This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft File: Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft (raw, json) Hash identifier: fVXJbgPF5Ih03aND2wTI78DTiqUkks/ZGh+FE4/uSVE= Subject key identifier: C4:B0:74:0A:EA:2A:A2:FC:56:7F:67:17:02:62:2C:A1:4C:73:6F:5A Authority key identifier: 12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50 Certificate issuer: /CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50 Certificate serial: 019AF12E1AB991C61E560EF4A120395795F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft Manifest number: 0360 Signing time: Sat 06 Dec 2025 01:02:01 +0000 Manifest this update: Sat 06 Dec 2025 01:02:01 +0000 Manifest next update: Sun 07 Dec 2025 01:02:01 +0000 Files and hashes: 1: Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl (hash: SjCJlfG4B6zUoR91RTD2sb7gOJZG9ALDp/BQwa9bskw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1a:b9:91:c6:1e:56:0e:f4:a1:20:39:57:95:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50 Validity Not Before: Dec 6 01:02:01 2025 GMT Not After : Dec 7 01:02:01 2025 GMT Subject: CN=c4b0740aea2aa2fc567f671702622ca14c736f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:2a:36:87:f4:e4:96:18:ee:c8:bf:0a:de: 7e:ef:9a:a5:62:6d:8a:aa:d2:83:51:91:48:bf:92: 32:d9:d3:d7:fb:20:ad:cc:17:31:6e:ac:c1:c9:f9: fb:b1:82:11:8c:f1:1a:a7:29:a3:c3:2e:82:7b:74: fa:2e:e5:44:74:77:55:e0:69:a0:5a:78:53:66:9f: 36:46:ee:a0:f2:2a:0b:9c:a4:06:a4:08:45:4d:9f: d6:d3:70:fe:1f:4c:9b:a9:40:f0:21:9d:01:9c:a5: 83:fa:78:8d:49:dc:08:3b:f7:59:ea:2c:a5:f5:c6: 9a:02:1d:ce:92:a5:ee:0b:88:86:04:20:8a:c0:bc: 5d:3e:92:f4:44:49:b2:8b:c7:c8:a7:df:57:42:99: 64:b0:5f:a7:c0:6f:79:59:be:a9:f2:da:5c:f3:a4: 8e:f7:66:08:b5:68:c7:e7:7c:d0:1d:7b:9b:f4:11: 1d:b8:8e:d8:b5:e1:b1:c7:86:19:97:64:8a:ca:ac: 72:e1:5f:96:35:66:a0:54:1d:ed:6f:de:2a:55:15: 27:e1:c2:2a:07:3a:6e:85:4b:22:3a:2c:df:2f:cf: 11:11:e6:c2:80:f4:64:cd:f4:d6:cf:05:f3:b8:4a: 9c:6a:86:73:b1:a5:6c:91:59:aa:3e:a8:11:27:6a: 84:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B0:74:0A:EA:2A:A2:FC:56:7F:67:17:02:62:2C:A1:4C:73:6F:5A X509v3 Authority Key Identifier: keyid:12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ea:ec:af:29:07:51:d7:51:ee:44:23:99:07:f3:58:c0:b2: 48:24:97:58:39:a9:94:01:6d:bd:b6:be:46:9f:de:35:a6:ab: 3c:e5:2b:e9:1b:de:88:46:01:e0:63:1f:fd:be:f6:59:05:aa: f7:a0:6c:bb:48:b7:6c:38:16:7b:ab:38:bc:ea:fe:be:7a:34: 88:2d:69:f6:70:04:e6:b3:10:3c:70:00:45:9c:09:b2:bc:5d: 0a:97:0b:b1:d3:67:b4:ec:31:2f:1e:9a:bd:0b:c6:d9:02:ee: 9f:08:12:63:3f:1d:a4:d3:98:54:00:88:a3:63:42:7d:2e:5a: ba:c7:94:a9:2f:c9:1e:73:b1:3d:91:d6:9e:0e:7a:53:e9:f4: 06:09:22:57:75:2f:55:ae:51:8b:84:cc:3a:39:8b:a8:1b:40: dc:a3:52:ed:48:90:6c:91:78:f9:84:1e:68:da:8b:bf:09:1e: 3d:c1:ff:2a:95:51:c2:0a:b7:34:19:47:f8:4b:a7:52:d1:a1: f1:08:24:fe:a3:c1:f9:80:1d:65:1e:16:a6:a6:b5:21:c7:3c: 0d:4f:ab:b4:2d:a8:8f:47:8b:81:53:5d:b5:b8:ff:a6:09:9e: 2d:e0:ae:f2:ce:8c:89:ad:4d:e8:17:c4:1a:1e:78:99:4e:fc: 10:a3:a2:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhq5kcYeVg70oSA5V5X1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZmYzZWQ0ZmI1NzU5MmVkY2FmNWIyYjc2MzRhNTYwNTQw NDNjNTAwHhcNMjUxMjA2MDEwMjAxWhcNMjUxMjA3MDEwMjAxWjAzMTEwLwYDVQQD EyhjNGIwNzQwYWVhMmFhMmZjNTY3ZjY3MTcwMjYyMmNhMTRjNzM2ZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz60qNof05JYY7si/Ct5+75qlYm2K qtKDUZFIv5Iy2dPX+yCtzBcxbqzByfn7sYIRjPEapymjwy6Ce3T6LuVEdHdV4Gmg WnhTZp82Ru6g8ioLnKQGpAhFTZ/W03D+H0ybqUDwIZ0BnKWD+niNSdwIO/dZ6iyl 9caaAh3OkqXuC4iGBCCKwLxdPpL0REmyi8fIp99XQplksF+nwG95Wb6p8tpc86SO 92YItWjH53zQHXub9BEduI7YteGxx4YZl2SKyqxy4V+WNWagVB3tb94qVRUn4cIq BzpuhUsiOizfL88REebCgPRkzfTWzwXzuEqcaoZzsaVskVmqPqgRJ2qEMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSwdArqKqL8Vn9nFwJiLKFMc29aMB8GA1UdIwQY MBaAFBL/PtT7V1ku3K9bK3Y0pWBUBDxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xNGU1NjEtOGZiNi00NTQ0LTk0Yjct YjBhMDA3YzIyNGQ0LzEvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xNGU1NjEtOGZiNi00NTQ0LTk0YjctYjBhMDA3YzIyNGQ0 LzEvRXY4LTFQdFhXUzdjcjFzcmRqU2xZRlFFUEZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqersrykH UddR7kQjmQfzWMCySCSXWDmplAFtvba+Rp/eNaarPOUr6RveiEYB4GMf/b72WQWq 96Bsu0i3bDgWe6s4vOr+vno0iC1p9nAE5rMQPHAARZwJsrxdCpcLsdNntOwxLx6a vQvG2QLunwgSYz8dpNOYVACIo2NCfS5auseUqS/JHnOxPZHWng56U+n0BgkiV3Uv Va5Ri4TMOjmLqBtA3KNS7UiQbJF4+YQeaNqLvwkePcH/KpVRwgq3NBlH+EunUtGh 8Qgk/qPB+YAdZR4Wpqa1Icc8DU+rtC2oj0eLgVNdtbj/pgmeLeCu8s6Mia1N6BfE Gh54mU78EKOiuA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:58 2025 by rpki-client