This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft File: Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json) Hash identifier: Jq/m9bSPbeLMz/VYLOmQ3ZyxxTO64+FXhyVwVbTog/Q= Subject key identifier: 2E:BE:B0:A4:A9:19:0B:86:95:8D:6B:47:C1:DE:1A:16:02:AF:6B:B6 Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B Certificate issuer: /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b Certificate serial: 019AF0BEEC85680FB23DC18788DE3DD5DF88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft Manifest number: 069C Signing time: Fri 05 Dec 2025 23:00:35 +0000 Manifest this update: Fri 05 Dec 2025 23:00:35 +0000 Manifest next update: Sat 06 Dec 2025 23:00:35 +0000 Files and hashes: 1: 20TV3G_zqSwWD9jn85G0oHSYUWo.roa (hash: ln3cpOzlT6bLA9htFrfQ1ndKs7h6RkK+G1oPsD3H/Og=) 2: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: Qwxn9LDGJ/T2tx9lHk412MRcoldjyY+UAOoeOTKF6LA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ec:85:68:0f:b2:3d:c1:87:88:de:3d:d5:df:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b Validity Not Before: Dec 5 23:00:35 2025 GMT Not After : Dec 6 23:00:35 2025 GMT Subject: CN=2ebeb0a4a9190b86958d6b47c1de1a1602af6bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:ab:40:63:ba:b7:1f:41:c4:32:ca:82:fc: 65:22:ea:2c:48:48:58:c1:f3:ca:dd:5c:ce:93:94: a7:10:60:b9:13:92:88:f4:07:44:65:6f:3d:94:02: ae:89:ab:1f:c9:f8:23:6a:6a:4c:86:19:75:e9:7b: ab:54:ae:92:80:1f:d2:c8:1f:3a:3b:d8:24:1c:dc: e2:a0:f1:46:80:cd:40:31:e9:39:d8:77:be:ff:ab: 40:79:1f:6d:db:84:7f:73:d1:6b:ae:46:3c:15:ff: 3d:dc:f6:a6:78:b6:c2:af:1d:52:c7:4d:ec:6d:b2: bb:9c:f2:cd:d0:51:ee:e5:e4:3c:59:0e:29:47:fe: d7:bf:31:44:8e:51:b7:c0:ef:b6:d8:8f:be:26:2b: 6c:31:3e:bc:2c:56:2a:be:47:fa:14:e5:fb:9d:98: 6b:17:b4:cb:15:88:f4:f1:14:f3:7d:a3:f6:fd:31: a6:9f:9b:47:0f:be:e6:5d:5f:cc:09:b0:2a:ce:9b: 8a:7a:a0:2e:04:3f:29:5d:e2:23:61:24:cf:88:a0: 1e:27:cf:b7:8e:be:26:44:07:33:4b:5c:80:d3:f7: bc:93:3a:80:68:e7:bc:c3:49:1a:e0:8f:aa:e6:70: e5:28:06:b4:93:9a:12:99:0a:94:36:2e:96:c7:84: 7d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BE:B0:A4:A9:19:0B:86:95:8D:6B:47:C1:DE:1A:16:02:AF:6B:B6 X509v3 Authority Key Identifier: keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4b:8b:4e:60:11:33:8e:a6:f6:ce:78:4f:53:8e:24:d7:5f: 5b:8d:8b:b4:21:ba:0e:f9:fc:0e:a5:23:fa:a2:ca:ec:8b:b2: 3e:a6:c8:62:38:da:95:91:4c:aa:a8:51:49:3c:f8:06:06:2d: 0b:8e:2a:11:1c:a9:7c:db:dd:8b:79:47:b8:5a:7a:35:2e:36: d3:3f:2e:07:40:87:ec:ad:54:79:75:72:76:c8:1f:a3:4a:31: 2b:b5:dc:25:a3:59:78:00:24:6b:7d:37:49:e3:7b:22:f6:1e: ba:52:49:0a:ec:90:37:54:79:84:b5:17:58:df:d6:6d:d5:e8: 7b:78:3b:55:3d:c7:1a:f4:66:85:0c:a6:38:f6:4d:0d:49:31: f1:e7:32:d7:34:33:d0:fb:7c:e6:24:0c:47:02:9c:e5:3a:4b: db:c1:06:ba:6a:78:4f:95:21:c6:a2:28:5c:9c:5d:d8:69:25: c7:ec:01:f9:09:fc:2c:57:8a:f8:a3:35:4f:30:93:e7:de:e9: 4b:aa:98:68:71:89:1c:3b:31:bf:fe:f5:85:43:cf:8b:af:25: ed:cf:02:96:1d:dd:01:17:27:a5:d0:64:e7:4f:27:41:8e:01: d3:37:a1:51:b1:8f:5f:e1:f7:1a:cb:2a:73:db:47:06:c2:ed: 13:28:3b:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuyFaA+yPcGHiN491d+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjcxYmViYjhhYzNlMzBiNWQ3YzNkMjUzNzM1N2EzYjI1 NDZkNWIwHhcNMjUxMjA1MjMwMDM1WhcNMjUxMjA2MjMwMDM1WjAzMTEwLwYDVQQD EygyZWJlYjBhNGE5MTkwYjg2OTU4ZDZiNDdjMWRlMWExNjAyYWY2YmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKirQGO6tx9BxDLKgvxlIuosSEhY wfPK3VzOk5SnEGC5E5KI9AdEZW89lAKuiasfyfgjampMhhl16XurVK6SgB/SyB86 O9gkHNzioPFGgM1AMek52He+/6tAeR9t24R/c9FrrkY8Ff893PameLbCrx1Sx03s bbK7nPLN0FHu5eQ8WQ4pR/7XvzFEjlG3wO+22I++JitsMT68LFYqvkf6FOX7nZhr F7TLFYj08RTzfaP2/TGmn5tHD77mXV/MCbAqzpuKeqAuBD8pXeIjYSTPiKAeJ8+3 jr4mRAczS1yA0/e8kzqAaOe8w0ka4I+q5nDlKAa0k5oSmQqUNi6Wx4R9bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6+sKSpGQuGlY1rR8HeGhYCr2u2MB8GA1UdIwQY MBaAFBJnG+u4rD4wtdfD0lNzV6OyVG1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMt ZDQyODY5NzhhODBhLzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMtZDQyODY5NzhhODBh LzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0uLTmAR M46m9s54T1OOJNdfW42LtCG6Dvn8DqUj+qLK7IuyPqbIYjjalZFMqqhRSTz4BgYt C44qERypfNvdi3lHuFp6NS420z8uB0CH7K1UeXVydsgfo0oxK7XcJaNZeAAka303 SeN7IvYeulJJCuyQN1R5hLUXWN/WbdXoe3g7VT3HGvRmhQymOPZNDUkx8ecy1zQz 0Pt85iQMRwKc5TpL28EGump4T5UhxqIoXJxd2Gklx+wB+Qn8LFeK+KM1TzCT597p S6qYaHGJHDsxv/71hUPPi68l7c8Clh3dARcnpdBk508nQY4B0zehUbGPX+H3Gssq c9tHBsLtEyg7zA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:14:06 2025 by rpki-client