This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft File: EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft (raw, json) Hash identifier: a0w/7FVzdUv4IkWlkAaUGcRSX6iw36WNk+KBTvSq4Qw= Subject key identifier: 23:85:3D:0D:AA:A7:DE:1A:67:A5:CE:0B:C0:2E:BD:A3:3A:F1:7D:EE Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Certificate serial: 019B3C7DC253247DF202AD8A49BEC4431ABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 16:00:33 +0000 Manifest this update: Sat 20 Dec 2025 16:00:33 +0000 Manifest next update: Sun 21 Dec 2025 16:00:33 +0000 Files and hashes: 1: 58Be7xiX6S3Rn5dMTKk_iVCR9xo.roa (hash: delgTuBHuHM98Jxou3H2EwXSN1rXHIyw+gAmbjVPHXE=) 2: EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl (hash: KqAxS2SgUBP1POGd9pQ6n6FuX2GU78AcwRHgqNpBxV4=) 3: HOQaozgHqyl7GjdOmYwJNgxkNvk.roa (hash: PI4rJK1t31rRGgg84yxq7H32pDXq4vLAXeRJDFTb2uo=) 4: L-ktSUmEt-j51Ho1YnwbbaZLrZo.roa (hash: mUCe0wNtZCh2tznUGkMZqDrtHqmD+Hv4+N6i6ZjwUMM=) 5: P2rIwR1CtoaVBqGPtk1uKZu6EAM.roa (hash: 5tzkl0E5Oyrnj5xi/xWoXdn3cp0c7cD7Nd4Yhdv1uSk=) 6: hysK0HS4yMpxAiu_amCNQZnsMEk.roa (hash: h9bkQ2M0Hp/TMn65+jd+66CUZ78mTaddUxEZ1BNe0q4=) 7: ytEJnGu8gq3161Uk5CSgUCmxit8.roa (hash: 6lM2R/ZrStC7kH6e29r6pEEmVzeiHBYKhVC23vS8jn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:c2:53:24:7d:f2:02:ad:8a:49:be:c4:43:1a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f Validity Not Before: Dec 20 16:00:33 2025 GMT Not After : Dec 21 16:00:33 2025 GMT Subject: CN=23853d0daaa7de1a67a5ce0bc02ebda33af17dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:2a:d1:1d:a4:4b:a5:56:7f:2f:4e:4a:aa: ef:c2:a8:3d:19:2c:bf:e9:5c:83:b1:df:6d:2a:fb: 66:b8:0c:b8:46:b2:4e:0e:f0:ea:27:c3:09:14:84: 5b:d4:8b:dd:9b:69:c9:2d:ec:35:b9:16:ab:19:26: 07:2b:50:48:51:7d:2c:35:10:67:5d:1e:0a:a5:c6: 46:8c:8f:5f:50:83:72:80:36:6f:56:3f:04:fa:b5: 39:e1:31:18:5f:b4:66:dc:05:df:bd:ac:24:86:a9: 87:37:6a:49:03:62:62:35:26:2a:be:e5:f1:96:0d: d9:b3:cb:25:89:8c:1f:7c:9b:b4:1b:f1:78:eb:a4: 2b:e6:60:90:97:ea:da:c8:f5:08:9b:72:b0:21:68: f0:7c:1a:fc:a5:40:9f:2c:ca:75:9f:44:d4:d4:79: ad:75:1e:b9:4b:af:e1:b7:67:51:71:0b:9d:89:8f: 73:04:03:f2:7d:6a:ad:68:e5:8a:17:4d:d7:67:ee: 2f:aa:42:ce:b7:e7:bb:17:1a:40:5f:b6:9a:95:af: d5:e2:bd:b7:71:7c:c3:1d:60:8f:1f:03:a5:c2:27: f1:99:5f:93:39:49:a1:9d:00:4d:80:82:ff:0a:a4: 