This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft File: eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json) Hash identifier: 5DjGzQN3bnG6lxtj8R2ka50uZmpMlmsbPhtEw1SM3Is= Subject key identifier: 84:0E:21:CA:31:F6:B0:13:83:C2:97:D2:B8:88:69:AE:23:1F:03:5B Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2 Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2 Certificate serial: 019AF352690009808DD4E9D8E3F550992CCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft Manifest number: 13AC Signing time: Sat 06 Dec 2025 11:00:55 +0000 Manifest this update: Sat 06 Dec 2025 11:00:55 +0000 Manifest next update: Sun 07 Dec 2025 11:00:55 +0000 Files and hashes: 1: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: wKgaVgtfduUxDdBVi5w0kR1Y8WU9z68PRQTif6WdKjE=) 2: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (hash: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:69:00:09:80:8d:d4:e9:d8:e3:f5:50:99:2c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2 Validity Not Before: Dec 6 11:00:55 2025 GMT Not After : Dec 7 11:00:55 2025 GMT Subject: CN=840e21ca31f6b01383c297d2b88869ae231f035b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:c3:7f:44:39:ae:f6:87:9c:09:d4:b6:f7: 10:42:b8:b3:1b:ae:48:9c:0a:e3:15:08:b9:98:22: ee:29:1b:c1:ea:60:ff:ac:30:a5:fd:87:8d:1d:19: e3:1b:dd:d9:ca:b9:17:d6:a2:e5:c7:bb:ca:c4:35: 18:c9:76:73:3e:79:48:9a:5a:72:3e:73:41:dd:57: a9:2f:53:61:9d:c2:4d:e1:61:a9:dc:2b:a3:f3:bb: 49:55:d9:19:8d:4c:0d:f7:6c:d6:6f:e3:31:0c:8c: 87:7e:c5:c5:76:8c:c5:10:91:de:02:15:3f:91:51: a9:62:9a:69:61:62:45:8e:5e:ab:77:33:ef:97:47: 6b:cc:70:8b:7c:40:be:f5:aa:6d:5b:c8:26:4b:e1: 37:1a:c3:87:fe:26:94:93:e2:5a:9c:4e:2f:4e:b6: a1:ec:c3:72:1c:f7:96:79:79:7f:5e:1b:75:cd:ab: 76:1d:ba:21:ea:ca:54:77:ec:18:4d:48:ca:9b:88: ee:56:6c:d0:e4:77:a0:9a:e7:c5:64:c3:18:a5:7e: e1:dc:60:cc:a6:97:25:9e:c0:d1:89:6f:3f:02:d6: 81:38:05:10:c9:5c:f2:c1:67:7a:27:3d:ff:f5:db: 49:4d:ed:b6:23:4b:d5:f1:d9:69:38:0d:b1:21:3b: 48:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0E:21:CA:31:F6:B0:13:83:C2:97:D2:B8:88:69:AE:23:1F:03:5B X509v3 Authority Key Identifier: keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2d:6b:dc:dc:9e:25:11:4e:55:3d:50:24:a6:14:e7:ae:67: ee:f3:0c:ae:55:bc:5b:c8:e9:0e:07:79:cd:52:c6:01:28:f2: 19:fa:6a:4f:b4:54:eb:44:fa:1c:25:ca:2f:2b:2c:ba:70:f7: 21:85:ef:48:9e:36:cf:92:dd:cc:5d:cc:80:ac:a6:31:07:43: 33:41:35:83:42:22:69:01:91:6e:c3:63:11:36:2e:92:8f:c9: 61:e8:86:b5:dd:8f:40:07:36:d5:5a:37:35:54:cd:a2:58:e6: 08:6d:65:cf:99:47:91:d3:f7:0c:53:c2:90:8a:26:13:cf:66: 0a:87:0e:d3:17:41:28:26:83:23:58:66:6e:b5:82:04:fe:7c: 57:67:34:91:e0:1c:52:30:7d:44:d4:8d:81:f7:6e:5b:f4:28: 85:b9:8a:58:89:5d:3e:c7:07:a2:06:89:df:bf:83:f9:7c:48: 54:9a:2f:9d:77:ce:a9:e5:45:f4:1d:3f:3a:a7:6f:d2:6b:ed: 7f:79:da:ed:c1:0e:78:e5:c5:00:8c:58:b6:e4:e5:d9:1d:d3: 1a:9f:19:0c:e6:04:40:75:11:2c:2d:11:66:2f:a8:62:56:ca: a1:fb:0e:f5:6f:6e:4a:24:89:0f:24:e8:28:4e:a3:9a:28:d5: 81:97:07:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmkACYCN1OnY4/VQmSzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YzIzNjU4MGNjMmVlMTkzZGJkY2MzMTI2ZGY0MTcwY2Mx MTdjZDIwHhcNMjUxMjA2MTEwMDU1WhcNMjUxMjA3MTEwMDU1WjAzMTEwLwYDVQQD Eyg4NDBlMjFjYTMxZjZiMDEzODNjMjk3ZDJiODg4NjlhZTIzMWYwMzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtabDf0Q5rvaHnAnUtvcQQrizG65I nArjFQi5mCLuKRvB6mD/rDCl/YeNHRnjG93ZyrkX1qLlx7vKxDUYyXZzPnlImlpy PnNB3VepL1NhncJN4WGp3Cuj87tJVdkZjUwN92zWb+MxDIyHfsXFdozFEJHeAhU/ kVGpYpppYWJFjl6rdzPvl0drzHCLfEC+9aptW8gmS+E3GsOH/iaUk+JanE4vTrah 7MNyHPeWeXl/Xht1zat2Hboh6spUd+wYTUjKm4juVmzQ5HegmufFZMMYpX7h3GDM ppclnsDRiW8/AtaBOAUQyVzywWd6Jz3/9dtJTe22I0vV8dlpOA2xITtIwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQOIcox9rATg8KX0riIaa4jHwNbMB8GA1UdIwQY MBaAFHjCNlgMwu4ZPb3MMSbfQXDMEXzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUt ZjllNjUzOWJiZTZiLzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUtZjllNjUzOWJiZTZi LzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADi1r3Nye JRFOVT1QJKYU565n7vMMrlW8W8jpDgd5zVLGASjyGfpqT7RU60T6HCXKLyssunD3 IYXvSJ42z5LdzF3MgKymMQdDM0E1g0IiaQGRbsNjETYuko/JYeiGtd2PQAc21Vo3 NVTNoljmCG1lz5lHkdP3DFPCkIomE89mCocO0xdBKCaDI1hmbrWCBP58V2c0keAc UjB9RNSNgfduW/QohbmKWIldPscHogaJ37+D+XxIVJovnXfOqeVF9B0/Oqdv0mvt f3na7cEOeOXFAIxYtuTl2R3TGp8ZDOYEQHURLC0RZi+oYlbKofsO9W9uSiSJDyTo KE6jmijVgZcH5A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:42 2025 by rpki-client