This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft File: evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json) Hash identifier: Kq2MsgLbIUhqYTY4Mh4OlyNEOEuX0DU8Xz9VyjjeQCw= Subject key identifier: 70:EF:B6:9F:9A:C0:D8:9F:F3:77:9D:2A:2A:74:C5:42:31:97:A7:5B Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78 Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578 Certificate serial: 019B3C7E2BBD6D9C0CCE5FE66A2871440672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft Manifest number: 04C3 Signing time: Sat 20 Dec 2025 16:01:00 +0000 Manifest this update: Sat 20 Dec 2025 16:01:00 +0000 Manifest next update: Sun 21 Dec 2025 16:01:00 +0000 Files and hashes: 1: HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa (hash: X87UHvfB+nlPvI0ZCTJdcn/R8oWH+T+ddbzxZs7Ye8A=) 2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: Gq1oYZ9/Jq7gYT5CioXsYtazFMCVTMCcAPZe8ARD2Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:2b:bd:6d:9c:0c:ce:5f:e6:6a:28:71:44:06:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578 Validity Not Before: Dec 20 16:01:00 2025 GMT Not After : Dec 21 16:01:00 2025 GMT Subject: CN=70efb69f9ac0d89ff3779d2a2a74c5423197a75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:3a:7a:3b:4b:f8:11:0c:16:76:d8:e8:d2: 12:bc:3f:85:67:b3:24:6d:19:e1:2c:c8:5e:8b:0b: 4b:d5:2c:bf:d8:58:da:b3:b7:61:47:b6:29:1b:47: 63:ac:bd:46:2a:a8:5e:b1:ab:a5:b3:4b:2b:a3:3b: 39:e1:2e:7c:5f:14:1b:2d:64:21:fc:b4:73:32:5f: 10:46:0d:4e:b9:4c:9a:80:dc:3d:02:a7:49:67:50: 09:70:23:b4:23:3f:12:85:d3:7c:ec:57:7f:01:67: 49:60:0a:54:a9:9c:61:db:c7:26:51:b5:1c:64:39: e3:6e:ba:73:c8:ba:a6:2c:66:3d:0f:49:a5:0d:f5: f1:73:39:34:b2:9e:42:79:e6:f1:47:08:cb:ff:c0: 7b:ed:fe:96:46:7c:26:de:eb:91:0d:82:59:0e:46: 08:48:0b:c4:0f:d7:a1:09:00:ea:6d:66:40:ec:85: 11:a0:9f:5f:42:fc:5a:53:ce:6f:12:e0:d6:60:fc: c3:a1:10:35:69:58:68:43:89:4a:2c:cc:78:82:c8: 5c:97:31:54:32:52:a3:01:20:e6:a6:df:91:62:ed: 01:25:06:dc:af:8e:07:af:c2:a2:a6:ca:7a:e7:41: 7a:f0:b8:17:8b:ff:7c:1e:40:43:57:af:28:f2:d3: 32:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EF:B6:9F:9A:C0:D8:9F:F3:77:9D:2A:2A:74:C5:42:31:97:A7:5B X509v3 Authority Key Identifier: keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:dc:7b:41:b4:b4:05:d5:1f:dd:6a:f4:d8:63:2c:2d:61:3d: b9:0a:f1:6d:85:6f:18:70:5c:c9:65:56:41:7c:e8:d3:b1:ec: 93:cf:e9:4a:f5:7e:18:8f:f2:62:09:41:81:98:41:c3:36:cc: 11:3f:f5:8f:1f:b7:69:6d:95:fc:bc:e8:55:3e:1f:eb:87:7c: 5d:16:69:f3:f2:e9:7d:77:f5:92:fa:2b:c6:4d:74:56:e2:ba: eb:c1:13:48:6f:58:99:21:78:af:8f:28:45:3c:2e:29:e2:04: e9:dc:cd:b6:f7:90:0c:19:61:8e:7a:2c:80:37:e0:f8:67:52: 41:1e:1b:95:cb:6a:14:c8:9c:d4:b7:73:65:ad:54:36:ef:ae: e2:bb:65:fe:aa:79:a3:9c:7a:05:74:ca:41:78:f5:e7:8a:4e: 92:96:4f:ae:d7:b2:fd:6f:9e:2f:0f:f5:58:b2:ed:b0:82:d2: c6:bc:f2:35:d5:42:82:89:f9:a7:ff:e9:81:cb:98:ee:4e:4d: 28:6e:06:41:0e:4e:41:94:f4:37:b6:aa:72:20:11:ce:8b:fc: 89:f8:6e:85:87:d9:cc:e8:2b:b9:44:7f:62:04:99:0c:67:d4: e4:bf:cc:66:fd:a3:01:48:fe:96:b5:22:8e:86:a6:b7:ce:ab: 1c:c8:85:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fiu9bZwMzl/maihxRAZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZjFhN2JmNzQyODVkYjJlODIwOTFmYmY0NjNhMmVlZjZl M2E1NzgwHhcNMjUxMjIwMTYwMTAwWhcNMjUxMjIxMTYwMTAwWjAzMTEwLwYDVQQD Eyg3MGVmYjY5ZjlhYzBkODlmZjM3NzlkMmEyYTc0YzU0MjMxOTdhNzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEE6ejtL+BEMFnbY6NISvD+FZ7Mk bRnhLMheiwtL1Sy/2Fjas7dhR7YpG0djrL1GKqhesauls0srozs54S58XxQbLWQh /LRzMl8QRg1OuUyagNw9AqdJZ1AJcCO0Iz8ShdN87Fd/AWdJYApUqZxh28cmUbUc ZDnjbrpzyLqmLGY9D0mlDfXxczk0sp5CeebxRwjL/8B77f6WRnwm3uuRDYJZDkYI SAvED9ehCQDqbWZA7IURoJ9fQvxaU85vEuDWYPzDoRA1aVhoQ4lKLMx4gshclzFU MlKjASDmpt+RYu0BJQbcr44Hr8Kipsp650F68LgXi/98HkBDV68o8tMy1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDvtp+awNif83edKip0xUIxl6dbMB8GA1UdIwQY MBaAFHrxp790KF2y6CCR+/Rjou7246V4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wNTg0MzUtYTFjNi00NDM2LTk1YTIt YjcxMTRiNjlmODRjLzEvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wNTg0MzUtYTFjNi00NDM2LTk1YTItYjcxMTRiNjlmODRj LzEvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9x7QbS0 BdUf3Wr02GMsLWE9uQrxbYVvGHBcyWVWQXzo07Hsk8/pSvV+GI/yYglBgZhBwzbM ET/1jx+3aW2V/LzoVT4f64d8XRZp8/LpfXf1kvorxk10VuK668ETSG9YmSF4r48o RTwuKeIE6dzNtveQDBlhjnosgDfg+GdSQR4blctqFMic1LdzZa1UNu+u4rtl/qp5 o5x6BXTKQXj154pOkpZPrtey/W+eLw/1WLLtsILSxrzyNdVCgon5p//pgcuY7k5N KG4GQQ5OQZT0N7aqciARzov8ifhuhYfZzOgruUR/YgSZDGfU5L/MZv2jAUj+lrUi joamt86rHMiFKw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:09:30 2025 by rpki-client