This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft File: TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json) Hash identifier: qK0JXj95oKvbGA2HYSbK/C7B7lwdfGXRgTk2YFtHmsM= Subject key identifier: 3C:CB:D2:1D:F2:6F:6E:16:16:35:38:AA:53:E1:DA:CE:F6:ED:6A:15 Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31 Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231 Certificate serial: 019B410034609D427C85B51A79604D0E5680 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 13:01:30 +0000 Manifest this update: Sun 21 Dec 2025 13:01:30 +0000 Manifest next update: Mon 22 Dec 2025 13:01:30 +0000 Files and hashes: 1: 9dHpkAlOL0XgkLxchS4Qy2sMNCs.roa (hash: g9vMbBt1/drUDiVGZvjhkatTyph0Mun8c4A/qeNjgzE=) 2: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: hsx7N5mx/h+HptCFg/X2z4HIyp5Kf3b/HXaCZ49Dzu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:34:60:9d:42:7c:85:b5:1a:79:60:4d:0e:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231 Validity Not Before: Dec 21 13:01:30 2025 GMT Not After : Dec 22 13:01:30 2025 GMT Subject: CN=3ccbd21df26f6e16163538aa53e1dacef6ed6a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6f:16:61:f0:b0:d7:e4:8d:83:43:d1:57:f9: d7:f4:ad:ce:99:77:dc:59:49:30:51:42:e8:8e:0e: b9:cf:26:07:68:15:bb:23:b0:c4:49:a9:55:ff:78: f8:4f:06:16:80:89:0b:06:5f:c1:07:91:d1:3d:7f: 08:85:88:00:80:37:66:61:50:d2:86:41:58:e1:74: dd:92:63:ff:44:5b:1e:f0:37:54:6e:6c:e7:c1:a1: f0:e1:a5:dd:25:58:e6:88:08:a5:a7:20:80:24:13: 74:29:25:85:1b:0b:f6:4d:6c:dc:c1:06:72:df:81: 11:f7:6f:0e:e7:2c:70:35:cf:22:4d:57:0a:96:65: ea:6f:35:d9:a8:99:5b:82:05:0b:8e:df:63:bd:16: 6d:8b:36:47:26:35:da:65:f2:ea:14:51:b7:4d:cd: f7:4b:87:86:69:43:67:76:2c:42:48:53:76:23:76: 48:33:d7:fc:55:68:aa:0c:33:cf:90:55:07:09:d2: 30:9f:93:6e:cf:0f:bc:de:bf:db:4e:90:d6:1d:46: ce:58:ed:ab:cb:a3:26:a1:7a:8a:32:4a:88:66:a0: 5f:56:64:19:13:62:27:be:07:70:05:42:e0:f8:b9: 8a:aa:32:80:4c:87:2b:a0:90:b4:ca:ce:a8:1a:4d: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CB:D2:1D:F2:6F:6E:16:16:35:38:AA:53:E1:DA:CE:F6:ED:6A:15 X509v3 Authority Key Identifier: keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:da:d5:2d:9a:fb:b8:18:ee:24:11:4d:24:67:13:5c:c9:e2: 35:31:ba:1d:c1:83:cc:13:1d:ab:82:8a:e6:9f:40:14:9e:e2: 5a:42:2c:49:40:fa:68:a8:f8:d2:d0:7b:2f:43:b3:de:79:6f: 02:d7:79:e7:93:f3:aa:7b:d1:d7:85:33:d1:30:d9:49:71:59: 42:1d:9d:5d:47:52:b8:23:79:9d:99:0b:02:d3:c5:f3:47:d6: 52:be:af:e0:a9:1c:d0:6f:11:ab:7d:75:8f:a3:05:52:cb:cd: 7f:d7:64:18:56:32:84:14:5f:20:40:6c:2e:ab:bc:91:d5:53: aa:e2:45:7c:cc:e4:4a:5e:30:06:31:54:87:46:5c:fe:ba:09: ab:e8:4b:00:11:f2:13:25:f6:e0:87:8c:75:2a:bc:79:07:55: 42:f7:c6:76:69:75:c5:83:eb:75:43:0f:5f:6c:50:51:e3:66: 2d:af:9f:49:a5:27:22:4e:74:3b:1f:26:71:d4:72:1f:b1:5b: 5b:32:66:78:5e:f6:06:81:7e:f4:a0:23:12:90:ce:a8:fb:b5: 29:e6:33:b9:b5:23:0e:c8:c4:a2:d7:53:44:a1:03:a3:be:b6: ac:59:c2:b0:3a:91:25:ff:03:83:d1:5c:95:e2:26:01:ed:ab: 2f:3f:2f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBADRgnUJ8hbUaeWBNDlaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNGJlNDMzOTRhN2MyYmYxZThmZGZiYjFkNTA2ZmEzN2Fj NzMyMzEwHhcNMjUxMjIxMTMwMTMwWhcNMjUxMjIyMTMwMTMwWjAzMTEwLwYDVQQD EygzY2NiZDIxZGYyNmY2ZTE2MTYzNTM4YWE1M2UxZGFjZWY2ZWQ2YTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G8WYfCw1+SNg0PRV/nX9K3OmXfc WUkwUULojg65zyYHaBW7I7DESalV/3j4TwYWgIkLBl/BB5HRPX8IhYgAgDdmYVDS hkFY4XTdkmP/RFse8DdUbmznwaHw4aXdJVjmiAilpyCAJBN0KSWFGwv2TWzcwQZy 34ER928O5yxwNc8iTVcKlmXqbzXZqJlbggULjt9jvRZtizZHJjXaZfLqFFG3Tc33 S4eGaUNndixCSFN2I3ZIM9f8VWiqDDPPkFUHCdIwn5Nuzw+83r/bTpDWHUbOWO2r y6MmoXqKMkqIZqBfVmQZE2InvgdwBULg+LmKqjKATIcroJC0ys6oGk0MgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzL0h3yb24WFjU4qlPh2s727WoVMB8GA1UdIwQY MBaAFExL5DOUp8K/Ho/fux1Qb6N6xzIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzct NWYzZDA2ZjZhNWQyLzEvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzctNWYzZDA2ZjZhNWQy LzEvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9rVLZr7 uBjuJBFNJGcTXMniNTG6HcGDzBMdq4KK5p9AFJ7iWkIsSUD6aKj40tB7L0Oz3nlv Atd555PzqnvR14Uz0TDZSXFZQh2dXUdSuCN5nZkLAtPF80fWUr6v4Kkc0G8Rq311 j6MFUsvNf9dkGFYyhBRfIEBsLqu8kdVTquJFfMzkSl4wBjFUh0Zc/roJq+hLABHy EyX24IeMdSq8eQdVQvfGdml1xYPrdUMPX2xQUeNmLa+fSaUnIk50Ox8mcdRyH7Fb WzJmeF72BoF+9KAjEpDOqPu1KeYzubUjDsjEotdTRKEDo762rFnCsDqRJf8Dg9Fc leImAe2rLz8v5w== -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:28 2025 by rpki-client