This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json) Hash identifier: qlZ0cf0QTpV5Q+kj4ZnkKoGg4QBH0XsWQi8cwhwh3zA= Subject key identifier: FB:30:BD:80:3D:0A:D7:2F:1A:4D:E7:89:61:D2:51:EE:22:5F:EE:C0 Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3 Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3 Certificate serial: 019B5B9B1CB7576419DF13549C65C63D876D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft Manifest number: 16EF Signing time: Fri 26 Dec 2025 17:00:50 +0000 Manifest this update: Fri 26 Dec 2025 17:00:50 +0000 Manifest next update: Sat 27 Dec 2025 17:00:50 +0000 Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: TwTAtWW3Go94oiPQXZpD989AAvSOtUeVu9h9Jn/1OdM=) 2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:9b:1c:b7:57:64:19:df:13:54:9c:65:c6:3d:87:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3 Validity Not Before: Dec 26 17:00:50 2025 GMT Not After : Dec 27 17:00:50 2025 GMT Subject: CN=fb30bd803d0ad72f1a4de78961d251ee225feec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:90:d2:a2:4f:80:b7:f8:cb:e8:c9:8b:f5: 28:b0:bc:21:97:bf:df:78:8e:b2:6c:ce:d8:de:f1: 4a:6a:3d:24:28:80:a6:ef:41:73:24:b3:75:ce:f3: 46:a6:86:3d:00:03:aa:27:1b:9c:17:17:60:db:df: 00:d2:0d:d2:44:5e:3f:93:b7:21:07:49:54:b3:2f: 78:21:27:b4:53:3d:49:12:5d:b2:3a:99:03:59:12: fe:cf:97:eb:48:a2:af:03:8d:d6:5e:f6:41:57:a7: de:e5:08:06:03:51:fa:fa:7a:92:c3:0b:c4:2d:41: f4:25:60:27:f7:62:62:ab:2a:ec:46:2f:6d:99:6d: 7f:de:ba:2f:ef:b4:63:c3:66:08:75:45:68:ad:eb: ff:03:6b:2f:b4:6d:37:ed:f0:61:9b:b7:44:69:32: 6e:59:de:06:3b:db:07:0a:db:b1:54:c9:b7:d4:5f: 29:61:ab:65:3c:ed:3f:bb:32:a2:14:b7:fe:86:51: 55:d7:9d:48:ac:e4:7c:ef:e0:6d:89:7a:29:01:4e: 66:bc:b0:92:3b:b2:90:02:b4:47:da:15:57:f7:ac: d9:ca:76:3d:d5:32:99:7f:10:ee:e6:9e:cb:54:96: 70:d5:16:61:86:5b:28:16:81:c5:7c:e7:6a:1b:e7: 3b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:30:BD:80:3D:0A:D7:2F:1A:4D:E7:89:61:D2:51:EE:22:5F:EE:C0 X509v3 Authority Key Identifier: keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:11:f7:e0:56:81:a6:d4:c0:7e:9f:03:a1:ee:4e:9e:ce:74: be:bd:b7:84:3c:c5:16:f5:1c:43:20:1a:9d:ff:3a:e2:59:52: f3:35:72:4d:37:50:69:e6:70:26:62:bb:e4:55:ed:40:14:4e: 2f:52:c2:6f:e9:ca:54:ae:bf:63:f7:fd:0e:6d:5d:5a:03:26: c0:2f:af:69:13:bd:6e:3b:9d:0e:b3:15:35:3a:10:97:6d:0c: 37:b0:b4:5c:81:4d:da:33:d2:16:86:a9:b1:d8:92:83:a0:e0: 54:b5:60:79:ac:bd:d5:94:0d:30:5a:ff:b1:bc:f0:01:00:57: 67:83:7c:df:83:5e:a3:2d:34:62:fd:e7:f0:21:05:be:67:11: b7:12:07:75:b9:84:f1:36:e0:c9:fe:76:35:58:bc:f6:5a:ba: f5:d1:6f:75:9c:66:54:80:6f:64:0b:46:33:e0:a3:c1:d5:dc: f0:a1:af:f1:cd:9c:e2:57:35:a0:00:9a:25:83:c9:aa:ca:5e: 44:44:be:4f:75:7e:36:9f:4f:c6:7a:96:73:1c:32:36:d9:a5: 54:24:d1:db:33:a7:ce:23:15:a3:0b:79:d8:df:f8:de:7a:e3: dd:61:dd:76:27:5f:84:5d:d1:4c:f8:35:38:c8:d4:2b:94:96: c1:4c:d2:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbmxy3V2QZ3xNUnGXGPYdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwODlhMDI1MWUzMmJmM2M0ODBmNWE5NGFiYjVmYjRlYjkw NmE1YjMwHhcNMjUxMjI2MTcwMDUwWhcNMjUxMjI3MTcwMDUwWjAzMTEwLwYDVQQD EyhmYjMwYmQ4MDNkMGFkNzJmMWE0ZGU3ODk2MWQyNTFlZTIyNWZlZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvumQ0qJPgLf4y+jJi/UosLwhl7/f eI6ybM7Y3vFKaj0kKICm70FzJLN1zvNGpoY9AAOqJxucFxdg298A0g3SRF4/k7ch B0lUsy94ISe0Uz1JEl2yOpkDWRL+z5frSKKvA43WXvZBV6fe5QgGA1H6+nqSwwvE LUH0JWAn92JiqyrsRi9tmW1/3rov77Rjw2YIdUVorev/A2svtG037fBhm7dEaTJu Wd4GO9sHCtuxVMm31F8pYatlPO0/uzKiFLf+hlFV151IrOR87+BtiXopAU5mvLCS O7KQArRH2hVX96zZynY91TKZfxDu5p7LVJZw1RZhhlsoFoHFfOdqG+c7pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPswvYA9CtcvGk3niWHSUe4iX+7AMB8GA1UdIwQY MBaAFBCJoCUeMr88SA9alKu1+065BqWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzkt YjhjNDZmOTU2NDBlLzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzktYjhjNDZmOTU2NDBl LzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBH34FaB ptTAfp8Doe5Ons50vr23hDzFFvUcQyAanf864llS8zVyTTdQaeZwJmK75FXtQBRO L1LCb+nKVK6/Y/f9Dm1dWgMmwC+vaRO9bjudDrMVNToQl20MN7C0XIFN2jPSFoap sdiSg6DgVLVgeay91ZQNMFr/sbzwAQBXZ4N834Neoy00Yv3n8CEFvmcRtxIHdbmE 8Tbgyf52NVi89lq69dFvdZxmVIBvZAtGM+CjwdXc8KGv8c2c4lc1oACaJYPJqspe RES+T3V+Np9PxnqWcxwyNtmlVCTR2zOnziMVowt52N/43nrj3WHddidfhF3RTPg1 OMjUK5SWwUzSVg== -----END CERTIFICATE-----Generated at Fri Dec 26 22:56:32 2025 by rpki-client