This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft File: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft (raw, json) Hash identifier: DiG7t2W2AV38QEt7bReLAb6BFHbtIFtMHJg2yChAMjo= Subject key identifier: 13:E9:AC:19:0D:B1:4F:0E:44:C4:A5:3B:1C:7A:7A:B4:50:29:CB:0F Authority key identifier: D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7 Certificate issuer: /CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7 Certificate serial: 019AF12D52C3ECE0A8B4DC314683C56AB576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft Manifest number: 0C2B Signing time: Sat 06 Dec 2025 01:01:10 +0000 Manifest this update: Sat 06 Dec 2025 01:01:10 +0000 Manifest next update: Sun 07 Dec 2025 01:01:10 +0000 Files and hashes: 1: 1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl (hash: 3G74gE6hkcSW6Iv+sxYkNkb7KF6JRSqmehCurZnsgOQ=) 2: yhLkTBwFXW9MjzC359UU8CJ6Bcc.roa (hash: YsI+CGd1aoGxeJp5us7qb7YQNNKxFAd0kxBSQecushk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:52:c3:ec:e0:a8:b4:dc:31:46:83:c5:6a:b5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44bc0e83e81f57fb4894041dca76c77d33f02e7 Validity Not Before: Dec 6 01:01:10 2025 GMT Not After : Dec 7 01:01:10 2025 GMT Subject: CN=13e9ac190db14f0e44c4a53b1c7a7ab45029cb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d8:32:e7:12:80:00:3c:9b:6f:88:9e:3a:e4: ea:2a:59:53:8a:a4:44:4c:a6:36:5c:1c:07:0c:31: 27:7d:c7:70:d0:02:2d:e1:a5:cb:ee:56:3d:8f:13: cb:a2:bd:ab:3f:05:bd:78:9d:a8:38:a6:a6:64:1e: 0e:4d:36:7d:18:6e:9f:4d:26:cc:9a:31:e7:2f:44: 85:af:1d:a6:01:6b:f6:25:e9:11:a2:d2:4e:a1:e5: 29:52:99:0a:2b:22:79:f3:9e:8f:09:8a:07:e7:f3: ec:d7:d2:b0:07:33:2e:61:e0:06:52:b1:f7:51:21: cb:14:7e:f5:ec:fb:aa:df:f1:cd:a3:25:38:43:3a: 5c:5f:62:e4:d6:df:7e:e4:8d:34:65:4f:1c:d2:6c: 41:02:6b:13:5b:c9:97:5a:b8:a5:d7:ea:6e:6c:c5: 4e:2f:72:aa:ea:13:a4:e5:14:19:82:ff:7e:69:2d: 58:b9:d2:fe:1f:a2:13:57:f9:e4:eb:20:3e:96:ac: c4:ff:f4:da:9f:08:46:f7:40:89:28:2d:bf:ee:ad: 9f:a9:e8:4f:4c:b1:12:f9:ac:08:9e:57:bc:e8:40: 9e:de:33:3b:27:bc:a0:5e:97:a7:1a:60:e5:eb:3b: bf:e2:90:5a:9a:49:39:72:ea:75:7b:c3:29:f1:ef: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E9:AC:19:0D:B1:4F:0E:44:C4:A5:3B:1C:7A:7A:B4:50:29:CB:0F X509v3 Authority Key Identifier: keyid:D4:4B:C0:E8:3E:81:F5:7F:B4:89:40:41:DC:A7:6C:77:D3:3F:02:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a14e1e-ced4-42e9-8338-f2af8001ac78/1/1EvA6D6B9X-0iUBB3Kdsd9M_Auc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:50:41:1d:4e:0e:62:ff:66:3d:1e:a7:fd:c9:02:45:bc:1c: 