h8i4+0PYw8ykbbOxMORfaaMEAFGisgDP 0T/OS9gvYUWAYLqUuuX31pzSyWTUz87cOGHtOUJ2BFb7D1R53MKngCwfqtxQcYT0 Z0E9PrrgwV9GSQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:24:11 2025 by rpki-client