This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft File: evV91Sx1_OOf_ikVRp2eZW28uHM.mft (raw, json) Hash identifier: 1zaVa3w98uuk99bObiThRdmdhG8xpn/N81iJQnbRtmA= Subject key identifier: 42:43:DA:0A:E3:79:88:82:82:FE:1F:7B:DC:91:F1:E3:2C:4F:8A:8D Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873 Certificate serial: 019B3CEC24B4D58ABD69296682E672BBA636 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft Manifest number: 03F1 Signing time: Sat 20 Dec 2025 18:01:07 +0000 Manifest this update: Sat 20 Dec 2025 18:01:07 +0000 Manifest next update: Sun 21 Dec 2025 18:01:07 +0000 Files and hashes: 1: B7d3MQIbfkEvo2qSsfhEkCAgz6c.roa (hash: aYYmRrZYB32cQ/o3auZL57R8HcFii3L/DbLpVUlrCzo=) 2: IA6UYcR72NZizch7SKA0NekJnzE.roa (hash: RWiYTu2GWF+/6G/rbSBa91ZS7IUG29tqgFfg/qB2D9Y=) 3: evV91Sx1_OOf_ikVRp2eZW28uHM.crl (hash: I8fq3KdErpLDLHlZI/unPyxgWlZ3UKqNycsC6Yct5RI=) 4: pshq4_QA-qLSghM03EWquGAt7rc.roa (hash: rpLjV1rbxm+W2cg04ypjM5dgXLvT0vLct5eUeqe0Yfs=) 5: uNcW8oAJty7QJ3rdwrvZtidPJb4.roa (hash: Va2QYZ3dyGhdpIjzyxbKQa1lFsVqCxw/WfEiLCdpGjc=) 6: w2cifThx8liTp2UosKmPtTuVnbg.roa (hash: 4M3/VZ3vA0bwXmuEW9DfiaSDaEw4jhqFMcpDjEAK5AY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:24:b4:d5:8a:bd:69:29:66:82:e6:72:bb:a6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873 Validity Not Before: Dec 20 18:01:07 2025 GMT Not After : Dec 21 18:01:07 2025 GMT Subject: CN=4243da0ae379888282fe1f7bdc91f1e32c4f8a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:2e:83:df:c5:b0:c6:00:08:d7:dc:c8:89: 8f:3a:03:41:39:ef:b3:9a:c6:89:a1:63:15:2c:ab: c8:5b:98:77:b5:6b:ea:53:e5:ac:aa:f6:03:aa:1d: c7:8c:98:36:88:f9:06:73:af:dd:c5:95:aa:89:0f: 72:38:89:f5:96:7f:3e:96:aa:d9:69:9d:63:86:8a: 33:b2:41:f0:c1:f4:4e:b9:26:b4:e7:68:e3:d0:a7: 45:9c:58:e0:25:68:45:8c:fb:f8:3c:be:06:1c:48: 4f:93:cf:78:4d:bf:70:6d:2d:f3:ab:75:36:cc:ad: 3b:50:62:95:80:62:0e:ad:08:ae:2e:b4:88:7d:2d: 07:de:96:1b:d5:45:ab:0e:dd:5d:4d:4c:22:97:1f: a2:d9:b3:bc:38:4a:56:29:54:e5:be:65:17:6e:d6: 8e:e0:4b:fb:45:78:68:1f:ef:b3:0b:cd:78:c0:77: b5:2b:f2:3a:15:ca:37:dc:b4:41:21:5d:5f:18:2a: d2:9a:b5:bc:66:f6:e8:a8:2c:10:73:b7:b3:31:ce: 4e:f4:34:4b:3c:07:b9:80:87:25:3c:b1:bd:ff:73: f7:1d:89:28:a3:d8:dd:b3:15:80:bb:68:15:8d:cd: 15:0e:2f:bb:a5:28:3c:2a:52:a7:78:a8:da:6d:1f: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:43:DA:0A:E3:79:88:82:82:FE:1F:7B:DC:91:F1:E3:2C:4F:8A:8D