This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft File: evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json) Hash identifier: Q4+mqU6B4OfnV4gaq9VoR3xQQ65ljMd3lCVjiGe9m6U= Subject key identifier: FC:5A:80:1A:0D:40:FE:CD:4C:80:BD:D3:C3:2A:3F:B3:FC:B2:24:6E Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08 Certificate issuer: /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108 Certificate serial: 019AF19B9806D20BC01CCB6679C9B6317EB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:37 +0000 Manifest this update: Sat 06 Dec 2025 03:01:37 +0000 Manifest next update: Sun 07 Dec 2025 03:01:37 +0000 Files and hashes: 1: 2PmxlZigH_RytugJqtbpGxbWEyQ.roa (hash: 5SnKJAPtlCv0MT/aNUl9Fp/IGGdlUNcubIROh31IWqI=) 2: LsVqREgxEvpbs-pgSooNXLhfRcY.roa (hash: 0S+0r/0mz1CjD+30q6AYjUcjy/aYKxmGuL/Pwc5zhuQ=) 3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: /DruYSZfczKppaGXPy0sMjnFrFOUknG+cDORcEpjCNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:98:06:d2:0b:c0:1c:cb:66:79:c9:b6:31:7e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108 Validity Not Before: Dec 6 03:01:37 2025 GMT Not After : Dec 7 03:01:37 2025 GMT Subject: CN=fc5a801a0d40fecd4c80bdd3c32a3fb3fcb2246e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:55:47:0a:af:a1:a4:fa:4c:3e:ca:5c:9e: ec:5a:9a:02:4c:44:45:22:7c:f2:e6:b5:df:1d:c0: b9:2c:05:51:73:c6:6e:0d:c6:ac:c9:f1:ec:2c:2c: 5e:ae:b9:ec:f1:a0:fe:61:7e:a8:38:b4:5c:c2:74: 23:96:b8:77:7e:b1:44:ef:84:f1:9b:c9:fe:6b:37: 8a:3c:63:ca:79:0f:bd:0d:4e:85:df:a8:77:5a:34: 58:e5:62:ad:c7:d8:14:01:5e:13:72:d3:c2:7c:c9: 43:82:bd:47:13:70:c6:9e:b9:a9:ec:9d:3c:2b:2e: 35:76:65:f5:8c:c5:e3:a4:96:72:50:ae:5e:c5:45: 0c:c5:4b:19:4d:6e:f6:fa:70:38:d1:40:47:89:29: 9f:b7:61:c3:ce:d9:9c:c6:9f:4d:f0:9b:06:43:a2: c4:cd:13:f9:89:01:a6:42:9c:52:38:62:6f:fb:6c: 2d:fc:5d:1f:7b:82:3d:a6:44:e9:75:30:4e:0d:e9: 6a:bf:f0:f2:72:96:d3:98:bf:4a:0c:6b:ea:a8:e0: 2e:f7:ad:0f:81:4f:24:6d:dc:e6:da:67:71:f8:78: 95:96:58:a7:56:6d:fc:a9:87:e2:e9:69:45:38:40: 59:52:9c:88:54:7e:90:2b:80:71:ef:01:1a:91:08: ad:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5A:80:1A:0D:40:FE:CD:4C:80:BD:D3:C3:2A:3F:B3:FC:B2:24:6E X509v3 Authority Key Identifier: keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:4c:ee:2c:41:b2:33:63:f1:15:12:2d:ac:45:42:23:a2:bf: 2c:49:90:05:04:da:78:3c:0a:5b:8a:c1:20:52:de:4a:14:47: e2:13:33:00:32:6a:43:63:85:03:85:94:0c:bc:e1:84:ae:06: 6f:9a:70:df:25:ea:82:85:bc:50:ee:18:fb:d9:4b:41:c7:cc: 67:62:a6:fa:54:0b:f4:6e:19:ea:40:b6:9f:6a:b9:34:62:c5: 0d:38:e2:c5:e4:d0:a2:dc:c2:1a:09:f2:74:a4:dd:a5:ee:e6: e0:43:32:cd:5f:31:26:ff:1e:5d:ff:27:9d:5c:89:a1:aa:28: 7f:c1:17:e9:3f:85:7a:16:0e:88:36:ea:e9:e8:4e:5b:f1:c4: a7:4a:87:c5:e7:5d:fe:d3:b7:0b:dc:45:4d:ec:f4:a4:a2:53: de:6d:67:9c:61:e0:ea:48:ff:8d:dc:43:fc:f8:7d:57:9a:c9: 18:f3:9c:f5:5c:54:4d:15:fa:44:28:fd:bd:37:cf:74:04:52: 9a:6c:e1:6b:35:81:1a:ef:04:6e:a6:eb:60:a3:1a:45:e3:a4: ee:96:5f:ef:68:1f:10:bd:85:40:f7:8f:2f:45:83:79:d4:41: 28:a6:f7:42:3b:d1:3c:77:91:44:2c:a5:2f:7a:0a:75:f6:ab: 55:53:c6:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5gG0gvAHMtmecm2MX6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjY3NzllNjJiNDYxMjg4N2ZlNmY4ZDRlOWMwZTM3MzFm NmUxMDgwHhcNMjUxMjA2MDMwMTM3WhcNMjUxMjA3MDMwMTM3WjAzMTEwLwYDVQQD EyhmYzVhODAxYTBkNDBmZWNkNGM4MGJkZDNjMzJhM2ZiM2ZjYjIyNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/hVRwqvoaT6TD7KXJ7sWpoCTERF Inzy5rXfHcC5LAVRc8ZuDcasyfHsLCxerrns8aD+YX6oOLRcwnQjlrh3frFE74Tx m8n+azeKPGPKeQ+9DU6F36h3WjRY5WKtx9gUAV4TctPCfMlDgr1HE3DGnrmp7J08 Ky41dmX1jMXjpJZyUK5exUUMxUsZTW72+nA40UBHiSmft2HDztmcxp9N8JsGQ6LE zRP5iQGmQpxSOGJv+2wt/F0fe4I9pkTpdTBODelqv/DycpbTmL9KDGvqqOAu960P gU8kbdzm2mdx+HiVllinVm38qYfi6WlFOEBZUpyIVH6QK4Bx7wEakQityQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxagBoNQP7NTIC908MqP7P8siRuMB8GA1UdIwQY MBaAFHr2d55itGEoh/5vjU6cDjcx9uEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUt NzkwNzc1Yzc3OWM1LzEvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUtNzkwNzc1Yzc3OWM1 LzEvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwEzuLEGy M2PxFRItrEVCI6K/LEmQBQTaeDwKW4rBIFLeShRH4hMzADJqQ2OFA4WUDLzhhK4G b5pw3yXqgoW8UO4Y+9lLQcfMZ2Km+lQL9G4Z6kC2n2q5NGLFDTjixeTQotzCGgny dKTdpe7m4EMyzV8xJv8eXf8nnVyJoaoof8EX6T+FehYOiDbq6ehOW/HEp0qHxedd /tO3C9xFTez0pKJT3m1nnGHg6kj/jdxD/Ph9V5rJGPOc9VxUTRX6RCj9vTfPdARS mmzhazWBGu8EbqbrYKMaReOk7pZf72gfEL2FQPePL0WDedRBKKb3QjvRPHeRRCyl L3oKdfarVVPGhg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:37 2025 by rpki-client