This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File: evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier: 32gKA3t4F/EXYeJKXA3Fh84lwn8A5bo+sc10ixITSfA=
Subject key identifier: FC:08:4A:09:83:52:6B:42:F8:EA:8A:29:7E:B2:3D:71:6A:C6:49:30
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer: /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial: 019AF12CB73B95469CDB679C5CEC25AB3095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number: 0BE4
Signing time: Sat 06 Dec 2025 01:00:30 +0000
Manifest this update: Sat 06 Dec 2025 01:00:30 +0000
Manifest next update: Sun 07 Dec 2025 01:00:30 +0000
Files and hashes: 1: 1VFRaILqnJnJB3yngV6vDeJcapk.roa (hash: CqxIJgH7ih1CRmTJoFGPX9x50D1IUJFOHfeDDgVZwRg=)
2: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: q2npKcWL5vCjF2AxsOwc+fP6R0yyFyWGD++yhBh50hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2c:b7:3b:95:46:9c:db:67:9c:5c:ec:25:ab:30:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Validity
Not Before: Dec 6 01:00:30 2025 GMT
Not After : Dec 7 01:00:30 2025 GMT
Subject: CN=fc084a0983526b42f8ea8a297eb23d716ac64930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:8e:bf:6c:50:70:5e:58:15:15:1a:97:83:
de:f0:a2:73:4f:64:a1:63:db:58:3d:be:b9:c3:a4:
52:d7:dc:70:93:4a:45:93:42:9b:1a:6d:23:ef:76:
1b:39:6f:7a:d5:87:71:7a:61:20:38:2a:2c:b0:20:
49:06:a3:d1:e1:17:f4:6e:ca:4b:45:24:de:e6:c1:
e4:8a:3e:50:e9:9b:5f:7f:c7:10:e2:48:b9:8e:ef:
af:19:03:b4:a7:c7:65:f0:9b:2d:28:2d:a5:6d:80:
38:f1:3f:6f:12:8f:89:3a:a1:a0:89:9d:c6:a1:4a:
22:9e:ca:45:e6:df:22:04:8e:c2:59:15:13:25:de:
15:44:71:41:36:e9:12:a4:e7:71:c3:75:bd:fe:55:
9b:c2:c5:a0:60:e9:52:28:1f:f8:95:e3:55:2a:5e:
8f:56:36:9e:92:60:11:e2:09:de:d2:ef:37:b2:3f:
b8:89:8c:3b:5a:87:0f:3c:74:01:46:b8:39:30:44:
a9:d4:00:1f:9e:f0:c2:48:40:64:0f:81:cc:00:d9:
3e:7e:05:8d:2e:c7:66:1a:ea:78:67:fc:dd:0f:f0:
7b:b6:dd:37:2b:20:d4:45:23:ba:a8:1c:91:08:d4:
85:4a:01:58:69:44:d2:5b:28:d0:bd:3f:fc:5d:28:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:08:4A:09:83:52:6B:42:F8:EA:8A:29:7E:B2:3D:71:6A:C6:49:30
X509v3 Authority Key Identifier:
keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:25:0b:e2:df:c1:a0:6d:be:4c:8d:dc:d4:ed:6b:9c:f6:be:
16:a6:a0:fc:db:51:ca:76:54:cc:77:38:99:28:e2:9b:b6:15:
3f:37:c5:57:04:75:84:1f:db:c1:41:6e:f5:48:eb:59:18:28:
43:89:62:e0:1a:5d:ee:ef:df:58:ab:05:2f:64:f7:2c:b3:a4:
08:d3:de:f7:65:3a:a8:4e:79:eb:4a:98:b0:41:c5:8e:fc:d2:
2d:a0:d1:09:47:fd:60:fe:ac:f9:81:25:a6:91:d4:49:35:9e:
69:8b:ab:b3:04:68:46:ff:37:fe:5e:9a:3d:b4:63:8e:b5:c4:
55:4c:3d:c1:d6:5a:84:98:90:d2:e8:d7:09:93:30:59:de:d8:
36:bb:80:3e:5f:72:9b:a7:f0:f1:4b:fe:b0:76:56:f4:49:ac:
eb:bc:8c:af:38:fc:ce:55:95:de:e4:c6:63:66:30:6e:a4:d9:
17:1a:0e:9e:ab:06:d7:7e:fe:32:26:68:33:87:c8:2b:51:e2:
21:04:9f:51:dc:81:56:1e:1f:f6:bd:77:1c:27:81:c4:fa:2f:
a5:f2:9b:23:9e:40:3b:27:46:cf:e0:b4:1c:c3:4f:9e:35:e2:
48:99:f2:13:53:02:94:ef:ea:53:92:04:d4:54:16:a1:13:08:
4b:7d:80:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:03:08 2025 by rpki-client