This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft File: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft (raw, json) Hash identifier: 4bandLa22wqzlG6IimAQeWr7pHhAnFoHPhuOLS29n/A= Subject key identifier: 57:BC:A2:77:25:31:98:26:05:34:20:C3:AE:E5:B1:39:B5:4B:1B:B6 Authority key identifier: D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7 Certificate issuer: /CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7 Certificate serial: 019B32D7F014BC752F9488C8FEBDB7A6CEE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft Manifest number: 0C4D Signing time: Thu 18 Dec 2025 19:02:50 +0000 Manifest this update: Thu 18 Dec 2025 19:02:50 +0000 Manifest next update: Fri 19 Dec 2025 19:02:50 +0000 Files and hashes: 1: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl (hash: Yig+PgX6IIuwFtDYNcledCHOZ9tvtjfBh/DcXK6Qngc=) 2: yhLkTBwFXW9MjzC359UU8CJ6Bcc.roa (hash: YsI+CGd1aoGxeJp5us7qb7YQNNKxFAd0kxBSQecushk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:f0:14:bc:75:2f:94:88:c8:fe:bd:b7:a6:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7 Validity Not Before: Dec 18 19:02:50 2025 GMT Not After : Dec 19 19:02:50 2025 GMT Subject: CN=57bca27725319826053420c3aee5b139b54b1bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:ce:69:31:fd:28:3f:82:b9:48:49:22:d0: 49:2f:bc:03:a1:30:f9:95:40:cd:cc:6b:ac:0a:c3: a7:ce:57:45:5a:02:9c:ab:bf:0f:00:f5:5a:ee:82: c3:10:6b:d7:35:5b:7a:f0:97:dd:ea:d1:76:8a:77: 7f:2d:83:00:6e:96:60:17:f6:2f:68:97:ce:c7:e5: e1:5f:b1:7c:eb:b5:7b:e1:55:bb:36:53:bf:ec:db: d6:95:25:90:7e:ab:51:d2:9e:9d:17:b1:76:2c:a8: 7f:af:88:a7:68:85:7c:71:86:f0:de:cd:91:95:15: 99:65:95:8b:e3:88:04:c3:73:59:ac:18:1a:ac:c0: d9:c3:6e:6d:58:1e:0d:06:78:bc:14:b3:47:98:98: bb:bd:b1:b9:63:fe:9b:ef:0e:08:b3:69:32:d8:c7: 4b:38:be:40:08:aa:ad:1c:bd:b2:00:e0:a5:9c:4c: 24:7d:c8:74:1a:9d:00:a2:93:a5:63:6f:0a:b7:f3: 4b:53:a6:e4:2f:77:33:5a:cf:54:4c:8f:4a:cb:15: 37:1c:61:c3:9c:54:3f:33:a7:69:c3:15:e8:25:f3: 84:c3:26:06:4d:63:fa:65:cd:78:2c:ce:03:0d:0f: 6b:05:f4:39:00:72:0c:4f:3a:af:21:b4:82:cd:3e: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BC:A2:77:25:31:98:26:05:34:20:C3:AE:E5:B1:39:B5:4B:1B:B6 X509v3 Authority Key Identifier: keyid:D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:60:05:34:61:45:8f:3c:8a:b1:83:a2:79:5e:58:38:84:70: b1:a4:ae:7c:18:f4:ae:0b:c1:23:45:50:07:69:80:27:fb:70: 92:d3:1d:8d:5c:09:8f:5e:fa:e6:b8:51:ac:eb:44:b4:19:56: 94:f2:05:f9:c2:c4:fa:cd:53:f8:cc:cd:d3:bb:86:6a:06:4c: 31:16:c0:e2:e4:28:c0:5d:61:ee:e9:c0:e9:05:5f:8e:89:8c: 77:5f:31:eb:9a:0a:ec:f2:b8:3f:0e:f1:a9:20:f5:21:73:2c: 87:ff:bf:17:9f:b2:55:53:90:69:96:dc:d3:fb:65:32:b8:c2: 0a:42:5e:bd:57:1a:15:66:e9:f9:93:94:dc:d9:b1:2d:8f:20: 3a:bf:b1:a1:8f:1f:be:f3:ea:5a:fc:90:62:24:25:6d:72:1a: 33:5d:1e:9c:c7:94:d5:92:e0:17:d9:11:cd:f8:d5:09:5f:b0: 19:89:bc:68:e0:1d:fb:99:9c:f6:49:e8:57:e2:0b:4e:71:07: 39:58:52:e8:a0:e6:77:15:1e:d5:27:d4:0e:6d:1d:aa:b0:b5: a2:42:8f:4e:cf:91:99:70:f2:7e:6b:07:f9:0f:5b:18:34:89: e9:8a:e9:d8:80:84:39:f9:85:65:c0:c7:22:f0:35:44:35:59: ba:b6:a5:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1/AUvHUvlIjI/r23ps7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NGJjMGU4M2U4MWY1N2ZiNDg5NDA0MWRjYTc2Yzc3ZDMz ZjAyZTcwHhcNMjUxMjE4MTkwMjUwWhcNMjUxMjE5MTkwMjUwWjAzMTEwLwYDVQQD Eyg1N2JjYTI3NzI1MzE5ODI2MDUzNDIwYzNhZWU1YjEzOWI1NGIxYmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyvOaTH9KD+CuUhJItBJL7wDoTD5 lUDNzGusCsOnzldFWgKcq78PAPVa7oLDEGvXNVt68Jfd6tF2ind/LYMAbpZgF/Yv aJfOx+XhX7F867V74VW7NlO/7NvWlSWQfqtR0p6dF7F2LKh/r4inaIV8cYbw3s2R lRWZZZWL44gEw3NZrBgarMDZw25tWB4NBni8FLNHmJi7vbG5Y/6b7w4Is2ky2MdL OL5ACKqtHL2yAOClnEwkfch0Gp0AopOlY28Kt/NLU6bkL3czWs9UTI9KyxU3HGHD nFQ/M6dpwxXoJfOEwyYGTWP6Zc14LM4DDQ9rBfQ5AHIMTzqvIbSCzT5cdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe8onclMZgmBTQgw67lsTm1Sxu2MB8GA1UdIwQY MBaAFNRLwOg+gfV/tIlAQdynbHfTPwLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hMTRlMWUtY2VkNC00MmU5LTgzMzgt ZjJhZjgwMDFhYzc4LzEvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hMTRlMWUtY2VkNC00MmU5LTgzMzgtZjJhZjgwMDFhYzc4 LzEvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2AFNGFF jzyKsYOieV5YOIRwsaSufBj0rgvBI0VQB2mAJ/twktMdjVwJj1765rhRrOtEtBlW lPIF+cLE+s1T+MzN07uGagZMMRbA4uQowF1h7unA6QVfjomMd18x65oK7PK4Pw7x qSD1IXMsh/+/F5+yVVOQaZbc0/tlMrjCCkJevVcaFWbp+ZOU3NmxLY8gOr+xoY8f vvPqWvyQYiQlbXIaM10enMeU1ZLgF9kRzfjVCV+wGYm8aOAd+5mc9knoV+ILTnEH OVhS6KDmdxUe1SfUDm0dqrC1okKPTs+RmXDyfmsH+Q9bGDSJ6Yrp2ICEOfmFZcDH IvA1RDVZuraljA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:30:43 2025 by rpki-client