This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft File: IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json) Hash identifier: vuRSq0YZjlJv/Lb8nU2yGD8pCj63jZlhm8syMQVcuRg= Subject key identifier: 8D:2C:B6:4F:1F:93:40:86:EB:64:F7:4A:63:39:EA:5B:51:E0:12:38 Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF Certificate issuer: /CN=204995c3627f7aacdfe23915e442e3d3900631af Certificate serial: 019B5A5133BB4A393617FE88921CA248C550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft Manifest number: 0845 Signing time: Fri 26 Dec 2025 11:00:29 +0000 Manifest this update: Fri 26 Dec 2025 11:00:29 +0000 Manifest next update: Sat 27 Dec 2025 11:00:29 +0000 Files and hashes: 1: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (hash: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=) 2: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: a5vsAeGZyCEHTXt7qkUBU751ulHQy1pBLARi8hTvwoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:33:bb:4a:39:36:17:fe:88:92:1c:a2:48:c5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af Validity Not Before: Dec 26 11:00:29 2025 GMT Not After : Dec 27 11:00:29 2025 GMT Subject: CN=8d2cb64f1f934086eb64f74a6339ea5b51e01238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4f:67:83:8c:59:92:97:96:b8:2d:d5:6b:54: 4d:de:80:65:7f:7d:ee:c9:22:8a:77:89:0e:e9:3d: cf:7f:53:ab:59:db:c2:d3:f2:ba:f7:69:e7:3b:f7: cd:aa:f4:32:3b:2c:e0:ae:09:00:69:0e:3e:53:e5: cb:4c:eb:d6:df:ed:99:7d:dd:40:10:4e:ed:61:05: d8:79:ba:6f:66:eb:a1:95:11:9f:c2:06:41:53:02: 01:fd:8d:01:12:e9:82:9a:88:8d:7b:6c:46:4d:27: 8c:35:c1:fa:cd:80:42:04:ed:36:9e:d6:35:15:73: e1:a4:cc:4c:bc:f2:76:70:5f:91:cd:9d:74:23:bf: f7:e0:67:0c:b0:8c:d4:e1:53:98:97:af:a9:12:2a: a3:3c:c1:0c:c3:8c:0e:e6:ad:22:8a:10:3d:48:d8: 49:f5:99:6f:e9:ae:a1:9b:ee:fc:5f:92:4f:a6:46: 34:3d:35:0f:eb:66:fd:02:ee:22:cb:3b:e2:a7:7b: 19:a4:42:f7:00:7f:6b:d3:40:6a:29:53:5a:c6:02: 3a:d7:06:21:dc:df:9b:da:ba:bb:3c:06:f8:d9:54: e8:9c:0b:64:1f:72:ec:42:b3:86:73:9f:f9:a4:d6: 48:7d:92:8e:7b:6f:ac:50:b1:ea:48:9d:48:6e:82: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2C:B6:4F:1F:93:40:86:EB:64:F7:4A:63:39:EA:5B:51:E0:12:38 X509v3 Authority Key Identifier: keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:be:4d:db:f5:d7:9d:7c:29:f9:ef:b2:8f:6f:73:2d:16:0c: e7:5f:7a:13:79:9c:0e:43:80:11:7b:3d:06:bc:85:ec:48:49: 6a:57:c9:ac:58:70:89:49:6c:d9:8b:59:3f:93:ae:f5:a1:98: 5e:be:b2:f6:b4:56:17:29:9f:3f:f3:8c:ff:49:cb:4e:04:44: de:31:77:41:34:6d:25:c4:51:e9:3f:88:d1:7c:86:3a:8f:a6: 07:db:39:64:12:52:70:0d:c2:7f:b5:df:64:3e:d6:06:5e:ba: d8:9b:54:a7:83:98:01:96:ed:45:35:82:43:2a:82:1c:0f:5d: c2:0c:3f:c2:30:87:e0:98:d7:98:01:5d:21:3a:13:2f:87:a1: 50:a1:d8:f4:d7:33:12:cf:3b:68:5f:04:1b:64:10:62:98:e5: 38:87:57:a7:42:e9:a0:f0:ec:53:fc:f9:af:95:01:8c:b5:13: e5:19:fa:dd:5d:f1:89:d8:af:33:2f:6b:4e:37:7e:fe:bf:c1: 28:97:aa:c3:7a:31:05:d2:35:54:14:bd:1c:e8:1f:71:c6:0f: 08:a2:9e:59:4e:c1:ed:52:f8:b4:44:de:d3:59:fb:13:d5:d3: 18:c8:46:76:99:a6:49:c7:c9:70:52:bd:44:95:8f:ad:a3:a7: 04:12:4f:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUTO7Sjk2F/6IkhyiSMVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNDk5NWMzNjI3ZjdhYWNkZmUyMzkxNWU0NDJlM2QzOTAw NjMxYWYwHhcNMjUxMjI2MTEwMDI5WhcNMjUxMjI3MTEwMDI5WjAzMTEwLwYDVQQD Eyg4ZDJjYjY0ZjFmOTM0MDg2ZWI2NGY3NGE2MzM5ZWE1YjUxZTAxMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU9ng4xZkpeWuC3Va1RN3oBlf33u ySKKd4kO6T3Pf1OrWdvC0/K692nnO/fNqvQyOyzgrgkAaQ4+U+XLTOvW3+2Zfd1A EE7tYQXYebpvZuuhlRGfwgZBUwIB/Y0BEumCmoiNe2xGTSeMNcH6zYBCBO02ntY1 FXPhpMxMvPJ2cF+RzZ10I7/34GcMsIzU4VOYl6+pEiqjPMEMw4wO5q0iihA9SNhJ 9Zlv6a6hm+78X5JPpkY0PTUP62b9Au4iyzvip3sZpEL3AH9r00BqKVNaxgI61wYh 3N+b2rq7PAb42VTonAtkH3LsQrOGc5/5pNZIfZKOe2+sULHqSJ1IboImHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0stk8fk0CG62T3SmM56ltR4BI4MB8GA1UdIwQY MBaAFCBJlcNif3qs3+I5FeRC49OQBjGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQt NDg0NTlkMDdiNDFlLzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQtNDg0NTlkMDdiNDFl LzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxL5N2/XX nXwp+e+yj29zLRYM5196E3mcDkOAEXs9BryF7EhJalfJrFhwiUls2YtZP5Ou9aGY Xr6y9rRWFymfP/OM/0nLTgRE3jF3QTRtJcRR6T+I0XyGOo+mB9s5ZBJScA3Cf7Xf ZD7WBl662JtUp4OYAZbtRTWCQyqCHA9dwgw/wjCH4JjXmAFdIToTL4ehUKHY9Ncz Es87aF8EG2QQYpjlOIdXp0LpoPDsU/z5r5UBjLUT5Rn63V3xidivMy9rTjd+/r/B KJeqw3oxBdI1VBS9HOgfccYPCKKeWU7B7VL4tETe01n7E9XTGMhGdpmmScfJcFK9 RJWPraOnBBJP6A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:21 2025 by rpki-client