This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft File: EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft (raw, json) Hash identifier: /wlBlXT5kflrucELE4C8BB9Hy0u1dyyqhfiTjA2YCU4= Subject key identifier: CF:7E:DE:76:08:E4:A7:51:6A:CB:0F:63:C4:D1:BE:C3:C5:21:B5:6F Authority key identifier: 12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A Certificate issuer: /CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a Certificate serial: 019B2BF917CEDB87AA03D334E7FA30506A0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft Manifest number: 01BC Signing time: Wed 17 Dec 2025 11:01:43 +0000 Manifest this update: Wed 17 Dec 2025 11:01:43 +0000 Manifest next update: Thu 18 Dec 2025 11:01:43 +0000 Files and hashes: 1: EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl (hash: x6RW0oJTsYRdWgMMwy4HVFDmGrraBpn0pr8I3VYvgXs=) 2: cJMqlk4t_npV762YA6G1Urn8YC8.roa (hash: +q/bgqa1jjCMji99qFxLyo61sIU915VzUhks1PlXN30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:17:ce:db:87:aa:03:d3:34:e7:fa:30:50:6a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a Validity Not Before: Dec 17 11:01:43 2025 GMT Not After : Dec 18 11:01:43 2025 GMT Subject: CN=cf7ede7608e4a7516acb0f63c4d1bec3c521b56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:46:de:be:4b:55:37:91:8c:8d:74:88:20: d1:b0:9d:82:cf:c0:c2:09:6b:f3:8d:ec:2b:49:75: a2:7d:d2:a7:31:c7:07:75:5f:49:c3:d8:c9:1e:63: a1:e8:c1:56:35:9b:68:dd:1e:5d:1a:bc:5f:e9:7c: 94:e2:c3:0c:ce:e5:aa:6b:4c:b4:49:5d:a8:33:c9: e8:d8:51:47:ee:79:f0:bb:5e:43:3a:56:1a:50:b4: 4b:b5:fb:67:81:85:12:ad:15:a6:89:b9:26:f8:bf: 92:0b:3e:8b:66:45:9b:9b:e2:38:42:c8:25:84:5b: 12:cb:c7:bd:7d:c6:17:18:b9:c3:80:c8:dc:67:57: 21:0e:93:b7:d2:b6:d1:f8:7e:31:a3:08:53:d8:0a: 19:bf:1d:95:ad:71:cd:5a:56:02:dc:f6:92:db:5e: c3:7d:74:6f:1b:3d:22:53:10:e9:fd:32:0a:13:83: fb:7a:7b:9a:f9:66:7c:d0:ba:40:3e:bc:e7:1a:be: 09:3f:1f:29:9b:d3:39:3d:6a:82:bd:21:3a:32:1a: ed:10:7d:a3:5f:ed:a5:a3:06:a0:05:7a:c0:a0:47: e9:62:95:74:9e:76:17:ab:b2:a8:d4:60:a8:85:29: 90:21:cf:02:32:ab:74:9d:49:49:42:b3:14:49:87: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7E:DE:76:08:E4:A7:51:6A:CB:0F:63:C4:D1:BE:C3:C5:21:B5:6F X509v3 Authority Key Identifier: keyid:12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:0a:85:1b:66:ac:29:b5:90:94:50:4a:7b:6c:47:f3:e7:ce: 8b:c9:e6:8b:8b:9c:4c:e7:58:83:6d:5b:7c:d8:42:80:a8:08: 