X509v3 Authority Key Identifier: keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5c:86:f2:3c:a6:1b:be:37:22:3e:9f:cd:8d:af:41:30:80: de:e1:5e:c9:8e:15:4f:74:39:3c:66:68:50:42:eb:cf:81:ca: 49:28:4b:19:22:e6:1a:a8:25:30:62:ff:30:26:f6:49:39:c3: 72:c0:c3:7b:c6:d9:33:f1:55:fd:ce:83:9e:84:ad:2b:f5:21: 7b:42:84:3b:2a:86:9c:a1:79:ba:dc:a5:f7:16:fd:6f:ac:49: 53:20:a3:77:ae:a5:d1:56:1e:87:f4:b8:53:c2:76:3a:01:78: ba:6a:31:91:99:13:db:bc:cd:0a:7e:b0:e9:8f:29:6b:9d:eb: b0:75:d7:c1:87:27:43:0a:3d:f6:62:d5:64:44:cf:83:57:07: 76:1d:96:ce:a4:4f:3a:cb:dd:10:b9:79:39:7f:b4:ba:5e:71: 2f:40:c2:29:5d:89:f5:aa:b2:33:40:b3:20:91:a2:c2:2b:05: a3:0b:97:ed:12:f3:7d:e8:d7:54:1a:7a:3e:c9:b2:0b:ff:f7: a9:e2:2f:53:1b:9b:de:1b:8f:64:53:d8:65:dc:bc:a4:12:e7: 74:fa:ee:74:2d:67:63:d1:6c:b0:8d:09:1e:95:97:9d:5d:eb: 9c:32:54:2d:31:dd:73:bf:06:66:7e:c8:a6:a8:e3:94:e4:23: eb:d3:ef:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87CS01Yq9aSlmguZyu6Y2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjU3ZGQ1MmM3NWZjZTM5ZmZlMjkxNTQ2OWQ5ZTY1NmRi Y2I4NzMwHhcNMjUxMjIwMTgwMTA3WhcNMjUxMjIxMTgwMTA3WjAzMTEwLwYDVQQD Eyg0MjQzZGEwYWUzNzk4ODgyODJmZTFmN2JkYzkxZjFlMzJjNGY4YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0oug9/FsMYACNfcyImPOgNBOe+z msaJoWMVLKvIW5h3tWvqU+WsqvYDqh3HjJg2iPkGc6/dxZWqiQ9yOIn1ln8+lqrZ aZ1jhoozskHwwfROuSa052jj0KdFnFjgJWhFjPv4PL4GHEhPk894Tb9wbS3zq3U2 zK07UGKVgGIOrQiuLrSIfS0H3pYb1UWrDt1dTUwilx+i2bO8OEpWKVTlvmUXbtaO 4Ev7RXhoH++zC814wHe1K/I6Fco33LRBIV1fGCrSmrW8ZvboqCwQc7ezMc5O9DRL PAe5gIclPLG9/3P3HYkoo9jdsxWAu2gVjc0VDi+7pSg8KlKneKjabR8uNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJD2grjeYiCgv4fe9yR8eMsT4qNMB8GA1UdIwQY MBaAFHr1fdUsdfzjn/4pFUadnmVtvLhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYt YzI1MzQwOTZjNjBkLzEvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84Nzk3ZGUtM2FlOS00ZTA1LTgwZmYtYzI1MzQwOTZjNjBk LzEvZXZWOTFTeDFfT09mX2lrVlJwMmVaVzI4dUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlyG8jym G743Ij6fzY2vQTCA3uFeyY4VT3Q5PGZoUELrz4HKSShLGSLmGqglMGL/MCb2STnD csDDe8bZM/FV/c6DnoStK/Uhe0KEOyqGnKF5utyl9xb9b6xJUyCjd66l0VYeh/S4 U8J2OgF4umoxkZkT27zNCn6w6Y8pa53rsHXXwYcnQwo99mLVZETPg1cHdh2WzqRP OsvdELl5OX+0ul5xL0DCKV2J9aqyM0CzIJGiwisFowuX7RLzfejXVBp6PsmyC//3 qeIvUxub3huPZFPYZdy8pBLndPrudC1nY9FssI0JHpWXnV3rnDJULTHdc78GZn7I pqjjlOQj69PvRQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:54 2025 by rpki-client