This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft File: evj4jBlvHAgVNQlOinGiRuhjitg.mft (raw, json) Hash identifier: FmJ7n0cBKRjyioXnuNhJNSz/sdLBuFaNGDcbrcypPLQ= Subject key identifier: 5B:C5:43:00:CA:C7:45:C3:5B:01:41:DF:F0:99:6A:B6:47:B2:0B:BD Authority key identifier: 7A:F8:F8:8C:19:6F:1C:08:15:35:09:4E:8A:71:A2:46:E8:63:8A:D8 Certificate issuer: /CN=7af8f88c196f1c081535094e8a71a246e8638ad8 Certificate serial: 019AF208D0D1E4B20F68282AA532414C29BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft Manifest number: 1630 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: evj4jBlvHAgVNQlOinGiRuhjitg.crl (hash: J78hnYPy/BXnqs+ZMiQ7MxwZEbKN31OjyZDmogwzcSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.crl rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d0:d1:e4:b2:0f:68:28:2a:a5:32:41:4c:29:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af8f88c196f1c081535094e8a71a246e8638ad8 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=5bc54300cac745c35b0141dff0996ab647b20bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ba:30:f5:9a:02:ae:c1:95:ac:64:f5:63:55: 22:b6:26:98:9f:69:a1:b1:ce:9d:f4:00:36:42:f7: 2f:56:c1:de:3c:d7:4b:9c:e0:c7:64:a4:d4:c9:71: ca:80:7d:cb:0c:f3:c7:1b:d9:51:6b:7e:d5:f1:59: 10:eb:62:3d:5c:32:9a:9a:6b:59:af:f5:b0:36:d1: 6c:3a:30:54:a5:e3:09:31:a6:06:5c:63:03:46:82: 18:dc:36:54:8f:f4:cd:01:a6:42:f3:3d:e9:6c:8a: 5e:a8:b7:d4:b7:5c:46:69:97:13:22:a2:b7:5d:13: bb:7e:c9:7d:6f:29:91:3c:02:25:59:ec:e8:b9:f4: 67:09:41:e8:a3:09:85:ac:22:a6:ca:09:89:e2:ac: 7d:b7:93:67:ff:34:6a:bd:9c:19:50:36:da:ae:14: c1:d7:c3:95:29:d1:19:58:dd:22:3c:a0:d7:d6:34: 8d:40:c3:5c:f9:1f:fc:77:c0:89:82:36:e0:a1:23: 3e:65:aa:a2:42:46:e9:5e:bd:e3:92:c7:49:8c:f8: eb:65:64:e2:56:38:e8:47:d2:f8:e7:88:af:94:d2: 7c:8c:d9:2a:17:91:cd:da:0c:d2:5a:61:31:bd:91: 03:94:9c:e3:7e:24:c2:8f:cb:49:fe:6c:6e:b3:eb: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C5:43:00:CA:C7:45:C3:5B:01:41:DF:F0:99:6A:B6:47:B2:0B:BD X509v3 Authority Key Identifier: keyid:7A:F8:F8:8C:19:6F:1C:08:15:35:09:4E:8A:71:A2:46:E8:63:8A:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fb:38:d0:ac:05:0c:cc:75:cc:b5:24:47:26:53:11:ab:5f: d8:c4:4c:e3:34:53:a6:57:f9:fd:bc:01:34:3e:d9:83:fe:e9: 69:3f:55:55:86:61:e2:8d:6b:26:50:8d:e9:42:b3:a2:f3:bf: 42:10:7d:d5:79:f0:7f:9c:36:46:d5:bb:dc:24:30:fc:2b:ae: 45:6b:25:1d:e3:01:19:92:ec:a5:fc:91:5c:05:7c:fd:09:43: 6f:97:9d:b5:e4:b1:96:9e:a9:0a:19:ca:1b:cf:e5:03:1f:8c: fe:e0:7a:76:40:2b:00:3e:c7:92:2e:be:9d:ff:75:dd:15:62: 7d:28:fa:53:a7:5b:29:e8:23:12:d1:aa:34:ce:db:dd:74:29: 4b:d6:e7:fd:0c:e9:1a:98:af:f4:a5:bb:50:fb:86:4a:ea:b9: 4d:91:03:0a:53:d2:b4:e2:26:d6:c8:39:11:f5:3a:f8:0f:09: c5:01:c8:80:9f:8d:fa:9e:ba:c8:a3:d8:02:76:e1:f8:62:34: bc:d3:42:1f:ad:ef:87:6c:f2:66:34:69:8d:5f:ec:ea:27:81: ca:bc:2d:10:4b:4f:b8:8c:92:a4:55:cd:79:0b:87:e6:60:24: 58:62:44:65:27:ac:04:a4:60:2a:64:d9:d3:60:f7:3b:aa:c8: 58:4e:49:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNDR5LIPaCgqpTJBTCm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjhmODhjMTk2ZjFjMDgxNTM1MDk0ZThhNzFhMjQ2ZTg2 MzhhZDgwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD Eyg1YmM1NDMwMGNhYzc0NWMzNWIwMTQxZGZmMDk5NmFiNjQ3YjIwYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibow9ZoCrsGVrGT1Y1UitiaYn2mh sc6d9AA2QvcvVsHePNdLnODHZKTUyXHKgH3LDPPHG9lRa37V8VkQ62I9XDKammtZ r/WwNtFsOjBUpeMJMaYGXGMDRoIY3DZUj/TNAaZC8z3pbIpeqLfUt1xGaZcTIqK3 XRO7fsl9bymRPAIlWezoufRnCUHoowmFrCKmygmJ4qx9t5Nn/zRqvZwZUDbarhTB 18OVKdEZWN0iPKDX1jSNQMNc+R/8d8CJgjbgoSM+ZaqiQkbpXr3jksdJjPjrZWTi VjjoR9L454ivlNJ8jNkqF5HN2gzSWmExvZEDlJzjfiTCj8tJ/mxus+uNfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvFQwDKx0XDWwFB3/CZarZHsgu9MB8GA1UdIwQY MBaAFHr4+IwZbxwIFTUJTopxokboY4rYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZqNGpCbHZIQWdWTlFsT2luR2lSdWhqaXRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yNWRmNDEtMTk2OC00ZmM4LTkzMmQt MDc4NTJiMjkzMzhlLzEvZXZqNGpCbHZIQWdWTlFsT2luR2lSdWhqaXRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yNWRmNDEtMTk2OC00ZmM4LTkzMmQtMDc4NTJiMjkzMzhl LzEvZXZqNGpCbHZIQWdWTlFsT2luR2lSdWhqaXRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/s40KwF DMx1zLUkRyZTEatf2MRM4zRTplf5/bwBND7Zg/7paT9VVYZh4o1rJlCN6UKzovO/ QhB91Xnwf5w2RtW73CQw/CuuRWslHeMBGZLspfyRXAV8/QlDb5edteSxlp6pChnK G8/lAx+M/uB6dkArAD7Hki6+nf913RVifSj6U6dbKegjEtGqNM7b3XQpS9bn/Qzp Gpiv9KW7UPuGSuq5TZEDClPStOIm1sg5EfU6+A8JxQHIgJ+N+p66yKPYAnbh+GI0 vNNCH63vh2zyZjRpjV/s6ieByrwtEEtPuIySpFXNeQuH5mAkWGJEZSesBKRgKmTZ 02D3O6rIWE5JMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:18 2025 by rpki-client