This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft File: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft (raw, json) Hash identifier: IQMUIL+QkThA3uG95ExP7C3nEEZFDImUj9KsKBQnowE= Subject key identifier: 0A:EE:A4:F2:25:38:2C:A4:54:57:3F:31:75:47:23:3F:BD:45:02:68 Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4 Certificate issuer: /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4 Certificate serial: 019AF2ADC1CD869E37CE5DAF7C2D9A168A96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft Manifest number: 15A5 Signing time: Sat 06 Dec 2025 08:01:04 +0000 Manifest this update: Sat 06 Dec 2025 08:01:04 +0000 Manifest next update: Sun 07 Dec 2025 08:01:04 +0000 Files and hashes: 1: 3aNd9eZsJolPAPy2WUcnIA679FQ.roa (hash: eblt98UAYSnzgUqaK1ZwDyinlKt8BByqD/nttuJnoYY=) 2: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl (hash: 3wFpjHSqehsPvbvql1B8PLkKrgu+KlGumw0G808UUuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c1:cd:86:9e:37:ce:5d:af:7c:2d:9a:16:8a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4 Validity Not Before: Dec 6 08:01:04 2025 GMT Not After : Dec 7 08:01:04 2025 GMT Subject: CN=0aeea4f225382ca454573f317547233fbd450268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a5:44:4b:8b:a2:27:ea:dc:25:c9:a1:97:47: 2a:0f:46:a3:0a:f3:af:7b:1a:82:17:af:ef:36:a7: 82:c9:a1:02:1f:52:2d:83:71:17:ae:74:73:88:c2: 42:35:e0:d4:0a:64:31:82:36:29:8f:90:02:8c:68: e8:80:08:50:2a:ae:98:49:bb:d8:57:70:a9:e0:75: 0d:1b:ca:9f:33:30:9e:bc:f6:c4:fa:db:a5:6a:d2: 63:1e:dd:69:4b:24:4b:77:29:29:38:34:dc:b0:42: 49:9a:4a:b4:97:38:d4:20:52:dd:56:61:9c:5b:25: ac:a9:fb:c2:bc:a3:ea:c0:aa:09:a5:0a:a3:ff:7c: 99:41:40:69:41:f9:0e:7a:97:43:6e:d0:49:ac:09: eb:61:e9:43:a7:b5:07:b0:00:91:95:34:42:86:d2: 2a:51:99:c2:08:74:d1:7f:aa:12:5e:39:ce:1d:e1: 1b:62:aa:51:7d:b8:32:e1:c5:cb:3c:ed:cd:07:f5: 0a:75:f2:3b:56:0a:b6:1d:bf:fd:eb:25:fc:e0:71: 41:67:78:e9:ce:4d:0d:f8:69:09:79:0d:55:19:d7: db:42:42:f2:88:1f:0d:5c:48:af:89:d8:75:28:db: f1:ce:36:b4:22:fd:7f:a0:df:d5:cc:38:a1:13:f1: 6e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EE:A4:F2:25:38:2C:A4:54:57:3F:31:75:47:23:3F:BD:45:02:68 X509v3 Authority Key Identifier: keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:20:f8:b8:1b:7b:95:04:cb:00:f9:08:bc:c4:f7:79:1b:ed: 19:91:8d:9f:7f:d0:a7:31:2e:34:08:a6:bc:03:90:9c:55:51: 08:5e:c8:8d:e1:a0:b7:eb:ab:f9:80:f1:d8:cd:58:8c:19:78: 62:47:46:eb:5d:a4:cf:1b:1a:cb:cc:dc:37:39:3e:6a:d8:f1: 11:af:33:66:c9:1f:bb:62:4d:c4:f7:99:32:8b:4a:7a:a6:e8: 4e:d9:c3:93:0a:b8:62:6d:15:22:15:3d:25:dd:64:af:b8:8e: 98:7d:c7:87:c7:fd:27:ff:01:96:eb:71:ab:fd:df:61:8d:6e: dc:36:4d:50:85:0f:77:f0:47:c2:bb:cc:d3:17:58:d1:77:7c: fb:2d:04:76:3a:61:52:93:70:2f:ad:ff:6b:85:61:66:73:c1: 41:b0:3e:b1:22:d4:1e:4a:48:be:73:4e:b7:7a:87:8b:ff:48: 6a:3c:10:67:21:ff:04:51:15:0b:11:74:c6:7c:d5:f0:0f:f3: 29:03:74:90:de:3e:67:9f:90:73:d7:49:f5:e0:30:bb:1d:14: 62:bd:c4:c9:ec:f7:ba:52:f4:b9:2b:1d:7a:ed:1d:d2:ae:80: 6e:04:d7:88:09:1f:1a:95:d8:dd:b3:ea:82:61:51:10:23:1d: 4f:7c:9c:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcHNhp43zl2vfC2aFoqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjJmN2RhOGZlZTVkMmE3YmNkZDQwMTRhNzBhOTI3ZGI0 OTlmYTQwHhcNMjUxMjA2MDgwMTA0WhcNMjUxMjA3MDgwMTA0WjAzMTEwLwYDVQQD EygwYWVlYTRmMjI1MzgyY2E0NTQ1NzNmMzE3NTQ3MjMzZmJkNDUwMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aVES4uiJ+rcJcmhl0cqD0ajCvOv exqCF6/vNqeCyaECH1Itg3EXrnRziMJCNeDUCmQxgjYpj5ACjGjogAhQKq6YSbvY V3Cp4HUNG8qfMzCevPbE+tulatJjHt1pSyRLdykpODTcsEJJmkq0lzjUIFLdVmGc WyWsqfvCvKPqwKoJpQqj/3yZQUBpQfkOepdDbtBJrAnrYelDp7UHsACRlTRChtIq UZnCCHTRf6oSXjnOHeEbYqpRfbgy4cXLPO3NB/UKdfI7Vgq2Hb/96yX84HFBZ3jp zk0N+GkJeQ1VGdfbQkLyiB8NXEividh1KNvxzja0Iv1/oN/VzDihE/FuCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArupPIlOCykVFc/MXVHIz+9RQJoMB8GA1UdIwQY MBaAFBJi99qP7l0qe83UAUpwqSfbSZ+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAt YTYxMGQ3NWMzMmUyLzEvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAtYTYxMGQ3NWMzMmUy LzEvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCD4uBt7 lQTLAPkIvMT3eRvtGZGNn3/QpzEuNAimvAOQnFVRCF7IjeGgt+ur+YDx2M1YjBl4 YkdG612kzxsay8zcNzk+atjxEa8zZskfu2JNxPeZMotKeqboTtnDkwq4Ym0VIhU9 Jd1kr7iOmH3Hh8f9J/8Blutxq/3fYY1u3DZNUIUPd/BHwrvM0xdY0Xd8+y0Edjph UpNwL63/a4VhZnPBQbA+sSLUHkpIvnNOt3qHi/9IajwQZyH/BFEVCxF0xnzV8A/z KQN0kN4+Z5+Qc9dJ9eAwux0UYr3Eyez3ulL0uSsdeu0d0q6AbgTXiAkfGpXY3bPq gmFRECMdT3ycKA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:58 2025 by rpki-client