This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft File: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json) Hash identifier: UrZxlnQJDAYRws86dXdaUg/6LVKWsdqESycCuvfFw6A= Subject key identifier: C4:9F:69:A2:BA:96:AA:8A:3F:64:66:7E:B7:EC:24:48:98:71:B8:47 Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57 Certificate issuer: /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57 Certificate serial: 019AF088B51EC82C6DD726E28410026F7358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft Manifest number: 0E40 Signing time: Fri 05 Dec 2025 22:01:22 +0000 Manifest this update: Fri 05 Dec 2025 22:01:22 +0000 Manifest next update: Sat 06 Dec 2025 22:01:22 +0000 Files and hashes: 1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: ipH/ixgZ1aqqNHmAX8yIKB/TyFM0vYIcmQoZIbkf58M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b5:1e:c8:2c:6d:d7:26:e2:84:10:02:6f:73:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57 Validity Not Before: Dec 5 22:01:22 2025 GMT Not After : Dec 6 22:01:22 2025 GMT Subject: CN=c49f69a2ba96aa8a3f64667eb7ec24489871b847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:8d:b3:16:5d:fb:ea:b5:83:82:1c:7a:f7: 82:3b:1b:4d:c8:e0:b0:b1:6c:3c:d0:0e:aa:b5:ea: 8f:55:04:4a:b6:d7:01:89:31:2d:c5:ae:97:66:bb: b0:97:bf:0f:eb:cb:32:f3:5a:98:ef:1f:2e:a0:47: 71:3a:f0:0f:cb:58:68:25:09:6f:dc:c7:e7:f2:2e: 26:b7:fa:d6:29:31:f5:f2:61:80:96:aa:8a:7b:2d: 44:33:32:60:37:87:e1:c1:83:6a:7f:5f:10:77:27: 2d:d1:6f:37:af:48:7b:49:c5:32:d0:22:a1:38:12: 17:ce:c5:cf:01:64:ec:f4:d7:48:5a:ee:07:1b:d9: a2:6a:e9:da:65:c7:95:05:3f:14:57:f6:fc:8a:eb: 27:26:b2:9c:e3:33:71:6f:e2:ea:50:fe:aa:69:34: 14:f2:16:f8:74:9c:5c:e9:df:30:d4:dd:b9:92:41: 0d:9b:dd:0e:82:8d:1c:7e:c5:0d:44:28:de:72:6e: 5f:35:f2:ca:7f:cb:46:e6:c4:70:5e:59:ec:df:c1: 95:9f:a5:b9:92:c9:6b:a2:69:a5:d9:30:93:74:8b: ed:37:60:97:a4:b7:b6:d8:0b:3b:c0:24:fa:bd:87: 45:18:af:3b:c7:57:4f:d6:ad:be:4c:a8:7c:2d:bd: 87:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9F:69:A2:BA:96:AA:8A:3F:64:66:7E:B7:EC:24:48:98:71:B8:47 X509v3 Authority Key Identifier: keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:33:4c:48:bb:d2:85:63:d3:0b:83:a0:01:4b:a4:52:78:1c: dc:b1:e6:7c:53:80:58:69:3d:eb:ed:28:3e:84:63:eb:9d:99: 69:58:0c:a1:df:37:ab:57:e5:df:ed:0f:81:26:fe:f1:04:7e: 3d:43:10:d6:c4:2a:32:83:62:92:e0:c4:09:1c:f7:81:c5:5e: b4:cd:6b:37:8f:9d:97:e8:4a:98:1c:2f:09:62:d4:b3:66:3c: 02:89:df:62:1c:bd:2d:d1:d1:4c:f3:63:76:b1:a0:68:a4:dd: 2f:0f:27:95:5e:7b:c2:48:4c:3c:97:0f:fb:b2:36:e4:fe:80: c9:5c:b3:5d:b4:0b:f0:9f:9d:62:82:e0:db:e0:48:d3:35:55: b9:21:3b:8d:06:c0:a8:f4:48:d1:48:be:be:90:68:ee:6b:7d: 3b:58:55:22:b1:04:32:76:55:eb:44:e8:63:ba:6f:93:63:d7: dc:34:c5:6f:eb:79:25:8a:2f:36:2e:fa:4c:8c:fe:74:09:87: f9:36:ea:4c:3e:c7:c6:d9:9f:15:71:21:61:f7:b8:b4:5d:54: 6d:22:f8:39:11:ef:22:2b:14:92:ea:94:b8:3d:0d:05:df:aa: bb:7e:ba:df:1d:5b:b2:5c:b8:cf:c5:92:a8:67:1d:ef:52:a4: 73:3c:50:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLUeyCxt1ybihBACb3NYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZmJlNGFhZGU0YTdlYThjMDIzN2ZjYmY0MDI3NDg2MGE0 MGVjNTcwHhcNMjUxMjA1MjIwMTIyWhcNMjUxMjA2MjIwMTIyWjAzMTEwLwYDVQQD EyhjNDlmNjlhMmJhOTZhYThhM2Y2NDY2N2ViN2VjMjQ0ODk4NzFiODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNuNsxZd++q1g4IceveCOxtNyOCw sWw80A6qteqPVQRKttcBiTEtxa6XZruwl78P68sy81qY7x8uoEdxOvAPy1hoJQlv 3Mfn8i4mt/rWKTH18mGAlqqKey1EMzJgN4fhwYNqf18Qdyct0W83r0h7ScUy0CKh OBIXzsXPAWTs9NdIWu4HG9miaunaZceVBT8UV/b8iusnJrKc4zNxb+LqUP6qaTQU 8hb4dJxc6d8w1N25kkENm90Ogo0cfsUNRCjecm5fNfLKf8tG5sRwXlns38GVn6W5 kslromml2TCTdIvtN2CXpLe22As7wCT6vYdFGK87x1dP1q2+TKh8Lb2HGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSfaaK6lqqKP2RmfrfsJEiYcbhHMB8GA1UdIwQY MBaAFBL75KreSn6owCN/y/QCdIYKQOxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZmRjNTYtOTUwZS00OTljLTg4NmQt NGJhOGQ2ZTJkOGRlLzEvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9iZmRjNTYtOTUwZS00OTljLTg4NmQtNGJhOGQ2ZTJkOGRl LzEvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTNMSLvS hWPTC4OgAUukUngc3LHmfFOAWGk96+0oPoRj652ZaVgMod83q1fl3+0PgSb+8QR+ PUMQ1sQqMoNikuDECRz3gcVetM1rN4+dl+hKmBwvCWLUs2Y8AonfYhy9LdHRTPNj drGgaKTdLw8nlV57wkhMPJcP+7I25P6AyVyzXbQL8J+dYoLg2+BI0zVVuSE7jQbA qPRI0Ui+vpBo7mt9O1hVIrEEMnZV60ToY7pvk2PX3DTFb+t5JYovNi76TIz+dAmH +TbqTD7HxtmfFXEhYfe4tF1UbSL4ORHvIisUkuqUuD0NBd+qu3663x1bsly4z8WS qGcd71KkczxQzA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:27 2025 by rpki-client