This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft File: eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json) Hash identifier: 1qHTQU5IhpdOpRi/P+l3BrcDjTlWwiKdXLBjy5Qr8o4= Subject key identifier: 91:CD:B5:F0:3F:E9:2B:30:23:79:C1:D1:4E:23:57:D1:0A:35:22:7B Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2 Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2 Certificate serial: 019AF19BA259FD1F15A543C180B47C829D31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft Manifest number: 0C0B Signing time: Sat 06 Dec 2025 03:01:39 +0000 Manifest this update: Sat 06 Dec 2025 03:01:39 +0000 Manifest next update: Sun 07 Dec 2025 03:01:39 +0000 Files and hashes: 1: 5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa (hash: voEtz6mEruRpxmdJ50z2YHPNPHZIPj+18ktBBGi8uuc=) 2: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: PxMeHnG3g7+WakhlV/ZQMnuL1zA4JTGTTVe8owt5ugc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a2:59:fd:1f:15:a5:43:c1:80:b4:7c:82:9d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2 Validity Not Before: Dec 6 03:01:39 2025 GMT Not After : Dec 7 03:01:39 2025 GMT Subject: CN=91cdb5f03fe92b302379c1d14e2357d10a35227b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:59:a5:a9:ca:e0:88:a6:bc:54:f5:25:6b:cf: 25:f5:72:97:31:57:86:c0:e7:f6:7b:8b:f4:84:f5: fe:e8:26:91:16:af:4f:c9:7c:fb:22:41:97:c2:ac: b4:43:50:e7:e3:d0:4f:df:69:d1:28:15:a2:fc:e7: 4e:c4:30:40:c6:b4:49:82:5e:37:70:57:3a:54:94: 85:51:30:13:f8:38:f9:1f:52:5d:02:52:66:ac:e9: 08:72:eb:15:b2:85:3f:8a:f5:7c:b4:90:03:59:2f: 10:29:ce:82:43:35:f0:f7:aa:f9:8e:64:ef:c3:12: c8:1d:77:c8:41:6f:9c:f5:0c:c3:98:c1:01:cd:1d: 93:94:4c:94:b6:8f:de:b8:f4:c7:29:98:dc:ea:b1: e1:d6:8a:7a:53:c8:ab:fd:ff:ca:ce:fe:0e:08:e4: 13:bd:e5:66:8b:2a:19:4d:c1:0f:c9:98:03:96:96: 54:ba:68:1b:bd:3c:92:d6:0b:5e:b3:12:c9:19:99: b6:3e:46:07:0f:27:79:6a:57:7f:d5:de:3a:40:61: a8:d5:b6:01:35:15:09:8c:c8:06:8d:fb:69:a5:84: 09:7c:b6:9d:fb:50:32:4e:70:ef:7c:95:1e:15:95: ea:ee:f2:34:60:98:6d:31:98:72:e8:bf:00:29:6b: 7e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CD:B5:F0:3F:E9:2B:30:23:79:C1:D1:4E:23:57:D1:0A:35:22:7B X509v3 Authority Key Identifier: keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ce:ef:1f:98:c0:cf:bd:76:60:46:a7:8e:85:cd:41:ec:4a: 46:ed:12:02:74:0c:f3:cd:80:a2:60:7e:58:ee:24:a1:3a:ad: b2:e9:5c:b4:38:f6:59:93:72:80:5d:51:51:30:4e:52:c3:e9: 35:91:07:d9:50:89:bc:f2:77:5c:98:00:11:17:b6:99:e7:08: cc:35:37:be:54:63:be:4f:d3:f8:c6:3d:83:3c:0c:f9:95:af: 14:ca:14:84:5c:f6:72:f5:de:75:d9:ec:c6:f4:9d:44:39:7f: 0f:3c:dd:08:fc:17:08:9b:ba:82:de:ca:03:99:e8:52:ec:0a: 33:03:2c:ec:ea:16:4c:23:25:f8:32:a8:8e:d8:af:21:d9:56: 29:80:4e:6c:6a:38:52:43:d9:fb:5d:a4:b4:3e:31:e1:4f:4c: d5:03:74:5e:40:37:77:85:8c:31:a1:2a:32:17:d7:1e:13:04: b7:d9:67:08:0a:f6:1f:82:66:fe:f6:44:cd:71:28:94:9e:c2: 3d:f4:1d:a9:c9:e4:1d:e4:a7:b2:7f:12:b6:bc:a4:22:65:6d: 1b:65:8a:79:c5:b9:2d:0e:2c:11:8a:58:05:41:bf:e4:96:4e: 81:af:93:72:bc:ae:03:ef:6d:b5:e3:e0:0a:ed:d0:5a:d2:bb: ba:73:eb:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6JZ/R8VpUPBgLR8gp0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4Y2I0OTc1YjkzYjQ1OTM1NzYwNDgzMzg1NjRlYTNlYjA5 ZGM4ZTIwHhcNMjUxMjA2MDMwMTM5WhcNMjUxMjA3MDMwMTM5WjAzMTEwLwYDVQQD Eyg5MWNkYjVmMDNmZTkyYjMwMjM3OWMxZDE0ZTIzNTdkMTBhMzUyMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FmlqcrgiKa8VPUla88l9XKXMVeG wOf2e4v0hPX+6CaRFq9PyXz7IkGXwqy0Q1Dn49BP32nRKBWi/OdOxDBAxrRJgl43 cFc6VJSFUTAT+Dj5H1JdAlJmrOkIcusVsoU/ivV8tJADWS8QKc6CQzXw96r5jmTv wxLIHXfIQW+c9QzDmMEBzR2TlEyUto/euPTHKZjc6rHh1op6U8ir/f/Kzv4OCOQT veVmiyoZTcEPyZgDlpZUumgbvTyS1gtesxLJGZm2PkYHDyd5ald/1d46QGGo1bYB NRUJjMgGjftppYQJfLad+1AyTnDvfJUeFZXq7vI0YJhtMZhy6L8AKWt+fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHNtfA/6SswI3nB0U4jV9EKNSJ7MB8GA1UdIwQY MBaAFHjLSXW5O0WTV2BIM4Vk6j6wncjiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUt ZmE3OTg4YjcxNGJjLzEvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUtZmE3OTg4YjcxNGJj LzEvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApM7vH5jA z712YEanjoXNQexKRu0SAnQM882AomB+WO4koTqtsulctDj2WZNygF1RUTBOUsPp NZEH2VCJvPJ3XJgAERe2mecIzDU3vlRjvk/T+MY9gzwM+ZWvFMoUhFz2cvXeddns xvSdRDl/DzzdCPwXCJu6gt7KA5noUuwKMwMs7OoWTCMl+DKojtivIdlWKYBObGo4 UkPZ+12ktD4x4U9M1QN0XkA3d4WMMaEqMhfXHhMEt9lnCAr2H4Jm/vZEzXEolJ7C PfQdqcnkHeSnsn8StrykImVtG2WKecW5LQ4sEYpYBUG/5JZOga+TcryuA+9ttePg Cu3QWtK7unPrBw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:54 2025 by rpki-client