This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft File: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json) Hash identifier: WkdOxQhYXOcFg4wtKFgB4RVOuC6mjmVYHPcYZlk/JPA= Subject key identifier: AB:71:06:E1:DB:53:4B:ED:DB:BF:75:83:45:80:CA:FA:24:9C:57:C5 Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57 Certificate issuer: /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57 Certificate serial: 019B37FC6B8F1D3B32504F7652C05CE0056F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft Manifest number: 0E65 Signing time: Fri 19 Dec 2025 19:00:48 +0000 Manifest this update: Fri 19 Dec 2025 19:00:48 +0000 Manifest next update: Sat 20 Dec 2025 19:00:48 +0000 Files and hashes: 1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: wI4BbixOh+xfI3GKSzHtwkob5wtbAiMdmES8+BowzL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:6b:8f:1d:3b:32:50:4f:76:52:c0:5c:e0:05:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57 Validity Not Before: Dec 19 19:00:48 2025 GMT Not After : Dec 20 19:00:48 2025 GMT Subject: CN=ab7106e1db534beddbbf75834580cafa249c57c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:18:78:b2:7b:5c:a6:d7:07:5e:5b:f8:7b: 99:b9:8b:15:04:0f:ef:41:a6:e4:c2:26:74:f4:49: 0d:ba:bc:1a:8d:49:49:e4:30:69:8e:fc:ea:da:7f: 91:61:22:08:a0:71:d4:01:19:b0:2b:f0:31:6e:b3: 8d:12:9d:f0:0c:1e:83:ac:96:3f:32:19:ff:b2:5f: d2:4d:c2:5d:c8:ad:49:5f:1a:8b:1e:74:a4:3c:56: 63:49:e6:6f:29:62:8b:53:0a:69:4e:25:3b:32:5a: 63:29:91:57:5c:57:5e:20:a5:3c:bc:43:ed:83:53: d7:d9:d6:84:07:24:24:a7:8c:fd:da:1a:44:9b:88: f7:57:41:5c:4a:ad:aa:55:8a:39:ff:d9:77:d8:fc: 9c:f9:05:7c:ef:2d:8c:cb:df:1d:ee:a6:b9:05:18: 3d:f6:0a:16:2d:94:b2:9a:1a:ac:ba:00:15:df:3f: 31:df:75:d2:83:40:9a:dd:7f:e1:b4:52:40:7f:16: a7:6a:ea:ab:cf:ab:14:3b:4c:10:6a:f1:ab:34:82: 93:ec:1d:54:01:07:32:64:89:ed:71:1a:2c:a2:ed: 72:98:1b:1f:76:df:f7:0d:d8:02:b4:12:a9:9d:bc: ee:85:e5:81:3e:22:63:5c:7f:47:4f:4c:b2:bf:b3: 90:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:71:06:E1:DB:53:4B:ED:DB:BF:75:83:45:80:CA:FA:24:9C:57:C5 X509v3 Authority Key Identifier: keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:06:ca:be:9d:0b:50:47:41:a8:31:48:42:01:56:59:4b:cf: d7:e8:21:28:04:5e:be:b4:b5:a6:ca:32:10:39:8d:69:d3:5e: fd:6f:63:67:e2:fc:64:be:f5:a9:41:22:06:8c:f8:4a:bc:e9: dd:f6:83:47:63:df:55:63:10:fe:02:4d:55:d5:99:2f:14:d4: 0d:b7:1e:35:c1:30:37:0f:c7:36:37:34:a0:4f:9b:53:4c:2e: 50:0e:d3:54:3e:f6:14:9d:59:de:51:cc:bd:2a:a9:40:75:38: 5b:a0:bf:88:20:33:5d:f8:62:7b:79:dc:f7:5e:59:5a:90:db: f3:38:48:bf:ff:98:92:ff:20:87:a0:e5:25:56:d6:cb:79:7a: 26:ba:e5:c7:a0:58:32:d7:32:9e:9d:7f:a0:1e:2b:de:8d:21: a4:ba:cf:c3:7e:e2:b4:f3:bf:9e:06:6b:9c:b5:90:05:32:5f: be:04:cf:63:ff:d5:ef:1d:1f:89:43:7c:74:27:49:19:e8:2d: 72:df:e7:64:f8:7a:24:c1:d7:0b:5e:89:55:32:da:62:22:38: fa:d0:68:52:e8:fb:ee:20:86:a2:25:6f:4e:6f:e1:1a:42:ba: d7:64:a2:23:dc:31:4d:61:4b:04:c9:7f:a8:b4:41:59:ed:09: 78:a4:6c:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/GuPHTsyUE92UsBc4AVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZmJlNGFhZGU0YTdlYThjMDIzN2ZjYmY0MDI3NDg2MGE0 MGVjNTcwHhcNMjUxMjE5MTkwMDQ4WhcNMjUxMjIwMTkwMDQ4WjAzMTEwLwYDVQQD EyhhYjcxMDZlMWRiNTM0YmVkZGJiZjc1ODM0NTgwY2FmYTI0OWM1N2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWoYeLJ7XKbXB15b+HuZuYsVBA/v QabkwiZ09EkNurwajUlJ5DBpjvzq2n+RYSIIoHHUARmwK/AxbrONEp3wDB6DrJY/ Mhn/sl/STcJdyK1JXxqLHnSkPFZjSeZvKWKLUwppTiU7MlpjKZFXXFdeIKU8vEPt g1PX2daEByQkp4z92hpEm4j3V0FcSq2qVYo5/9l32Pyc+QV87y2My98d7qa5BRg9 9goWLZSymhqsugAV3z8x33XSg0Ca3X/htFJAfxanauqrz6sUO0wQavGrNIKT7B1U AQcyZIntcRosou1ymBsfdt/3DdgCtBKpnbzuheWBPiJjXH9HT0yyv7OQTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtxBuHbU0vt2791g0WAyvoknFfFMB8GA1UdIwQY MBaAFBL75KreSn6owCN/y/QCdIYKQOxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZmRjNTYtOTUwZS00OTljLTg4NmQt NGJhOGQ2ZTJkOGRlLzEvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9iZmRjNTYtOTUwZS00OTljLTg4NmQtNGJhOGQ2ZTJkOGRl LzEvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAbKvp0L UEdBqDFIQgFWWUvP1+ghKARevrS1psoyEDmNadNe/W9jZ+L8ZL71qUEiBoz4Srzp 3faDR2PfVWMQ/gJNVdWZLxTUDbceNcEwNw/HNjc0oE+bU0wuUA7TVD72FJ1Z3lHM vSqpQHU4W6C/iCAzXfhie3nc915ZWpDb8zhIv/+Ykv8gh6DlJVbWy3l6Jrrlx6BY Mtcynp1/oB4r3o0hpLrPw37itPO/ngZrnLWQBTJfvgTPY//V7x0fiUN8dCdJGegt ct/nZPh6JMHXC16JVTLaYiI4+tBoUuj77iCGoiVvTm/hGkK612SiI9wxTWFLBMl/ qLRBWe0JeKRshw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:08:54 2025 by rpki-client