This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft File: eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json) Hash identifier: BaB1ICBuf92CZDpdvIjJl2XEXVv889ffAFiLmwvG3jE= Subject key identifier: BF:72:63:C4:14:1C:CF:B7:F2:CB:C5:3F:D6:52:D6:19:05:A5:00:0E Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2 Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2 Certificate serial: 019B29653CA5001456247A9C02428EC2BD01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft Manifest number: 13C8 Signing time: Tue 16 Dec 2025 23:00:59 +0000 Manifest this update: Tue 16 Dec 2025 23:00:59 +0000 Manifest next update: Wed 17 Dec 2025 23:00:59 +0000 Files and hashes: 1: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: BZdSXLAXmOEjCCoNA8L4d/qQ8HokkH2C6xy/k/KZsUc=) 2: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (hash: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:65:3c:a5:00:14:56:24:7a:9c:02:42:8e:c2:bd:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2 Validity Not Before: Dec 16 23:00:59 2025 GMT Not After : Dec 17 23:00:59 2025 GMT Subject: CN=bf7263c4141ccfb7f2cbc53fd652d61905a5000e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3a:14:66:92:57:48:f7:5d:76:fe:a0:99:93: 62:f4:b1:5b:9e:4e:72:e0:d9:c5:fc:d0:63:22:40: 49:76:c5:06:16:0b:be:95:9f:72:2b:c0:c0:d5:7f: 3b:41:fe:91:35:99:e3:8f:fa:e4:ad:40:60:a6:d2: 74:c4:b6:85:24:82:30:62:2a:b5:41:1d:a6:4e:cc: 9c:47:47:4c:fc:d5:f2:0c:1a:ca:b0:55:11:29:8b: 92:3f:90:9b:b6:96:8e:ab:47:6b:9c:24:fc:e5:25: d9:9d:62:6c:ac:e2:06:bf:8d:a8:5c:62:63:7e:32: 4b:fa:b4:f1:d9:00:67:73:06:16:17:f8:2b:55:53: b9:47:81:c0:58:f0:76:75:53:86:71:1c:ad:cc:ac: 81:9e:88:41:02:8b:d4:25:48:24:97:6c:9a:71:22: 3d:92:00:11:9a:fb:ec:5d:1f:e9:df:d1:c4:fd:e5: 71:10:17:d9:30:0e:6f:62:bb:66:c3:08:f6:47:81: 13:ed:2b:6a:84:bc:ad:0c:6d:e7:a0:22:99:f7:97: d7:ff:b7:7c:ed:24:92:b3:06:87:a7:ca:ae:c1:eb: 01:b2:c5:cf:93:7f:0d:f4:02:46:8c:59:20:00:bc: f8:86:4d:18:e8:66:66:80:7d:42:dc:cf:e6:81:51: 5c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:72:63:C4:14:1C:CF:B7:F2:CB:C5:3F:D6:52:D6:19:05:A5:00:0E X509v3 Authority Key Identifier: keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:54:b2:4b:89:f8:50:c5:66:d1:cd:00:4a:e5:b8:33:21:46: 01:06:7e:5e:9f:b6:88:18:1d:a9:ae:a8:bd:dc:07:48:c4:e9: b0:f6:2d:ba:58:db:31:5b:b0:61:e0:ec:d3:fc:2e:46:8b:f7: bb:c6:b4:cb:de:bd:e4:ea:35:8c:35:38:d5:9a:d3:d3:14:1c: 51:76:db:1d:92:c8:0e:d9:a8:cd:43:e8:ff:2a:cf:21:7d:f4: 12:60:08:c2:71:2b:f2:9e:42:da:cb:03:b1:d0:bc:0c:a1:e7: 17:44:b0:22:e5:4d:1f:f3:99:09:8f:6a:40:f0:6a:09:cc:02: 3d:aa:13:81:47:42:48:17:61:fd:3d:4c:2f:dd:ef:dd:58:b4: 97:0c:be:f2:fa:26:75:c2:ca:0a:74:ca:0b:f9:df:f6:bd:b9: 80:c1:ad:af:29:dd:b9:d0:ef:cc:bc:9a:b2:d9:67:94:81:23: 29:47:55:83:be:b7:45:f4:43:16:ee:a9:ff:95:56:4d:e9:43: 3c:bf:70:d1:3a:34:a4:c0:b1:f4:51:e9:c0:02:f1:c2:65:4e: cb:4e:d7:f2:b8:46:a1:ef:84:09:e1:b9:06:a5:bf:46:b0:27: c2:ef:88:33:b5:3c:e9:e4:dd:e2:46:7a:b3:8c:b2:0c:11:80: b1:9d:ed:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspZTylABRWJHqcAkKOwr0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YzIzNjU4MGNjMmVlMTkzZGJkY2MzMTI2ZGY0MTcwY2Mx MTdjZDIwHhcNMjUxMjE2MjMwMDU5WhcNMjUxMjE3MjMwMDU5WjAzMTEwLwYDVQQD EyhiZjcyNjNjNDE0MWNjZmI3ZjJjYmM1M2ZkNjUyZDYxOTA1YTUwMDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjoUZpJXSPdddv6gmZNi9LFbnk5y 4NnF/NBjIkBJdsUGFgu+lZ9yK8DA1X87Qf6RNZnjj/rkrUBgptJ0xLaFJIIwYiq1 QR2mTsycR0dM/NXyDBrKsFURKYuSP5CbtpaOq0drnCT85SXZnWJsrOIGv42oXGJj fjJL+rTx2QBncwYWF/grVVO5R4HAWPB2dVOGcRytzKyBnohBAovUJUgkl2yacSI9 kgARmvvsXR/p39HE/eVxEBfZMA5vYrtmwwj2R4ET7StqhLytDG3noCKZ95fX/7d8 7SSSswaHp8quwesBssXPk38N9AJGjFkgALz4hk0Y6GZmgH1C3M/mgVFcTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9yY8QUHM+38svFP9ZS1hkFpQAOMB8GA1UdIwQY MBaAFHjCNlgMwu4ZPb3MMSbfQXDMEXzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUt ZjllNjUzOWJiZTZiLzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUtZjllNjUzOWJiZTZi LzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFSyS4n4 UMVm0c0ASuW4MyFGAQZ+Xp+2iBgdqa6ovdwHSMTpsPYtuljbMVuwYeDs0/wuRov3 u8a0y9695Oo1jDU41ZrT0xQcUXbbHZLIDtmozUPo/yrPIX30EmAIwnEr8p5C2ssD sdC8DKHnF0SwIuVNH/OZCY9qQPBqCcwCPaoTgUdCSBdh/T1ML93v3Vi0lwy+8vom dcLKCnTKC/nf9r25gMGtryndudDvzLyastlnlIEjKUdVg763RfRDFu6p/5VWTelD PL9w0To0pMCx9FHpwALxwmVOy07X8rhGoe+ECeG5BqW/RrAnwu+IM7U86eTd4kZ6 s4yyDBGAsZ3thw== -----END CERTIFICATE-----Generated at Wed Dec 17 06:15:10 2025 by rpki-client