This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: WCYW41i9gf7BuNWH6AXrClcC3D6vzsEQ59d73qfS8go= Subject key identifier: 08:A5:34:72:01:81:9A:BD:91:95:D3:14:30:14:6C:6D:74:F9:CE:00 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019AF2774FFE88BE8D05132AB3CD4120FA5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 1783 Signing time: Sat 06 Dec 2025 07:01:36 +0000 Manifest this update: Sat 06 Dec 2025 07:01:36 +0000 Manifest next update: Sun 07 Dec 2025 07:01:36 +0000 Files and hashes: 1: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=) 2: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=) 3: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: msi4h22u5Gj/maNZksZYk1KXrLC5i1SE5cDM+5TYRGk=) 4: Ex2R8TC5ca7BapiGbOlEw7RTF7Y.roa (hash: Zmas/V+oKAZuTjJ6fOsrkdvL5jU6mJ35z5uKhHphtzs=) 5: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=) 6: KN3USh-JJW9-jhGDxiVWDhsPPA0.roa (hash: Xi9JL3Kg6iH7DV1CRgQBlVdsSYD/fpvtM7GyTmDdH4Q=) 7: PA9a7mmxzeJuoTmmqOPzfa0EJeU.roa (hash: cxrAyolBCBdgGmcgbRXCGM/uyRcD+ekmyS1D3d9CyCE=) 8: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=) 9: SVDba3c5JwKNT_9O80xlrgywUPo.roa (hash: y8/CxIFfpyDYuv3uKMMuzQkteVC7KubD/FZFFVGPFkE=) 10: XAelOV_MbHen1Ypn-fcsfbxuz5Q.roa (hash: in8EeTTtSOWFvv18iCMa8aOKJrJKg1oqYKWnx05lArQ=) 11: b2ii9Ml7qpC36RUpZ8hKOXAe8yM.roa (hash: /Y0ueq9Pn525s9PDcY0SvkDIxOuDN0k+WvttGHuIvJE=) 12: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=) 13: gxlbepFDizY30e_VDf9e1RvjWgM.roa (hash: 6bnUAoZDd9UjKUbCDoEZob89bP3Q8i0Y7YskzssCFno=) 14: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=) 15: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=) 16: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:4f:fe:88:be:8d:05:13:2a:b3:cd:41:20:fa:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Dec 6 07:01:36 2025 GMT Not After : Dec 7 07:01:36 2025 GMT Subject: CN=08a5347201819abd9195d31430146c6d74f9ce00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:04:7f:be:eb:e4:ea:a5:9b:a0:00:16:12:60: 90:a3:3d:2a:a4:ba:0f:08:e4:df:5e:7d:b2:1e:ba: dc:e6:2e:33:bd:d9:83:59:06:21:3b:29:1b:27:28: ea:88:83:3b:72:85:5a:12:7d:00:03:76:93:60:0b: 66:bc:45:a9:c4:f0:d8:ee:8f:4b:d6:95:6b:42:b4: 83:7e:eb:f2:2e:30:a2:12:00:a3:24:23:1c:c4:34: f7:41:f9:cb:17:33:d4:f0:9a:c4:9d:d6:bd:bd:00: 39:d3:3b:bc:13:0c:52:07:00:da:8b:28:b5:d2:26: ff:62:b2:2d:f1:15:51:f1:70:c4:78:35:71:8d:13: 05:5a:ad:27:3c:7e:7a:79:3a:75:e8:1f:ea:7c:97: 2a:1a:f9:2e:2b:a2:3c:21:6a:41:c6:17:a1:9a:1d: