This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft File: EmCsDOT0xtDo2rrIOva4aYvEjpw.mft (raw, json) Hash identifier: KBKqqU2xf6IKj+hI3c2SbOWJRFSSjf2PRYY2wmA5aLk= Subject key identifier: A0:DE:B9:45:3A:E1:4F:3B:81:B1:F8:6F:B9:1E:D7:BD:2A:A0:BC:D2 Authority key identifier: 12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C Certificate issuer: /CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c Certificate serial: 019AF49C0973E931E0863458DA5ED9FE709E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft Manifest number: 017E Signing time: Sat 06 Dec 2025 17:00:57 +0000 Manifest this update: Sat 06 Dec 2025 17:00:57 +0000 Manifest next update: Sun 07 Dec 2025 17:00:57 +0000 Files and hashes: 1: EmCsDOT0xtDo2rrIOva4aYvEjpw.crl (hash: ntjLOUN9tE8wBIYYSTxkKqiLxAPZhfStk7e2MNdsacM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:09:73:e9:31:e0:86:34:58:da:5e:d9:fe:70:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c Validity Not Before: Dec 6 17:00:57 2025 GMT Not After : Dec 7 17:00:57 2025 GMT Subject: CN=a0deb9453ae14f3b81b1f86fb91ed7bd2aa0bcd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:38:d2:0c:1a:93:3f:b4:d4:f5:49:46:d6: af:f6:c6:5a:26:6e:99:5e:90:69:c0:68:45:3f:04: af:af:25:46:db:fc:09:f4:1f:66:14:6c:c0:0e:57: 76:3f:69:8d:4c:a4:fa:54:5c:60:03:27:85:73:c9: 6e:3f:22:d7:e8:e9:1e:16:f9:5e:eb:ba:b7:63:ef: 58:0d:29:54:91:21:64:b4:da:9f:e8:af:13:89:1d: af:4d:12:16:b3:70:46:75:92:cc:9b:ad:1b:03:cd: fe:78:d3:b9:66:7f:7d:c2:e6:43:5a:88:a8:ed:ff: d3:76:9f:2a:44:24:fc:73:8e:f7:a1:3c:1a:6e:11: da:ba:4b:ea:de:65:23:32:3a:7d:2d:76:5a:26:b8: c2:73:27:99:69:a3:f1:f2:c5:a9:23:94:f7:34:cd: 65:8a:bb:72:bd:64:c2:a5:33:14:93:7b:0a:5f:f8: 6c:87:a5:70:b5:e4:60:86:98:fd:fc:ad:1f:83:b9: 3a:c1:e1:ff:f7:86:83:f7:f3:cf:36:f2:d1:36:2e: 8c:db:ae:0e:cf:aa:b5:33:2f:b9:e3:78:5b:dd:8b: a5:8b:01:88:97:d0:42:96:51:a3:87:af:6e:cd:d0: 40:c7:7e:7d:b9:32:6f:e0:92:b3:83:9b:1c:58:e5: 10:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DE:B9:45:3A:E1:4F:3B:81:B1:F8:6F:B9:1E:D7:BD:2A:A0:BC:D2 X509v3 Authority Key Identifier: keyid:12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:51:40:31:32:71:69:c9:8d:2e:18:0d:b1:65:2e:40:8f:80: 77:20:f4:bb:03:83:bf:e2:47:62:6e:9c:d3:65:32:98:d3:a3: a3:e5:51:d8:6a:7d:a5:c6:18:fb:00:da:79:ca:a7:69:a6:eb: 68:cb:0d:5e:c2:d9:dc:90:ef:38:fd:54:4e:fb:ce:3b:97:da: 79:a2:44:e7:fa:2a:f2:61:71:ba:2f:71:45:94:53:6a:50:32: 7d:ac:77:50:8c:0f:0a:96:a7:4d:c7:54:d7:50:24:07:3e:e3: 12:93:0e:bb:cb:b4:51:4f:b5:d6:8b:5b:0d:99:9e:16:fb:4d: cd:96:b7:c7:dc:3a:8a:fd:66:5d:f8:10:d7:c2:49:d1:00:6e: 7a:0b:39:4d:28:4c:19:3e:07:60:8e:2e:1b:ff:42:e7:8e:40: 6d:90:9c:e9:0c:86:ec:50:be:be:b4:b5:d5:4d:ce:de:0b:42: b8:a8:e3:4a:ff:64:80:fa:e9:bd:e5:e7:3b:dd:3f:01:f7:86: c8:a6:cf:8a:be:81:f9:44:8e:51:fa:22:31:f6:ad:d7:f4:74: c0:9b:80:8d:04:64:09:93:79:bc:6f:54:fc:d0:c6:9b:fb:91: c9:71:7f:40:ba:54:a3:ac:17:2a:b7:a2:87:1e:de:65:cf:26: 23:0c:35:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAlz6THghjRY2l7Z/nCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjBhYzBjZTRmNGM2ZDBlOGRhYmFjODNhZjZiODY5OGJj NDhlOWMwHhcNMjUxMjA2MTcwMDU3WhcNMjUxMjA3MTcwMDU3WjAzMTEwLwYDVQQD EyhhMGRlYjk0NTNhZTE0ZjNiODFiMWY4NmZiOTFlZDdiZDJhYTBiY2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbs40gwakz+01PVJRtav9sZaJm6Z XpBpwGhFPwSvryVG2/wJ9B9mFGzADld2P2mNTKT6VFxgAyeFc8luPyLX6OkeFvle 67q3Y+9YDSlUkSFktNqf6K8TiR2vTRIWs3BGdZLMm60bA83+eNO5Zn99wuZDWoio 7f/Tdp8qRCT8c473oTwabhHaukvq3mUjMjp9LXZaJrjCcyeZaaPx8sWpI5T3NM1l irtyvWTCpTMUk3sKX/hsh6VwteRghpj9/K0fg7k6weH/94aD9/PPNvLRNi6M264O z6q1My+543hb3YuliwGIl9BCllGjh69uzdBAx359uTJv4JKzg5scWOUQNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDeuUU64U87gbH4b7ke170qoLzSMB8GA1UdIwQY MBaAFBJgrAzk9MbQ6Nq6yDr2uGmLxI6cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1Dc0RPVDB4dERvMnJySU92YTRhWXZFanB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NTFhMWYtMTU0Mi00NDNiLWE1ZjQt YjA2ZGFjMzU3OTY2LzEvRW1Dc0RPVDB4dERvMnJySU92YTRhWXZFanB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi81NTFhMWYtMTU0Mi00NDNiLWE1ZjQtYjA2ZGFjMzU3OTY2 LzEvRW1Dc0RPVDB4dERvMnJySU92YTRhWXZFanB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVFAMTJx acmNLhgNsWUuQI+AdyD0uwODv+JHYm6c02UymNOjo+VR2Gp9pcYY+wDaecqnaabr aMsNXsLZ3JDvOP1UTvvOO5faeaJE5/oq8mFxui9xRZRTalAyfax3UIwPCpanTcdU 11AkBz7jEpMOu8u0UU+11otbDZmeFvtNzZa3x9w6iv1mXfgQ18JJ0QBuegs5TShM GT4HYI4uG/9C545AbZCc6QyG7FC+vrS11U3O3gtCuKjjSv9kgPrpveXnO90/AfeG yKbPir6B+USOUfoiMfat1/R0wJuAjQRkCZN5vG9U/NDGm/uRyXF/QLpUo6wXKrei hx7eZc8mIww1uQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:21:22 2025 by rpki-client