This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft File: EVwEDsl1QyAjbNymTjk5C93jYmo.mft (raw, json) Hash identifier: /rN6ErAbeYeJAHahhPPNzNFOkArjn+2ebjprm90OMW0= Subject key identifier: 13:D0:36:4E:F2:C6:CB:A9:65:5C:8B:FE:2D:30:A1:8E:3E:E5:59:BA Authority key identifier: 11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A Certificate issuer: /CN=115c040ec9754320236cdca64e39390bdde3626a Certificate serial: 019B2777395B1B3827A29FE3517FD71A1930 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft Manifest number: 0C5E Signing time: Tue 16 Dec 2025 14:01:23 +0000 Manifest this update: Tue 16 Dec 2025 14:01:23 +0000 Manifest next update: Wed 17 Dec 2025 14:01:23 +0000 Files and hashes: 1: EVwEDsl1QyAjbNymTjk5C93jYmo.crl (hash: HreGT8k2vojNZd9pSjovZF6x6hI2O/4Efubwjy4YrBc=) 2: iR8kHHuMHXHdpW9oFEB19MCcm1M.roa (hash: cqHEhbc9Bc/QLDbHqxDN/gK7OPZ3taLde0WraYz/2vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:39:5b:1b:38:27:a2:9f:e3:51:7f:d7:1a:19:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115c040ec9754320236cdca64e39390bdde3626a Validity Not Before: Dec 16 14:01:23 2025 GMT Not After : Dec 17 14:01:23 2025 GMT Subject: CN=13d0364ef2c6cba9655c8bfe2d30a18e3ee559ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:47:33:e6:50:95:d6:6d:95:e9:b1:7a:05: 26:34:6a:81:59:c3:2f:d3:a2:36:f4:2e:12:fd:5f: 66:d5:2f:28:1b:a9:0c:90:30:e0:5d:14:f6:eb:2b: 75:b8:db:f7:51:fe:d4:0d:f2:e0:63:9c:14:5a:b0: b2:03:d1:cc:18:20:fc:fc:7d:b2:6f:4c:2a:81:c1: d2:c5:64:a2:2d:36:02:6d:a2:0f:87:81:14:91:6c: a1:c0:6e:48:b7:7c:1c:fa:ab:f3:da:7b:f2:bf:c4: f6:60:9d:02:db:e8:c8:35:93:7a:2e:17:10:00:e1: 59:42:00:a5:71:0b:6e:fc:bf:4c:36:ee:d2:94:c9: 43:6a:2e:2d:c4:79:dc:48:6e:43:25:9b:4d:bf:24: 0b:08:1a:61:5d:47:87:04:33:46:41:9f:74:5b:2e: 28:32:d2:6e:ce:ef:52:66:d9:f5:6b:f2:14:d9:ba: 02:87:7a:0b:14:83:28:3e:6a:f9:d2:01:dd:56:3e: 39:63:94:72:de:82:1b:49:de:d8:9a:56:a6:27:6e: 13:47:7e:c7:1a:2b:aa:2c:78:1e:25:3d:f4:25:72: 8f:41:f7:44:75:43:d5:a4:c3:6b:27:3d:f4:77:fb: 2d:41:91:41:0a:28:eb:0a:f3:80:27:cd:92:4a:bd: f4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D0:36:4E:F2:C6:CB:A9:65:5C:8B:FE:2D:30:A1:8E:3E:E5:59:BA X509v3 Authority Key Identifier: keyid:11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:13:77:28:08:86:ac:49:87:10:50:f2:27:f9:eb:54:4c:d0: 63:9b:69:03:92:a5:0e:98:8c:d2:b7:8b:a0:8f:83:ad:8b:1c: a0:d0:00:f7:3b:5b:a2:87:25:5b:11:72:11:d2:97:7c:89:0a: e7:15:48:f1:b0:1f:c4:dc:5b:11:d3:a3:ea:c2:4f:09:98:76: bd:9f:65:3c:2f:d0:3a:ad:db:06:d6:b2:9b:5f:c3:66:fb:60: f7:1b:2c:0e:64:cb:f3:7a:3b:dd:3b:c7:58:5d:df:b1:27:c0: d7:40:ad:3c:51:82:48:0a:a5:f9:6e:5b:35:f5:b1:8e:9f:cb: 67:5c:ca:8f:18:5c:ab:ed:7d:2e:62:c1:11:20:43:95:e8:42: 1d:fc:1e:5a:06:7f:48:c3:d1:bd:d9:d9:99:6b:68:2d:8d:f7: fc:ad:95:e2:39:a7:89:4c:ea:46:2f:a5:28:6a:e4:fb:84:79: b7:35:b8:ab:75:94:7c:53:f1:07:4a:f6:88:53:3d:bc:b4:7a: 14:63:d8:52:9f:52:81:bb:d4:9a:ec:f7:e6:3b:6f:bd:d5:5c: a3:85:53:6e:cd:b3:bf:dc:1d:76:79:1e:14:f3:d1:3b:d0:d2: 4b:72:b9:2f:54:ec:a3:13:b8:df:f0:7a:ee:e0:94:36:5d:61: 2d:da:3b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndzlbGzgnop/jUX/XGhkwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWMwNDBlYzk3NTQzMjAyMzZjZGNhNjRlMzkzOTBiZGRl MzYyNmEwHhcNMjUxMjE2MTQwMTIzWhcNMjUxMjE3MTQwMTIzWjAzMTEwLwYDVQQD EygxM2QwMzY0ZWYyYzZjYmE5NjU1YzhiZmUyZDMwYTE4ZTNlZTU1OWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweVHM+ZQldZtlemxegUmNGqBWcMv 06I29C4S/V9m1S8oG6kMkDDgXRT26yt1uNv3Uf7UDfLgY5wUWrCyA9HMGCD8/H2y b0wqgcHSxWSiLTYCbaIPh4EUkWyhwG5It3wc+qvz2nvyv8T2YJ0C2+jINZN6LhcQ AOFZQgClcQtu/L9MNu7SlMlDai4txHncSG5DJZtNvyQLCBphXUeHBDNGQZ90Wy4o MtJuzu9SZtn1a/IU2boCh3oLFIMoPmr50gHdVj45Y5Ry3oIbSd7YmlamJ24TR37H GiuqLHgeJT30JXKPQfdEdUPVpMNrJz30d/stQZFBCijrCvOAJ82SSr30jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPQNk7yxsupZVyL/i0woY4+5Vm6MB8GA1UdIwQY MBaAFBFcBA7JdUMgI2zcpk45OQvd42JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEt NzBlN2QwNTdmZjJkLzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEtNzBlN2QwNTdmZjJk LzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxN3KAiG rEmHEFDyJ/nrVEzQY5tpA5KlDpiM0reLoI+DrYscoNAA9ztbooclWxFyEdKXfIkK 5xVI8bAfxNxbEdOj6sJPCZh2vZ9lPC/QOq3bBtaym1/DZvtg9xssDmTL83o73TvH WF3fsSfA10CtPFGCSAql+W5bNfWxjp/LZ1zKjxhcq+19LmLBESBDlehCHfweWgZ/ SMPRvdnZmWtoLY33/K2V4jmniUzqRi+lKGrk+4R5tzW4q3WUfFPxB0r2iFM9vLR6 FGPYUp9SgbvUmuz35jtvvdVco4VTbs2zv9wddnkeFPPRO9DSS3K5L1TsoxO43/B6 7uCUNl1hLdo7zg== -----END CERTIFICATE-----Generated at Tue Dec 16 22:34:01 2025 by rpki-client