This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft File: EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json) Hash identifier: FS+lCSNt13cB7IQl8shQr8Ko34Zg/qHNv3OkphYPYWI= Subject key identifier: D3:7C:52:7D:DA:54:7E:4C:2E:18:CF:0D:5D:3D:45:E9:4B:DF:4D:59 Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C Certificate issuer: /CN=1265c9165fd336df6dfe849aebdce4685fb1993c Certificate serial: 019B10814EAC891D22FF2751055900275AB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft Manifest number: 14AC Signing time: Fri 12 Dec 2025 03:01:08 +0000 Manifest this update: Fri 12 Dec 2025 03:01:08 +0000 Manifest next update: Sat 13 Dec 2025 03:01:08 +0000 Files and hashes: 1: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: 74O3RAYJZAkRqSdAu6RnJWbqzBBzmVUKm0yYaxemy4g=) 2: uUsYYdThPpGgjymK3Ultz58Gf_Q.roa (hash: kzn/M2n+sxLUH2VEd8vrpqyKNhTOto1w+Nu3LrsxmjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:4e:ac:89:1d:22:ff:27:51:05:59:00:27:5a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c Validity Not Before: Dec 12 03:01:08 2025 GMT Not After : Dec 13 03:01:08 2025 GMT Subject: CN=d37c527dda547e4c2e18cf0d5d3d45e94bdf4d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:eb:9b:fc:3e:1b:82:81:e9:bd:5a:7e:22: 5c:6d:b2:89:2b:6a:b7:77:7c:90:7f:bc:35:5d:8c: bc:2f:05:f4:c3:e2:33:ea:ae:b0:72:ef:75:ba:8e: e3:33:4b:62:1d:04:a4:1f:2b:97:4f:d2:de:d2:d6: 43:5d:28:73:10:7f:0f:05:56:fd:9a:f0:09:87:83: a2:b5:0b:6b:a6:be:ab:f9:13:60:78:69:5e:bd:fd: 2c:fd:e8:0d:f1:1e:42:6a:f8:e1:a4:98:15:46:dc: 91:63:ea:5d:5f:3b:21:d9:6a:55:ca:40:64:3f:ab: 12:3e:32:77:4f:22:bf:97:1b:a6:34:14:bd:29:9f: a3:61:37:ba:1b:8c:d3:50:0a:70:cc:85:41:82:c4: aa:5b:a8:b6:75:d0:70:b8:37:fa:e3:cd:3d:d6:b9: 31:90:cf:f5:60:40:1f:0f:73:d3:d4:1c:f6:3f:cd: 1c:be:10:14:01:ea:d2:f3:de:ad:04:e2:1c:36:49: 05:ab:e7:59:b1:dd:d6:b5:88:86:13:72:ea:80:7e: fa:82:df:48:01:a3:45:1f:bb:66:a7:f2:9b:01:89: 81:d7:60:ed:02:34:75:b0:d5:04:31:d0:11:4a:7d: 24:a9:ec:81:13:90:d3:9a:cf:a3:1c:f7:04:74:8f: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7C:52:7D:DA:54:7E:4C:2E:18:CF:0D:5D:3D:45:E9:4B:DF:4D:59 X509v3 Authority Key Identifier: keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:64:10:ff:bd:93:90:79:db:43:07:78:1e:86:d8:78:1f:17: 79:8e:2e:7d:14:9d:b6:23:2e:bf:3f:c9:92:ce:c4:74:88:5a: 51:f9:41:62:bd:df:ac:7f:15:0b:0a:4c:fc:69:8a:7f:24:25: 89:e3:75:45:b2:9a:22:61:49:58:4e:17:d1:09:76:f0:68:e5: 82:2b:bf:2f:40:2e:a1:1b:dc:87:63:64:29:fe:f5:88:b4:6d: fe:38:10:66:55:56:9b:32:a8:0b:a8:a5:72:e5:ba:3c:bf:bf: af:d8:6e:0e:9c:09:d1:78:5f:41:f1:8f:8e:82:31:c9:e8:72: e2:04:1b:5e:28:17:1b:5a:aa:d7:14:c3:cf:6a:61:49:1f:f8: 79:13:34:43:50:67:02:02:b4:c8:f6:af:47:3a:18:98:c3:5a: 87:c8:67:0c:d6:d6:a2:e2:f0:47:d4:19:83:e3:b6:18:9d:36: 15:8a:0d:c3:7f:b5:dc:a9:ef:ea:84:f6:57:c2:a3:11:1c:a5: 53:2f:06:aa:af:a9:0a:47:6d:3e:be:02:cb:89:a9:89:21:ba: d5:d1:ee:ec:51:3d:aa:6f:28:4e:8d:74:3c:c5:c7:49:92:36: 02:3e:fc:0c:e3:33:cd:ab:c0:9c:1a:20:a3:c2:ad:8b:f1:c8: ef:92:2b:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgU6siR0i/ydRBVkAJ1q0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjVjOTE2NWZkMzM2ZGY2ZGZlODQ5YWViZGNlNDY4NWZi MTk5M2MwHhcNMjUxMjEyMDMwMTA4WhcNMjUxMjEzMDMwMTA4WjAzMTEwLwYDVQQD EyhkMzdjNTI3ZGRhNTQ3ZTRjMmUxOGNmMGQ1ZDNkNDVlOTRiZGY0ZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqzrm/w+G4KB6b1afiJcbbKJK2q3 d3yQf7w1XYy8LwX0w+Iz6q6wcu91uo7jM0tiHQSkHyuXT9Le0tZDXShzEH8PBVb9 mvAJh4OitQtrpr6r+RNgeGlevf0s/egN8R5CavjhpJgVRtyRY+pdXzsh2WpVykBk P6sSPjJ3TyK/lxumNBS9KZ+jYTe6G4zTUApwzIVBgsSqW6i2ddBwuDf648091rkx kM/1YEAfD3PT1Bz2P80cvhAUAerS896tBOIcNkkFq+dZsd3WtYiGE3LqgH76gt9I AaNFH7tmp/KbAYmB12DtAjR1sNUEMdARSn0kqeyBE5DTms+jHPcEdI9YVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNN8Un3aVH5MLhjPDV09RelL301ZMB8GA1UdIwQY MBaAFBJlyRZf0zbfbf6Emuvc5GhfsZk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYt NjhlOTg2ZmQ2NDE5LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYtNjhlOTg2ZmQ2NDE5 LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWQQ/72T kHnbQwd4HobYeB8XeY4ufRSdtiMuvz/Jks7EdIhaUflBYr3frH8VCwpM/GmKfyQl ieN1RbKaImFJWE4X0Ql28Gjlgiu/L0AuoRvch2NkKf71iLRt/jgQZlVWmzKoC6il cuW6PL+/r9huDpwJ0XhfQfGPjoIxyehy4gQbXigXG1qq1xTDz2phSR/4eRM0Q1Bn AgK0yPavRzoYmMNah8hnDNbWouLwR9QZg+O2GJ02FYoNw3+13Knv6oT2V8KjERyl Uy8Gqq+pCkdtPr4Cy4mpiSG61dHu7FE9qm8oTo10PMXHSZI2Aj78DOMzzavAnBog o8Kti/HI75Iryw== -----END CERTIFICATE-----Generated at Fri Dec 12 07:53:54 2025 by rpki-client