This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft File: Ev1VimTpdYakPcfuUKjWspI2W2A.mft (raw, json) Hash identifier: ZQFd5JQoASqS8IfZhh4Q/CDcYE+7MzuvkhCndrl7NY8= Subject key identifier: 8B:2E:F2:29:A6:6A:22:99:19:D9:87:85:DD:A5:AF:5F:86:4C:AC:9D Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60 Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60 Certificate serial: 019ACA8DC135B023B9D5C7AEAE9AE9753999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft Manifest number: 1767 Signing time: Fri 28 Nov 2025 13:01:18 +0000 Manifest this update: Fri 28 Nov 2025 13:01:18 +0000 Manifest next update: Sat 29 Nov 2025 13:01:18 +0000 Files and hashes: 1: 0UNxLFiNDnM7JAFQJgASYQsaA6g.roa (hash: yeNDFn94twaWZPqm9gsLvpXQ7L9cVI5aXIkqJKLoX5M=) 2: 1xdn8NiVRswlc4uk1WDeK_RiIBI.roa (hash: q1iCF9iJIPjwrPQXtH4xaMoQe7AL1oF2LyzhxGkgni4=) 3: Ev1VimTpdYakPcfuUKjWspI2W2A.crl (hash: drxx94gzaSkvOi46dK+SXQX1/RSlqNwVx7EzF9fjUm0=) 4: Nh1ckidMNKlHTaQDjmBWaD_RTqU.roa (hash: HGI9KzkrMn/Mgs6qOK3BC5AOQs+VrhmYJ0sTwXf2f0M=) 5: W4wf-OAMEK-73Ed6RT7ypN5sr-k.roa (hash: IJZ4wsFpXNgYN94omFfW/OOG2yIoCFkgqtOfLsCQRvA=) 6: W5MLip5ZK1ufGEZ9vOY2cxblKvI.roa (hash: pIDJh0k5gLIn4YvkPKi7ydxg61w5euWKQP9v/Tmlx1o=) 7: Wq5DUxTVl0Dm7wyA_VIMLG14k7s.roa (hash: vEG0EhUJl23XyGjHlaal+XqlIJfe5erG7/zNb/KcbuI=) 8: Z0sinVsrjztZdWZXyq0HAMquROw.roa (hash: 5+GjpnCGBWsr7RuL/tVtX2VueODcLobULhwbhL426U8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:8d:c1:35:b0:23:b9:d5:c7:ae:ae:9a:e9:75:39:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60 Validity Not Before: Nov 28 13:01:18 2025 GMT Not After : Nov 29 13:01:18 2025 GMT Subject: CN=8b2ef229a66a229919d98785dda5af5f864cac9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ac:77:cb:c0:19:88:91:94:35:9b:c7:09:3f: 62:e5:5d:3e:78:b7:0a:3a:bf:eb:95:2c:03:87:1f: e4:f1:95:24:31:76:b3:0c:27:e7:ad:55:81:e2:2a: 2e:b1:21:49:5e:b2:2b:5c:16:45:6a:e5:2a:84:88: 39:3e:a0:ca:f8:ba:da:99:ac:ee:da:47:5f:d2:c8: aa:08:d2:23:06:83:e8:d5:4d:39:d4:55:66:6e:58: 17:f5:26:33:74:44:da:c9:47:fe:75:45:2d:e0:c9: fd:36:f7:15:c9:78:0a:b2:30:1e:35:ce:d4:08:b8: bd:e5:03:1f:ee:55:20:f9:e5:90:39:37:f6:b9:d5: e2:d1:53:26:9c:99:bb:d8:23:53:19:c6:1b:84:5f: bd:f0:70:40:e0:92:42:2d:0e:52:54:dd:0b:69:3d: 6e:99:47:4d:ae:20:75:e9:a6:10:c3:ad:ee:c9:eb: 32:e5:57:38:3a:60:2b:a2:22:08:ab:12:43:ad:fb: 75:a7:cc:d4:64:df:9f:9f:f0:5f:93:87:e5:4e:61: 81:95:ca:47:6c:e8:b5:bf:df:0a:a0:d1:a9:52:62: c9:05:14:51:ed:54:9b:73:b2:42:a1:93:f3:fb:d3: