This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: znArFHlow7Llgy3S7xBdlWO7MJuA8chWeLBQJpx7t9c= Subject key identifier: 14:93:5B:06:3A:93:26:B9:8C:71:C4:21:73:57:9A:70:D3:01:C0:6D Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019AF31C28E9CD86C40F97B903D60A95C742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 10:01:40 +0000 Manifest this update: Sat 06 Dec 2025 10:01:40 +0000 Manifest next update: Sun 07 Dec 2025 10:01:40 +0000 Files and hashes: 1: 58Be7xiX6S3Rn5dMTKk_iVCR9xo.roa (hash: delgTuBHuHM98Jxou3H2EwXSN1rXHIyw+gAmbjVPHXE=) 2: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: 2HY27rqmXzL0Zwm20XB/ZxVskYB5ryMmsjOiHnLMC/E=) 3: HOQaozgHqyl7GjdOmYwJNgxkNvk.roa (hash: PI4rJK1t31rRGgg84yxq7H32pDXq4vLAXeRJDFTb2uo=) 4: L-ktSUmEt-j51Ho1YnwbbaZLrZo.roa (hash: mUCe0wNtZCh2tznUGkMZqDrtHqmD+Hv4+N6i6ZjwUMM=) 5: P2rIwR1CtoaVBqGPtk1uKZu6EAM.roa (hash: 5tzkl0E5Oyrnj5xi/xWoXdn3cp0c7cD7Nd4Yhdv1uSk=) 6: hysK0HS4yMpxAiu_amCNQZnsMEk.roa (hash: h9bkQ2M0Hp/TMn65+jd+66CUZ78mTaddUxEZ1BNe0q4=) 7: ytEJnGu8gq3161Uk5CSgUCmxit8.roa (hash: 6lM2R/ZrStC7kH6e29r6pEEmVzeiHBYKhVC23vS8jn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:28:e9:cd:86:c4:0f:97:b9:03:d6:0a:95:c7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Dec 6 10:01:40 2025 GMT Not After : Dec 7 10:01:40 2025 GMT Subject: CN=14935b063a9326b98c71c42173579a70d301c06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:a6:4c:c9:e5:a7:57:18:1f:0e:a0:38:61: af:29:da:ed:77:c6:37:d1:5b:48:4e:e7:4f:78:db: da:52:55:14:a7:8a:c6:c7:d3:83:bd:4f:df:a1:cf: 74:25:30:66:0e:66:e6:d2:64:4b:1e:8b:fa:03:b2: 06:71:2d:80:47:9f:f0:22:e1:83:af:73:0d:3b:26: 0a:7e:4d:49:b9:cb:3b:32:51:51:b9:aa:57:df:a9: a0:fb:d8:99:97:82:56:eb:71:14:a1:9d:10:a8:58: 69:ad:f0:b7:90:19:a7:22:73:f3:52:3a:0c:04:45: 92:44:2f:97:d6:62:0f:f2:2e:f2:72:cf:09:e8:a6: da:d8:f0:4e:df:47:2c:40:1a:63:4c:9d:d0:a6:c3: 7f:6f:23:c1:1c:e5:6e:3b:52:ec:58:70:1e:3b:33: 4a:7b:01:45:55:cf:d4:1d:82:2c:22:2b:84:6b:29: b9:84:b5:c1:98:e2:68:ee:39:99:0e:74:e9:de:dd: 92:18:fc:3f:79:9b:56:0c:68:7e:69:47:44:81:45: 4a:c2:43:77:e2:be:c0:ce:87:a5:8b:83:15:2f:e3: 62:ad:3c:aa:3b:a5:6b:c0:09:a1:79:37:85:23:24: ca:b4:5c:dc:be:66:e8:f3:c5:f4:c8:dc:43:79:d9: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:93:5B:06:3A:93:26:B9:8C:71:C4:21:73:57:9A:70:D3:01:C0:6D X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:fa:96:63:a7:ed:75:70:7d:85:d4:54:2f:e7:dd:64:87:e0: 96:2d:6c:ac:c6:38:2e:b0:67:82:58:bd:00:9a:14:d8:e7:d6: 73:d9:73:7f:6e:bd:39:3b:f9:71:f3:a2:ec:2f:af:9d:63:9b: 0d:44:c2:0a:32:3b:1a:6c:59:7c:ca:cd:4d:a3:58:14:1d:98: 1e:24:48:5b:45:e3:c6:fc:53:52:61:61:15:d1:e1:3a:7d:cb: a1:cc:c4:a4:df:68:1d:90:7a:e0:a1:ce:75:d6:23:39:9c:c1: 7e:1f:90:a5:6c:f0:69:22:7f:a7:c7:7d:ed:9d:22:28:5f:56: 96:bc:c5:d8:05:63:b4:43:fe:f9:46:cf:6d:09:b1:e0:64:df: b1:aa:29:de:81:87:36:bf:93:ca:5c:96:db:ef:4e:f2:ee:96: fc:6a:3a:ec:1d:36:81:6f:45:b1:33:6a:1f:30:0b:6f:b8:43: 6f:fa:38:11:2f:3f:d3:09:1f:52:2b:cd:fb:11:b4:a7:3f:36: 54:2f:d2:8f:70:1e:8b:f5:7f:d3:b4:10:03:ad:f2:1c:14:69: ac:6e:04:33:70:4b:06:b6:23:53:3c:89:ca:d8:fe:d0:7c:ea: b9:1e:ff:d7:9e:42:bb:15:6a:42:0e:af:2b:37:01:a4:9f:7d: 04:85:e3:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCjpzYbED5e5A9YKlcdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjUxMjA2MTAwMTQwWhcNMjUxMjA3MTAwMTQwWjAzMTEwLwYDVQQD EygxNDkzNWIwNjNhOTMyNmI5OGM3MWM0MjE3MzU3OWE3MGQzMDFjMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlumTMnlp1cYHw6gOGGvKdrtd8Y3 0VtITudPeNvaUlUUp4rGx9ODvU/foc90JTBmDmbm0mRLHov6A7IGcS2AR5/wIuGD r3MNOyYKfk1Jucs7MlFRuapX36mg+9iZl4JW63EUoZ0QqFhprfC3kBmnInPzUjoM BEWSRC+X1mIP8i7ycs8J6Kba2PBO30csQBpjTJ3QpsN/byPBHOVuO1LsWHAeOzNK ewFFVc/UHYIsIiuEaym5hLXBmOJo7jmZDnTp3t2SGPw/eZtWDGh+aUdEgUVKwkN3 4r7Azoeli4MVL+NirTyqO6VrwAmheTeFIyTKtFzcvmbo88X0yNxDedlTpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSTWwY6kya5jHHEIXNXmnDTAcBtMB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefqWY6ft dXB9hdRUL+fdZIfgli1srMY4LrBngli9AJoU2OfWc9lzf269OTv5cfOi7C+vnWOb DUTCCjI7GmxZfMrNTaNYFB2YHiRIW0XjxvxTUmFhFdHhOn3LoczEpN9oHZB64KHO ddYjOZzBfh+QpWzwaSJ/p8d97Z0iKF9WlrzF2AVjtEP++UbPbQmx4GTfsaop3oGH Nr+TylyW2+9O8u6W/Go67B02gW9FsTNqHzALb7hDb/o4ES8/0wkfUivN+xG0pz82 VC/Sj3Aei/V/07QQA63yHBRprG4EM3BLBrYjUzyJytj+0HzquR7/155CuxVqQg6v KzcBpJ99BIXjdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:16 2025 by rpki-client