This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft File: EVwEDsl1QyAjbNymTjk5C93jYmo.mft (raw, json) Hash identifier: zDLuZmOKf+E9wQLMZtglZgwqvY0g8SsPhEIL9wvuVXA= Subject key identifier: 5F:10:17:D5:2C:2B:85:3D:53:23:D5:E0:86:30:81:BD:B5:AA:F1:7F Authority key identifier: 11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A Certificate issuer: /CN=115c040ec9754320236cdca64e39390bdde3626a Certificate serial: 019AF35270EC9E4F8C592D9283176A61CFE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft Manifest number: 0C43 Signing time: Sat 06 Dec 2025 11:00:57 +0000 Manifest this update: Sat 06 Dec 2025 11:00:57 +0000 Manifest next update: Sun 07 Dec 2025 11:00:57 +0000 Files and hashes: 1: EVwEDsl1QyAjbNymTjk5C93jYmo.crl (hash: 1LGl47NJOOR3INGIMHniS6xA4tRlKBE6HiXjYB41Dd8=) 2: iR8kHHuMHXHdpW9oFEB19MCcm1M.roa (hash: cqHEhbc9Bc/QLDbHqxDN/gK7OPZ3taLde0WraYz/2vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:70:ec:9e:4f:8c:59:2d:92:83:17:6a:61:cf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115c040ec9754320236cdca64e39390bdde3626a Validity Not Before: Dec 6 11:00:57 2025 GMT Not After : Dec 7 11:00:57 2025 GMT Subject: CN=5f1017d52c2b853d5323d5e0863081bdb5aaf17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:f5:fd:3a:da:54:11:b6:0b:1e:01:24:a5: 41:b7:70:0e:2c:b4:62:16:af:c3:43:80:37:16:5e: 01:b2:e0:5f:f5:00:79:70:2f:7b:8e:f3:39:df:f4: fb:d3:78:4a:b9:18:b6:d7:66:47:36:9c:bd:86:b4: 36:f4:03:5a:82:7d:86:74:28:4b:34:66:2f:96:99: 77:19:6a:11:6b:86:32:5a:75:c0:10:8d:f3:6a:a7: 16:8f:03:cc:75:a3:55:47:f0:31:e0:b5:44:02:ab: b3:3b:35:b4:35:9f:83:db:80:4a:ef:46:86:eb:29: 74:7c:65:53:b9:61:7d:7f:af:97:5d:18:7c:5a:a4: 37:6e:6d:1d:7c:63:c1:3c:ca:c1:00:59:de:f3:08: 39:da:dd:5e:a5:ce:a1:fe:69:f7:99:ee:4d:94:df: 48:49:fa:d9:5b:2e:e2:ee:e8:c7:13:05:98:8a:52: 50:5c:3a:c0:13:5a:37:d8:73:4f:f0:2c:f7:e7:8e: 4a:5c:ff:97:4a:48:08:62:83:79:17:ad:3b:11:35: da:7b:77:1b:16:56:64:6d:66:41:4e:73:ee:56:ad: 66:bc:6a:62:6f:24:d0:72:74:c7:88:41:c5:4a:5a: ad:25:41:69:55:c8:1a:19:9a:5e:10:fa:1f:f0:1e: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:10:17:D5:2C:2B:85:3D:53:23:D5:E0:86:30:81:BD:B5:AA:F1:7F X509v3 Authority Key Identifier: keyid:11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:93:4c:57:b0:c8:77:f8:34:fd:40:d7:ab:7f:3a:95:90:b1: c6:de:ca:69:87:ac:ac:6c:80:e4:cc:32:bf:db:f1:1e:5f:2a: 5b:5e:d1:08:79:06:c6:b1:8a:df:2d:57:53:14:e8:e8:92:a7: e2:b8:27:be:79:d1:ca:c3:ce:bb:86:7f:42:b5:67:1e:b2:88: b0:d6:7a:95:38:be:82:8b:ed:f6:99:91:f1:2b:1a:79:41:84: 60:b2:0b:17:1c:81:82:f0:68:c2:b7:bf:a9:b8:2a:bd:5b:ed: 47:f0:ae:21:d6:ad:4d:9a:8d:40:c1:a0:eb:2a:d8:d8:50:80: 26:23:78:47:80:93:d8:e4:e4:b8:fb:ff:0c:fc:03:e2:71:97: 18:8f:93:c0:27:24:57:75:bc:a3:31:e8:62:26:e4:34:c7:75: f0:f0:0e:7d:11:da:91:cd:e6:f1:d1:e7:5b:05:a4:ea:77:df: 77:47:b6:b0:d0:20:4f:33:7e:22:fa:6a:2b:df:37:02:06:79: cd:c9:08:fd:ca:7c:2a:93:a0:3a:4c:51:86:93:ef:5f:ea:ee: 33:f1:e8:a5:e2:6a:22:22:48:fe:5f:a3:73:6f:61:c4:b8:30: a6:94:c2:cb:db:56:18:11:01:6d:e7:44:d7:d7:67:2c:c6:f7: ef:1d:b8:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnDsnk+MWS2SgxdqYc/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWMwNDBlYzk3NTQzMjAyMzZjZGNhNjRlMzkzOTBiZGRl MzYyNmEwHhcNMjUxMjA2MTEwMDU3WhcNMjUxMjA3MTEwMDU3WjAzMTEwLwYDVQQD Eyg1ZjEwMTdkNTJjMmI4NTNkNTMyM2Q1ZTA4NjMwODFiZGI1YWFmMTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd71/TraVBG2Cx4BJKVBt3AOLLRi Fq/DQ4A3Fl4BsuBf9QB5cC97jvM53/T703hKuRi212ZHNpy9hrQ29ANagn2GdChL NGYvlpl3GWoRa4YyWnXAEI3zaqcWjwPMdaNVR/Ax4LVEAquzOzW0NZ+D24BK70aG 6yl0fGVTuWF9f6+XXRh8WqQ3bm0dfGPBPMrBAFne8wg52t1epc6h/mn3me5NlN9I SfrZWy7i7ujHEwWYilJQXDrAE1o32HNP8Cz3545KXP+XSkgIYoN5F607ETXae3cb FlZkbWZBTnPuVq1mvGpibyTQcnTHiEHFSlqtJUFpVcgaGZpeEPof8B6+SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8QF9UsK4U9UyPV4IYwgb21qvF/MB8GA1UdIwQY MBaAFBFcBA7JdUMgI2zcpk45OQvd42JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEt NzBlN2QwNTdmZjJkLzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEtNzBlN2QwNTdmZjJk LzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJNMV7DI d/g0/UDXq386lZCxxt7KaYesrGyA5Mwyv9vxHl8qW17RCHkGxrGK3y1XUxTo6JKn 4rgnvnnRysPOu4Z/QrVnHrKIsNZ6lTi+govt9pmR8SsaeUGEYLILFxyBgvBowre/ qbgqvVvtR/CuIdatTZqNQMGg6yrY2FCAJiN4R4CT2OTkuPv/DPwD4nGXGI+TwCck V3W8ozHoYibkNMd18PAOfRHakc3m8dHnWwWk6nffd0e2sNAgTzN+IvpqK983AgZ5 zckI/cp8KpOgOkxRhpPvX+ruM/HopeJqIiJI/l+jc29hxLgwppTCy9tWGBEBbedE 19dnLMb37x24ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:19 2025 by rpki-client