b6:7f:10:09:d7:9d:44:f4:a7:b0:42:f5:8d:f0:20: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2E:F2:29:A6:6A:22:99:19:D9:87:85:DD:A5:AF:5F:86:4C:AC:9D X509v3 Authority Key Identifier: keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:21:40:c3:d2:b7:49:1a:9e:3a:87:a4:71:1b:d6:dc:cb:3a: b1:14:aa:56:74:91:1f:ea:10:fc:51:69:6a:1b:9b:72:05:e6: 5d:2f:e9:49:c0:0a:7b:dc:4d:7d:55:9a:6d:a6:d2:5f:10:cd: bb:27:28:10:68:78:04:8f:f1:72:1f:5f:d9:40:27:8b:a2:d0: 9a:94:58:dd:2c:35:b4:6b:25:60:36:86:a6:31:1a:e8:af:4d: b8:61:ee:02:ca:4c:37:d1:fd:95:08:6a:15:1d:04:8a:68:92: ee:e5:a3:3f:ef:6e:48:4a:4b:51:e5:4c:44:13:d7:04:d0:f9: 0f:47:98:37:b8:61:d0:4e:c6:3a:3b:f0:ab:49:00:f0:3f:a5: 37:bf:da:4f:f1:ab:7c:26:bc:a6:94:0c:8f:f0:5c:5d:d8:13: 3b:48:57:a9:76:f4:1f:69:ee:e4:ac:e6:a9:e0:0e:17:8c:52: 24:4d:94:ba:24:c2:62:ce:21:66:f9:b0:1d:1d:e1:ed:88:dc: 69:54:d0:28:4b:92:3c:89:08:9b:b2:9d:9e:9c:5c:58:b5:fd: f5:1a:67:e1:12:11:87:3b:b4:b4:02:af:7d:63:62:41:cd:dc: 98:e0:e1:a8:0f:ea:6b:2e:0d:7d:72:c2:a1:81:6e:b3:37:31: 4f:c7:f8:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrKjcE1sCO51ceurprpdTmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZmQ1NThhNjRlOTc1ODZhNDNkYzdlZTUwYThkNmIyOTIz NjViNjAwHhcNMjUxMTI4MTMwMTE4WhcNMjUxMTI5MTMwMTE4WjAzMTEwLwYDVQQD Eyg4YjJlZjIyOWE2NmEyMjk5MTlkOTg3ODVkZGE1YWY1Zjg2NGNhYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ax3y8AZiJGUNZvHCT9i5V0+eLcK Or/rlSwDhx/k8ZUkMXazDCfnrVWB4iousSFJXrIrXBZFauUqhIg5PqDK+Lramazu 2kdf0siqCNIjBoPo1U051FVmblgX9SYzdETayUf+dUUt4Mn9NvcVyXgKsjAeNc7U CLi95QMf7lUg+eWQOTf2udXi0VMmnJm72CNTGcYbhF+98HBA4JJCLQ5SVN0LaT1u mUdNriB16aYQw63uyesy5Vc4OmAroiIIqxJDrft1p8zUZN+fn/Bfk4flTmGBlcpH bOi1v98KoNGpUmLJBRRR7VSbc7JCoZPz+9O2fxAJ151E9KewQvWN8CBwmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsu8immaiKZGdmHhd2lr1+GTKydMB8GA1UdIwQY MBaAFBL9VYpk6XWGpD3H7lCo1rKSNltgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt MjRkOGU3NDdjMzhmLzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm LzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCFAw9K3 SRqeOoekcRvW3Ms6sRSqVnSRH+oQ/FFpahubcgXmXS/pScAKe9xNfVWababSXxDN uycoEGh4BI/xch9f2UAni6LQmpRY3Sw1tGslYDaGpjEa6K9NuGHuAspMN9H9lQhq FR0EimiS7uWjP+9uSEpLUeVMRBPXBND5D0eYN7hh0E7GOjvwq0kA8D+lN7/aT/Gr fCa8ppQMj/BcXdgTO0hXqXb0H2nu5KzmqeAOF4xSJE2UuiTCYs4hZvmwHR3h7Yjc aVTQKEuSPIkIm7KdnpxcWLX99Rpn4RIRhzu0tAKvfWNiQc3cmODhqA/qay4NfXLC oYFuszcxT8f4Ng== -----END CERTIFICATE-----Generated at Fri Nov 28 22:02:10 2025 by rpki-client