This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json) Hash identifier: PSgcO1URkz+d0JYQQ8o8JSY72WdPkboc/E0N2RecY4Q= Subject key identifier: 11:26:CA:EE:DF:6C:E9:FB:0B:0F:04:EF:FA:5E:F1:B1:48:FC:90:B9 Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43 Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743 Certificate serial: 019AF19AFD358A80213C977D8C1629B26019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft Manifest number: 10F7 Signing time: Sat 06 Dec 2025 03:00:57 +0000 Manifest this update: Sat 06 Dec 2025 03:00:57 +0000 Manifest next update: Sun 07 Dec 2025 03:00:57 +0000 Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: 8F2qS4ZL1OYm6QxLoHQupUtUDn+C7FJ4AZxL1toAyws=) 2: wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa (hash: W+sz9TCOY3wSjFpbMXmTZluRFQBYvoOF99W06O++/x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fd:35:8a:80:21:3c:97:7d:8c:16:29:b2:60:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743 Validity Not Before: Dec 6 03:00:57 2025 GMT Not After : Dec 7 03:00:57 2025 GMT Subject: CN=1126caeedf6ce9fb0b0f04effa5ef1b148fc90b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:b2:ef:a8:4b:ba:a8:cd:49:d3:e3:6f:f2: 5d:9e:b9:b5:1a:33:13:7c:fc:c0:bc:f8:56:c8:91: 41:71:36:00:22:0d:53:54:23:2c:27:37:e1:04:3e: 56:8d:23:ef:f1:1a:97:c4:fd:72:4a:a7:b7:29:1a: 4c:b1:c4:bf:81:ba:87:f1:b8:99:b0:21:8a:09:a8: ed:d6:dd:38:ea:ec:dc:1d:2c:77:d5:bb:04:1a:5a: 8c:6e:08:c1:9b:57:c1:8d:0e:f2:38:73:46:05:a2: da:cd:8c:e5:0c:8e:9b:8c:ef:06:79:a2:0a:60:cc: 81:27:c0:3e:a4:09:75:ed:f0:9e:47:2f:bb:d0:a9: f6:16:a8:fc:c8:b4:1b:c1:50:ac:f3:29:a3:f6:6d: 9f:37:37:f9:e2:c4:0f:c5:ea:52:22:ad:2c:97:85: 4e:61:ba:a5:32:ca:68:b6:8a:b4:d4:ac:cc:1f:b5: 28:93:da:c4:25:bf:4b:b0:95:d9:43:a8:33:5b:c3: 03:a6:c7:a7:bc:31:93:62:c7:95:89:b6:71:06:67: 1a:e4:26:c7:c9:f7:a3:4c:e6:71:e7:63:5e:9b:24: 1f:7e:7e:c9:eb:21:3a:9c:aa:16:e8:91:02:cc:24: 3b:4c:52:9e:08:1d:1b:69:ba:e6:4a:95:df:84:c3: 70:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:26:CA:EE:DF:6C:E9:FB:0B:0F:04:EF:FA:5E:F1:B1:48:FC:90:B9 X509v3 Authority Key Identifier: keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:58:9f:cb:09:7a:62:50:f0:4b:66:da:f2:c2:1e:c1:63:fb: d1:11:4e:40:51:04:b9:c9:07:d1:b8:4e:2e:32:2d:a0:52:71: d8:b6:6b:52:a4:7b:aa:a7:4a:6a:6c:61:ea:7c:10:af:6f:a1: e6:1b:83:42:69:44:ad:c7:96:f8:4c:6d:72:c6:c2:ab:29:f0: 9c:96:b7:9c:f5:8c:dc:cd:e5:9a:f2:04:ac:b1:40:dd:be:72: 55:68:b0:4e:78:85:58:25:df:28:ec:02:ee:ed:41:4c:36:6d: 29:95:7b:3e:3b:f4:36:17:85:10:c9:2e:68:aa:41:7f:cc:20: c0:32:c9:73:9a:01:4d:80:fe:d0:d3:37:9b:1e:a2:97:a6:7a: 76:ea:02:53:5d:00:c7:47:ad:ca:82:b2:2f:25:73:ca:46:70: 2e:2e:15:93:75:70:7d:a9:36:82:37:20:8f:66:0f:b3:e1:13: 28:c9:00:39:64:7f:4e:ce:d1:37:ca:36:8e:b4:65:1d:90:11: 8c:04:05:3d:09:ae:e4:74:1a:47:bd:e7:a4:43:44:d1:93:24: c5:cd:93:0c:06:89:cb:fc:e7:d8:f9:e5:b2:6d:ba:22:a4:f2: 9b:be:25:3e:bd:e1:a7:cc:c4:f6:02:38:14:30:17:92:6a:74: 20:88:e7:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv01ioAhPJd9jBYpsmAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmZmYzAwOTZjNjkzYmJjNDIwZWViOGNjZWYzNGJjN2I1 Mzg3NDMwHhcNMjUxMjA2MDMwMDU3WhcNMjUxMjA3MDMwMDU3WjAzMTEwLwYDVQQD EygxMTI2Y2FlZWRmNmNlOWZiMGIwZjA0ZWZmYTVlZjFiMTQ4ZmM5MGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMCy76hLuqjNSdPjb/Jdnrm1GjMT fPzAvPhWyJFBcTYAIg1TVCMsJzfhBD5WjSPv8RqXxP1ySqe3KRpMscS/gbqH8biZ sCGKCajt1t046uzcHSx31bsEGlqMbgjBm1fBjQ7yOHNGBaLazYzlDI6bjO8GeaIK YMyBJ8A+pAl17fCeRy+70Kn2Fqj8yLQbwVCs8ymj9m2fNzf54sQPxepSIq0sl4VO YbqlMspotoq01KzMH7Uok9rEJb9LsJXZQ6gzW8MDpsenvDGTYseVibZxBmca5CbH yfejTOZx52NemyQffn7J6yE6nKoW6JECzCQ7TFKeCB0babrmSpXfhMNwHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEmyu7fbOn7Cw8E7/pe8bFI/JC5MB8GA1UdIwQY MBaAFBJv/ACWxpO7xCDuuMzvNLx7U4dDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUt MWM4NmM1N2UyZTlmLzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUtMWM4NmM1N2UyZTlm LzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFifywl6 YlDwS2ba8sIewWP70RFOQFEEuckH0bhOLjItoFJx2LZrUqR7qqdKamxh6nwQr2+h 5huDQmlErceW+ExtcsbCqynwnJa3nPWM3M3lmvIErLFA3b5yVWiwTniFWCXfKOwC 7u1BTDZtKZV7Pjv0NheFEMkuaKpBf8wgwDLJc5oBTYD+0NM3mx6il6Z6duoCU10A x0etyoKyLyVzykZwLi4Vk3Vwfak2gjcgj2YPs+ETKMkAOWR/Ts7RN8o2jrRlHZAR jAQFPQmu5HQaR73npENE0ZMkxc2TDAaJy/zn2Pnlsm26IqTym74lPr3hp8zE9gI4 FDAXkmp0IIjnMA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:38 2025 by rpki-client