This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft File: TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json) Hash identifier: MPmQ5peGTtdmG3GCTwah0zCUgRHjACdc59h3D5B85zs= Subject key identifier: 79:99:B8:21:64:B2:3A:7E:B7:6E:53:38:0B:3D:50:C4:41:9E:92:94 Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31 Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231 Certificate serial: 019B5A1A5A374553689B9F4BD7FAB93E3195 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 10:00:34 +0000 Manifest this update: Fri 26 Dec 2025 10:00:34 +0000 Manifest next update: Sat 27 Dec 2025 10:00:34 +0000 Files and hashes: 1: 9dHpkAlOL0XgkLxchS4Qy2sMNCs.roa (hash: g9vMbBt1/drUDiVGZvjhkatTyph0Mun8c4A/qeNjgzE=) 2: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: mAmgUiI/j0SH08RzXc5keMxWmxKbGSBAgdSaQw7uSAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:5a:37:45:53:68:9b:9f:4b:d7:fa:b9:3e:31:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231 Validity Not Before: Dec 26 10:00:34 2025 GMT Not After : Dec 27 10:00:34 2025 GMT Subject: CN=7999b82164b23a7eb76e53380b3d50c4419e9294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:64:3a:6c:de:48:8b:63:94:d8:66:67:a7:a7: b9:e3:e3:1a:e3:ca:46:66:83:f6:2a:05:bf:08:63: 46:29:f1:ea:11:d0:c4:12:8d:22:da:c7:a7:ce:4e: c4:16:21:f5:56:3b:d7:29:01:c3:86:03:3b:00:87: 09:87:f4:bb:92:8d:3b:de:3c:dc:ce:f5:f9:96:05: 52:43:dc:b0:56:25:ae:69:28:70:f1:ee:21:d8:d7: 99:38:88:cb:a0:13:b8:10:26:30:01:70:53:fc:c9: 0a:13:77:34:34:68:f0:c1:1d:f3:00:9a:2c:38:a4: 45:a5:2a:e8:c5:4a:37:14:10:92:76:d6:7c:2e:07: ab:43:5b:09:35:9c:b0:3b:6b:97:d9:35:b4:3b:32: 3d:68:e9:b2:81:fc:e3:d4:3b:ff:23:6c:5f:08:bb: 6e:8a:e3:a0:cd:7a:fd:1f:ea:4f:d3:53:87:d6:86: 40:34:70:6c:f1:4f:9f:d4:df:ad:17:c3:a4:8c:e1: 44:90:0c:f9:32:89:bb:61:01:20:ee:73:0a:67:70: 2d:08:93:82:cc:cb:4b:f1:69:06:59:25:91:79:c5: 8e:4c:b2:02:63:ee:4d:aa:f3:85:b6:24:ad:24:1d: cc:f4:db:25:80:5b:bc:4c:77:fd:fc:3b:94:d8:a9: 1b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:99:B8:21:64:B2:3A:7E:B7:6E:53:38:0B:3D:50:C4:41:9E:92:94 X509v3 Authority Key Identifier: keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:14:c1:a4:7e:bd:88:f0:0b:2f:03:26:7e:7e:07:af:be:9c: 53:f2:61:8f:a3:cb:10:d4:40:3d:ed:6a:ef:14:e8:84:01:d1: 4f:d6:b6:83:c9:0e:5a:ce:76:25:b5:16:cb:f2:1a:0b:f7:4f: 48:a0:ac:0e:9c:dd:3f:6f:23:6d:c8:bc:eb:78:9b:16:24:2a: c2:30:e4:ec:2b:7f:39:1e:eb:03:c0:33:0b:d0:87:a9:c0:cf: 53:bc:82:a5:13:5d:37:6b:da:95:0e:c8:d3:88:0f:2e:d3:25: f6:22:39:68:70:e6:ec:3e:21:6c:e2:ec:52:26:85:d3:51:f5: 9d:3f:cc:bb:a6:3a:d0:be:ed:2e:a3:12:0f:a4:bf:41:36:3e: 7b:c1:54:01:83:a8:e7:fb:4c:38:6f:fe:d2:8e:a5:8a:a3:b7: 5c:a0:17:a4:90:43:78:ef:4a:00:c4:f8:ad:4a:fe:42:ec:5d: a0:b2:6e:06:00:26:bc:ce:a5:a0:6a:cd:b6:a6:57:1f:30:80: 9f:2a:43:14:59:22:a5:c3:19:70:5e:9f:3b:58:2d:51:07:ec: f4:73:f9:b7:47:ea:f7:68:c2:17:c5:33:9b:83:f3:d6:e2:8f: b7:44:59:57:7c:c8:91:b1:f1:f8:a8:45:a9:53:3a:7c:cc:27: 8a:6a:ba:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlo3RVNom59L1/q5PjGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGJlNDMzOTRhN2MyYmYxZThmZGZiYjFkNTA2ZmEzN2Fj NzMyMzEwHhcNMjUxMjI2MTAwMDM0WhcNMjUxMjI3MTAwMDM0WjAzMTEwLwYDVQQD Eyg3OTk5YjgyMTY0YjIzYTdlYjc2ZTUzMzgwYjNkNTBjNDQxOWU5Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mQ6bN5Ii2OU2GZnp6e54+Ma48pG ZoP2KgW/CGNGKfHqEdDEEo0i2senzk7EFiH1VjvXKQHDhgM7AIcJh/S7ko073jzc zvX5lgVSQ9ywViWuaShw8e4h2NeZOIjLoBO4ECYwAXBT/MkKE3c0NGjwwR3zAJos OKRFpSroxUo3FBCSdtZ8LgerQ1sJNZywO2uX2TW0OzI9aOmygfzj1Dv/I2xfCLtu iuOgzXr9H+pP01OH1oZANHBs8U+f1N+tF8OkjOFEkAz5Mom7YQEg7nMKZ3AtCJOC zMtL8WkGWSWRecWOTLICY+5NqvOFtiStJB3M9NslgFu8THf9/DuU2KkbVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmZuCFksjp+t25TOAs9UMRBnpKUMB8GA1UdIwQY MBaAFExL5DOUp8K/Ho/fux1Qb6N6xzIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzct NWYzZDA2ZjZhNWQyLzEvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzctNWYzZDA2ZjZhNWQy LzEvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBTBpH69 iPALLwMmfn4Hr76cU/Jhj6PLENRAPe1q7xTohAHRT9a2g8kOWs52JbUWy/IaC/dP SKCsDpzdP28jbci863ibFiQqwjDk7Ct/OR7rA8AzC9CHqcDPU7yCpRNdN2valQ7I 04gPLtMl9iI5aHDm7D4hbOLsUiaF01H1nT/Mu6Y60L7tLqMSD6S/QTY+e8FUAYOo 5/tMOG/+0o6liqO3XKAXpJBDeO9KAMT4rUr+QuxdoLJuBgAmvM6loGrNtqZXHzCA nypDFFkipcMZcF6fO1gtUQfs9HP5t0fq92jCF8Uzm4Pz1uKPt0RZV3zIkbHx+KhF qVM6fMwnimq6tQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:36 2025 by rpki-client