0d:6f:5d:e3:f0:bd:b5:b1:85:f6:8d:8d:4f:51:89:e8:1e:12: cc:be:6a:54:67:47:e2:b2:df:e4:c1:a6:98:1e:e6:10:7b:57: 66:db:81:89:94:dc:ab:76:6a:15:be:d2:c1:62:78:1c:d8:ab: 54:c7:83:a9:49:a9:25:b5:09:91:87:2d:75:fc:63:74:55:79: 11:ec:89:a7:50:07:85:82:64:59:e6:88:e2:e5:eb:48:a1:45: 2e:54:06:cd:6e:f0:0e:02:dd:84:fd:ac:ab:c8:96:18:9c:00: 34:27:de:49:ae:92:d8:61:6a:f6:7b:33:2a:66:b0:94:9c:9f: c4:aa:33:01:d1:31:49:1f:c4:8b:18:4c:d9:93:67:be:c3:cf: e5:a2:17:77:aa:3e:83:97:fa:4d:ad:28:a5:91:d3:ab:7d:d3: 5f:ff:cc:f7:f7:f6:7c:56:6c:0a:af:f0:9f:dc:37:7f:c3:51: 13:7c:a9:67:ea:8c:b3:3e:91:60:19:35:cb:58:65:74:20:cf: 28:35:29:a7:34:a3:37:1d:64:b1:fd:79:dc:e7:c2:29:40:24: e1:05:e9:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+RfO24eqA9M05/owUGoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZjI3YTdkZjIwNzZmOGQxZGM3OTUyNzdjMDlhMDEwN2Qy YmRiMmEwHhcNMjUxMjE3MTEwMTQzWhcNMjUxMjE4MTEwMTQzWjAzMTEwLwYDVQQD EyhjZjdlZGU3NjA4ZTRhNzUxNmFjYjBmNjNjNGQxYmVjM2M1MjFiNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLZG3r5LVTeRjI10iCDRsJ2Cz8DC CWvzjewrSXWifdKnMccHdV9Jw9jJHmOh6MFWNZto3R5dGrxf6XyU4sMMzuWqa0y0 SV2oM8no2FFH7nnwu15DOlYaULRLtftngYUSrRWmibkm+L+SCz6LZkWbm+I4Qsgl hFsSy8e9fcYXGLnDgMjcZ1chDpO30rbR+H4xowhT2AoZvx2VrXHNWlYC3PaS217D fXRvGz0iUxDp/TIKE4P7enua+WZ80LpAPrznGr4JPx8pm9M5PWqCvSE6MhrtEH2j X+2lowagBXrAoEfpYpV0nnYXq7Ko1GCohSmQIc8CMqt0nUlJQrMUSYetCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9+3nYI5KdRassPY8TRvsPFIbVvMB8GA1UdIwQY MBaAFBLyen3yB2+NHceVJ3wJoBB9K9sqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXZKNmZmSUhiNDBkeDVVbmZBbWdFSDByMnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lYjk0YWQtNzg5NC00YjM2LTkyNDYt MDhhZjc0YzFhNTBjLzEvRXZKNmZmSUhiNDBkeDVVbmZBbWdFSDByMnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lYjk0YWQtNzg5NC00YjM2LTkyNDYtMDhhZjc0YzFhNTBj LzEvRXZKNmZmSUhiNDBkeDVVbmZBbWdFSDByMnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwqFG2as KbWQlFBKe2xH8+fOi8nmi4ucTOdYg21bfNhCgKgIDW9d4/C9tbGF9o2NT1GJ6B4S zL5qVGdH4rLf5MGmmB7mEHtXZtuBiZTcq3ZqFb7SwWJ4HNirVMeDqUmpJbUJkYct dfxjdFV5EeyJp1AHhYJkWeaI4uXrSKFFLlQGzW7wDgLdhP2sq8iWGJwANCfeSa6S 2GFq9nszKmawlJyfxKozAdExSR/EixhM2ZNnvsPP5aIXd6o+g5f6Ta0opZHTq33T X//M9/f2fFZsCq/wn9w3f8NRE3ypZ+qMsz6RYBk1y1hldCDPKDUppzSjNx1ksf15 3OfCKUAk4QXpOA== -----END CERTIFICATE-----Generated at Wed Dec 17 14:34:27 2025 by rpki-client