This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json) Hash identifier: Dk92VEjGrYAlOzjClFtuWkmp47U8DlX5Pe/awsGbh7k= Subject key identifier: 28:1E:CE:C1:F1:B3:02:62:E0:23:D5:B6:82:C4:BC:D3:9D:9F:32:05 Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0 Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0 Certificate serial: 019B3B3502C1D67DDC4D44F6082228047E54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 10:01:28 +0000 Manifest this update: Sat 20 Dec 2025 10:01:28 +0000 Manifest next update: Sun 21 Dec 2025 10:01:28 +0000 Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: gmbgrxSP6Nlel1f8k6pJV+8eFf/jbSxTdiX6AB+ThB0=) 2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:02:c1:d6:7d:dc:4d:44:f6:08:22:28:04:7e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0 Validity Not Before: Dec 20 10:01:28 2025 GMT Not After : Dec 21 10:01:28 2025 GMT Subject: CN=281ecec1f1b30262e023d5b682c4bcd39d9f3205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:79:ab:ee:10:fa:5d:90:27:24:49:5b:ae:73: 28:94:cf:c6:50:b9:22:cb:9d:f6:05:1c:e9:58:4f: 94:b4:8c:e2:ed:4c:20:45:78:bf:d4:96:d6:67:74: ee:52:4a:5a:26:c7:1f:ae:24:8e:6c:63:29:8a:3d: 29:a3:2b:a0:ab:71:77:77:c5:bb:a8:0b:90:a2:d7: d5:7b:04:db:ce:fc:73:54:2d:ce:eb:78:16:b9:0b: 7d:e8:ae:e0:e0:ad:d2:95:8a:1c:26:03:99:be:d5: e7:6d:5a:43:b5:55:ad:28:a9:2e:f4:8c:a7:37:e7: 46:9f:27:cd:af:e3:f0:00:2c:b0:ce:4b:fd:07:06: 80:44:b0:6c:5a:6c:36:83:2f:56:13:20:0b:4b:23: e2:e3:b6:06:7c:4d:f3:51:a3:b4:2b:91:2e:2f:4a: 67:fa:c6:ae:a1:86:d5:bf:80:c9:f5:5f:44:a8:9b: 5c:f8:76:37:ee:b8:3b:a1:59:39:cf:f1:5e:74:dd: 6b:8f:f0:88:c0:ca:58:1f:8e:34:74:dd:17:81:d7: 01:07:29:12:bd:ee:f7:ff:e8:bb:f5:ba:4c:0e:22: 37:61:ec:2c:2a:67:25:96:a7:07:1b:1f:35:1a:26: 28:1e:30:de:c9:8a:77:10:ea:f5:8f:38:92:41:11: 87:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1E:CE:C1:F1:B3:02:62:E0:23:D5:B6:82:C4:BC:D3:9D:9F:32:05 X509v3 Authority Key Identifier: keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d0:92:d2:a2:00:ba:af:7b:80:93:06:e4:c4:8c:7e:7c:31: 64:a4:12:13:2d:a0:1c:94:a2:ce:3c:69:42:24:b4:7a:91:1e: 34:f9:6b:43:7c:a5:89:06:af:4c:5e:07:2c:1d:01:f5:d8:a4: 38:29:68:d7:96:af:de:a6:57:e7:4a:b3:f1:2b:b9:63:0f:09: f6:31:39:86:31:9a:bf:92:aa:15:ad:a9:9e:26:26:04:d8:86: b2:24:5f:67:39:be:b6:66:c6:f6:4e:c3:55:d7:06:77:24:6f: aa:69:c3:e0:96:e4:95:52:13:79:bd:6d:1c:ae:32:b8:06:48: c0:41:96:f1:67:1f:90:e2:f2:1b:bc:71:2c:17:bd:28:8d:e1: 6a:56:5d:7e:00:48:0d:11:7a:2c:f8:f4:15:72:f6:67:1a:53: 60:65:44:0b:b0:cb:c5:e4:90:aa:e4:9c:62:ef:18:60:71:e8: d8:f0:38:fd:7c:11:a0:c0:82:66:0e:e1:f5:2e:d3:24:6c:96: 95:95:91:f9:d0:a1:8b:5f:66:e7:a1:49:10:7e:f2:d9:96:4c: f6:15:c5:31:cf:e2:c0:75:8b:66:c2:5c:c8:5e:66:a3:85:d8: 5a:90:83:ff:48:92:a3:19:b3:23:a8:d3:09:70:0a:79:6a:fe: 25:97:df:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQLB1n3cTUT2CCIoBH5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NGJkNTY1MzAxM2ZhN2NhMzRmNTIyODQzMDlhNjg4YjI0 OWU3YTAwHhcNMjUxMjIwMTAwMTI4WhcNMjUxMjIxMTAwMTI4WjAzMTEwLwYDVQQD EygyODFlY2VjMWYxYjMwMjYyZTAyM2Q1YjY4MmM0YmNkMzlkOWYzMjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3mr7hD6XZAnJElbrnMolM/GULki y532BRzpWE+UtIzi7UwgRXi/1JbWZ3TuUkpaJscfriSObGMpij0poyugq3F3d8W7 qAuQotfVewTbzvxzVC3O63gWuQt96K7g4K3SlYocJgOZvtXnbVpDtVWtKKku9Iyn N+dGnyfNr+PwACywzkv9BwaARLBsWmw2gy9WEyALSyPi47YGfE3zUaO0K5EuL0pn +sauoYbVv4DJ9V9EqJtc+HY37rg7oVk5z/FedN1rj/CIwMpYH440dN0XgdcBBykS ve73/+i79bpMDiI3YewsKmcllqcHGx81GiYoHjDeyYp3EOr1jziSQRGHOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgezsHxswJi4CPVtoLEvNOdnzIFMB8GA1UdIwQY MBaAFNRL1WUwE/p8o09SKEMJpoiySeegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2Mt YjUwMTI2NjIwMjBkLzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2MtYjUwMTI2NjIwMjBk LzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9CS0qIA uq97gJMG5MSMfnwxZKQSEy2gHJSizjxpQiS0epEeNPlrQ3yliQavTF4HLB0B9dik OClo15av3qZX50qz8Su5Yw8J9jE5hjGav5KqFa2pniYmBNiGsiRfZzm+tmbG9k7D VdcGdyRvqmnD4JbklVITeb1tHK4yuAZIwEGW8WcfkOLyG7xxLBe9KI3halZdfgBI DRF6LPj0FXL2ZxpTYGVEC7DLxeSQquScYu8YYHHo2PA4/XwRoMCCZg7h9S7TJGyW lZWR+dChi19m56FJEH7y2ZZM9hXFMc/iwHWLZsJcyF5mo4XYWpCD/0iSoxmzI6jT CXAKeWr+JZff6w== -----END CERTIFICATE-----Generated at Sat Dec 20 11:26:52 2025 by rpki-client