This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft File: EVFSIzgprv1GebUUcXmN68mCN-8.mft (raw, json) Hash identifier: 2frIOXE2wWHeiEePPZjuFuM4ClMqvsJMkJXhC8V0ojw= Subject key identifier: 16:EB:42:A9:61:5A:31:D3:8E:E7:26:47:E4:82:8D:73:30:0D:80:42 Authority key identifier: 11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF Certificate issuer: /CN=115152233829aefd4679b51471798debc98237ef Certificate serial: 019AF31CC5CA1459CBECEFBA4B6BF36F0650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft Manifest number: 1398 Signing time: Sat 06 Dec 2025 10:02:20 +0000 Manifest this update: Sat 06 Dec 2025 10:02:20 +0000 Manifest next update: Sun 07 Dec 2025 10:02:20 +0000 Files and hashes: 1: 5kkVf_870fhOOfDeIGFPrWY70xg.roa (hash: ROQyaKbJ5nkK42jIPzQOsw/ZVScaPEl6b0UaumvaLJE=) 2: EVFSIzgprv1GebUUcXmN68mCN-8.crl (hash: TuZo4yg7j0KrfayREDqqRf021RwiH85jE+IGLJlVnt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c5:ca:14:59:cb:ec:ef:ba:4b:6b:f3:6f:06:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115152233829aefd4679b51471798debc98237ef Validity Not Before: Dec 6 10:02:20 2025 GMT Not After : Dec 7 10:02:20 2025 GMT Subject: CN=16eb42a9615a31d38ee72647e4828d73300d8042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3d:b8:c2:1c:0c:f6:e2:fb:9f:39:3d:7f:4f: c4:eb:cd:1f:73:d8:bb:bd:64:0c:be:60:f1:35:17: 97:1e:af:d2:17:f2:ec:23:f0:c3:da:c9:16:da:9b: 19:5b:19:29:1a:b1:17:eb:4d:24:76:de:cc:2c:0c: 1b:df:20:fb:2b:c9:32:93:6e:e3:de:de:0a:56:43: a7:a8:ee:45:28:64:d6:5b:16:89:7c:7d:9f:a7:0b: fc:08:09:2d:f4:50:ea:64:a6:69:57:2e:e0:b8:d7: 64:4b:59:81:31:38:cb:d1:75:0f:3d:2e:65:00:6b: 0d:52:f1:39:b1:b3:b2:5c:69:70:3a:1f:8a:bb:d7: 6f:dd:0a:e9:e0:c6:51:f8:49:fd:b0:c0:aa:11:01: 60:a9:8c:33:f0:e0:ff:3d:6a:ed:51:f7:8d:a5:20: 6f:e0:88:06:29:16:87:bb:6f:4e:d7:19:48:45:65: 3e:b3:78:63:71:61:f4:83:dd:fb:45:5e:7a:a0:f0: 16:5b:2c:cb:ee:f9:bc:85:ac:f7:c6:e2:0f:55:34: 24:48:d8:66:66:eb:0f:1d:a1:c3:63:c7:c3:e8:dd: f4:53:5e:e9:1c:97:0c:b1:e4:d8:51:03:73:82:e0: 61:1c:65:6d:1f:3c:b9:c5:fb:ad:b1:3e:e2:a6:20: 5a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EB:42:A9:61:5A:31:D3:8E:E7:26:47:E4:82:8D:73:30:0D:80:42 X509v3 Authority Key Identifier: keyid:11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:55:88:81:75:17:bf:7d:09:4d:e9:0a:c1:d5:68:22:a3:2e: 23:84:80:71:28:ff:00:eb:4d:08:2a:24:42:b1:fe:56:80:61: 