This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft File: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json) Hash identifier: rjVUgA8Ss7QEyquBVpbs1t27JsYTBoGskByDts/fxcs= Subject key identifier: 96:46:9C:36:17:F1:AF:1F:EE:7A:F4:3F:B1:09:73:8B:E3:60:05:94 Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0 Certificate issuer: /CN=d44bd5653013fa7ca34f52284309a688b249e7a0 Certificate serial: 019B3F118C71E78CBB81994B4A6B9AA5D742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 04:01:13 +0000 Manifest this update: Sun 21 Dec 2025 04:01:13 +0000 Manifest next update: Mon 22 Dec 2025 04:01:13 +0000 Files and hashes: 1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: DehsEi8La9p7LujhB1PcSGoqazoOMsDPVo4NfeVDBGY=) 2: aiV1bvRqs_G_sgOlfybawGAadgI.roa (hash: 8XHG82lxGT1HMLtRMZdwDsbkfDXnRzX+XlQLJ246Cyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:8c:71:e7:8c:bb:81:99:4b:4a:6b:9a:a5:d7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0 Validity Not Before: Dec 21 04:01:13 2025 GMT Not After : Dec 22 04:01:13 2025 GMT Subject: CN=96469c3617f1af1fee7af43fb109738be3600594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:08:62:e8:ea:7c:ae:39:5c:c5:62:1a:83: 8b:1f:33:1e:30:c3:fc:00:05:49:42:ee:4b:0e:39: 7c:e4:e0:e8:0f:72:2d:d4:a6:3c:da:64:02:a8:72: 10:26:28:d7:d5:46:eb:14:0e:21:14:1b:f4:23:37: e3:7e:ca:52:11:77:78:79:eb:be:d7:6d:46:62:95: 25:2b:d4:c0:8b:3c:37:c3:90:10:7b:96:78:6f:48: 87:04:0e:24:aa:d6:0a:75:b2:fd:45:b9:cb:a2:d2: c2:88:2b:7d:e2:b3:97:30:6e:e3:da:78:e1:df:b6: 58:38:37:01:4b:e5:1e:aa:1a:36:02:9f:6f:7b:5a: 87:1e:1c:8b:7b:c5:ed:89:8e:e8:35:af:f0:03:54: 38:01:13:18:f0:ce:0e:60:eb:ec:c0:3b:9b:1a:60: 40:ce:9a:f9:28:0d:39:d7:4d:f3:5b:e6:75:8a:75: e5:e6:b3:07:50:fd:ba:a3:e4:19:3b:b9:1c:5f:77: 2d:d6:28:0e:10:15:ea:0f:5c:de:8c:a2:9d:5f:52: 81:df:92:66:64:44:68:a4:76:ed:8f:ee:0d:bb:15: a0:b7:3d:16:5a:db:2c:af:40:e2:47:12:25:ff:b5: 89:3e:59:e3:3b:40:d0:ec:34:05:b0:96:9f:67:d1: dd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:46:9C:36:17:F1:AF:1F:EE:7A:F4:3F:B1:09:73:8B:E3:60:05:94 X509v3 Authority Key Identifier: keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ee:c5:d4:66:dd:a5:ab:17:3a:0e:32:66:0b:c8:e3:7c:ed: 32:0b:70:bd:ca:f3:4e:2f:a5:0d:92:76:8c:95:9e:49:56:69: c6:50:5d:d6:1c:39:d0:db:99:84:b2:34:74:82:7a:71:e4:db: c9:55:d5:b4:96:90:cd:e0:75:37:cd:e3:48:61:3f:83:da:86: 3b:cf:fa:4b:68:40:86:a7:1e:f1:94:0f:05:cb:33:b0:4c:1e: af:4f:9b:58:2a:ac:ee:c0:c2:3c:42:b8:68:06:9d:35:d3:f6: 2e:90:a0:95:08:e3:40:5a:c4:64:3c:68:83:46:8a:af:48:87: 9d:c9:a4:a4:77:dc:d6:81:47:f9:37:6c:46:0a:c1:17:2c:43: 1d:e5:e3:98:24:1c:23:b3:d0:99:88:e8:8a:3d:29:71:0f:e8: ee:a3:dd:d6:de:d2:de:1c:c0:cc:c9:34:cd:7a:5c:72:51:82: 2c:cf:77:ba:b5:7b:d6:71:f3:85:9d:4e:27:b7:05:7e:50:aa: 63:10:17:37:86:bc:ee:ad:01:01:e7:27:d8:37:fd:34:54:a5: 2c:19:80:99:46:22:3c:17:7f:94:97:29:51:57:03:f3:31:52: 73:73:45:46:c3:1f:2b:cf:59:66:fa:70:39:b3:a2:4b:45:8c: a8:de:bc:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EYxx54y7gZlLSmuapddCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NGJkNTY1MzAxM2ZhN2NhMzRmNTIyODQzMDlhNjg4YjI0 OWU3YTAwHhcNMjUxMjIxMDQwMTEzWhcNMjUxMjIyMDQwMTEzWjAzMTEwLwYDVQQD Eyg5NjQ2OWMzNjE3ZjFhZjFmZWU3YWY0M2ZiMTA5NzM4YmUzNjAwNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjUIYujqfK45XMViGoOLHzMeMMP8 AAVJQu5LDjl85ODoD3It1KY82mQCqHIQJijX1UbrFA4hFBv0IzfjfspSEXd4eeu+ 121GYpUlK9TAizw3w5AQe5Z4b0iHBA4kqtYKdbL9RbnLotLCiCt94rOXMG7j2njh 37ZYODcBS+Ueqho2Ap9ve1qHHhyLe8XtiY7oNa/wA1Q4ARMY8M4OYOvswDubGmBA zpr5KA05103zW+Z1inXl5rMHUP26o+QZO7kcX3ct1igOEBXqD1zejKKdX1KB35Jm ZERopHbtj+4NuxWgtz0WWtssr0DiRxIl/7WJPlnjO0DQ7DQFsJafZ9HdtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZGnDYX8a8f7nr0P7EJc4vjYAWUMB8GA1UdIwQY MBaAFNRL1WUwE/p8o09SKEMJpoiySeegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2Mt YjUwMTI2NjIwMjBkLzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2MtYjUwMTI2NjIwMjBk LzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGu7F1Gbd pasXOg4yZgvI43ztMgtwvcrzTi+lDZJ2jJWeSVZpxlBd1hw50NuZhLI0dIJ6ceTb yVXVtJaQzeB1N83jSGE/g9qGO8/6S2hAhqce8ZQPBcszsEwer0+bWCqs7sDCPEK4 aAadNdP2LpCglQjjQFrEZDxog0aKr0iHncmkpHfc1oFH+TdsRgrBFyxDHeXjmCQc I7PQmYjoij0pcQ/o7qPd1t7S3hzAzMk0zXpcclGCLM93urV71nHzhZ1OJ7cFflCq YxAXN4a87q0BAecn2Df9NFSlLBmAmUYiPBd/lJcpUVcD8zFSc3NFRsMfK89ZZvpw ObOiS0WMqN68nw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:06:29 2025 by rpki-client