This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File: evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier: C6pd1NdJdTm/yGHWNfmdrDmKrlmDhfNRJkiMqXPF03g=
Subject key identifier: C9:13:37:B6:D5:C7:35:AC:19:AD:14:F6:4E:B3:C0:55:5A:EC:62:1B
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer: /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial: 019B2D0AD004EC85B4D1916A64E63D7CAEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number: 0C03
Signing time: Wed 17 Dec 2025 16:00:41 +0000
Manifest this update: Wed 17 Dec 2025 16:00:41 +0000
Manifest next update: Thu 18 Dec 2025 16:00:41 +0000
Files and hashes: 1: 1VFRaILqnJnJB3yngV6vDeJcapk.roa (hash: CqxIJgH7ih1CRmTJoFGPX9x50D1IUJFOHfeDDgVZwRg=)
2: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: kR/voCC4m6IVw11WRHO+tw5JhMopWQ29pZD7xbXFlkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2d:0a:d0:04:ec:85:b4:d1:91:6a:64:e6:3d:7c:ae:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Validity
Not Before: Dec 17 16:00:41 2025 GMT
Not After : Dec 18 16:00:41 2025 GMT
Subject: CN=c91337b6d5c735ac19ad14f64eb3c0555aec621b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:17:d7:5e:cc:8c:80:a9:72:98:4c:ff:bd:
97:87:a8:47:5b:85:c4:e3:14:67:6e:52:bc:fb:43:
d5:48:b1:c1:e6:dd:5a:78:59:4c:e8:21:c5:4b:eb:
11:fd:6b:21:c6:ba:e9:96:50:1c:f4:76:cc:90:55:
69:9c:a8:41:81:26:52:f4:32:13:e6:27:d4:ac:45:
80:9a:a0:f4:e9:b7:20:84:83:e5:0b:55:a5:86:57:
59:f5:5f:0b:6d:8e:ce:4c:ae:1e:26:be:a2:26:22:
30:2d:e4:e0:5f:84:e4:79:03:74:3b:19:d6:0a:65:
6b:dd:25:3f:33:84:2f:ab:fa:93:d1:3f:e9:82:c9:
8c:d4:a7:4a:7e:69:df:08:48:04:fd:12:23:2b:d1:
d1:4d:37:d2:72:f7:31:99:27:28:d9:8f:51:78:86:
04:e3:39:be:5c:a3:95:97:2d:0c:2e:22:f4:dc:78:
e8:4c:3b:4e:b1:cd:a6:a0:54:83:c9:7c:ad:51:6d:
7c:fe:96:b4:5f:50:d5:9e:43:d2:dc:c7:d1:ee:44:
44:be:66:03:92:fc:ec:46:2a:4b:41:c2:eb:fc:52:
c2:99:29:07:28:d6:89:c8:5d:9c:59:3e:dc:91:6f:
98:8a:17:cc:cb:9b:98:b9:0d:1a:8e:14:50:8a:a8:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:13:37:B6:D5:C7:35:AC:19:AD:14:F6:4E:B3:C0:55:5A:EC:62:1B
X509v3 Authority Key Identifier:
keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6e:7b:9c:4f:87:73:c5:0b:82:c1:0e:87:c6:9e:a4:41:51:
98:20:01:cc:88:61:40:6f:6e:fe:3e:60:b7:b6:43:61:ef:56:
e1:41:00:c9:ac:f0:48:d8:aa:02:ec:18:69:dc:14:03:27:7d:
b7:4e:df:bf:f7:bc:a1:3b:1c:6f:86:76:e7:f3:a7:aa:cb:38:
57:1e:4e:ff:da:19:c0:18:1b:54:a2:58:a1:0e:12:7a:fc:9d:
52:14:06:bc:7e:d1:1d:37:a5:c0:c4:6d:a6:3c:54:7e:38:98:
67:35:55:2a:35:86:7c:df:ba:d8:21:f6:bf:18:50:de:62:10:
26:a1:18:60:57:c8:c8:a0:7d:38:77:98:5e:7f:66:39:fe:7c:
d3:54:72:f9:da:8b:39:22:d6:a0:e0:24:92:ab:51:17:3d:a6:
46:97:2c:ff:f1:6b:47:a9:2d:5f:d4:bb:e2:82:c7:d2:f7:83:
46:e7:19:4e:b5:57:8e:b5:a7:6c:25:51:0e:9c:0f:d1:69:7d:
c3:eb:e5:bd:00:5c:87:f2:93:a2:18:23:ee:dd:7d:2f:22:c7:
23:0f:f3:f6:c0:41:47:45:47:b1:1b:1a:64:13:4d:dc:18:a8:
ef:e8:24:f2:91:ee:1b:aa:ec:98:39:a4:0e:68:58:f4:62:28:
5d:ee:f0:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZstCtAE7IW00ZFqZOY9fK7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZmExMzViMjA3MmRmY2M0ZWYzYjU0MWMxMzZiYzgwMDFl
ZjQzMDcwHhcNMjUxMjE3MTYwMDQxWhcNMjUxMjE4MTYwMDQxWjAzMTEwLwYDVQQD
EyhjOTEzMzdiNmQ1YzczNWFjMTlhZDE0ZjY0ZWIzYzA1NTVhZWM2MjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTYX117MjICpcphM/72Xh6hHW4XE
4xRnblK8+0PVSLHB5t1aeFlM6CHFS+sR/WshxrrpllAc9HbMkFVpnKhBgSZS9DIT
5ifUrEWAmqD06bcghIPlC1WlhldZ9V8LbY7OTK4eJr6iJiIwLeTgX4TkeQN0OxnW
CmVr3SU/M4Qvq/qT0T/pgsmM1KdKfmnfCEgE/RIjK9HRTTfScvcxmSco2Y9ReIYE
4zm+XKOVly0MLiL03HjoTDtOsc2moFSDyXytUW18/pa0X1DVnkPS3MfR7kREvmYD
kvzsRipLQcLr/FLCmSkHKNaJyF2cWT7ckW+YihfMy5uYuQ0ajhRQiqh/rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkTN7bVxzWsGa0U9k6zwFVa7GIbMB8GA1UdIwQY
MBaAFHr6E1sgct/MTvO1QcE2vIAB70MHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZvVFd5QnkzOHhPODdWQndUYThnQUh2UXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iMTQxOTMtZjU2OS00MzRhLWFlYTQt
ZjVkZWFhOWJmMGY3LzEvZXZvVFd5QnkzOHhPODdWQndUYThnQUh2UXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iMTQxOTMtZjU2OS00MzRhLWFlYTQtZjVkZWFhOWJmMGY3
LzEvZXZvVFd5QnkzOHhPODdWQndUYThnQUh2UXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFm57nE+H
c8ULgsEOh8aepEFRmCABzIhhQG9u/j5gt7ZDYe9W4UEAyazwSNiqAuwYadwUAyd9
t07fv/e8oTscb4Z25/Onqss4Vx5O/9oZwBgbVKJYoQ4SevydUhQGvH7RHTelwMRt
pjxUfjiYZzVVKjWGfN+62CH2vxhQ3mIQJqEYYFfIyKB9OHeYXn9mOf5801Ry+dqL
OSLWoOAkkqtRFz2mRpcs//FrR6ktX9S74oLH0veDRucZTrVXjrWnbCVRDpwP0Wl9
w+vlvQBch/KTohgj7t19LyLHIw/z9sBBR0VHsRsaZBNN3Bio7+gk8pHuG6rsmDmk
DmhY9GIoXe7wwQ==
-----END CERTIFICATE-----
Generated at Wed Dec 17 17:53:17 2025 by rpki-client