This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json) Hash identifier: vbYK5zHY9Xg0f+MuZ4h4mjOOpzAIPrdYoZNQVU3s06o= Subject key identifier: EB:1B:0B:8B:47:3B:70:3B:5E:31:74:8A:CB:27:61:B2:16:D7:88:88 Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43 Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743 Certificate serial: 019B4A713101FB1243FEA0E954232459423E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft Manifest number: 1125 Signing time: Tue 23 Dec 2025 09:01:30 +0000 Manifest this update: Tue 23 Dec 2025 09:01:30 +0000 Manifest next update: Wed 24 Dec 2025 09:01:30 +0000 Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: 2SXByiH+aIxOvjAojGFMChNNhHLVTP67Qip0iupofqY=) 2: wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa (hash: W+sz9TCOY3wSjFpbMXmTZluRFQBYvoOF99W06O++/x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:31:01:fb:12:43:fe:a0:e9:54:23:24:59:42:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743 Validity Not Before: Dec 23 09:01:30 2025 GMT Not After : Dec 24 09:01:30 2025 GMT Subject: CN=eb1b0b8b473b703b5e31748acb2761b216d78888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:4c:42:d3:ae:21:9e:6b:2d:b5:d4:f8:a6: 50:8c:2a:7a:5e:02:88:1d:70:a3:69:ab:aa:b7:d5: 13:85:1d:79:af:2f:47:af:1d:bd:3a:c5:51:84:2d: e2:20:ef:45:53:ca:17:25:02:f5:1b:f7:00:cf:ac: 9e:b2:76:e1:fd:27:42:d3:9f:1f:46:94:48:c6:1f: ea:fa:9a:3b:e6:37:b0:e5:ac:0d:b9:94:24:13:c4: 2c:bd:58:d2:4c:ac:07:ff:64:7b:91:91:af:77:ac: 2a:fb:22:f7:1e:fc:2e:a4:00:5b:d7:36:2c:fe:87: 74:a9:33:87:27:62:38:50:22:31:9a:8e:f3:26:40: 91:01:65:63:a8:fa:90:3a:a9:6d:e8:97:a8:06:33: 24:03:ee:df:cb:5c:c3:92:18:59:4a:9f:a0:69:f6: ff:26:6e:b5:9a:fa:1b:b0:08:95:e1:cf:66:55:78: 39:93:4d:36:d8:87:ed:de:92:2c:ce:ba:18:bc:b5: 23:28:5e:07:73:17:91:45:10:be:5c:a6:0a:11:ae: 46:a2:93:56:07:53:d1:f6:b3:c7:c4:b6:67:c7:1a: 2f:17:59:bf:c2:a2:be:8b:1a:88:47:e9:fa:a6:6b: bc:1d:95:5d:98:98:4f:1f:05:51:08:ba:7b:f3:90: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1B:0B:8B:47:3B:70:3B:5E:31:74:8A:CB:27:61:B2:16:D7:88:88 X509v3 Authority Key Identifier: keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cf:44:ea:03:82:9a:79:aa:21:2b:22:a7:62:0e:cf:41:68: da:92:c8:8b:a4:2b:c0:bf:63:e8:17:92:ef:1d:ac:2a:02:94: 5a:1c:45:3c:5b:12:ea:77:82:23:0e:0c:76:2f:cd:76:e0:b9: 18:31:ad:94:14:77:c4:9a:34:b6:4d:26:9d:5f:2e:32:45:23: 55:49:18:6c:e9:7b:21:d6:5b:bd:db:9f:63:7d:f7:5f:9e:4f: f0:ee:ac:23:97:cb:92:d0:a8:44:0b:e9:26:49:cb:fa:d0:36: a3:3c:86:8c:e4:68:8f:c0:e9:3f:c3:45:7b:e8:1c:82:bc:96: b3:4c:36:76:36:d3:1b:e6:ff:2a:c3:30:52:26:f5:94:9e:f3: cb:48:00:be:c5:ec:4a:df:2c:b2:5b:1d:87:3f:3f:78:82:72: 3a:24:90:49:32:c5:c0:fb:f4:96:a2:9f:41:e6:63:47:1e:55: 16:77:8d:ee:d1:7b:c2:33:8a:98:95:60:5b:a4:97:e5:20:2e: 8e:b7:27:63:3e:0a:10:b5:c9:12:21:9e:9c:66:35:22:60:bf: 92:d7:f0:be:e3:72:b5:08:b3:85:e7:b7:f8:b8:89:c7:e6:9a: ff:61:e1:8f:0c:fc:2e:fb:3f:ca:40:9f:e4:90:9c:81:c6:b7: 07:49:b9:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcTEB+xJD/qDpVCMkWUI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmZmYzAwOTZjNjkzYmJjNDIwZWViOGNjZWYzNGJjN2I1 Mzg3NDMwHhcNMjUxMjIzMDkwMTMwWhcNMjUxMjI0MDkwMTMwWjAzMTEwLwYDVQQD EyhlYjFiMGI4YjQ3M2I3MDNiNWUzMTc0OGFjYjI3NjFiMjE2ZDc4ODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr55MQtOuIZ5rLbXU+KZQjCp6XgKI HXCjaauqt9UThR15ry9Hrx29OsVRhC3iIO9FU8oXJQL1G/cAz6yesnbh/SdC058f RpRIxh/q+po75jew5awNuZQkE8QsvVjSTKwH/2R7kZGvd6wq+yL3HvwupABb1zYs /od0qTOHJ2I4UCIxmo7zJkCRAWVjqPqQOqlt6JeoBjMkA+7fy1zDkhhZSp+gafb/ Jm61mvobsAiV4c9mVXg5k0022Ift3pIszroYvLUjKF4HcxeRRRC+XKYKEa5GopNW B1PR9rPHxLZnxxovF1m/wqK+ixqIR+n6pmu8HZVdmJhPHwVRCLp785Cb3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsbC4tHO3A7XjF0issnYbIW14iIMB8GA1UdIwQY MBaAFBJv/ACWxpO7xCDuuMzvNLx7U4dDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUt MWM4NmM1N2UyZTlmLzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUtMWM4NmM1N2UyZTlm LzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJs9E6gOC mnmqISsip2IOz0Fo2pLIi6QrwL9j6BeS7x2sKgKUWhxFPFsS6neCIw4Mdi/NduC5 GDGtlBR3xJo0tk0mnV8uMkUjVUkYbOl7IdZbvdufY333X55P8O6sI5fLktCoRAvp JknL+tA2ozyGjORoj8DpP8NFe+gcgryWs0w2djbTG+b/KsMwUib1lJ7zy0gAvsXs St8sslsdhz8/eIJyOiSQSTLFwPv0lqKfQeZjRx5VFneN7tF7wjOKmJVgW6SX5SAu jrcnYz4KELXJEiGenGY1ImC/ktfwvuNytQizhee3+LiJx+aa/2Hhjwz8Lvs/ykCf 5JCcgca3B0m5Lw== -----END CERTIFICATE-----Generated at Tue Dec 23 12:00:50 2025 by rpki-client