This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft File: EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json) Hash identifier: wzguc5cFal+h3onZPLwq5ueosCG8uIAWRpIaQhyibnQ= Subject key identifier: 7A:8B:15:74:25:C3:6A:1D:E9:53:C7:EB:AA:E4:53:DD:92:26:C3:CF Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C Certificate issuer: /CN=1265c9165fd336df6dfe849aebdce4685fb1993c Certificate serial: 019AF19B8F24D35C17D836CA5EB079706520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft Manifest number: 149C Signing time: Sat 06 Dec 2025 03:01:34 +0000 Manifest this update: Sat 06 Dec 2025 03:01:34 +0000 Manifest next update: Sun 07 Dec 2025 03:01:34 +0000 Files and hashes: 1: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: nz+I0iPh4vT4k5R+BOclxn+j9xkVoQA3SQgWu3BdFnk=) 2: uUsYYdThPpGgjymK3Ultz58Gf_Q.roa (hash: kzn/M2n+sxLUH2VEd8vrpqyKNhTOto1w+Nu3LrsxmjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:8f:24:d3:5c:17:d8:36:ca:5e:b0:79:70:65:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c Validity Not Before: Dec 6 03:01:34 2025 GMT Not After : Dec 7 03:01:34 2025 GMT Subject: CN=7a8b157425c36a1de953c7ebaae453dd9226c3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:2f:7b:04:a9:8a:e8:30:c7:da:5d:a4:31:4c: c8:fd:7a:94:3e:3d:c6:ed:5f:ed:93:a9:b5:00:e2: 6e:ba:98:d3:d0:5b:fa:53:80:07:65:e2:eb:65:70: b5:1d:a3:a4:3a:6c:f5:60:21:be:13:b5:f6:c7:77: 2f:08:bd:d1:cc:c7:c0:b8:cb:e9:10:39:ba:72:4a: 65:07:45:2b:c7:34:41:55:e9:32:aa:de:78:c0:83: 4e:39:18:41:f1:39:79:de:8b:ab:fb:e1:b3:9f:75: 42:b7:47:89:ab:53:be:0f:4f:f5:e5:86:23:e7:3c: e6:d9:cd:82:67:34:8c:63:14:4e:47:98:1c:ee:67: cd:3a:7f:c8:5d:69:e9:2e:83:fc:f0:e7:b3:92:d7: 36:9b:b2:c5:9a:05:19:08:f9:08:e5:31:22:fb:29: f1:ff:e2:c5:d3:04:09:5e:57:3d:ab:f8:8b:3d:e3: 7e:b7:d2:9f:9f:29:a8:50:bc:a2:74:03:53:44:48: 35:e1:ce:05:6e:2a:c4:74:3a:21:e5:f7:b3:53:65: b5:10:66:09:df:b4:67:b5:1b:e4:35:e5:9b:06:9c: 93:6b:2a:46:d7:f9:a4:09:d5:6a:1e:c0:0d:78:40: ba:aa:4a:18:65:99:96:43:6c:d3:54:cb:a0:ff:25: 1c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8B:15:74:25:C3:6A:1D:E9:53:C7:EB:AA:E4:53:DD:92:26:C3:CF X509v3 Authority Key Identifier: keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9f:47:ef:78:6d:10:10:78:ff:c7:cf:f6:2b:de:2d:b4:39: 24:bd:ce:5f:e1:ab:db:07:ac:fd:60:e2:7e:ac:4d:35:a5:63: c1:ca:16:91:ae:1f:b4:0f:44:73:bc:98:d4:11:d0:71:b8:b8: ca:8d:16:16:d4:84:f9:93:79:c2:05:66:34:9f:8d:7d:65:4f: 97:00:66:27:e7:fb:0d:4c:65:b6:1d:cb:d6:6e:e9:06:9c:7e: ad:3e:69:bd:b6:ff:43:cc:9a:c4:83:56:84:69:55:81:2e:9f: 51:7c:e0:b1:79:c2:f7:78:da:41:12:29:90:39:37:ad:b0:c4: ce:a8:72:36:4c:bf:97:fb:c9:39:a3:a5:6a:a7:28:6e:b8:6b: 82:a0:8f:70:22:00:58:e7:da:16:70:7f:e4:50:55:ff:3b:ff: 6f:76:f7:b2:fd:a7:8f:65:da:1e:d4:77:3c:0c:8e:1b:09:f3: c2:af:a6:c8:09:8d:cd:65:84:e8:89:e2:d1:58:ff:a6:71:18: 81:3c:f6:4d:2b:79:b4:34:f8:d9:d9:b1:e1:93:a6:b9:12:2b: bd:99:33:51:fe:75:52:ec:ec:29:a6:fe:70:64:c6:46:52:64: 28:1e:5a:7c:2d:64:b6:ce:1b:16:90:a0:a1:c9:c8:a1:55:0d: e2:e2:24:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm48k01wX2DbKXrB5cGUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjVjOTE2NWZkMzM2ZGY2ZGZlODQ5YWViZGNlNDY4NWZi MTk5M2MwHhcNMjUxMjA2MDMwMTM0WhcNMjUxMjA3MDMwMTM0WjAzMTEwLwYDVQQD Eyg3YThiMTU3NDI1YzM2YTFkZTk1M2M3ZWJhYWU0NTNkZDkyMjZjM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+y97BKmK6DDH2l2kMUzI/XqUPj3G 7V/tk6m1AOJuupjT0Fv6U4AHZeLrZXC1HaOkOmz1YCG+E7X2x3cvCL3RzMfAuMvp EDm6ckplB0UrxzRBVekyqt54wINOORhB8Tl53our++Gzn3VCt0eJq1O+D0/15YYj 5zzm2c2CZzSMYxROR5gc7mfNOn/IXWnpLoP88Oezktc2m7LFmgUZCPkI5TEi+ynx /+LF0wQJXlc9q/iLPeN+t9KfnymoULyidANTREg14c4FbirEdDoh5fezU2W1EGYJ 37RntRvkNeWbBpyTaypG1/mkCdVqHsANeEC6qkoYZZmWQ2zTVMug/yUctQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqLFXQlw2od6VPH66rkU92SJsPPMB8GA1UdIwQY MBaAFBJlyRZf0zbfbf6Emuvc5GhfsZk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYt NjhlOTg2ZmQ2NDE5LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYtNjhlOTg2ZmQ2NDE5 LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE59H73ht EBB4/8fP9iveLbQ5JL3OX+Gr2wes/WDifqxNNaVjwcoWka4ftA9Ec7yY1BHQcbi4 yo0WFtSE+ZN5wgVmNJ+NfWVPlwBmJ+f7DUxlth3L1m7pBpx+rT5pvbb/Q8yaxINW hGlVgS6fUXzgsXnC93jaQRIpkDk3rbDEzqhyNky/l/vJOaOlaqcobrhrgqCPcCIA WOfaFnB/5FBV/zv/b3b3sv2nj2XaHtR3PAyOGwnzwq+myAmNzWWE6Ini0Vj/pnEY gTz2TSt5tDT42dmx4ZOmuRIrvZkzUf51UuzsKab+cGTGRlJkKB5afC1kts4bFpCg ocnIoVUN4uIkRA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:00 2025 by rpki-client