This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft File: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft (raw, json) Hash identifier: uMT0ih8g2fEbAgIK7qrHeghw8YE4ZXHdwBanQG7ila0= Subject key identifier: 55:5C:9E:E1:06:17:85:D8:7A:90:03:8C:D7:50:DE:7B:0F:81:49:50 Authority key identifier: D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7 Certificate issuer: /CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7 Certificate serial: 019B2D0C2526AD87BFF2ABE9C05730343E94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft Manifest number: 0C4A Signing time: Wed 17 Dec 2025 16:02:09 +0000 Manifest this update: Wed 17 Dec 2025 16:02:09 +0000 Manifest next update: Thu 18 Dec 2025 16:02:09 +0000 Files and hashes: 1: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl (hash: NzQo9Vp4NmkVmWSGLIjZX/v6r9E18nQdTm4TUf/cRiM=) 2: yhLkTBwFXW9MjzC359UU8CJ6Bcc.roa (hash: YsI+CGd1aoGxeJp5us7qb7YQNNKxFAd0kxBSQecushk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:25:26:ad:87:bf:f2:ab:e9:c0:57:30:34:3e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7 Validity Not Before: Dec 17 16:02:09 2025 GMT Not After : Dec 18 16:02:09 2025 GMT Subject: CN=555c9ee1061785d87a90038cd750de7b0f814950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:66:00:15:e7:73:af:5b:a4:b8:1e:f9:f7:ef: 5a:da:8f:22:e9:6c:2d:79:0a:7f:0f:0e:38:93:1d: 3f:11:b7:6b:1e:37:c0:50:fe:20:52:c9:1f:e6:d1: 2c:4b:08:fd:a9:c6:f5:a4:28:b6:64:6f:a5:65:da: 12:c1:7a:16:aa:b2:6d:fb:87:95:0f:20:22:e2:6d: fd:97:c2:f6:49:8b:13:55:fa:72:99:47:cc:28:98: 89:a4:f6:07:2c:c5:cc:78:c1:80:36:d3:ce:0f:ff: 31:17:9b:cf:ef:44:de:f9:f0:36:fc:7f:43:c5:1f: 4b:e2:24:2c:12:be:17:f3:84:3a:88:a8:53:d6:d4: 99:19:c4:65:2b:13:fc:f0:9e:bc:8a:e4:91:af:d7: 60:98:38:96:25:73:c1:81:57:6d:17:a2:45:f4:58: 61:f0:f6:ad:83:d2:1c:77:bb:1d:3b:33:b3:80:34: b9:0a:34:aa:14:63:ce:20:8c:1c:13:d9:8a:b6:5a: c8:e1:07:db:1b:b1:79:3a:14:1b:78:81:82:89:ac: 82:e3:34:69:97:25:08:11:54:d1:01:55:df:de:7a: f2:ff:5e:49:75:1e:fc:e4:22:6e:22:5e:91:e6:42: 00:52:79:19:89:f7:29:2f:d7:87:e2:4d:63:c9:21: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5C:9E:E1:06:17:85:D8:7A:90:03:8C:D7:50:DE:7B:0F:81:49:50 X509v3 Authority Key Identifier: keyid:D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9c:12:1d:f1:e4:ca:6b:81:a7:ce:e9:71:f4:04:9f:d1:fd: ef:81:ad:3c:90:ad:c0:50:23:ec:a2:cc:6b:20:1a:74:42:26: 80:8f:1d:83:12:e0:2d:4f:1c:e1:39:63:92:de:a3:85:9d:41: b0:12:b0:be:28:48:c6:85:00:03:e5:75:4e:98:53:c4:bb:41: 9e:59:a9:ee:cf:37:59:fb:94:6f:89:07:b0:ce:6c:17:e4:9d: ee:8d:d1:07:bb:fc:a5:40:d7:b9:1f:1a:58:44:f0:97:8b:74: ac:88:27:f8:0e:dd:38:e9:c6:0c:9c:d7:05:52:c9:9a:16:09: 2a:c7:9a:e7:06:9f:cf:e6:b5:5d:1c:13:22:17:26:89:48:dc: 62:c6:5c:22:77:ed:a9:3d:fa:a3:67:7e:da:ed:b2:5e:c4:54: 5f:fa:d1:16:34:ad:a7:fe:a3:49:8c:2b:8f:40:b7:5c:30:81: 06:70:e1:f3:be:e4:b2:2c:3c:79:45:35:74:cc:3c:d2:13:82: d3:36:f9:60:a1:c7:19:ce:ab:a1:4e:66:aa:27:e7:64:f0:f9: 1b:62:5b:f5:fb:78:22:ee:5a:35:fb:88:da:75:d4:b8:06:c8: 23:ae:75:bc:fa:7b:f2:8e:9d:05:8e:56:36:9b:c6:2d:0e:57: c0:5a:32:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDCUmrYe/8qvpwFcwND6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NGJjMGU4M2U4MWY1N2ZiNDg5NDA0MWRjYTc2Yzc3ZDMz ZjAyZTcwHhcNMjUxMjE3MTYwMjA5WhcNMjUxMjE4MTYwMjA5WjAzMTEwLwYDVQQD Eyg1NTVjOWVlMTA2MTc4NWQ4N2E5MDAzOGNkNzUwZGU3YjBmODE0OTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimYAFedzr1ukuB759+9a2o8i6Wwt eQp/Dw44kx0/EbdrHjfAUP4gUskf5tEsSwj9qcb1pCi2ZG+lZdoSwXoWqrJt+4eV DyAi4m39l8L2SYsTVfpymUfMKJiJpPYHLMXMeMGANtPOD/8xF5vP70Te+fA2/H9D xR9L4iQsEr4X84Q6iKhT1tSZGcRlKxP88J68iuSRr9dgmDiWJXPBgVdtF6JF9Fhh 8Patg9Icd7sdOzOzgDS5CjSqFGPOIIwcE9mKtlrI4QfbG7F5OhQbeIGCiayC4zRp lyUIEVTRAVXf3nry/15JdR785CJuIl6R5kIAUnkZifcpL9eH4k1jySGWoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVcnuEGF4XYepADjNdQ3nsPgUlQMB8GA1UdIwQY MBaAFNRLwOg+gfV/tIlAQdynbHfTPwLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hMTRlMWUtY2VkNC00MmU5LTgzMzgt ZjJhZjgwMDFhYzc4LzEvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hMTRlMWUtY2VkNC00MmU5LTgzMzgtZjJhZjgwMDFhYzc4 LzEvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZwSHfHk ymuBp87pcfQEn9H974GtPJCtwFAj7KLMayAadEImgI8dgxLgLU8c4Tljkt6jhZ1B sBKwvihIxoUAA+V1TphTxLtBnlmp7s83WfuUb4kHsM5sF+Sd7o3RB7v8pUDXuR8a WETwl4t0rIgn+A7dOOnGDJzXBVLJmhYJKsea5wafz+a1XRwTIhcmiUjcYsZcInft qT36o2d+2u2yXsRUX/rRFjStp/6jSYwrj0C3XDCBBnDh877ksiw8eUU1dMw80hOC 0zb5YKHHGc6roU5mqifnZPD5G2Jb9ft4Iu5aNfuI2nXUuAbII651vPp78o6dBY5W NpvGLQ5XwFoyMg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:12:49 2025 by rpki-client