This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft File: EVYEuolej7O0mix4CI6f8v-XCgg.mft (raw, json) Hash identifier: eBkRllVwTpgAFNmPkLe7mQVqjYFx5yVJ1+y7MgMQvlI= Subject key identifier: 42:D9:37:BC:55:A4:72:5C:3D:76:B4:29:4C:D1:38:8D:45:19:0A:74 Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08 Certificate issuer: /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08 Certificate serial: 019B4A03655BCA40B72F9C293F560B38D817 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft Manifest number: 1721 Signing time: Tue 23 Dec 2025 07:01:35 +0000 Manifest this update: Tue 23 Dec 2025 07:01:35 +0000 Manifest next update: Wed 24 Dec 2025 07:01:35 +0000 Files and hashes: 1: EVYEuolej7O0mix4CI6f8v-XCgg.crl (hash: IYQQ/J40Y9A2XnH428XnsfPQM59bOO73PR9GpllWem8=) 2: Mf8_fr0emM9VzKXxaSCkla0gpe8.roa (hash: M0YySaNEC7qXOCCeVLXEwEcDDAoxkin1ih/jS/04KOM=) 3: _LxyVkgbKLMaCoKf-wa-gjXEY9g.roa (hash: Tt/J7UaLJpGwa3pTn7jEj8mr5nT4j+av9OQ17W7ixzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:65:5b:ca:40:b7:2f:9c:29:3f:56:0b:38:d8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08 Validity Not Before: Dec 23 07:01:35 2025 GMT Not After : Dec 24 07:01:35 2025 GMT Subject: CN=42d937bc55a4725c3d76b4294cd1388d45190a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:10:0e:9b:72:92:94:8f:d3:40:e7:c0:0e: aa:75:1a:b8:9b:18:f8:63:24:63:31:81:77:f5:23: f8:2a:6b:74:ca:12:bb:c1:d9:e5:18:ab:d9:1b:a0: 99:49:20:79:8e:84:64:39:49:36:81:88:42:29:6e: df:cb:66:fb:d2:de:aa:45:65:f6:a8:66:42:9d:c1: d8:e0:d2:4c:d9:6c:f3:d8:64:c9:63:44:53:06:94: 3d:c8:09:00:34:cb:be:2e:3c:3e:62:e6:83:31:04: 2c:6c:2b:8a:41:65:8e:c6:37:7e:6a:49:b6:32:d6: c3:12:08:bd:20:fc:42:f2:11:c8:ed:ba:77:1c:72: 83:66:fa:07:c1:88:ef:cf:ea:fb:92:e2:1d:d6:48: 9a:30:7c:64:9a:14:6a:c0:eb:25:3f:ff:16:1e:ee: e3:a8:8d:d5:d7:6d:73:c4:5b:c5:df:1a:8c:8f:73: d7:19:86:4a:bc:4f:bd:db:1b:83:93:ed:f3:5d:28: 3a:b5:fe:1c:8d:78:5b:98:96:5f:dd:19:a1:af:a5: b6:4b:a5:a1:23:04:64:b9:f8:db:26:6e:5d:49:f3: 37:3d:2b:50:70:01:2b:27:2c:62:10:52:f6:27:69: 49:9d:27:a6:67:6b:8e:ce:8f:2c:c9:a5:05:71:06: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D9:37:BC:55:A4:72:5C:3D:76:B4:29:4C:D1:38:8D:45:19:0A:74 X509v3 Authority Key Identifier: keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:0b:ba:20:47:bd:af:af:67:7b:61:0a:fe:35:95:40:6b:35: d5:70:0f:30:73:64:b6:48:75:d3:3b:8d:20:06:2e:38:43:23: 