This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json) Hash identifier: 9F6fkqIa1ewB6n8JN0ygODNPSmAXVTm7CM3WrhS1+ok= Subject key identifier: 48:8E:65:F9:56:43:C8:B8:26:CF:F8:DB:35:E5:E9:7A:36:4E:26:94 Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0 Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0 Certificate serial: 019B3569DA4BA2A1BB4E35EEF7FE94030A66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 07:01:28 +0000 Manifest this update: Fri 19 Dec 2025 07:01:28 +0000 Manifest next update: Sat 20 Dec 2025 07:01:28 +0000 Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: Njvozch7xTgtgmT3Z9HQC5ixkVKlkPz9WKynyg1CnBo=) 2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:da:4b:a2:a1:bb:4e:35:ee:f7:fe:94:03:0a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0 Validity Not Before: Dec 19 07:01:28 2025 GMT Not After : Dec 20 07:01:28 2025 GMT Subject: CN=488e65f95643c8b826cff8db35e5e97a364e2694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:e5:b1:b1:25:3b:1a:9a:7e:3b:fd:72:06: bb:34:6f:fb:cf:ad:e8:fe:54:c9:75:f1:b6:4e:3b: 56:cf:16:5a:5b:ab:88:c4:5d:9d:66:d9:8c:c0:8d: 6e:9c:51:b8:9c:c8:3c:a3:54:96:06:b4:f3:f8:3a: 37:3c:ea:10:ad:f3:51:27:60:91:ce:e3:5f:c9:66: b4:ec:62:5d:43:26:64:3c:7d:6e:98:da:65:7c:13: 0c:d5:64:a1:33:9a:6d:84:f0:48:65:01:83:17:ec: f4:ea:3c:7f:10:02:78:54:6b:4c:20:d2:94:53:4b: e4:ef:66:b4:b0:9c:18:73:e5:ac:cc:39:86:d6:92: 99:b6:e3:a0:2a:6e:ce:d8:e0:b0:1e:a2:3d:0f:73: cf:95:be:a6:0d:d5:a4:14:79:4d:79:fc:d1:8e:eb: 00:a4:d3:c0:f5:2e:7b:23:9a:02:37:a2:49:bd:bd: bd:f4:5a:e3:10:0d:70:41:34:ed:e2:b7:bc:22:09: 1a:07:0f:76:d5:76:c1:86:2f:f5:fe:2f:a7:17:f7: 66:ce:0e:c2:36:00:c8:b6:ff:38:43:14:9a:d2:23: a4:5f:48:84:da:5f:60:40:79:0a:99:35:ab:30:a2: 98:9c:7e:72:f4:f2:d6:c2:b1:2b:91:6a:1e:87:d4: df:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8E:65:F9:56:43:C8:B8:26:CF:F8:DB:35:E5:E9:7A:36:4E:26:94 X509v3 Authority Key Identifier: keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:69:2e:6b:5a:d1:9d:de:ee:41:ef:1b:b7:72:f0:82:99:b7: 00:db:14:1a:ff:55:a6:6f:0e:bd:67:cb:1b:d9:c0:01:07:c5: bc:e2:7f:a4:82:99:2c:ef:e1:56:d1:4b:3e:d7:d0:15:da:13: e1:de:20:93:67:ac:71:d8:2e:6a:ce:23:4c:23:26:a3:29:fa: 58:ce:b7:db:0e:69:f2:a1:a3:4b:d0:21:c1:4c:70:37:01:67: c1:5b:e8:a0:55:3f:5a:12:1d:b7:f4:02:58:12:30:de:81:8e: f2:ae:95:d8:e8:d2:cb:8d:3d:d5:d1:e5:93:e3:e8:4b:b9:c5: 00:ef:7b:86:80:6e:37:9b:72:a7:a3:84:9a:c9:02:25:bf:4f: cd:34:8f:df:f3:c7:08:f8:c0:33:89:04:ce:f4:ec:f7:3a:9e: dd:d0:f4:10:d5:56:d2:c0:4c:0d:71:9b:79:fb:33:f9:f7:22: dd:cd:0e:bd:c7:06:22:aa:a7:c7:6e:93:31:b1:b6:9e:08:54: e7:6b:78:3d:0d:db:87:d1:47:d7:4f:0a:d0:ca:cf:86:a8:5c: 18:7b:72:23:4d:c9:2b:f5:05:46:d4:e8:83:7b:9e:0b:c8:84: a4:45:b3:40:1a:1c:c6:38:65:7b:91:15:60:86:4e:4c:d2:51: 0b:9c:22:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1adpLoqG7TjXu9/6UAwpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NGJkNTY1MzAxM2ZhN2NhMzRmNTIyODQzMDlhNjg4YjI0 OWU3YTAwHhcNMjUxMjE5MDcwMTI4WhcNMjUxMjIwMDcwMTI4WjAzMTEwLwYDVQQD Eyg0ODhlNjVmOTU2NDNjOGI4MjZjZmY4ZGIzNWU1ZTk3YTM2NGUyNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIPlsbElOxqafjv9cga7NG/7z63o /lTJdfG2TjtWzxZaW6uIxF2dZtmMwI1unFG4nMg8o1SWBrTz+Do3POoQrfNRJ2CR zuNfyWa07GJdQyZkPH1umNplfBMM1WShM5pthPBIZQGDF+z06jx/EAJ4VGtMINKU U0vk72a0sJwYc+WszDmG1pKZtuOgKm7O2OCwHqI9D3PPlb6mDdWkFHlNefzRjusA pNPA9S57I5oCN6JJvb299FrjEA1wQTTt4re8IgkaBw921XbBhi/1/i+nF/dmzg7C NgDItv84QxSa0iOkX0iE2l9gQHkKmTWrMKKYnH5y9PLWwrErkWoeh9TfiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiOZflWQ8i4Js/42zXl6Xo2TiaUMB8GA1UdIwQY MBaAFNRL1WUwE/p8o09SKEMJpoiySeegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2Mt YjUwMTI2NjIwMjBkLzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2MtYjUwMTI2NjIwMjBk LzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2kua1rR nd7uQe8bt3Lwgpm3ANsUGv9Vpm8OvWfLG9nAAQfFvOJ/pIKZLO/hVtFLPtfQFdoT 4d4gk2escdguas4jTCMmoyn6WM632w5p8qGjS9AhwUxwNwFnwVvooFU/WhIdt/QC WBIw3oGO8q6V2OjSy4091dHlk+PoS7nFAO97hoBuN5typ6OEmskCJb9PzTSP3/PH CPjAM4kEzvTs9zqe3dD0ENVW0sBMDXGbefsz+fci3c0OvccGIqqnx26TMbG2nghU 52t4PQ3bh9FH108K0MrPhqhcGHtyI03JK/UFRtTog3ueC8iEpEWzQBocxjhle5EV YIZOTNJRC5wiEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:38:59 2025 by rpki-client