This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft File: eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json) Hash identifier: WyfcgB5uetS/W2wgKxdZD99tPb32SXviR8PQd9GBw6c= Subject key identifier: 41:8F:64:A6:D0:1D:36:92:33:4B:43:CD:F8:41:06:85:7F:F6:5B:20 Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2 Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2 Certificate serial: 019B484B25FE69B7CEEF1690E56A5D1CB650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft Manifest number: 13D8 Signing time: Mon 22 Dec 2025 23:00:42 +0000 Manifest this update: Mon 22 Dec 2025 23:00:42 +0000 Manifest next update: Tue 23 Dec 2025 23:00:42 +0000 Files and hashes: 1: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: ng4mBYTbERwEIiXeX5drhr0Wf4JdZfIe81MDs9HU7zg=) 2: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (hash: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:25:fe:69:b7:ce:ef:16:90:e5:6a:5d:1c:b6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2 Validity Not Before: Dec 22 23:00:42 2025 GMT Not After : Dec 23 23:00:42 2025 GMT Subject: CN=418f64a6d01d3692334b43cdf84106857ff65b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:04:7c:25:0f:ec:98:e4:fa:bc:68:91:08: 89:e2:3e:bb:99:7f:9f:ca:98:31:52:5f:51:08:1d: 79:bb:77:ed:4a:2a:74:00:48:58:12:3d:e0:ab:e6: d0:56:e1:2b:9e:e0:1a:44:9d:95:72:de:ba:25:f8: 94:45:39:5f:48:5f:c2:1f:34:fa:68:a3:13:be:f0: 50:a1:2e:38:b7:2b:4c:d2:42:3e:10:58:a8:05:5e: e9:a2:7b:b7:50:8f:3f:8a:12:56:cd:b7:5f:c0:86: e8:09:fe:07:56:76:2a:f3:03:69:c1:87:d4:a4:ca: 9d:31:08:a7:1a:40:77:64:a7:14:74:66:9f:71:bd: 24:c4:dd:7c:91:f5:04:79:b0:b1:ae:bd:b5:91:9d: 2a:fa:3f:c3:71:35:06:9d:1c:13:b7:a7:be:da:f1: d0:cd:f6:5b:fb:59:18:60:4e:73:0b:00:ec:9b:cb: ad:0f:43:e4:6d:68:2c:ce:af:c9:9c:2b:e7:d5:13: e7:04:17:3a:5a:d4:86:ae:76:6c:df:aa:8c:86:9e: 3b:a7:56:fc:86:7b:78:29:87:ef:57:60:51:a2:a2: 2e:c1:ce:85:31:04:69:da:94:14:b7:d9:9f:e2:92: f2:08:55:3b:0a:68:ec:bb:85:30:49:77:84:33:4e: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8F:64:A6:D0:1D:36:92:33:4B:43:CD:F8:41:06:85:7F:F6:5B:20 X509v3 Authority Key Identifier: keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5a:65:19:04:41:fe:28:4d:99:cb:6c:41:18:df:12:1b:91: 42:0c:f4:41:ad:11:db:a1:e9:22:30:38:e4:16:8d:22:f9:7e: 2e:79:96:22:0b:cd:b8:aa:0a:a2:3e:32:0b:51:ff:82:51:4b: df:a9:aa:c6:45:52:f7:9e:5f:3c:4d:78:7a:db:60:53:0b:fe: 1d:5e:f2:f1:58:41:3d:68:6c:6a:10:21:ce:36:47:68:54:17: eb:95:ed:c6:0c:d8:fc:ac:8b:6f:c3:7e:cf:3c:02:b5:b0:2a: e8:91:cc:a2:bf:38:ff:b2:5c:6d:35:9a:c7:6d:9e:10:b5:ab: a7:68:cd:32:62:aa:6c:49:af:d0:41:0a:b7:9e:c8:f5:36:b9: c7:67:4a:9d:e6:91:bf:f9:0e:ff:86:7f:53:53:8b:de:c6:c1: 23:c3:16:6c:97:62:23:3e:68:7f:32:fd:96:21:03:25:43:6d: ee:39:74:40:ee:d2:c3:f3:0f:ca:84:8f:bc:f5:a3:da:cf:60: 9c:eb:32:20:36:e0:d1:43:46:06:d2:9c:ef:f9:d4:d1:cf:5f: 13:98:91:12:35:75:7b:0a:c5:d3:02:86:f8:2a:e2:e4:9a:b9: 21:5f:75:f3:51:de:da:cc:cc:48:8a:df:a6:a0:33:88:25:b7: 9a:93:87:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtISyX+abfO7xaQ5WpdHLZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YzIzNjU4MGNjMmVlMTkzZGJkY2MzMTI2ZGY0MTcwY2Mx MTdjZDIwHhcNMjUxMjIyMjMwMDQyWhcNMjUxMjIzMjMwMDQyWjAzMTEwLwYDVQQD Eyg0MThmNjRhNmQwMWQzNjkyMzM0YjQzY2RmODQxMDY4NTdmZjY1YjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjQEfCUP7Jjk+rxokQiJ4j67mX+f ypgxUl9RCB15u3ftSip0AEhYEj3gq+bQVuErnuAaRJ2Vct66JfiURTlfSF/CHzT6 aKMTvvBQoS44tytM0kI+EFioBV7ponu3UI8/ihJWzbdfwIboCf4HVnYq8wNpwYfU pMqdMQinGkB3ZKcUdGafcb0kxN18kfUEebCxrr21kZ0q+j/DcTUGnRwTt6e+2vHQ zfZb+1kYYE5zCwDsm8utD0PkbWgszq/JnCvn1RPnBBc6WtSGrnZs36qMhp47p1b8 hnt4KYfvV2BRoqIuwc6FMQRp2pQUt9mf4pLyCFU7Cmjsu4UwSXeEM07t1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGPZKbQHTaSM0tDzfhBBoV/9lsgMB8GA1UdIwQY MBaAFHjCNlgMwu4ZPb3MMSbfQXDMEXzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUt ZjllNjUzOWJiZTZiLzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUtZjllNjUzOWJiZTZi LzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1plGQRB /ihNmctsQRjfEhuRQgz0Qa0R26HpIjA45BaNIvl+LnmWIgvNuKoKoj4yC1H/glFL 36mqxkVS955fPE14ettgUwv+HV7y8VhBPWhsahAhzjZHaFQX65XtxgzY/KyLb8N+ zzwCtbAq6JHMor84/7JcbTWax22eELWrp2jNMmKqbEmv0EEKt57I9Ta5x2dKneaR v/kO/4Z/U1OL3sbBI8MWbJdiIz5ofzL9liEDJUNt7jl0QO7Sw/MPyoSPvPWj2s9g nOsyIDbg0UNGBtKc7/nU0c9fE5iREjV1ewrF0wKG+Cri5Jq5IV9181He2szMSIrf pqAziCW3mpOHpQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:15:13 2025 by rpki-client