This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json) Hash identifier: RVV2IkgnQ/oTmjYH/JmVPhkZAirtwouUufgOMnrE2pw= Subject key identifier: F1:85:25:05:19:CC:12:6E:3B:20:67:15:50:8C:41:95:17:15:89:2B Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9 Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9 Certificate serial: 019B15DEA09925921E11A28FEA773F797BBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft Manifest number: 1424 Signing time: Sat 13 Dec 2025 04:01:10 +0000 Manifest this update: Sat 13 Dec 2025 04:01:10 +0000 Manifest next update: Sun 14 Dec 2025 04:01:10 +0000 Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: UdrUa8MzQVl89c2zkf0SEV33X5JLDaVtVLAvE3uSvO4=) 2: f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa (hash: jPD7nunzn9cSBTS41yie793CY1UObq7bXZ4qPAfEbsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:15:de:a0:99:25:92:1e:11:a2:8f:ea:77:3f:79:7b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9 Validity Not Before: Dec 13 04:01:10 2025 GMT Not After : Dec 14 04:01:10 2025 GMT Subject: CN=f185250519cc126e3b206715508c41951715892b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:24:0d:56:aa:1e:41:92:ff:8f:ae:83:86: 29:71:71:23:92:40:0b:b5:4f:eb:50:44:29:60:ea: 7e:30:cd:f8:65:78:1f:aa:07:ef:47:7c:fb:d7:00: 0b:28:8a:3e:4b:d2:5d:df:7b:fb:bb:79:8e:27:28: 17:27:81:d9:e4:17:7c:d9:a8:49:f2:ae:48:66:cd: e9:16:34:a9:c2:fd:97:16:12:cb:91:06:e2:65:ac: ae:5c:9e:78:4f:ed:b5:6b:6d:8c:2c:e7:ad:2a:1b: 4d:48:f9:40:2b:fd:83:f0:71:58:4b:26:a0:5b:15: 9c:97:78:29:64:f2:7e:e5:d0:9f:87:be:db:6a:1c: e0:65:c0:db:2e:ce:71:b4:b4:ed:b6:bf:41:26:00: a0:57:8a:97:58:00:b1:88:2e:e3:dc:d5:2e:c3:99: ff:ff:3b:cf:b6:02:0d:3f:9d:f6:44:08:ca:dc:1a: 46:48:12:03:5c:5a:fa:06:82:7a:e9:d7:75:cc:2f: 41:fe:2c:b5:3a:64:12:a0:f0:28:1f:c3:0b:63:2f: db:3b:e6:79:73:3c:b0:b9:3f:d5:b0:63:20:27:01: 6e:8e:7d:ca:2a:31:c8:b8:da:5d:84:04:ee:e9:16: 55:7f:e2:fb:e9:dd:78:31:c1:3d:e9:84:7b:00:1f: 9b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:85:25:05:19:CC:12:6E:3B:20:67:15:50:8C:41:95:17:15:89:2B X509v3 Authority Key Identifier: keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:3a:85:90:74:4f:72:45:1b:b8:d0:a0:dc:4c:f3:48:7d:f0: cb:01:f7:74:36:b4:3c:69:31:d2:5a:b3:a3:fc:11:b4:e6:f9: ac:4b:d2:d4:48:8e:11:3b:a8:27:ed:55:8e:ea:d1:a0:ad:10: 8b:a2:6b:13:aa:11:0e:a7:73:7a:c3:34:55:c2:df:e3:8f:7c: 26:84:a4:29:90:db:08:e7:2b:8d:af:ad:1f:5d:92:1b:4a:32: 91:dc:8b:49:78:72:71:66:15:e7:88:dd:73:c1:d1:a8:d6:33: f0:40:46:fb:ac:b0:e6:2a:64:88:46:c6:71:f2:4c:96:26:b3: e1:91:73:8e:70:6e:be:82:83:23:b9:ca:cb:38:4e:f6:b0:64: 0e:12:e3:25:6a:0e:08:ff:77:a5:26:23:21:8b:83:dd:76:45: 05:2f:d0:7b:d7:a7:01:a8:e6:b7:a8:c2:36:c9:d5:b7:26:8d: 42:0f:0f:fd:ed:34:65:91:26:8b:06:08:18:8e:97:58:bd:7a: 82:31:3c:cc:13:6f:ed:28:30:b2:04:f3:a3:7f:bd:94:66:dd: 23:e0:2e:41:64:60:bb:b6:e0:54:9f:4a:13:97:29:94:6a:01: 66:9e:02:a4:9b:e0:99:ef:65:dc:fa:8d:94:fd:e9:46:9c:0d: df:6e:99:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsV3qCZJZIeEaKP6nc/eXu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDhlNjUwNmVjNmQ1M2M1OTE1ZGM4ZjI5NjQ0NDg1ZGY5 MmZjZTkwHhcNMjUxMjEzMDQwMTEwWhcNMjUxMjE0MDQwMTEwWjAzMTEwLwYDVQQD EyhmMTg1MjUwNTE5Y2MxMjZlM2IyMDY3MTU1MDhjNDE5NTE3MTU4OTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJQkDVaqHkGS/4+ug4YpcXEjkkAL tU/rUEQpYOp+MM34ZXgfqgfvR3z71wALKIo+S9Jd33v7u3mOJygXJ4HZ5Bd82ahJ 8q5IZs3pFjSpwv2XFhLLkQbiZayuXJ54T+21a22MLOetKhtNSPlAK/2D8HFYSyag WxWcl3gpZPJ+5dCfh77bahzgZcDbLs5xtLTttr9BJgCgV4qXWACxiC7j3NUuw5n/ /zvPtgINP532RAjK3BpGSBIDXFr6BoJ66dd1zC9B/iy1OmQSoPAoH8MLYy/bO+Z5 czywuT/VsGMgJwFujn3KKjHIuNpdhATu6RZVf+L76d14McE96YR7AB+bpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGFJQUZzBJuOyBnFVCMQZUXFYkrMB8GA1UdIwQY MBaAFPxI5lBuxtU8WRXcjylkRIXfkvzpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMt ZjViZWUxNmVkM2E3LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMtZjViZWUxNmVkM2E3 LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzqFkHRP ckUbuNCg3EzzSH3wywH3dDa0PGkx0lqzo/wRtOb5rEvS1EiOETuoJ+1VjurRoK0Q i6JrE6oRDqdzesM0VcLf4498JoSkKZDbCOcrja+tH12SG0oykdyLSXhycWYV54jd c8HRqNYz8EBG+6yw5ipkiEbGcfJMliaz4ZFzjnBuvoKDI7nKyzhO9rBkDhLjJWoO CP93pSYjIYuD3XZFBS/Qe9enAajmt6jCNsnVtyaNQg8P/e00ZZEmiwYIGI6XWL16 gjE8zBNv7SgwsgTzo3+9lGbdI+AuQWRgu7bgVJ9KE5cplGoBZp4CpJvgme9l3PqN lP3pRpwN326Zcg== -----END CERTIFICATE-----Generated at Sat Dec 13 06:59:33 2025 by rpki-client