This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft File: evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft (raw, json) Hash identifier: 4cMkYLd7hRJptZ0NsOmbDuzv9mzHM/WJ/FDZaBCNK2E= Subject key identifier: 1A:5B:87:1B:91:8E:E4:E8:94:C4:70:5D:B2:B4:46:86:A0:CB:FE:29 Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA Certificate issuer: /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa Certificate serial: 019B3FB5D0747F9967562949F6A2FA657C2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft Manifest number: 073D Signing time: Sun 21 Dec 2025 07:00:38 +0000 Manifest this update: Sun 21 Dec 2025 07:00:38 +0000 Manifest next update: Mon 22 Dec 2025 07:00:38 +0000 Files and hashes: 1: 42xVzUIyXqfXVqxZnWJdy4Kwupc.roa (hash: /mxwpkDKFasvyEn1G6AJvfMW6ypxk1g4AfmWIHKbxAc=) 2: evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl (hash: c5j6MlVPBpQS5sRz5SSlFTuuHG3puMGS9mzXdhSovKA=) 3: lCQM-dF_EfVVshXvOqwqsYBxL9s.roa (hash: Usok67enDyHQBWMZLz8dOpfnx0UzcTG68uUFl9pEmns=) 4: p7VinBT544pt3EXzTm1pwPGpSC8.roa (hash: jv8ZfoxnroW+DzcSODN0QV7hQMtZttPbI/HcF/GyoG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:d0:74:7f:99:67:56:29:49:f6:a2:fa:65:7c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa Validity Not Before: Dec 21 07:00:38 2025 GMT Not After : Dec 22 07:00:38 2025 GMT Subject: CN=1a5b871b918ee4e894c4705db2b44686a0cbfe29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:21:95:13:0d:b2:8b:6a:60:9d:e3:4a:31: 9d:de:e4:42:9a:79:88:f2:2d:7a:62:7d:24:ad:db: f1:d2:3e:bc:66:42:69:cd:79:bc:a5:a0:a0:c4:bf: 34:89:1d:54:da:55:22:b1:92:05:ca:13:d7:3e:6f: f6:32:5e:41:32:df:44:63:9d:ec:5c:52:8f:d4:57: 57:e8:3d:ab:05:91:55:73:e2:e9:8f:82:e8:93:98: 48:fd:82:52:33:45:9d:2e:af:5c:77:af:b5:d2:ba: 9d:f5:24:4d:2d:ff:5c:11:8b:2b:3b:c9:47:cf:30: 4f:f0:6e:e2:17:aa:c0:a2:e2:21:a6:da:9e:ad:e9: 2d:44:99:bb:ed:8e:ea:0b:f6:57:97:99:db:70:d9: 03:03:27:2c:fd:fb:17:e7:ae:aa:d0:1c:fe:ba:6a: 3e:a3:d0:07:e8:5c:00:64:81:e2:8c:66:bc:24:66: d2:f6:b0:b6:37:d7:1d:fe:b0:c8:35:a1:e0:8f:c3: d4:9f:1c:de:c6:c8:01:3b:2b:07:0f:4d:5b:27:81: bc:01:5c:12:9b:b0:0b:a5:53:04:a6:c3:8d:3b:33: 24:b8:e8:2c:e1:66:22:5b:98:94:f4:dc:29:7b:67: e0:fc:0c:67:1a:d9:12:39:72:8c:e7:2d:62:9f:d2: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5B:87:1B:91:8E:E4:E8:94:C4:70:5D:B2:B4:46:86:A0:CB:FE:29 X509v3 Authority Key Identifier: keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:32:cc:f9:29:1f:a1:31:a3:9e:ce:b4:10:1f:1a:1a:70:77: 63:2e:63:61:a1:ee:7c:8f:f0:9a:8a:6b:39:53:39:67:36:cf: b3:48:97:94:83:a8:9e:04:77:6d:4a:75:3e:42:d2:50:eb:52: 1d:b0:e7:81:0b:fa:63:1f:d9:4c:4c:04:78:6b:47:86:36:70: cd:67:ef:67:3e:88:41:fc:17:9a:f2:61:e1:a5:93:92:67:b4: 15:df:51:f1:3a:4a:1f:68:0f:74:a3:98:c1:6a:f8:0b:ed:c3: 9d:aa:3e:2b:bf:d9:52:53:e6:47:60:d6:bb:b6:6a:31:cf:41: 64:a3:e4:cf:8b:1e:a9:81:f0:70:b9:f5:23:92:dc:e3:2e:7f: 57:13:a1:54:57:01:ee:e9:e0:5d:ae:79:dd:c8:7c:d8:9b:d2: 4b:95:45:8f:9f:4e:ad:86:04:78:aa:56:d9:52:2c:0c:4e:d0: 92:32:e1:a7:56:e3:e6:e1:02:9d:96:3b:00:21:e8:cb:43:ec: 32:63:46:76:b5:ea:c6:ee:5f:75:cb:26:a1:14:49:c4:6b:e0: d7:90:c4:0c:58:69:c1:3e:25:bf:2b:fc:d3:a4:46:11:cb:ee: fe:ec:d5:b9:6f:2e:5d:09:d2:40:51:2b:93:e2:bb:a2:22:44: 9d:68:d6:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tdB0f5lnVilJ9qL6ZXwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZmI1NDQxZDhlZjhlNDFhYTI4ZGQ1MWNkZGU5MjU5NDNh ZWY3ZmEwHhcNMjUxMjIxMDcwMDM4WhcNMjUxMjIyMDcwMDM4WjAzMTEwLwYDVQQD EygxYTViODcxYjkxOGVlNGU4OTRjNDcwNWRiMmI0NDY4NmEwY2JmZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxUhlRMNsotqYJ3jSjGd3uRCmnmI 8i16Yn0krdvx0j68ZkJpzXm8paCgxL80iR1U2lUisZIFyhPXPm/2Ml5BMt9EY53s XFKP1FdX6D2rBZFVc+Lpj4Lok5hI/YJSM0WdLq9cd6+10rqd9SRNLf9cEYsrO8lH zzBP8G7iF6rAouIhptqerektRJm77Y7qC/ZXl5nbcNkDAycs/fsX566q0Bz+umo+ o9AH6FwAZIHijGa8JGbS9rC2N9cd/rDINaHgj8PUnxzexsgBOysHD01bJ4G8AVwS m7ALpVMEpsONOzMkuOgs4WYiW5iU9Nwpe2fg/AxnGtkSOXKM5y1in9KBZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpbhxuRjuTolMRwXbK0Roagy/4pMB8GA1UdIwQY MBaAFHr7VEHY745BqijdUc3ekllDrvf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTIt ZDg5NzNhY2FmNDFkLzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTItZDg5NzNhY2FmNDFk LzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTLM+Skf oTGjns60EB8aGnB3Yy5jYaHufI/wmoprOVM5ZzbPs0iXlIOongR3bUp1PkLSUOtS HbDngQv6Yx/ZTEwEeGtHhjZwzWfvZz6IQfwXmvJh4aWTkme0Fd9R8TpKH2gPdKOY wWr4C+3Dnao+K7/ZUlPmR2DWu7ZqMc9BZKPkz4seqYHwcLn1I5Lc4y5/VxOhVFcB 7ungXa553ch82JvSS5VFj59OrYYEeKpW2VIsDE7QkjLhp1bj5uECnZY7ACHoy0Ps MmNGdrXqxu5fdcsmoRRJxGvg15DEDFhpwT4lvyv806RGEcvu/uzVuW8uXQnSQFEr k+K7oiJEnWjWEw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:06:37 2025 by rpki-client