This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json) Hash identifier: giNlTZQ6Sg2WY5Yy0xH7iyYkxujUYGncV4YnBglxcMw= Subject key identifier: 54:E7:4A:CC:89:35:A3:6D:F1:CD:EF:0E:24:66:DE:9F:07:8B:C4:47 Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Certificate serial: 019B06D8F87343E2AD383AF4AF0DE0C70A3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft Manifest number: 0750 Signing time: Wed 10 Dec 2025 06:00:41 +0000 Manifest this update: Wed 10 Dec 2025 06:00:41 +0000 Manifest next update: Thu 11 Dec 2025 06:00:41 +0000 Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: XPAobulzsBNoJBoL0AkoiuTUkGUJzgCOTMVnFuPSBXQ=) 2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d8:f8:73:43:e2:ad:38:3a:f4:af:0d:e0:c7:0a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Validity Not Before: Dec 10 06:00:41 2025 GMT Not After : Dec 11 06:00:41 2025 GMT Subject: CN=54e74acc8935a36df1cdef0e2466de9f078bc447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:fd:c1:59:10:00:d3:7e:22:ea:d2:ed:df: de:ae:ba:19:fe:76:1b:b3:ee:d5:ab:c3:cf:6c:c9: aa:2b:5a:40:b5:b4:e3:e3:d4:ee:cf:35:91:9a:b1: df:24:c7:af:db:ec:6e:40:75:de:00:be:6c:76:b3: db:9a:a4:81:65:e1:30:56:9d:5a:f6:53:11:02:5a: 4d:fd:76:89:3d:9f:84:12:78:a9:55:9c:7e:be:e0: 41:f9:80:38:93:bb:75:a5:ce:7f:0e:38:63:9a:fd: 1d:db:aa:58:31:d9:27:ac:4e:dc:14:9a:de:a2:18: e1:fc:74:44:ab:8c:71:58:45:25:63:c2:93:5c:f8: a6:1e:ac:90:42:98:d0:2e:97:d0:16:bf:29:3c:0b: a3:67:17:24:4a:f6:b1:6a:1e:36:23:f6:6c:e9:cc: 8d:6c:9f:40:6e:e0:d2:53:a0:67:f4:54:59:35:33: 65:7b:d8:26:40:6d:b8:a5:af:13:90:65:98:0e:7d: 5d:bf:b4:7f:9d:47:b9:55:72:1f:2c:9c:76:a6:57: 31:c0:a3:a0:11:de:67:8b:b0:30:b8:bf:a7:02:f8: ae:4a:47:11:c2:62:4d:86:29:bc:d0:3d:1e:95:ca: 3d:6e:0e:8d:79:67:4b:1e:8d:c3:d6:e1:ba:3b:91: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E7:4A:CC:89:35:A3:6D:F1:CD:EF:0E:24:66:DE:9F:07:8B:C4:47 X509v3 Authority Key Identifier: keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d1:ec:d9:2d:45:c4:1c:56:1b:67:b2:37:77:f8:6d:da:55: 69:ff:4b:62:99:c7:2b:30:9f:e4:bf:eb:26:d4:6e:4f:9d:f6: 07:92:d1:dc:5c:64:39:11:e2:cd:37:f2:57:cc:19:bc:c2:00: 69:aa:a6:f7:7e:90:9a:a4:9b:e2:dd:6a:90:47:7a:e4:c6:6a: 90:7c:36:71:3c:93:e4:8f:21:8e:fe:a0:94:1a:bc:f7:14:72: 38:34:36:cb:ff:22:3b:cc:c1:97:50:99:69:91:8f:97:e5:db: 66:40:04:c6:4b:9a:87:9f:50:94:6d:17:c7:19:87:7e:8d:06: d1:4b:b6:a7:c2:a6:fa:4d:c6:9b:7a:bd:d8:5c:73:1b:58:04: 39:31:67:d5:ba:1f:5d:3c:b1:cd:db:dc:a9:99:7d:55:b5:3c: 89:1e:d7:a8:8c:28:ff:06:e0:f7:c8:1a:72:a8:e4:4c:6c:3b: d4:2d:ba:a4:c1:ef:cf:c3:35:df:98:43:e5:b4:b9:16:e8:ec: 25:61:5e:13:04:db:cc:f3:cb:e3:f3:f6:2b:18:88:b5:36:b8: af:29:ed:ab:b4:13:c4:c7:fd:74:93:bd:59:46:d6:99:bc:71: 32:57:e2:56:9e:0b:0d:16:97:34:b7:7f:58:e9:30:ed:4a:42: 99:88:c2:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2PhzQ+KtODr0rw3gxwo+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYzgzNmU1Y2UyYmZlYjgyMWYzN2Q2NGE0OWMxNjE4NTVm ZTJjNTIwHhcNMjUxMjEwMDYwMDQxWhcNMjUxMjExMDYwMDQxWjAzMTEwLwYDVQQD Eyg1NGU3NGFjYzg5MzVhMzZkZjFjZGVmMGUyNDY2ZGU5ZjA3OGJjNDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxv9wVkQANN+IurS7d/erroZ/nYb s+7Vq8PPbMmqK1pAtbTj49TuzzWRmrHfJMev2+xuQHXeAL5sdrPbmqSBZeEwVp1a 9lMRAlpN/XaJPZ+EEnipVZx+vuBB+YA4k7t1pc5/Djhjmv0d26pYMdknrE7cFJre ohjh/HREq4xxWEUlY8KTXPimHqyQQpjQLpfQFr8pPAujZxckSvaxah42I/Zs6cyN bJ9AbuDSU6Bn9FRZNTNle9gmQG24pa8TkGWYDn1dv7R/nUe5VXIfLJx2plcxwKOg Ed5ni7AwuL+nAviuSkcRwmJNhim80D0elco9bg6NeWdLHo3D1uG6O5H21QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTnSsyJNaNt8c3vDiRm3p8Hi8RHMB8GA1UdIwQY MBaAFBDINuXOK/64IfN9ZKScFhhV/ixSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4Yjgt OWYzYzA5YmI3NDFjLzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4YjgtOWYzYzA5YmI3NDFj LzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNHs2S1F xBxWG2eyN3f4bdpVaf9LYpnHKzCf5L/rJtRuT532B5LR3FxkORHizTfyV8wZvMIA aaqm936QmqSb4t1qkEd65MZqkHw2cTyT5I8hjv6glBq89xRyODQ2y/8iO8zBl1CZ aZGPl+XbZkAExkuah59QlG0XxxmHfo0G0Uu2p8Km+k3Gm3q92FxzG1gEOTFn1bof XTyxzdvcqZl9VbU8iR7XqIwo/wbg98gacqjkTGw71C26pMHvz8M135hD5bS5Fujs JWFeEwTbzPPL4/P2KxiItTa4ryntq7QTxMf9dJO9WUbWmbxxMlfiVp4LDRaXNLd/ WOkw7UpCmYjCDw== -----END CERTIFICATE-----Generated at Wed Dec 10 09:53:40 2025 by rpki-client