This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft File: TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json) Hash identifier: Q3My+20wp5/SAWiW3y/ShvRZkn+JZmLdYea4MtGOelU= Subject key identifier: A6:83:F7:16:1C:36:6A:ED:A5:9D:4D:9C:A0:BB:56:50:A9:61:33:68 Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31 Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231 Certificate serial: 019B4E84A90F13FA5214C6F0E90AE2E9DDED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 04:01:15 +0000 Manifest this update: Wed 24 Dec 2025 04:01:15 +0000 Manifest next update: Thu 25 Dec 2025 04:01:15 +0000 Files and hashes: 1: 9dHpkAlOL0XgkLxchS4Qy2sMNCs.roa (hash: g9vMbBt1/drUDiVGZvjhkatTyph0Mun8c4A/qeNjgzE=) 2: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: GGjZqmN89AkvJhHfsOst3SQ9ZCCyb1rf/DLDx+r6BCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:a9:0f:13:fa:52:14:c6:f0:e9:0a:e2:e9:dd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231 Validity Not Before: Dec 24 04:01:15 2025 GMT Not After : Dec 25 04:01:15 2025 GMT Subject: CN=a683f7161c366aeda59d4d9ca0bb5650a9613368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:16:47:8a:25:b3:f9:b2:03:77:9f:be:c8: ce:c7:ed:27:cf:8a:39:ca:b2:f1:aa:10:8e:f9:ae: e4:63:5c:ba:b6:16:39:d5:af:12:6d:59:e3:1c:d7: 17:54:c2:0d:c4:fe:65:f5:2d:90:36:60:78:28:e3: 67:4c:3d:aa:86:20:57:b2:89:7b:37:2a:68:e6:5c: 34:30:e6:60:23:e0:6a:0d:65:fb:96:26:8a:9b:69: 23:23:1c:7a:ea:c5:aa:42:93:9c:01:48:eb:9d:0e: 9e:a1:e7:32:5c:a1:76:1b:da:f4:dd:a5:b1:88:8f: 40:ab:df:8b:ac:0f:90:06:f5:12:0c:df:4d:34:4c: 78:c2:fc:8b:66:3e:f3:19:55:e8:62:93:1a:9a:d9: 27:98:3b:3f:a3:ad:9b:3f:87:c5:e7:fe:b6:b5:fc: 12:33:b8:a0:dc:c6:35:22:92:12:a6:64:46:4a:76: 4a:13:dd:82:14:56:97:d8:9f:54:e4:69:2c:c3:c1: 90:58:b1:a8:01:36:8e:f8:da:80:a8:51:ea:20:db: dc:b2:78:de:6c:09:1d:ff:8a:78:53:49:6e:db:a3: ee:d1:54:ff:99:02:b0:0d:d2:51:d4:fa:1c:f1:a0: 58:4f:dd:d0:2c:55:76:32:a1:11:b5:9e:1d:fd:16: 66:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:83:F7:16:1C:36:6A:ED:A5:9D:4D:9C:A0:BB:56:50:A9:61:33:68 X509v3 Authority Key Identifier: keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:a6:bf:ad:db:cc:23:9c:ed:b9:a9:45:6b:b0:a9:9f:2b:9f: 67:d0:47:11:d0:5a:bd:30:90:4e:78:57:04:b8:b4:08:e4:af: da:1d:33:55:72:24:49:36:8e:7d:71:d0:ea:fa:c2:e3:f7:01: 94:a4:77:c6:86:09:6f:52:f5:45:a2:8b:87:67:64:f5:cf:8b: 5c:21:5a:cf:05:27:d1:69:d5:75:48:b7:63:f3:9a:bf:e6:01: 77:a3:f6:ee:bb:0d:df:f9:45:50:41:ef:a3:11:e4:85:81:d1: b1:17:2c:0e:37:bb:ea:6f:7f:77:7e:bf:aa:85:81:33:67:61: b4:bf:1e:59:2e:cb:d6:d2:d3:57:2c:7a:11:15:8c:e4:46:5d: 55:1c:da:fb:3b:99:58:58:f2:56:fb:78:bb:96:86:4f:0a:22: f3:e3:b2:ed:7c:cd:ed:e2:e5:f1:b7:5c:1d:61:13:69:6c:4f: 3a:0c:03:41:c8:0c:f2:7f:9f:bf:81:b1:ee:5a:3b:e2:8c:92: 23:19:2f:da:72:55:d1:bd:4a:c0:a1:3e:ff:64:95:a7:2a:05: 03:d6:ed:2f:93:ec:0b:22:c9:38:c8:c1:bb:e6:0e:f2:34:68: 55:95:1c:25:b6:a4:b0:6a:a7:8c:eb:58:3b:57:84:59:80:5a: c5:92:fb:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhKkPE/pSFMbw6Qri6d3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGJlNDMzOTRhN2MyYmYxZThmZGZiYjFkNTA2ZmEzN2Fj NzMyMzEwHhcNMjUxMjI0MDQwMTE1WhcNMjUxMjI1MDQwMTE1WjAzMTEwLwYDVQQD EyhhNjgzZjcxNjFjMzY2YWVkYTU5ZDRkOWNhMGJiNTY1MGE5NjEzMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHQWR4ols/myA3efvsjOx+0nz4o5 yrLxqhCO+a7kY1y6thY51a8SbVnjHNcXVMINxP5l9S2QNmB4KONnTD2qhiBXsol7 Nypo5lw0MOZgI+BqDWX7liaKm2kjIxx66sWqQpOcAUjrnQ6eoecyXKF2G9r03aWx iI9Aq9+LrA+QBvUSDN9NNEx4wvyLZj7zGVXoYpMamtknmDs/o62bP4fF5/62tfwS M7ig3MY1IpISpmRGSnZKE92CFFaX2J9U5Gksw8GQWLGoATaO+NqAqFHqINvcsnje bAkd/4p4U0lu26Pu0VT/mQKwDdJR1Poc8aBYT93QLFV2MqERtZ4d/RZm7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaD9xYcNmrtpZ1NnKC7VlCpYTNoMB8GA1UdIwQY MBaAFExL5DOUp8K/Ho/fux1Qb6N6xzIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzct NWYzZDA2ZjZhNWQyLzEvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzctNWYzZDA2ZjZhNWQy LzEvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA36a/rdvM I5ztualFa7CpnyufZ9BHEdBavTCQTnhXBLi0COSv2h0zVXIkSTaOfXHQ6vrC4/cB lKR3xoYJb1L1RaKLh2dk9c+LXCFazwUn0WnVdUi3Y/Oav+YBd6P27rsN3/lFUEHv oxHkhYHRsRcsDje76m9/d36/qoWBM2dhtL8eWS7L1tLTVyx6ERWM5EZdVRza+zuZ WFjyVvt4u5aGTwoi8+Oy7XzN7eLl8bdcHWETaWxPOgwDQcgM8n+fv4Gx7lo74oyS Ixkv2nJV0b1KwKE+/2SVpyoFA9btL5PsCyLJOMjBu+YO8jRoVZUcJbaksGqnjOtY O1eEWYBaxZL74A== -----END CERTIFICATE-----Generated at Wed Dec 24 09:22:53 2025 by rpki-client