This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json) Hash identifier: pVKiA9gBo2zGHmx+CR/WJnN8XlkU+jJj+zL5bKp5X7g= Subject key identifier: DA:35:E8:68:ED:84:2B:C9:49:FC:F1:31:0D:36:7C:28:68:72:6F:36 Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0 Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0 Certificate serial: 019AF1D237A98D5453BC4A3B064133B91E60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: 4lA26AkVb5WNQawk0QW8IdgtJR6EyPVJLjHPdgb7CD4=) 2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:37:a9:8d:54:53:bc:4a:3b:06:41:33:b9:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0 Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=da35e868ed842bc949fcf1310d367c2868726f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9a:de:e9:04:d2:bb:7c:db:b8:ab:b6:50:98: 2d:a2:a3:b0:d6:c5:8c:99:5a:fd:04:c6:c1:7d:1d: de:ef:d5:06:be:e4:f0:06:7b:31:62:0b:8f:ab:e8: 57:66:cf:10:db:62:ce:60:c9:9f:d3:a9:91:19:fc: 28:b1:87:2b:f4:75:7d:17:74:b9:8a:65:38:5f:df: 7e:db:18:f9:d7:57:f6:ee:cd:e7:f9:cb:00:d4:45: da:bf:fd:db:34:22:31:28:fa:d5:db:23:f3:2c:8d: c4:cd:97:b9:63:be:53:fd:b4:fd:dd:86:22:cb:2a: 0f:7e:fa:a5:80:4a:2d:ed:50:6c:98:98:a1:15:a5: e0:52:7d:7e:db:4a:c2:80:19:09:1e:9d:9a:d3:d7: 2b:39:4e:84:72:d5:fe:9a:61:ef:e6:59:d9:7f:75: 96:28:1f:fd:2c:bb:eb:4b:0e:1e:7f:6f:bc:77:5d: 2e:c9:48:4a:58:69:08:fb:60:a0:14:81:24:7c:3c: fd:57:7e:56:6b:31:27:07:09:01:c3:86:9e:de:5f: a6:89:b0:5b:3c:f4:ca:5c:84:57:52:7f:92:55:85: 08:af:bc:c5:0d:98:36:e8:4a:28:06:fc:65:fa:7a: fe:1d:da:b2:7d:4b:ea:27:a8:f8:44:c1:4f:01:cb: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:35:E8:68:ED:84:2B:C9:49:FC:F1:31:0D:36:7C:28:68:72:6F:36 X509v3 Authority Key Identifier: keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0a:28:87:2b:60:b9:4e:f4:75:41:c4:f3:d2:8a:35:7e:ef: 9c:ad:67:13:bb:06:be:de:00:de:93:7d:9c:fb:90:0f:1b:7d: 1f:a2:42:d8:33:af:14:eb:f6:4d:45:03:e6:6a:fc:37:d6:aa: 31:df:57:d6:5a:b6:ec:e2:88:0a:1b:d4:01:bb:3a:09:2d:83: 25:b9:99:6f:98:c4:51:21:68:2f:5a:56:16:13:62:1a:e9:e9: 4e:5a:f8:28:9f:50:85:52:c6:de:f5:98:96:56:29:1e:47:bf: 0a:a8:e9:6b:42:1d:ce:ce:50:da:eb:a5:9d:15:d5:e2:dd:0f: 6a:26:ef:34:0b:8f:b0:d9:89:d7:80:ee:d8:9b:0a:da:d0:11: d6:38:07:e9:f0:11:df:09:e9:bd:1d:2e:b4:41:0d:3a:21:1d: e9:7f:33:e2:ac:38:bc:0b:a7:ad:b9:92:07:1a:4a:a9:ba:7f: 4d:66:fb:8d:41:e8:33:f1:59:10:af:9a:e9:f7:d7:2d:4a:11: ff:2b:3d:6c:28:37:7b:b3:a7:bb:2e:60:45:9c:0c:11:7b:59: 34:2a:68:d0:c9:fa:10:a8:94:5c:a5:42:0c:eb:b9:69:bb:cf: ad:7e:76:22:28:cc:37:24:46:ee:eb:d3:af:58:67:fd:c3:57: 8d:fa:4c:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jepjVRTvEo7BkEzuR5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NGJkNTY1MzAxM2ZhN2NhMzRmNTIyODQzMDlhNjg4YjI0 OWU3YTAwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD EyhkYTM1ZTg2OGVkODQyYmM5NDlmY2YxMzEwZDM2N2MyODY4NzI2ZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpre6QTSu3zbuKu2UJgtoqOw1sWM mVr9BMbBfR3e79UGvuTwBnsxYguPq+hXZs8Q22LOYMmf06mRGfwosYcr9HV9F3S5 imU4X99+2xj511f27s3n+csA1EXav/3bNCIxKPrV2yPzLI3EzZe5Y75T/bT93YYi yyoPfvqlgEot7VBsmJihFaXgUn1+20rCgBkJHp2a09crOU6EctX+mmHv5lnZf3WW KB/9LLvrSw4ef2+8d10uyUhKWGkI+2CgFIEkfDz9V35WazEnBwkBw4ae3l+mibBb PPTKXIRXUn+SVYUIr7zFDZg26EooBvxl+nr+HdqyfUvqJ6j4RMFPAcsCJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNo16GjthCvJSfzxMQ02fChocm82MB8GA1UdIwQY MBaAFNRL1WUwE/p8o09SKEMJpoiySeegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2Mt YjUwMTI2NjIwMjBkLzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2MtYjUwMTI2NjIwMjBk LzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAoohytg uU70dUHE89KKNX7vnK1nE7sGvt4A3pN9nPuQDxt9H6JC2DOvFOv2TUUD5mr8N9aq Md9X1lq27OKIChvUAbs6CS2DJbmZb5jEUSFoL1pWFhNiGunpTlr4KJ9QhVLG3vWY llYpHke/Cqjpa0Idzs5Q2uulnRXV4t0PaibvNAuPsNmJ14Du2JsK2tAR1jgH6fAR 3wnpvR0utEENOiEd6X8z4qw4vAunrbmSBxpKqbp/TWb7jUHoM/FZEK+a6ffXLUoR /ys9bCg3e7Onuy5gRZwMEXtZNCpo0Mn6EKiUXKVCDOu5abvPrX52IijMNyRG7uvT r1hn/cNXjfpMxA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:09 2025 by rpki-client