3c:9e:f3:e6:19:aa:a6:49:80:57:00:4a:84:ce:a5:48:2a:2e: 71:5e:66:40:2f:e9:a2:df:7d:87:3c:de:5c:02:41:7a:3a:0f: 5f:4d:86:10:9c:d2:c4:a3:1e:b1:5c:fb:15:0c:10:87:cf:bc: cc:d7:a4:3e:85:a9:06:19:b6:eb:bc:c2:3c:cf:fb:b0:68:0e: a1:95:4a:b5:2e:4e:e6:71:31:dc:32:4f:af:d1:8f:4a:a7:f0: 29:0e:a6:12:9e:b4:60:59:95:89:77:60:c0:af:f4:b3:58:3b: 43:63:9a:93:99:7e:a4:29:64:f5:96:cf:97:1d:b0:e2:c3:4c: a5:05:32:9f:5a:51:2c:fe:9b:ec:24:15:34:99:6e:64:3b:f3: 32:fa:b8:46:ba:e2:e4:73:e0:d2:89:b9:57:8c:a8:29:3b:f2: 1d:54:5d:3a:64:79:ca:56:00:cf:15:0b:96:50:f0:80:0e:b8: 05:43:63:68:04:ac:b9:78:62:47:60:97:59:4d:a3:4c:d7:7a: cc:82:be:d6:e5:26:cf:1b:68:b6:45:2a:1d:87:77:76:d6:d0: d3:e9:25:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA2VbykC3L5wpP1YLONgXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNTYwNGJhODk1ZThmYjNiNDlhMmM3ODA4OGU5ZmYyZmY5 NzBhMDgwHhcNMjUxMjIzMDcwMTM1WhcNMjUxMjI0MDcwMTM1WjAzMTEwLwYDVQQD Eyg0MmQ5MzdiYzU1YTQ3MjVjM2Q3NmI0Mjk0Y2QxMzg4ZDQ1MTkwYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiwQDptykpSP00DnwA6qdRq4mxj4 YyRjMYF39SP4Kmt0yhK7wdnlGKvZG6CZSSB5joRkOUk2gYhCKW7fy2b70t6qRWX2 qGZCncHY4NJM2Wzz2GTJY0RTBpQ9yAkANMu+Ljw+YuaDMQQsbCuKQWWOxjd+akm2 MtbDEgi9IPxC8hHI7bp3HHKDZvoHwYjvz+r7kuId1kiaMHxkmhRqwOslP/8WHu7j qI3V121zxFvF3xqMj3PXGYZKvE+92xuDk+3zXSg6tf4cjXhbmJZf3Rmhr6W2S6Wh IwRkufjbJm5dSfM3PStQcAErJyxiEFL2J2lJnSemZ2uOzo8syaUFcQbYLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELZN7xVpHJcPXa0KUzROI1FGQp0MB8GA1UdIwQY MBaAFBFWBLqJXo+ztJoseAiOn/L/lwoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZZRXVvbGVqN08wbWl4NENJNmY4di1YQ2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jNDJiMzctZDQ0OC00Y2YzLWJmZWMt MTY5MmZjOGJiYTE1LzEvRVZZRXVvbGVqN08wbWl4NENJNmY4di1YQ2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9jNDJiMzctZDQ0OC00Y2YzLWJmZWMtMTY5MmZjOGJiYTE1 LzEvRVZZRXVvbGVqN08wbWl4NENJNmY4di1YQ2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgu6IEe9 r69ne2EK/jWVQGs11XAPMHNktkh10zuNIAYuOEMjPJ7z5hmqpkmAVwBKhM6lSCou cV5mQC/pot99hzzeXAJBejoPX02GEJzSxKMesVz7FQwQh8+8zNekPoWpBhm267zC PM/7sGgOoZVKtS5O5nEx3DJPr9GPSqfwKQ6mEp60YFmViXdgwK/0s1g7Q2Oak5l+ pClk9ZbPlx2w4sNMpQUyn1pRLP6b7CQVNJluZDvzMvq4Rrri5HPg0om5V4yoKTvy HVRdOmR5ylYAzxULllDwgA64BUNjaASsuXhiR2CXWU2jTNd6zIK+1uUmzxtotkUq HYd3dtbQ0+kl9Q== -----END CERTIFICATE-----Generated at Tue Dec 23 11:01:36 2025 by rpki-client