This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft File: EVwEDsl1QyAjbNymTjk5C93jYmo.mft (raw, json) Hash identifier: 4NFCLLeHKX4SfTnX8wJ0lqw+hyV3TuK1cAqYrDfhHWo= Subject key identifier: 51:48:67:CD:AD:6D:AA:6D:AF:D9:EC:D2:EE:C1:34:D6:29:72:C0:EC Authority key identifier: 11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A Certificate issuer: /CN=115c040ec9754320236cdca64e39390bdde3626a Certificate serial: 019B1238B5EAA9873A656FC6EAAAD3D18E07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft Manifest number: 0C53 Signing time: Fri 12 Dec 2025 11:01:05 +0000 Manifest this update: Fri 12 Dec 2025 11:01:05 +0000 Manifest next update: Sat 13 Dec 2025 11:01:05 +0000 Files and hashes: 1: EVwEDsl1QyAjbNymTjk5C93jYmo.crl (hash: WQ0A2N4nD8s4L5DAvBJembLt198k6YJL4hqN7T/U3Xs=) 2: iR8kHHuMHXHdpW9oFEB19MCcm1M.roa (hash: cqHEhbc9Bc/QLDbHqxDN/gK7OPZ3taLde0WraYz/2vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:b5:ea:a9:87:3a:65:6f:c6:ea:aa:d3:d1:8e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115c040ec9754320236cdca64e39390bdde3626a Validity Not Before: Dec 12 11:01:05 2025 GMT Not After : Dec 13 11:01:05 2025 GMT Subject: CN=514867cdad6daa6dafd9ecd2eec134d62972c0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:c1:06:45:8f:22:6f:ce:be:f4:7c:e3:a8: b7:a9:5c:46:c3:01:d3:fe:00:f2:24:e7:b3:dc:ae: f6:ab:2a:a5:c7:e8:88:1d:ae:bb:16:21:a9:fd:61: 7a:6e:6d:47:20:aa:c8:6e:05:b8:e1:63:45:b2:24: 5a:07:aa:bd:56:48:ad:a2:d6:a6:d9:56:ff:f8:f6: 39:df:71:e2:ff:47:5c:d4:3a:31:ea:2b:13:36:65: 85:60:d2:a6:2f:b2:16:e6:8d:41:9d:2f:e8:26:69: fe:03:96:9c:f9:21:bb:04:8b:a5:f4:d2:34:d6:27: 24:66:23:bf:d1:d7:50:bd:d2:65:2c:cf:8e:c8:4e: 3f:e8:4b:09:66:96:3f:10:63:df:fb:d6:82:30:96: a2:05:b9:ba:a6:4d:40:19:2a:5e:7f:32:2a:6c:49: ef:6f:50:6f:53:2c:06:f2:db:e5:30:80:8d:d9:c0: 21:4d:ad:8a:14:28:d8:a4:cc:6b:b0:f8:76:53:cb: f2:91:af:c3:a2:d7:2d:49:4b:36:ba:b1:ce:a1:3c: 25:2c:5b:b0:02:6f:64:bf:ec:6a:93:2c:dd:30:58: b5:7b:e9:e6:ab:9a:11:e1:79:18:d2:a7:16:bb:2a: 2f:c1:4b:2c:8b:35:15:77:e1:06:c2:31:e4:fe:71: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:48:67:CD:AD:6D:AA:6D:AF:D9:EC:D2:EE:C1:34:D6:29:72:C0:EC X509v3 Authority Key Identifier: keyid:11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:af:e8:31:0e:ed:18:63:0e:93:7e:86:26:7a:d0:44:1f:bf: b0:4a:64:6f:4f:08:f6:41:e6:64:2b:d4:28:1a:db:49:19:53: ee:4b:9a:eb:f9:bd:29:50:c5:b7:10:4e:f3:67:16:39:d6:6b: 14:d6:87:c6:45:8d:d5:85:d7:83:76:26:e6:fe:64:4f:b0:f3: 94:2b:16:40:e8:08:8c:62:37:20:3e:a4:cc:3e:f0:19:39:17: 5a:b5:d1:65:a2:dc:25:2c:45:7c:4b:50:72:cd:38:f6:25:cd: 77:fa:6f:f3:5b:7e:29:94:b5:08:54:af:a4:db:e7:a5:09:9d: 7e:f4:ee:d6:a7:f8:3b:f1:f5:b1:18:2e:5b:c5:d5:2e:5b:56: 1c:fa:68:09:56:99:eb:d7:e1:f9:63:2a:8b:9b:65:7a:12:fa: 9c:a1:3b:e4:c3:2f:92:21:89:02:37:a3:b5:92:12:4f:6e:56: fa:95:a0:c0:c7:62:e2:3b:4d:2a:7f:db:36:c6:c5:59:0a:6e: 41:2d:0b:2d:39:1c:60:a9:1e:e7:89:de:a5:72:4c:3f:73:fa: a9:41:04:27:54:ae:ef:0c:1f:00:87:ab:3c:62:d1:71:0f:df: f1:e6:83:16:c0:bf:fc:b1:dc:a2:3a:df:ff:e3:c6:46:e1:82: 04:f7:a3:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOLXqqYc6ZW/G6qrT0Y4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWMwNDBlYzk3NTQzMjAyMzZjZGNhNjRlMzkzOTBiZGRl MzYyNmEwHhcNMjUxMjEyMTEwMTA1WhcNMjUxMjEzMTEwMTA1WjAzMTEwLwYDVQQD Eyg1MTQ4NjdjZGFkNmRhYTZkYWZkOWVjZDJlZWMxMzRkNjI5NzJjMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjvBBkWPIm/OvvR846i3qVxGwwHT /gDyJOez3K72qyqlx+iIHa67FiGp/WF6bm1HIKrIbgW44WNFsiRaB6q9Vkitotam 2Vb/+PY533Hi/0dc1Dox6isTNmWFYNKmL7IW5o1BnS/oJmn+A5ac+SG7BIul9NI0 1ickZiO/0ddQvdJlLM+OyE4/6EsJZpY/EGPf+9aCMJaiBbm6pk1AGSpefzIqbEnv b1BvUywG8tvlMICN2cAhTa2KFCjYpMxrsPh2U8vyka/DotctSUs2urHOoTwlLFuw Am9kv+xqkyzdMFi1e+nmq5oR4XkY0qcWuyovwUssizUVd+EGwjHk/nF5PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFIZ82tbaptr9ns0u7BNNYpcsDsMB8GA1UdIwQY MBaAFBFcBA7JdUMgI2zcpk45OQvd42JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEt NzBlN2QwNTdmZjJkLzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEtNzBlN2QwNTdmZjJk LzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhq/oMQ7t GGMOk36GJnrQRB+/sEpkb08I9kHmZCvUKBrbSRlT7kua6/m9KVDFtxBO82cWOdZr FNaHxkWN1YXXg3Ym5v5kT7DzlCsWQOgIjGI3ID6kzD7wGTkXWrXRZaLcJSxFfEtQ cs049iXNd/pv81t+KZS1CFSvpNvnpQmdfvTu1qf4O/H1sRguW8XVLltWHPpoCVaZ 69fh+WMqi5tlehL6nKE75MMvkiGJAjejtZIST25W+pWgwMdi4jtNKn/bNsbFWQpu QS0LLTkcYKke54nepXJMP3P6qUEEJ1Su7wwfAIerPGLRcQ/f8eaDFsC//LHcojrf /+PGRuGCBPejkQ== -----END CERTIFICATE-----Generated at Fri Dec 12 16:48:12 2025 by rpki-client