This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft File: evOlFiiU19GsKvgy16vPHb4RCuE.mft (raw, json) Hash identifier: RbSk9d7f5uqCiC8yCnvlvRE06ck2aCan68GTyr0XV6U= Subject key identifier: 85:E1:A5:3B:1B:00:DB:3E:ED:18:BC:C6:74:FC:B0:93:5C:5C:B7:E3 Authority key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1 Certificate issuer: /CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1 Certificate serial: 019B1E3CCF9EE2E8B133F41FF173B97D92B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft Manifest number: 05DC Signing time: Sun 14 Dec 2025 19:01:00 +0000 Manifest this update: Sun 14 Dec 2025 19:01:00 +0000 Manifest next update: Mon 15 Dec 2025 19:01:00 +0000 Files and hashes: 1: evOlFiiU19GsKvgy16vPHb4RCuE.crl (hash: Y1REb6+AMzbEtMbi38ZOX81pXfTdRL+oQDjjzP3fZtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3c:cf:9e:e2:e8:b1:33:f4:1f:f1:73:b9:7d:92:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1 Validity Not Before: Dec 14 19:01:00 2025 GMT Not After : Dec 15 19:01:00 2025 GMT Subject: CN=85e1a53b1b00db3eed18bcc674fcb0935c5cb7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c9:2c:2c:bc:03:e7:14:14:17:54:c8:f7:0d: 11:3d:b0:f5:cf:0c:31:5c:32:c4:d0:43:5e:7e:a7: 7a:7e:3f:65:16:86:d2:4c:8f:fe:d4:44:1e:f3:ae: c2:a7:40:98:0b:3a:95:2b:fd:ce:37:b2:d9:a4:de: de:13:61:d4:ac:5a:3d:49:b5:47:86:38:cb:09:e4: 98:b1:3b:b5:73:e7:b5:99:69:70:81:52:50:02:8d: b3:7c:15:4c:58:69:e0:ee:04:26:a6:95:4e:6d:58: d8:16:9d:ac:2b:ce:0c:93:39:fd:0a:7b:56:75:81: b3:b4:fd:f6:b8:5c:94:75:0b:76:92:cd:b3:6a:d8: 5b:2d:f6:78:e9:07:9c:8d:df:32:68:8c:3b:17:69: 59:b5:15:e2:d2:8e:af:b4:49:81:d8:4b:aa:b8:cf: 77:e8:ad:cf:c8:b3:89:81:66:fc:e2:1a:39:f1:15: 24:f1:03:ac:8f:75:f0:b9:d3:ba:d8:45:30:b3:be: 8d:28:cf:7b:c7:4c:3e:fc:8e:b4:20:19:75:aa:cd: 6e:44:60:1f:15:8c:3a:bb:92:69:37:6c:af:7e:6e: b4:a9:c9:ff:67:35:a1:79:18:bc:69:e2:f6:b9:b0: ab:f7:9a:bb:4f:21:9c:a1:3c:2f:27:d8:7a:58:4c: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E1:A5:3B:1B:00:DB:3E:ED:18:BC:C6:74:FC:B0:93:5C:5C:B7:E3 X509v3 Authority Key Identifier: keyid:7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:55:0d:7f:59:92:0a:dd:c5:72:57:44:46:8f:5d:ec:ad:fe: 13:fe:1e:dd:e9:92:7c:65:99:16:28:f6:0b:db:15:02:28:40: 9e:4c:36:61:77:25:1b:16:ad:f5:7b:19:8d:a1:de:e3:31:73: 39:79:27:f2:4a:a5:b2:a7:4c:be:c1:df:01:4d:62:58:2a:c0: 65:bb:82:ed:74:4e:a0:3c:6b:8b:c2:8d:d9:39:9a:85:9f:81: ec:7e:87:58:5a:73:06:fb:e8:a6:3c:91:1a:13:96:2e:b9:cd: 5b:f8:31:68:0c:e1:7f:11:bc:ec:da:0b:93:77:aa:88:86:8c: 2d:ab:b8:3a:3c:2a:64:18:f2:43:1b:30:11:a0:5a:b0:2b:77: e8:2e:bb:88:ec:f7:1d:6a:f0:23:4e:c0:ae:dd:a2:22:c0:66: d1:8a:11:2a:c6:05:57:47:24:68:f7:31:3e:fa:d2:b4:23:6d: b9:47:de:ad:6c:23:60:24:24:41:ac:bf:c0:75:d2:4b:95:59: c7:a4:d9:b8:19:33:de:62:b4:b7:42:b5:d9:b7:bf:a5:05:3c: fc:a1:1f:8e:35:d3:33:7b:c8:ca:e0:97:07:c3:5c:d7:bd:66: 4f:f3:d2:3d:e0:89:d9:d7:7b:bb:e0:b8:88:f6:e6:d1:2f:83: 5f:02:23:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePM+e4uixM/Qf8XO5fZK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjNhNTE2Mjg5NGQ3ZDFhYzJhZjgzMmQ3YWJjZjFkYmUx MTBhZTEwHhcNMjUxMjE0MTkwMTAwWhcNMjUxMjE1MTkwMTAwWjAzMTEwLwYDVQQD Eyg4NWUxYTUzYjFiMDBkYjNlZWQxOGJjYzY3NGZjYjA5MzVjNWNiN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sksLLwD5xQUF1TI9w0RPbD1zwwx XDLE0ENefqd6fj9lFobSTI/+1EQe867Cp0CYCzqVK/3ON7LZpN7eE2HUrFo9SbVH hjjLCeSYsTu1c+e1mWlwgVJQAo2zfBVMWGng7gQmppVObVjYFp2sK84Mkzn9CntW dYGztP32uFyUdQt2ks2zathbLfZ46Qecjd8yaIw7F2lZtRXi0o6vtEmB2EuquM93 6K3PyLOJgWb84ho58RUk8QOsj3XwudO62EUws76NKM97x0w+/I60IBl1qs1uRGAf FYw6u5JpN2yvfm60qcn/ZzWheRi8aeL2ubCr95q7TyGcoTwvJ9h6WEwWjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXhpTsbANs+7Ri8xnT8sJNcXLfjMB8GA1UdIwQY MBaAFHrzpRYolNfRrCr4Mterzx2+EQrhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTIt NzVkNTRiMTAzMDljLzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTItNzVkNTRiMTAzMDlj LzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVUNf1mS Ct3FcldERo9d7K3+E/4e3emSfGWZFij2C9sVAihAnkw2YXclGxat9XsZjaHe4zFz OXkn8kqlsqdMvsHfAU1iWCrAZbuC7XROoDxri8KN2TmahZ+B7H6HWFpzBvvopjyR GhOWLrnNW/gxaAzhfxG87NoLk3eqiIaMLau4OjwqZBjyQxswEaBasCt36C67iOz3 HWrwI07Art2iIsBm0YoRKsYFV0ckaPcxPvrStCNtuUferWwjYCQkQay/wHXSS5VZ x6TZuBkz3mK0t0K12be/pQU8/KEfjjXTM3vIyuCXB8Nc171mT/PSPeCJ2dd7u+C4 iPbm0S+DXwIj9w== -----END CERTIFICATE-----Generated at Mon Dec 15 04:33:12 2025 by rpki-client