This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft File: EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft (raw, json) Hash identifier: M46GgiW3Xl0BGVJRy55FQMRgOsZV02HQhcURiYNa3ao= Subject key identifier: A4:AB:68:D9:AA:1F:09:1B:94:32:6F:5A:A5:8B:E3:47:7D:98:50:D7 Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b Certificate serial: 019B1CBC84DC37EF0365E7AAE58A7EA85D9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft Manifest number: 0E60 Signing time: Sun 14 Dec 2025 12:01:15 +0000 Manifest this update: Sun 14 Dec 2025 12:01:15 +0000 Manifest next update: Mon 15 Dec 2025 12:01:15 +0000 Files and hashes: 1: EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl (hash: jm4hrZrBUHIx2bXHBYnmSOe1bI4r0lUFfgC+rGCLGMo=) 2: OMC8JBvCYl7bQ9ngInMd0aMZ-oE.roa (hash: 4qqAXlUiD4s2s0wNKmpYnzZpaP7ycT4Hqs2PhA8Ebd4=) 3: bMZAGJiSL37RYjG0omxqUzfw6RQ.roa (hash: GC8GdghFTzQFHElrcSiH/7+b0UQBvz9Pyt1qThrmjO4=) 4: cA-3PBWL1bUwOarNEMZiyyIevMU.roa (hash: cnw/uPeaFuZ+fncW2i8jJnwO4+wUVJ2d2gj1ViPSrJQ=) 5: fw-BT1lvrjBkddYCCHDg1oZutT4.roa (hash: iAaplhiCg6/Cmk5M9afSn42FhZ9hgGQtswmLjCZlPus=) 6: mOheAjZvIR3dWuAdDZpcmihTHzQ.roa (hash: zDN/FrzOeeK98CYXtLxiPly6YpcVp+cmbxmn8fxsrMs=) 7: p1DQi1u18C75Ohux7URg7YfrGs8.roa (hash: INt16ax1DFlOoo29QJUQDnOPGS2CLSORfkcRk285y/0=) 8: xEHBG-sDPVKJ9XXxM6Z9mKuo0U0.roa (hash: G3jD6yODhofSNU3PUJZMmjQCNj42WLMnZ0Laof6Aj28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:84:dc:37:ef:03:65:e7:aa:e5:8a:7e:a8:5d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b Validity Not Before: Dec 14 12:01:15 2025 GMT Not After : Dec 15 12:01:15 2025 GMT Subject: CN=a4ab68d9aa1f091b94326f5aa58be3477d9850d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:5b:42:01:e1:98:c9:61:2c:4c:ea:d0:ca: f5:e1:1e:96:2f:1e:39:8f:93:4f:be:7f:d3:ed:0a: 68:a1:c8:e7:72:a4:21:69:ac:da:0b:cc:c0:63:77: 63:4a:1a:13:aa:bd:1f:5f:08:dd:f8:b8:d5:1e:79: 8e:f2:5e:bc:39:c2:cf:c6:4a:9a:ba:47:00:ec:b0: 6a:22:d4:ae:dc:ba:96:fc:06:f7:97:89:34:42:c9: 61:24:e4:07:fc:8e:27:8b:db:1a:8c:68:04:c7:b1: e7:78:fd:e1:5b:85:65:94:71:0e:c5:2b:67:4e:31: 9b:6d:bc:4b:59:a3:0c:06:4c:a6:87:44:dc:84:4e: 3f:87:77:75:17:73:3a:f8:75:fc:00:7f:51:b4:5e: 62:3d:47:3a:c3:20:44:1d:54:ce:d9:04:69:2c:fe: aa:b2:c5:23:68:c4:9b:3f:85:93:88:25:d5:ea:55: a1:bc:a1:9d:76:60:8d:e8:c8:1c:9f:c6:e4:30:91: ba:4d:7f:e3:9c:07:61:02:d1:61:5e:43:3b:11:0f: d8:54:e8:d8:55:0d:af:a0:50:9e:29:98:b1:b2:7f: d0:cc:a0:8a:d7:16:83:94:5f:2f:0b:1f:82:56:80: 