d5:39:8b:75:32:ed:10:6b:c6:d1:14:db:7d:e1:cb: dd:88:8b:e8:19:78:82:1b:47:8f:8e:16:a8:d8:56: e7:dd:b0:a6:de:77:05:04:ea:78:85:48:11:ca:2f: 7e:1c:75:21:b7:ed:62:58:53:77:7c:10:7a:18:3b: cc:59:83:d4:ad:70:58:db:06:76:a0:ef:24:e4:c4: 84:b1:d4:e8:f1:9d:15:4d:af:5e:88:8e:2e:ea:5f: 3b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A5:34:72:01:81:9A:BD:91:95:D3:14:30:14:6C:6D:74:F9:CE:00 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:04:48:27:10:a3:dd:ad:1f:8b:30:76:4b:35:bb:4b:fc:db: 65:13:36:15:ea:c9:bb:ed:a8:f9:3b:07:57:a4:8f:5f:88:c2: 35:ce:10:13:00:e1:58:45:59:4d:56:0a:df:c3:ed:19:b7:eb: ce:df:eb:a8:27:80:82:91:21:36:f7:53:4e:fd:d3:31:65:89: 8d:36:99:36:aa:71:41:00:35:47:7f:ff:73:57:e1:bf:07:4d: a7:07:3c:ef:0d:d0:10:20:39:d5:b2:cd:1e:2f:87:0f:a4:c4: 29:c2:10:31:e8:2c:55:88:19:46:b1:d4:9f:86:fb:32:7b:f1: a6:14:b2:cc:9c:b5:61:b3:a6:6e:d9:be:dc:8e:6f:29:d0:60: 86:a3:54:c5:7c:b1:c8:ec:db:c2:85:4c:08:ca:e0:43:1d:ec: df:40:8c:12:b0:60:da:cb:42:23:45:39:f8:64:86:6b:74:db: 13:55:9c:79:64:6a:2b:22:db:8f:0d:b5:56:a1:1e:d4:cb:55: 7b:df:f0:7f:1f:58:4b:2d:3f:48:59:3d:df:e6:9f:fb:f1:e4: a9:76:e8:66:a8:2b:d8:f0:c5:de:30:e7:30:16:d5:61:1f:68: a3:dc:b4:ac:67:66:49:7e:b2:8c:0f:51:96:cf:70:1d:67:9d: fa:56:53:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd0/+iL6NBRMqs81BIPpbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjUxMjA2MDcwMTM2WhcNMjUxMjA3MDcwMTM2WjAzMTEwLwYDVQQD EygwOGE1MzQ3MjAxODE5YWJkOTE5NWQzMTQzMDE0NmM2ZDc0ZjljZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugR/vuvk6qWboAAWEmCQoz0qpLoP COTfXn2yHrrc5i4zvdmDWQYhOykbJyjqiIM7coVaEn0AA3aTYAtmvEWpxPDY7o9L 1pVrQrSDfuvyLjCiEgCjJCMcxDT3QfnLFzPU8JrEnda9vQA50zu8EwxSBwDaiyi1 0ib/YrIt8RVR8XDEeDVxjRMFWq0nPH56eTp16B/qfJcqGvkuK6I8IWpBxhehmh3V OYt1Mu0Qa8bRFNt94cvdiIvoGXiCG0ePjhao2Fbn3bCm3ncFBOp4hUgRyi9+HHUh t+1iWFN3fBB6GDvMWYPUrXBY2wZ2oO8k5MSEsdTo8Z0VTa9eiI4u6l87OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAilNHIBgZq9kZXTFDAUbG10+c4AMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwRIJxCj 3a0fizB2SzW7S/zbZRM2FerJu+2o+TsHV6SPX4jCNc4QEwDhWEVZTVYK38PtGbfr zt/rqCeAgpEhNvdTTv3TMWWJjTaZNqpxQQA1R3//c1fhvwdNpwc87w3QECA51bLN Hi+HD6TEKcIQMegsVYgZRrHUn4b7MnvxphSyzJy1YbOmbtm+3I5vKdBghqNUxXyx yOzbwoVMCMrgQx3s30CMErBg2stCI0U5+GSGa3TbE1WceWRqKyLbjw21VqEe1MtV e9/wfx9YSy0/SFk93+af+/HkqXboZqgr2PDF3jDnMBbVYR9oo9y0rGdmSX6yjA9R ls9wHWed+lZT2g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:23 2025 by rpki-client