08:02:25:fd:f8:38:66:bf:12:92:50:62:f4:a6:4f: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:85:3D:0D:AA:A7:DE:1A:67:A5:CE:0B:C0:2E:BD:A3:3A:F1:7D:EE X509v3 Authority Key Identifier: keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:0d:75:ba:af:69:b3:7d:b3:4f:60:e3:51:9a:d9:1e:09:47: 19:cb:8e:04:50:e2:51:6a:12:ab:12:57:c9:97:04:63:80:d4: ef:fe:cf:99:be:a7:bf:ec:a8:be:63:a2:f5:ee:12:8e:f9:92: c4:8c:37:4e:d6:ec:6e:23:5a:c7:4b:c3:40:d8:88:8d:b2:dc: 81:a6:af:cd:b4:f3:62:bd:34:ff:3c:2d:21:0f:2e:ab:38:ba: c1:99:5a:3e:74:47:1e:a5:03:86:c4:c9:df:a3:9a:d6:1b:bb: b3:dc:60:67:3f:1b:fd:65:ac:51:43:62:90:52:bb:68:21:80: 7f:5b:2f:c4:18:09:c1:92:0e:2e:b2:21:f6:37:0a:a0:1b:d2: 9c:6f:a9:7d:2e:e1:b5:37:78:52:e2:ee:c6:90:7c:1e:8f:08: 87:89:70:80:5f:03:0e:14:6f:4b:6b:b5:0f:ec:ea:9d:54:37: 83:ea:9f:a4:78:90:78:6e:e4:e6:2a:09:85:b0:9b:a0:98:dc: 61:54:8d:39:fd:e6:10:93:af:2c:59:ca:2f:b5:fc:8e:da:5b: d1:64:97:6f:86:ea:0a:17:be:e0:b5:cb:6c:a9:ec:03:86:72: 6e:bc:8d:86:01:5a:5a:ae:91:4b:28:cd:59:1c:fa:9e:96:5a: b3:a2:32:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcJTJH3yAq2KSb7EQxq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm YjYzMmYwHhcNMjUxMjIwMTYwMDMzWhcNMjUxMjIxMTYwMDMzWjAzMTEwLwYDVQQD EygyMzg1M2QwZGFhYTdkZTFhNjdhNWNlMGJjMDJlYmRhMzNhZjE3ZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWsq0R2kS6VWfy9OSqrvwqg9GSy/ 6VyDsd9tKvtmuAy4RrJODvDqJ8MJFIRb1Ivdm2nJLew1uRarGSYHK1BIUX0sNRBn XR4KpcZGjI9fUINygDZvVj8E+rU54TEYX7Rm3AXfvawkhqmHN2pJA2JiNSYqvuXx lg3Zs8sliYwffJu0G/F466Qr5mCQl+rayPUIm3KwIWjwfBr8pUCfLMp1n0TU1Hmt dR65S6/ht2dRcQudiY9zBAPyfWqtaOWKF03XZ+4vqkLOt+e7FxpAX7aala/V4r23 cXzDHWCPHwOlwifxmV+TOUmhnQBNgIL/CqQIAiX9+DhmvxKSUGL0pk/D5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOFPQ2qp94aZ6XOC8AuvaM68X3uMB8GA1UdIwQY MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt MjI5YjRhZTc0MmRlLzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvg11uq9p s32zT2DjUZrZHglHGcuOBFDiUWoSqxJXyZcEY4DU7/7Pmb6nv+yovmOi9e4SjvmS xIw3TtbsbiNax0vDQNiIjbLcgaavzbTzYr00/zwtIQ8uqzi6wZlaPnRHHqUDhsTJ 36Oa1hu7s9xgZz8b/WWsUUNikFK7aCGAf1svxBgJwZIOLrIh9jcKoBvSnG+pfS7h tTd4UuLuxpB8Ho8Ih4lwgF8DDhRvS2u1D+zqnVQ3g+qfpHiQeG7k5ioJhbCboJjc YVSNOf3mEJOvLFnKL7X8jtpb0WSXb4bqChe+4LXLbKnsA4ZybryNhgFaWq6RSyjN WRz6npZas6IyoA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:13:15 2025 by rpki-client