6d:f0:2a:92:35:3e:b0:da:f2:3e:f9:04:7c:47:80:73:49:7f: e5:28:64:86:70:0d:87:40:69:fa:d5:c5:d5:14:7e:65:a8:b6: f6:45:dc:b3:f3:7d:51:15:38:5d:0f:9f:2b:66:ac:c0:02:1b: ed:73:66:7d:59:c8:37:55:da:39:d2:54:ff:fb:87:95:82:ea: 44:a1:3e:e1:1a:9b:7e:d4:b6:e6:2d:da:b3:80:e8:48:38:93: 70:21:1f:2c:30:c3:c7:34:12:43:bb:62:28:4d:cf:09:21:85: 56:90:d7:b3:d3:27:5b:74:7d:2d:fd:dc:11:7d:e8:79:df:f5: ee:b3:dc:3c:ee:96:89:59:fb:cf:8f:d3:e9:83:77:63:3a:46: 06:2a:45:8d:3d:c4:ce:ec:b9:85:eb:9d:13:02:03:5c:84:ef: 61:a7:1b:e5:38:a4:3f:67:04:0c:bd:06:5b:13:eb:cc:32:fd: d4:85:82:4f:bb:eb:25:e2:0d:ec:52:42:93:cf:f4:60:f2:b6: 08:27:01:9e:05:4f:40:e6:16:8f:5f:37:63:a8:e5:86:f8:e1: 3e:a8:61:3c:4b:e9:0c:be:14:f2:22:05:46:eb:26:8c:12:59: 7e:1d:52:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVLD7OCotNwxRoPFarV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NGJjMGU4M2U4MWY1N2ZiNDg5NDA0MWRjYTc2Yzc3ZDMz ZjAyZTcwHhcNMjUxMjA2MDEwMTEwWhcNMjUxMjA3MDEwMTEwWjAzMTEwLwYDVQQD EygxM2U5YWMxOTBkYjE0ZjBlNDRjNGE1M2IxYzdhN2FiNDUwMjljYjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dgy5xKAADybb4ieOuTqKllTiqRE TKY2XBwHDDEnfcdw0AIt4aXL7lY9jxPLor2rPwW9eJ2oOKamZB4OTTZ9GG6fTSbM mjHnL0SFrx2mAWv2JekRotJOoeUpUpkKKyJ5856PCYoH5/Ps19KwBzMuYeAGUrH3 USHLFH717Puq3/HNoyU4QzpcX2Lk1t9+5I00ZU8c0mxBAmsTW8mXWril1+pubMVO L3Kq6hOk5RQZgv9+aS1YudL+H6ITV/nk6yA+lqzE//TanwhG90CJKC2/7q2fqehP TLES+awInle86ECe3jM7J7ygXpenGmDl6zu/4pBamkk5cup1e8Mp8e/I2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPprBkNsU8ORMSlOxx6erRQKcsPMB8GA1UdIwQY MBaAFNRLwOg+gfV/tIlAQdynbHfTPwLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hMTRlMWUtY2VkNC00MmU5LTgzMzgt ZjJhZjgwMDFhYzc4LzEvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hMTRlMWUtY2VkNC00MmU5LTgzMzgtZjJhZjgwMDFhYzc4 LzEvMUV2QTZENkI5WC0waVVCQjNLZHNkOU1fQXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw1BBHU4O Yv9mPR6n/ckCRbwcbfAqkjU+sNryPvkEfEeAc0l/5ShkhnANh0Bp+tXF1RR+Zai2 9kXcs/N9URU4XQ+fK2aswAIb7XNmfVnIN1XaOdJU//uHlYLqRKE+4RqbftS25i3a s4DoSDiTcCEfLDDDxzQSQ7tiKE3PCSGFVpDXs9MnW3R9Lf3cEX3oed/17rPcPO6W iVn7z4/T6YN3YzpGBipFjT3Ezuy5heudEwIDXITvYacb5TikP2cEDL0GWxPrzDL9 1IWCT7vrJeIN7FJCk8/0YPK2CCcBngVPQOYWj183Y6jlhvjhPqhhPEvpDL4U8iIF RusmjBJZfh1S0g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:17 2025 by rpki-client