This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft File: EVNfj6S19RUz1yTq-Q26mXFfxvw.mft (raw, json) Hash identifier: S8/pXNczsSsUTly7ANo0PjCm9GcxZ7uX8Pab1TVMqa8= Subject key identifier: 74:B3:C5:11:2D:58:DA:50:28:6D:24:06:92:9E:A8:44:BE:CC:1B:C0 Authority key identifier: 11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC Certificate issuer: /CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc Certificate serial: 019AF208FFE82293ACB7E12916C76B60FEF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: EVNfj6S19RUz1yTq-Q26mXFfxvw.crl (hash: H7li3C0njPTkPolEVvJZbJQ6Q8CJqYbyuivARatT8gE=) 2: Qpu6vaOAY5n2mIT4E3Vh72x5kkE.roa (hash: P0y6XucznI/69rbHwQvBGeYNmc4RVWARo9Yt1RUz3AY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ff:e8:22:93:ac:b7:e1:29:16:c7:6b:60:fe:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=74b3c5112d58da50286d2406929ea844becc1bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:f9:7d:5d:5e:b5:6c:3e:3c:3a:cf:4e:8f: 3a:3c:1e:19:38:05:56:9c:89:f0:df:34:51:01:14: a8:01:91:69:00:ff:cd:29:d3:e9:e6:3b:e5:c6:95: 29:bc:67:20:24:79:0b:58:44:ea:97:eb:b1:01:18: 31:10:ab:a7:d7:c1:ff:56:4e:3e:26:f9:da:67:25: 31:54:76:b0:88:6d:2b:db:4e:7d:2b:20:5c:94:3e: 5b:5d:bb:59:d9:2f:f4:0d:e1:31:8e:2c:c6:27:51: 87:61:97:a5:54:9a:75:79:6b:f2:98:71:41:55:6c: ef:d0:68:f6:49:99:62:32:c9:b8:a2:b2:0f:bc:e3: 24:c0:3d:45:a2:50:96:52:c9:9f:90:04:d1:a4:a8: f2:71:b9:da:66:86:a9:a2:67:80:00:c5:53:20:72: 01:06:ae:a5:c3:c0:37:7e:71:4e:f0:10:47:01:f0: b6:65:ee:0a:2f:7e:36:ae:00:c8:ca:1c:d4:9d:eb: 37:f1:53:0f:92:36:b5:f7:14:7e:59:51:67:2e:21: 22:6b:8d:39:a9:dd:cf:09:5c:f1:21:70:a5:a8:61: ed:b6:22:48:08:43:e5:ee:bb:a5:e2:65:bc:0c:23: 83:b2:e3:71:ee:bc:d6:00:c6:ef:ee:57:8d:93:5c: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B3:C5:11:2D:58:DA:50:28:6D:24:06:92:9E:A8:44:BE:CC:1B:C0 X509v3 Authority Key Identifier: keyid:11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c9:73:1a:92:91:90:bf:f4:ca:ae:83:8b:9f:cc:cc:78:e6: 1d:b9:d4:22:72:64:cb:30:02:a9:69:99:8c:c2:ea:75:96:0a: fc:8a:5d:2e:81:d0:80:9e:ec:9e:d9:1c:43:aa:8d:df:fe:7c: 2d:8d:b4:4c:24:df:99:a4:8b:3f:6b:29:49:56:27:dc:17:1c: 85:55:7e:90:d8:6d:eb:b5:46:bc:60:c6:ba:db:ec:42:b3:11: b0:f1:23:a7:9f:bc:00:61:02:50:51:55:6a:e1:64:b7:28:1d: 9d:98:9b:ab:ef:a1:b9:36:6d:4b:4f:15:14:fc:cf:58:ca:17: 73:08:aa:1e:72:55:91:27:59:6a:14:8d:71:2a:9d:a1:ed:84: dd:52:b5:40:bf:02:31:69:8a:10:82:f9:01:b9:17:ce:b4:75: 91:fe:98:f2:58:14:74:77:c8:bc:00:79:4b:7c:bf:42:72:6c: 0f:42:29:26:3e:3f:9b:b1:b2:16:e3:a1:ea:58:ab:d2:fd:11: 44:5b:15:a5:3c:6d:e5:ef:47:b3:0b:bf:f7:4c:1c:67:73:c9: 99:41:06:cd:3d:c5:fd:72:0b:fb:86:80:b2:bd:e9:88:70:ac: a0:d0:c0:87:6a:c7:37:63:90:8e:2d:07:60:2e:98:e8:4d:62: 17:c4:be:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP/oIpOst+EpFsdrYP74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNTM1ZjhmYTRiNWY1MTUzM2Q3MjRlYWY5MGRiYTk5NzE1 ZmM2ZmMwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD Eyg3NGIzYzUxMTJkNThkYTUwMjg2ZDI0MDY5MjllYTg0NGJlY2MxYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlf5fV1etWw+PDrPTo86PB4ZOAVW nInw3zRRARSoAZFpAP/NKdPp5jvlxpUpvGcgJHkLWETql+uxARgxEKun18H/Vk4+ JvnaZyUxVHawiG0r2059KyBclD5bXbtZ2S/0DeExjizGJ1GHYZelVJp1eWvymHFB VWzv0Gj2SZliMsm4orIPvOMkwD1FolCWUsmfkATRpKjycbnaZoapomeAAMVTIHIB Bq6lw8A3fnFO8BBHAfC2Ze4KL342rgDIyhzUnes38VMPkja19xR+WVFnLiEia405 qd3PCVzxIXClqGHttiJICEPl7rul4mW8DCODsuNx7rzWAMbv7leNk1wgbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSzxREtWNpQKG0kBpKeqES+zBvAMB8GA1UdIwQY MBaAFBFTX4+ktfUVM9ck6vkNuplxX8b8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZOZmo2UzE5UlV6MXlUcS1RMjZtWEZmeHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wNmQ2ODMtNWE1NS00MmFkLTkxZDkt NWYyZWU1Y2U0NTgxLzEvRVZOZmo2UzE5UlV6MXlUcS1RMjZtWEZmeHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8wNmQ2ODMtNWE1NS00MmFkLTkxZDktNWYyZWU1Y2U0NTgx LzEvRVZOZmo2UzE5UlV6MXlUcS1RMjZtWEZmeHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATclzGpKR kL/0yq6Di5/MzHjmHbnUInJkyzACqWmZjMLqdZYK/IpdLoHQgJ7sntkcQ6qN3/58 LY20TCTfmaSLP2spSVYn3BcchVV+kNht67VGvGDGutvsQrMRsPEjp5+8AGECUFFV auFktygdnZibq++huTZtS08VFPzPWMoXcwiqHnJVkSdZahSNcSqdoe2E3VK1QL8C MWmKEIL5AbkXzrR1kf6Y8lgUdHfIvAB5S3y/QnJsD0IpJj4/m7GyFuOh6lir0v0R RFsVpTxt5e9Hswu/90wcZ3PJmUEGzT3F/XIL+4aAsr3piHCsoNDAh2rHN2OQji0H YC6Y6E1iF8S+3w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:38 2025 by rpki-client