This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft File: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft (raw, json) Hash identifier: n3Rr8ZLmTFtuMejXbEyurQThA5xb1dUX5gvFrSV41Mo= Subject key identifier: 00:99:4F:F7:47:08:F5:EE:A0:47:BF:E4:9E:B3:22:19:90:C4:B0:F5 Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4 Certificate issuer: /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4 Certificate serial: 019B24E3AE225F1053806CBC16F7A3783D62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft Manifest number: 15BF Signing time: Tue 16 Dec 2025 02:00:59 +0000 Manifest this update: Tue 16 Dec 2025 02:00:59 +0000 Manifest next update: Wed 17 Dec 2025 02:00:59 +0000 Files and hashes: 1: 3aNd9eZsJolPAPy2WUcnIA679FQ.roa (hash: eblt98UAYSnzgUqaK1ZwDyinlKt8BByqD/nttuJnoYY=) 2: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl (hash: MaezBBa8ZhUK+c7TFrksQjtGDYM39BdV7vX7scFQFr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:ae:22:5f:10:53:80:6c:bc:16:f7:a3:78:3d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4 Validity Not Before: Dec 16 02:00:59 2025 GMT Not After : Dec 17 02:00:59 2025 GMT Subject: CN=00994ff74708f5eea047bfe49eb3221990c4b0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8d:5e:f6:5c:b8:ab:b9:a0:69:09:ba:2f:b1: 9e:6d:9e:96:fb:a2:15:97:cc:c8:64:a4:5a:bc:6b: 47:d1:ca:0f:47:89:61:07:da:84:16:f9:38:b5:3b: 7f:bf:1e:80:72:b0:b0:7e:04:7c:ca:4b:f8:bc:89: b8:86:9b:b1:bb:73:7a:6c:12:9f:b6:ab:25:40:54: 7c:53:f6:9d:b8:2c:fb:dc:56:3b:93:e2:b7:d1:77: 12:9d:f7:1a:be:c8:e9:64:9b:a4:31:fd:38:05:a1: 40:bc:3e:65:b8:54:e4:95:6a:02:50:61:bd:69:86: 99:1c:d0:7e:8d:33:da:f6:17:50:8f:8e:52:a7:b7: d7:fd:58:ac:48:0f:1e:e3:ce:47:c3:31:30:98:63: d6:f5:73:41:44:1f:3e:6e:fe:f1:82:0e:f5:d1:73: 46:74:c0:e2:d3:12:28:51:28:ff:6c:d5:56:10:fc: 3c:bd:4b:0c:09:d3:2f:4e:b6:44:02:27:df:7e:83: 44:76:ef:f7:35:f7:dc:d0:40:40:e5:e7:06:16:7d: 37:ef:cb:d0:15:77:7e:65:b6:0f:54:5a:17:0c:59: ea:6d:1a:64:22:3a:e5:44:43:d9:16:54:3a:ff:54: 19:cf:f4:dc:40:4c:93:2d:e1:6a:39:11:c1:6e:ab: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:99:4F:F7:47:08:F5:EE:A0:47:BF:E4:9E:B3:22:19:90:C4:B0:F5 X509v3 Authority Key Identifier: keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a5:a4:a7:50:f9:da:ec:36:31:a6:a9:38:b9:d6:76:cb:ad: cd:85:5f:ca:01:6a:f5:21:29:97:83:d7:c9:65:e0:f5:8d:1a: 2c:a4:37:e7:6f:c3:17:ad:24:0d:98:71:27:3e:56:37:cd:8b: 66:a5:09:e3:49:3e:18:e6:6e:e3:37:9d:85:ef:22:76:c6:e2: c7:d0:ee:f6:f9:60:19:24:98:ba:52:04:6d:c1:b5:08:70:56: 69:4d:8c:4f:ec:9b:ac:de:60:9c:39:5b:cd:15:d0:eb:08:29: ab:d7:61:70:aa:92:2a:7b:73:dd:86:6b:89:58:76:c9:12:ca: e6:2e:f1:3a:f3:7c:54:10:1a:fc:b5:7b:a7:b3:59:89:1f:83: 5b:7e:08:d9:57:74:0b:44:c3:3c:a1:3d:bf:7c:07:9a:fb:bd: d7:0c:2c:d5:36:c7:04:07:6a:96:14:13:30:50:9a:38:25:f9: 23:13:3e:c8:70:cf:3f:43:eb:81:d6:d7:c7:99:6a:56:47:b1: 90:16:29:5b:04:57:31:1a:ec:01:1c:c6:f0:27:dc:3b:f5:21: 52:8f:52:7e:8a:66:9a:cf:2d:c5:a0:2a:49:6a:94:12:8c:ba: 30:e8:5c:05:cc:5d:90:2e:f5:c4:b5:c8:ba:31:6f:be:3d:90: 53:e7:f1:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk464iXxBTgGy8FvejeD1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjJmN2RhOGZlZTVkMmE3YmNkZDQwMTRhNzBhOTI3ZGI0 OTlmYTQwHhcNMjUxMjE2MDIwMDU5WhcNMjUxMjE3MDIwMDU5WjAzMTEwLwYDVQQD EygwMDk5NGZmNzQ3MDhmNWVlYTA0N2JmZTQ5ZWIzMjIxOTkwYzRiMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY1e9ly4q7mgaQm6L7GebZ6W+6IV l8zIZKRavGtH0coPR4lhB9qEFvk4tTt/vx6AcrCwfgR8ykv4vIm4hpuxu3N6bBKf tqslQFR8U/aduCz73FY7k+K30XcSnfcavsjpZJukMf04BaFAvD5luFTklWoCUGG9 aYaZHNB+jTPa9hdQj45Sp7fX/VisSA8e485HwzEwmGPW9XNBRB8+bv7xgg710XNG dMDi0xIoUSj/bNVWEPw8vUsMCdMvTrZEAifffoNEdu/3Nffc0EBA5ecGFn0378vQ FXd+ZbYPVFoXDFnqbRpkIjrlREPZFlQ6/1QZz/TcQEyTLeFqORHBbqskQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACZT/dHCPXuoEe/5J6zIhmQxLD1MB8GA1UdIwQY MBaAFBJi99qP7l0qe83UAUpwqSfbSZ+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAt YTYxMGQ3NWMzMmUyLzEvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAtYTYxMGQ3NWMzMmUy LzEvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6Wkp1D5 2uw2MaapOLnWdsutzYVfygFq9SEpl4PXyWXg9Y0aLKQ352/DF60kDZhxJz5WN82L ZqUJ40k+GOZu4zedhe8idsbix9Du9vlgGSSYulIEbcG1CHBWaU2MT+ybrN5gnDlb zRXQ6wgpq9dhcKqSKntz3YZriVh2yRLK5i7xOvN8VBAa/LV7p7NZiR+DW34I2Vd0 C0TDPKE9v3wHmvu91wws1TbHBAdqlhQTMFCaOCX5IxM+yHDPP0PrgdbXx5lqVkex kBYpWwRXMRrsARzG8CfcO/UhUo9Sfopmms8txaAqSWqUEoy6MOhcBcxdkC71xLXI ujFvvj2QU+fxaQ== -----END CERTIFICATE-----Generated at Tue Dec 16 09:25:18 2025 by rpki-client