6f:f1:7f:0d:dc:6b:c4:35:87:d4:ad:86:67:bc:fe:cc:a3:5f: cb:34:43:c2:5e:23:98:d0:77:76:30:4e:e9:5c:22:24:e5:c7: d2:96:67:04:53:c6:03:b8:c8:ea:b7:10:98:e4:bf:9b:17:0f: 92:da:8e:88:08:3d:7b:36:df:32:2e:98:63:9e:8f:6e:60:c9: c8:c6:a7:6c:4d:37:55:35:d5:56:7a:c5:e9:9d:a3:a8:0f:4d: 18:f1:e7:d4:3b:88:71:4a:c2:1b:46:7b:35:52:13:72:3f:69: 80:bf:1c:e7:38:55:ac:4a:f2:7e:fd:d4:6b:e5:2f:51:2a:0e: f3:e3:93:86:6e:7b:d3:e3:94:7a:2b:19:b3:1b:72:af:ba:31: 28:af:ae:e9:b7:11:66:f5:7e:92:3e:53:92:2b:f3:42:9a:4e: 8d:2c:cf:47:af:99:46:27:be:9f:1c:67:31:51:5a:27:e7:85: 5b:a0:16:fb:4c:fc:91:3f:4e:c5:e2:e9:70:9c:9f:48:f0:9a: a8:d0:6e:18:ee:65:8a:98:b2:ef:89:0d:63:bf:7f:f9:c9:d5: 25:59:46:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMXKFFnL7O+6S2vzbwZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNTE1MjIzMzgyOWFlZmQ0Njc5YjUxNDcxNzk4ZGViYzk4 MjM3ZWYwHhcNMjUxMjA2MTAwMjIwWhcNMjUxMjA3MTAwMjIwWjAzMTEwLwYDVQQD EygxNmViNDJhOTYxNWEzMWQzOGVlNzI2NDdlNDgyOGQ3MzMwMGQ4MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D24whwM9uL7nzk9f0/E680fc9i7 vWQMvmDxNReXHq/SF/LsI/DD2skW2psZWxkpGrEX600kdt7MLAwb3yD7K8kyk27j 3t4KVkOnqO5FKGTWWxaJfH2fpwv8CAkt9FDqZKZpVy7guNdkS1mBMTjL0XUPPS5l AGsNUvE5sbOyXGlwOh+Ku9dv3Qrp4MZR+En9sMCqEQFgqYwz8OD/PWrtUfeNpSBv 4IgGKRaHu29O1xlIRWU+s3hjcWH0g937RV56oPAWWyzL7vm8haz3xuIPVTQkSNhm ZusPHaHDY8fD6N30U17pHJcMseTYUQNzguBhHGVtHzy5xfutsT7ipiBaBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbrQqlhWjHTjucmR+SCjXMwDYBCMB8GA1UdIwQY MBaAFBFRUiM4Ka79Rnm1FHF5jevJgjfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZGU0l6Z3BydjFHZWJVVWNYbU42OG1DTi04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYmVhNWQtMjc3Yi00Njc1LThkMDUt ZWQxN2Q2YzQyYjJmLzEvRVZGU0l6Z3BydjFHZWJVVWNYbU42OG1DTi04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kYmVhNWQtMjc3Yi00Njc1LThkMDUtZWQxN2Q2YzQyYjJm LzEvRVZGU0l6Z3BydjFHZWJVVWNYbU42OG1DTi04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwlWIgXUX v30JTekKwdVoIqMuI4SAcSj/AOtNCCokQrH+VoBhb/F/DdxrxDWH1K2GZ7z+zKNf yzRDwl4jmNB3djBO6VwiJOXH0pZnBFPGA7jI6rcQmOS/mxcPktqOiAg9ezbfMi6Y Y56PbmDJyManbE03VTXVVnrF6Z2jqA9NGPHn1DuIcUrCG0Z7NVITcj9pgL8c5zhV rEryfv3Ua+UvUSoO8+OThm570+OUeisZsxtyr7oxKK+u6bcRZvV+kj5TkivzQppO jSzPR6+ZRie+nxxnMVFaJ+eFW6AW+0z8kT9OxeLpcJyfSPCaqNBuGO5lipiy74kN Y79/+cnVJVlGeA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:56 2025 by rpki-client