This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft File: Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft (raw, json) Hash identifier: BVHcwUSRngf6aV8Vbp62OhRpeKS2VJl2hkq4y0xPRjk= Subject key identifier: BD:C3:FF:2D:F0:27:CD:66:C9:AF:DC:B7:7E:A4:48:F4:36:CD:06:58 Authority key identifier: 12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50 Certificate issuer: /CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50 Certificate serial: 019B34C5A1B477644A1DFF2D35514D74AE05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft Manifest number: 0383 Signing time: Fri 19 Dec 2025 04:02:05 +0000 Manifest this update: Fri 19 Dec 2025 04:02:05 +0000 Manifest next update: Sat 20 Dec 2025 04:02:05 +0000 Files and hashes: 1: Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl (hash: t9S+CNSiZz9vWhE3noa6nzZdf93aEd+HGS6m9zE4Ay8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:a1:b4:77:64:4a:1d:ff:2d:35:51:4d:74:ae:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50 Validity Not Before: Dec 19 04:02:05 2025 GMT Not After : Dec 20 04:02:05 2025 GMT Subject: CN=bdc3ff2df027cd66c9afdcb77ea448f436cd0658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:00:02:6b:ec:60:ec:d8:1b:67:01:56:45: 73:0a:2b:b8:42:fd:b3:93:11:e9:52:9d:3b:8f:58: 9d:b9:fb:78:73:93:8e:7c:13:cf:32:72:af:0b:b7: 2c:50:f0:6e:26:05:28:d1:07:4c:38:0b:20:99:c9: f3:c5:4c:6d:1f:79:79:b0:af:50:51:f3:bd:da:b3: f3:38:24:17:16:d6:22:0d:a2:c1:9d:e5:e6:01:df: 25:36:e8:2c:43:ee:f0:dd:be:7c:26:12:7c:6f:ce: da:83:9b:31:95:e7:1e:dc:72:89:67:b8:95:c3:26: c6:56:a8:cd:04:a4:88:49:24:eb:dc:72:02:29:0d: 01:5b:d1:94:fc:4e:c0:cd:19:e0:99:5e:40:3e:ad: 35:f3:45:dc:c7:de:5a:f7:bb:9c:a5:bc:e6:91:50: 0b:c0:c5:54:25:f7:1b:d7:65:ae:47:f7:0c:46:cf: 60:5c:41:ff:72:ca:21:cb:14:3d:6f:0d:df:27:30: 00:9f:0e:16:60:a2:84:75:08:88:ee:42:4b:94:1b: 38:a7:c0:c8:ca:be:cf:9d:c5:95:33:5a:40:09:70: 68:c8:79:14:8a:43:77:6f:3d:f5:37:e7:a5:91:f6: 99:2d:a0:25:f2:c0:7c:0a:04:ab:18:fe:9e:70:0c: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C3:FF:2D:F0:27:CD:66:C9:AF:DC:B7:7E:A4:48:F4:36:CD:06:58 X509v3 Authority Key Identifier: keyid:12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:00:26:4e:37:8c:79:25:f1:54:90:d7:4c:74:52:e2:73:31: 11:f7:bc:a7:fa:14:cb:a4:85:4d:f8:75:ae:a7:2a:d1:cc:be: a3:a2:06:7b:08:58:cf:e7:d5:35:64:24:6d:15:12:20:10:6d: 11:c4:a2:bd:ff:d9:08:c7:0b:a0:74:82:da:e3:92:9c:12:3e: d4:85:7a:5b:2f:b0:10:e4:81:5e:5a:f2:7e:a9:be:3b:83:d0: 85:7d:87:cb:e5:29:97:1d:ce:50:79:fe:b1:b0:59:70:b7:85: e2:8f:15:a8:d2:73:53:c3:0c:c0:b6:48:2a:7d:a0:3c:bf:e8: bb:61:01:e9:ef:81:19:44:0d:80:1e:57:cf:8a:72:72:c6:f2: 4b:b9:d6:55:67:e1:45:ce:7c:d0:c5:f2:69:aa:c3:cb:79:99: 9d:7f:ea:e1:44:66:33:28:5f:94:24:6a:aa:09:86:d2:19:72: f6:23:a8:5d:4f:44:82:19:09:0a:8c:1c:fa:82:ac:df:c4:c3: 60:8f:e3:bb:dc:9a:7a:d7:42:53:09:1c:e7:a7:e0:15:34:f9: d9:d6:e4:1e:76:db:26:e5:d7:28:38:ae:98:25:d7:f8:63:9a: 46:f4:dd:f8:9b:f8:4d:43:68:1c:6b:c1:d5:1a:d1:99:37:5b: 23:9a:59:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xaG0d2RKHf8tNVFNdK4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZmYzZWQ0ZmI1NzU5MmVkY2FmNWIyYjc2MzRhNTYwNTQw NDNjNTAwHhcNMjUxMjE5MDQwMjA1WhcNMjUxMjIwMDQwMjA1WjAzMTEwLwYDVQQD EyhiZGMzZmYyZGYwMjdjZDY2YzlhZmRjYjc3ZWE0NDhmNDM2Y2QwNjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy4AAmvsYOzYG2cBVkVzCiu4Qv2z kxHpUp07j1iduft4c5OOfBPPMnKvC7csUPBuJgUo0QdMOAsgmcnzxUxtH3l5sK9Q UfO92rPzOCQXFtYiDaLBneXmAd8lNugsQ+7w3b58JhJ8b87ag5sxlece3HKJZ7iV wybGVqjNBKSISSTr3HICKQ0BW9GU/E7AzRngmV5APq0180Xcx95a97ucpbzmkVAL wMVUJfcb12WuR/cMRs9gXEH/csohyxQ9bw3fJzAAnw4WYKKEdQiI7kJLlBs4p8DI yr7PncWVM1pACXBoyHkUikN3bz31N+elkfaZLaAl8sB8CgSrGP6ecAy73wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3D/y3wJ81mya/ct36kSPQ2zQZYMB8GA1UdIwQY MBaAFBL/PtT7V1ku3K9bK3Y0pWBUBDxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xNGU1NjEtOGZiNi00NTQ0LTk0Yjct YjBhMDA3YzIyNGQ0LzEvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xNGU1NjEtOGZiNi00NTQ0LTk0YjctYjBhMDA3YzIyNGQ0 LzEvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAAmTjeM eSXxVJDXTHRS4nMxEfe8p/oUy6SFTfh1rqcq0cy+o6IGewhYz+fVNWQkbRUSIBBt EcSivf/ZCMcLoHSC2uOSnBI+1IV6Wy+wEOSBXlryfqm+O4PQhX2Hy+Uplx3OUHn+ sbBZcLeF4o8VqNJzU8MMwLZIKn2gPL/ou2EB6e+BGUQNgB5Xz4pycsbyS7nWVWfh Rc580MXyaarDy3mZnX/q4URmMyhflCRqqgmG0hly9iOoXU9EghkJCowc+oKs38TD YI/ju9yaetdCUwkc56fgFTT52dbkHnbbJuXXKDiumCXX+GOaRvTd+Jv4TUNoHGvB 1RrRmTdbI5pZ9g== -----END CERTIFICATE-----Generated at Fri Dec 19 06:26:48 2025 by rpki-client