This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft File: EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json) Hash identifier: qzgGkD02DFvjKKYeY3Yp2xHUyAtvhF7qSctc9yy3bE8= Subject key identifier: AC:F2:8F:08:AE:5D:AD:4F:C6:6C:6A:B5:FA:B1:3B:F7:6F:3C:0A:87 Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14 Certificate issuer: /CN=1155b16fa9db7bceeccb89d1fe252632c0972514 Certificate serial: 019B31557BFF4637A63E3EB10EF63D64B9FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft Manifest number: 117A Signing time: Thu 18 Dec 2025 12:00:44 +0000 Manifest this update: Thu 18 Dec 2025 12:00:44 +0000 Manifest next update: Fri 19 Dec 2025 12:00:44 +0000 Files and hashes: 1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: gAwV55p8+5+BynjsYsV9M7jrjZUVEuKkkrDg1GBITHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:7b:ff:46:37:a6:3e:3e:b1:0e:f6:3d:64:b9:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514 Validity Not Before: Dec 18 12:00:44 2025 GMT Not After : Dec 19 12:00:44 2025 GMT Subject: CN=acf28f08ae5dad4fc66c6ab5fab13bf76f3c0a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:16:f2:61:f5:65:71:e0:5d:cc:85:47:49:15: d2:42:90:9f:e3:1c:5b:73:ea:d6:ad:11:29:5e:82: 61:f1:c7:fd:0d:c2:d7:a2:9e:9f:66:1d:d7:79:cd: 7c:f7:50:28:ff:f4:ca:bf:24:38:46:28:29:d5:83: 26:01:1d:77:d6:c1:21:f2:02:05:cb:81:a8:b7:39: af:b1:bf:0d:ac:62:13:37:b7:70:aa:04:7c:bd:5d: db:ef:94:68:0d:a4:36:a0:76:fd:27:ed:1a:05:09: 53:41:0d:c5:13:2e:6a:8a:7d:de:1f:7c:d4:47:7b: 09:68:4f:4e:04:03:56:a3:c7:cf:1c:76:2b:26:fb: 71:8b:d7:f0:85:cd:2d:f4:9d:98:95:86:3f:e6:06: 0c:ac:36:af:b5:a8:2f:30:ad:03:63:2d:85:0c:43: d2:04:c8:24:a8:47:d6:d3:a6:80:24:c6:14:4e:0a: 01:6e:c2:ff:c6:bb:bd:c3:ae:e6:90:ec:ef:3b:68: e5:34:ef:9c:68:00:04:29:6a:fb:a3:ed:8b:f9:1d: a1:74:63:7f:75:13:70:82:18:13:6d:cc:9f:1d:dd: d7:16:66:f7:e6:bd:d3:8d:e4:88:71:e5:59:70:35: 4b:3b:ae:71:3a:81:3b:f3:55:e6:8c:95:90:dd:48: ff:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F2:8F:08:AE:5D:AD:4F:C6:6C:6A:B5:FA:B1:3B:F7:6F:3C:0A:87 X509v3 Authority Key Identifier: keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:fa:95:6c:5e:cc:de:92:3b:ff:46:33:df:05:0b:dd:39:fa: 50:5f:3b:1d:3a:8d:2f:e4:a5:84:74:2d:d6:d6:48:32:98:f1: 10:24:fb:83:bd:91:cf:a4:b6:ca:9e:e7:26:99:de:3b:d0:72: 1d:64:1a:3e:66:06:21:ef:58:75:b8:55:ed:63:3b:a4:ae:ba: 39:96:b9:8c:1c:5f:1a:a4:f3:e7:76:cb:e4:a1:8d:e0:cf:82: b0:cf:f9:b4:11:9b:fe:9c:fb:3f:44:bc:e9:64:26:43:6a:d3: 8d:f7:da:a1:28:0f:68:0d:8f:c2:1e:41:67:70:63:10:34:14: 7c:a1:01:0c:bb:9b:12:e9:9e:3e:89:97:bc:d0:1e:04:fc:0a: c7:e6:1f:e2:16:c4:14:1c:67:58:89:61:2a:3d:a1:a8:0e:a3: 26:97:2f:aa:b6:33:ce:6b:d1:c8:3e:4f:1b:cf:7e:1a:70:37: 0f:d4:9c:00:84:e4:1f:2b:d1:0a:0c:83:09:c8:5c:e4:0e:c6: 4c:17:ad:06:aa:cf:07:7c:41:1e:f2:b8:72:a4:2c:2a:52:95: a1:eb:c9:5d:42:89:dc:19:bd:25:1d:a9:76:ba:70:15:e2:3f: 5e:63:2b:41:a7:7f:65:3d:9a:ec:f5:19:f1:a4:e4:61:8f:6f: 57:1d:77:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVXv/RjemPj6xDvY9ZLn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNTViMTZmYTlkYjdiY2VlY2NiODlkMWZlMjUyNjMyYzA5 NzI1MTQwHhcNMjUxMjE4MTIwMDQ0WhcNMjUxMjE5MTIwMDQ0WjAzMTEwLwYDVQQD EyhhY2YyOGYwOGFlNWRhZDRmYzY2YzZhYjVmYWIxM2JmNzZmM2MwYTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBbyYfVlceBdzIVHSRXSQpCf4xxb c+rWrREpXoJh8cf9DcLXop6fZh3Xec1891Ao//TKvyQ4Rigp1YMmAR131sEh8gIF y4Gotzmvsb8NrGITN7dwqgR8vV3b75RoDaQ2oHb9J+0aBQlTQQ3FEy5qin3eH3zU R3sJaE9OBANWo8fPHHYrJvtxi9fwhc0t9J2YlYY/5gYMrDavtagvMK0DYy2FDEPS BMgkqEfW06aAJMYUTgoBbsL/xru9w67mkOzvO2jlNO+caAAEKWr7o+2L+R2hdGN/ dRNwghgTbcyfHd3XFmb35r3TjeSIceVZcDVLO65xOoE781XmjJWQ3Uj/1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzyjwiuXa1PxmxqtfqxO/dvPAqHMB8GA1UdIwQY MBaAFBFVsW+p23vO7MuJ0f4lJjLAlyUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZXeGI2bmJlODdzeTRuUl9pVW1Nc0NYSlJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOTZjZDQtMWJiMy00YzEyLTk2YTAt MjgzZjQ0MjQwYjY3LzEvRVZXeGI2bmJlODdzeTRuUl9pVW1Nc0NYSlJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wOTZjZDQtMWJiMy00YzEyLTk2YTAtMjgzZjQ0MjQwYjY3 LzEvRVZXeGI2bmJlODdzeTRuUl9pVW1Nc0NYSlJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/qVbF7M 3pI7/0Yz3wUL3Tn6UF87HTqNL+SlhHQt1tZIMpjxECT7g72Rz6S2yp7nJpneO9By HWQaPmYGIe9YdbhV7WM7pK66OZa5jBxfGqTz53bL5KGN4M+CsM/5tBGb/pz7P0S8 6WQmQ2rTjffaoSgPaA2Pwh5BZ3BjEDQUfKEBDLubEumePomXvNAeBPwKx+Yf4hbE FBxnWIlhKj2hqA6jJpcvqrYzzmvRyD5PG89+GnA3D9ScAITkHyvRCgyDCchc5A7G TBetBqrPB3xBHvK4cqQsKlKVoevJXUKJ3Bm9JR2pdrpwFeI/XmMrQad/ZT2a7PUZ 8aTkYY9vVx13aA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:31:59 2025 by rpki-client