This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft File: emc1t6VToWgMEa3T5Iw2NbU5eco.mft (raw, json) Hash identifier: rDTWy+YJO0PIRPgzuG06317YF7vRWOquDgQDrr8mD8w= Subject key identifier: CB:DE:0D:DD:CB:A1:5D:F8:24:EA:76:A9:6E:C6:E1:42:42:D8:E7:5F Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA Certificate issuer: /CN=7a6735b7a553a1680c11add3e48c3635b53979ca Certificate serial: 019AF088BD51F4659986B5815E3B67290FE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft Manifest number: 1768 Signing time: Fri 05 Dec 2025 22:01:24 +0000 Manifest this update: Fri 05 Dec 2025 22:01:24 +0000 Manifest next update: Sat 06 Dec 2025 22:01:24 +0000 Files and hashes: 1: Y0QzFQpxED6pQGOSZGJB2X93kKs.roa (hash: QstMZbErBCYp+ToxnOCIPJt5s0/mWI/dSe8BQlrQ6lk=) 2: emc1t6VToWgMEa3T5Iw2NbU5eco.crl (hash: 58eoioHs8JM+AEDzATToNsw3gjshmnopgi62Ji58+ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:bd:51:f4:65:99:86:b5:81:5e:3b:67:29:0f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca Validity Not Before: Dec 5 22:01:24 2025 GMT Not After : Dec 6 22:01:24 2025 GMT Subject: CN=cbde0dddcba15df824ea76a96ec6e14242d8e75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:96:df:6d:23:a0:ba:8d:ed:74:d3:29:12: ea:36:98:65:fa:7b:ff:d2:97:72:a3:9f:04:b4:6a: ae:39:f6:5d:f0:66:6f:31:71:92:d7:6c:7a:5f:d2: 8c:98:1d:df:be:ee:00:7e:a2:ff:4d:b1:79:b8:43: c1:6d:90:29:da:0b:51:cb:4c:53:67:b7:85:e3:82: 0b:82:d6:67:9f:f4:b3:55:1f:c0:ba:8b:8d:18:68: cc:12:0c:c6:62:a6:d9:e9:78:b1:ce:17:e9:07:f7: 9d:01:a8:7a:ff:87:ca:ab:e3:13:9e:6d:77:e5:2e: 3f:9a:0d:6c:a6:24:80:7f:2e:4e:f9:cc:0a:da:f9: fc:0a:d1:e1:e6:89:8f:19:17:61:88:b6:8c:a7:17: 42:b8:9a:e8:7d:4d:2a:64:6e:9f:02:20:97:dc:6d: 0d:eb:bb:5b:c2:2b:e6:d9:4b:b7:10:68:17:94:64: 44:c9:54:01:a1:f6:a8:1d:4c:1c:d6:94:c5:fe:ef: 2f:99:6a:50:89:c6:5c:d9:ba:aa:f9:92:ec:24:19: d6:5b:6f:cc:be:82:c0:fb:8c:e4:3c:70:24:ad:d7: 58:d8:5d:f5:f1:e5:f7:ef:02:51:e8:09:c9:85:0a: e3:00:41:86:2a:7a:7a:08:91:34:f1:ec:5a:d7:4c: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DE:0D:DD:CB:A1:5D:F8:24:EA:76:A9:6E:C6:E1:42:42:D8:E7:5F X509v3 Authority Key Identifier: keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:38:ec:ff:57:93:27:c4:8a:f9:8f:8f:01:52:72:91:11:97: e9:56:e8:bc:fc:01:6b:79:76:ab:6c:6c:d2:62:55:08:8e:77: 6e:39:10:b5:f3:24:95:d1:bc:15:a3:9c:8b:51:06:0d:a6:7d: 1e:e3:36:c3:6f:39:78:ec:10:be:3b:cf:50:90:fd:fa:ea:06: f6:2d:b1:a4:ff:53:ee:17:94:4f:0d:c7:46:24:ae:00:ed:a1: 10:98:b7:5c:12:67:2e:82:b7:85:b5:8d:b5:9b:53:f8:83:1b: 3d:e9:b7:bd:7e:02:79:3a:98:df:56:c2:ca:25:3f:18:9b:dc: e3:b5:c3:44:3a:dc:0d:97:0a:75:4d:7e:ad:02:37:50:4a:23: 93:c7:c5:6f:9a:00:06:b7:46:f6:3c:31:9a:67:4c:01:e9:fc: 46:f8:ef:4c:d6:c7:1d:5c:c3:25:c8:87:35:1a:61:68:e7:6b: c8:d3:86:9a:be:0e:19:32:07:32:b5:89:5b:99:5f:4a:5f:d0: c2:ad:10:31:7e:12:84:7f:43:ad:8b:67:82:09:6c:7d:e8:0f: fb:7a:f9:35:f5:8d:d6:15:a5:d1:0e:4b:2b:98:ce:f2:fa:46: 5b:a6:8e:3c:93:d5:23:11:37:5e:07:ef:0a:23:ea:be:28:18: 33:65:d6:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiL1R9GWZhrWBXjtnKQ/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNjczNWI3YTU1M2ExNjgwYzExYWRkM2U0OGMzNjM1YjUz OTc5Y2EwHhcNMjUxMjA1MjIwMTI0WhcNMjUxMjA2MjIwMTI0WjAzMTEwLwYDVQQD EyhjYmRlMGRkZGNiYTE1ZGY4MjRlYTc2YTk2ZWM2ZTE0MjQyZDhlNzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7eW320joLqN7XTTKRLqNphl+nv/ 0pdyo58EtGquOfZd8GZvMXGS12x6X9KMmB3fvu4AfqL/TbF5uEPBbZAp2gtRy0xT Z7eF44ILgtZnn/SzVR/AuouNGGjMEgzGYqbZ6XixzhfpB/edAah6/4fKq+MTnm13 5S4/mg1spiSAfy5O+cwK2vn8CtHh5omPGRdhiLaMpxdCuJrofU0qZG6fAiCX3G0N 67tbwivm2Uu3EGgXlGREyVQBofaoHUwc1pTF/u8vmWpQicZc2bqq+ZLsJBnWW2/M voLA+4zkPHAkrddY2F318eX37wJR6AnJhQrjAEGGKnp6CJE08exa10yy8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMveDd3LoV34JOp2qW7G4UJC2OdfMB8GA1UdIwQY MBaAFHpnNbelU6FoDBGt0+SMNjW1OXnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iYjI2NDctMDk1MC00NmE0LWI1NmQt MzRlYjY3YjQ3NWY2LzEvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iYjI2NDctMDk1MC00NmE0LWI1NmQtMzRlYjY3YjQ3NWY2 LzEvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjjs/1eT J8SK+Y+PAVJykRGX6VbovPwBa3l2q2xs0mJVCI53bjkQtfMkldG8FaOci1EGDaZ9 HuM2w285eOwQvjvPUJD9+uoG9i2xpP9T7heUTw3HRiSuAO2hEJi3XBJnLoK3hbWN tZtT+IMbPem3vX4CeTqY31bCyiU/GJvc47XDRDrcDZcKdU1+rQI3UEojk8fFb5oA BrdG9jwxmmdMAen8RvjvTNbHHVzDJciHNRphaOdryNOGmr4OGTIHMrWJW5lfSl/Q wq0QMX4ShH9DrYtngglsfegP+3r5NfWN1hWl0Q5LK5jO8vpGW6aOPJPVIxE3Xgfv CiPqvigYM2XWtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:48 2025 by rpki-client