2d:6c:e1:48:54:ff:a8:99:57:91:b9:d4:36:f7:4e: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AB:68:D9:AA:1F:09:1B:94:32:6F:5A:A5:8B:E3:47:7D:98:50:D7 X509v3 Authority Key Identifier: keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:df:f9:13:ff:a9:d2:97:ee:86:7e:97:a1:af:48:28:4a:22: df:ba:e4:0d:21:f2:3b:3b:86:4a:35:d1:a3:c2:8a:60:88:fe: ac:a8:c6:86:7d:eb:66:b5:3c:88:b8:b1:df:01:8f:94:c6:f1: fa:b7:ec:dd:b8:72:d8:bb:05:6f:87:0c:25:08:b8:e9:5c:85: 4d:6f:e5:bf:ae:30:dd:42:51:a4:39:66:d9:93:57:5f:cf:0c: de:40:c9:2c:cf:36:3b:1a:64:77:27:59:77:6f:71:6f:81:a2: 50:57:ff:97:3c:63:9f:e8:a1:60:92:96:49:c9:2d:48:e7:1b: 66:5c:78:23:55:55:7a:28:93:bb:e7:4e:c6:32:ac:3b:78:62: 35:f3:df:9d:f8:21:9f:16:b9:aa:4e:83:a6:7b:3c:12:d5:5d: 61:6c:26:1e:f0:6e:6f:73:89:bf:3c:6b:59:c1:62:19:79:ba: bb:40:58:14:83:15:c8:f1:e0:56:31:85:6a:43:52:a4:a1:94: d1:05:8f:37:36:a5:5e:0a:a7:96:c1:19:b2:df:84:5f:93:a1: 97:ab:70:2a:a9:bd:f8:20:25:f0:b9:9b:5a:03:5d:ab:5a:af: e5:e1:0f:43:70:64:05:53:95:2b:34:38:8d:2d:ec:28:64:4a: a7:91:eb:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvITcN+8DZeeq5Yp+qF2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjk0ZjY5NDVhMjFkMDhkMzAxOTJjZmMxYTZiNzgwZGU3 MjhlM2IwHhcNMjUxMjE0MTIwMTE1WhcNMjUxMjE1MTIwMTE1WjAzMTEwLwYDVQQD EyhhNGFiNjhkOWFhMWYwOTFiOTQzMjZmNWFhNThiZTM0NzdkOTg1MGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWZbQgHhmMlhLEzq0Mr14R6WLx45 j5NPvn/T7QpoocjncqQhaazaC8zAY3djShoTqr0fXwjd+LjVHnmO8l68OcLPxkqa ukcA7LBqItSu3LqW/Ab3l4k0QslhJOQH/I4ni9sajGgEx7HneP3hW4VllHEOxStn TjGbbbxLWaMMBkymh0TchE4/h3d1F3M6+HX8AH9RtF5iPUc6wyBEHVTO2QRpLP6q ssUjaMSbP4WTiCXV6lWhvKGddmCN6Mgcn8bkMJG6TX/jnAdhAtFhXkM7EQ/YVOjY VQ2voFCeKZixsn/QzKCK1xaDlF8vCx+CVoAtbOFIVP+omVeRudQ2906wOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSraNmqHwkblDJvWqWL40d9mFDXMB8GA1UdIwQY MBaAFBJpT2lFoh0I0wGSz8Gmt4Deco47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDkt NjU5OGI0Y2ViMDY5LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDktNjU5OGI0Y2ViMDY5 LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADt/5E/+p 0pfuhn6Xoa9IKEoi37rkDSHyOzuGSjXRo8KKYIj+rKjGhn3rZrU8iLix3wGPlMbx +rfs3bhy2LsFb4cMJQi46VyFTW/lv64w3UJRpDlm2ZNXX88M3kDJLM82OxpkdydZ d29xb4GiUFf/lzxjn+ihYJKWScktSOcbZlx4I1VVeiiTu+dOxjKsO3hiNfPfnfgh nxa5qk6Dpns8EtVdYWwmHvBub3OJvzxrWcFiGXm6u0BYFIMVyPHgVjGFakNSpKGU 0QWPNzalXgqnlsEZst+EX5Ohl6twKqm9+CAl8LmbWgNdq1qv5eEPQ3BkBVOVKzQ4 jS3sKGRKp5HrFw== -----END CERTIFICATE-----Generated at Sun Dec 14 21:35:03 2025 by rpki-client