This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft File: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft (raw, json) Hash identifier: UotmtpOODH0W3ZHILtfSIGm7nbOUnJtadxrb3bV8+TI= Subject key identifier: 13:B7:17:4B:14:BC:0C:E1:99:A5:1C:E1:B4:01:8D:E5:40:CF:8A:4F Authority key identifier: 10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D Certificate issuer: /CN=10930d0049ba87004ccc9e5be526c350cc83fa8d Certificate serial: 019AF1D1937249F501748E54D4D0ED253616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 04:00:34 +0000 Manifest this update: Sat 06 Dec 2025 04:00:34 +0000 Manifest next update: Sun 07 Dec 2025 04:00:34 +0000 Files and hashes: 1: EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl (hash: eCIB931RaKbitHs8PY5awbVVQE3PkmcN1rRtYlVSxzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:93:72:49:f5:01:74:8e:54:d4:d0:ed:25:36:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10930d0049ba87004ccc9e5be526c350cc83fa8d Validity Not Before: Dec 6 04:00:34 2025 GMT Not After : Dec 7 04:00:34 2025 GMT Subject: CN=13b7174b14bc0ce199a51ce1b4018de540cf8a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:c3:45:bf:6b:04:67:19:d5:f5:3a:7c:70: 70:8f:fb:fa:5a:69:9a:cf:19:55:f2:a7:3d:d3:a0: b8:63:33:44:f1:02:f4:bc:06:85:f5:ce:f7:ac:ec: f4:46:7f:12:ed:de:04:c6:9c:47:34:3b:4e:d1:79: 1a:ae:fa:5d:46:97:0a:66:2a:c8:6c:21:9c:27:7c: 6c:3d:3c:a5:e2:96:01:ab:48:1d:20:28:04:f8:ba: a4:39:39:d0:72:2a:bf:27:36:6a:29:a0:82:3e:72: 58:bd:42:6a:30:20:a0:49:f6:ca:ec:30:59:8f:a6: 1e:e9:84:07:cc:e8:6b:aa:b0:1d:25:98:30:1b:16: 73:41:55:bb:70:02:d4:49:9a:5c:11:20:df:56:73: eb:3a:9a:23:12:c2:64:a5:01:93:ed:1c:e3:9c:75: 5a:81:0d:0d:c5:59:3d:72:dd:bf:37:6e:f6:bb:99: f1:09:6f:6e:87:2f:46:66:eb:e0:95:f4:0b:8f:db: 89:5c:54:06:2c:38:5e:9b:0b:92:01:bb:26:62:50: 44:1b:19:c9:bf:56:4f:f4:25:0a:7c:ce:e5:06:01: cc:d4:f1:84:4c:2b:b6:d5:74:a7:48:cb:1f:55:4f: a7:78:87:c1:af:88:b6:68:4f:29:31:64:2d:95:cb: e0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B7:17:4B:14:BC:0C:E1:99:A5:1C:E1:B4:01:8D:E5:40:CF:8A:4F X509v3 Authority Key Identifier: keyid:10:93:0D:00:49:BA:87:00:4C:CC:9E:5B:E5:26:C3:50:CC:83:FA:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2da290-4ebe-42ad-bc46-572edb570f7e/1/EJMNAEm6hwBMzJ5b5SbDUMyD-o0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0b:85:79:78:1c:3b:81:9d:8f:b0:89:de:01:88:39:3d:82: 48:96:aa:06:02:bf:39:9d:7b:94:ed:96:4a:e4:fc:f5:a7:9f: d2:06:ad:79:48:b7:fc:d1:a3:eb:95:15:77:bc:ca:36:29:f3: b4:04:31:fd:3a:a8:51:b8:1a:ab:72:f0:1e:11:dd:19:52:5f: 9b:bc:a3:99:73:2d:8e:7a:ec:ae:a7:c6:98:c6:4b:6a:ff:6c: 01:99:05:43:c7:bb:65:03:5b:7a:0b:71:4c:cc:f9:65:1b:d5: 23:b8:e8:c7:47:e1:72:1a:06:10:4f:28:df:08:4f:b9:7e:6d: ad:88:c1:81:bc:c3:02:51:28:29:e8:b8:1f:ae:bc:1f:4c:f3: 6e:12:d5:e8:9a:a2:1f:54:5c:ba:0e:e3:11:c6:e5:e5:c6:d0: 9f:01:e0:9c:f5:ec:a6:53:35:f1:73:5c:ea:d9:89:16:90:21: 40:fa:d2:e9:79:dd:68:da:77:10:39:26:b4:c6:3b:39:57:2a: 88:2c:70:89:e3:36:24:3b:d8:7e:37:cf:af:da:9d:5c:97:2d: 68:b9:40:79:3b:a7:01:02:31:42:d7:32:49:1d:69:a3:54:77: 6e:80:02:43:2c:c8:69:c8:8f:ab:6e:70:ea:ea:3d:b5:9f:21: 37:59:56:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZNySfUBdI5U1NDtJTYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOTMwZDAwNDliYTg3MDA0Y2NjOWU1YmU1MjZjMzUwY2M4 M2ZhOGQwHhcNMjUxMjA2MDQwMDM0WhcNMjUxMjA3MDQwMDM0WjAzMTEwLwYDVQQD EygxM2I3MTc0YjE0YmMwY2UxOTlhNTFjZTFiNDAxOGRlNTQwY2Y4YTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQLDRb9rBGcZ1fU6fHBwj/v6Wmma zxlV8qc906C4YzNE8QL0vAaF9c73rOz0Rn8S7d4ExpxHNDtO0XkarvpdRpcKZirI bCGcJ3xsPTyl4pYBq0gdICgE+LqkOTnQciq/JzZqKaCCPnJYvUJqMCCgSfbK7DBZ j6Ye6YQHzOhrqrAdJZgwGxZzQVW7cALUSZpcESDfVnPrOpojEsJkpQGT7RzjnHVa gQ0NxVk9ct2/N272u5nxCW9uhy9GZuvglfQLj9uJXFQGLDhemwuSAbsmYlBEGxnJ v1ZP9CUKfM7lBgHM1PGETCu21XSnSMsfVU+neIfBr4i2aE8pMWQtlcvgpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBO3F0sUvAzhmaUc4bQBjeVAz4pPMB8GA1UdIwQY MBaAFBCTDQBJuocATMyeW+Umw1DMg/qNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUpNTkFFbTZod0JNeko1YjVTYkRVTXlELW8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yZGEyOTAtNGViZS00MmFkLWJjNDYt NTcyZWRiNTcwZjdlLzEvRUpNTkFFbTZod0JNeko1YjVTYkRVTXlELW8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yZGEyOTAtNGViZS00MmFkLWJjNDYtNTcyZWRiNTcwZjdl LzEvRUpNTkFFbTZod0JNeko1YjVTYkRVTXlELW8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAuFeXgc O4Gdj7CJ3gGIOT2CSJaqBgK/OZ17lO2WSuT89aef0gateUi3/NGj65UVd7zKNinz tAQx/TqoUbgaq3LwHhHdGVJfm7yjmXMtjnrsrqfGmMZLav9sAZkFQ8e7ZQNbegtx TMz5ZRvVI7jox0fhchoGEE8o3whPuX5trYjBgbzDAlEoKei4H668H0zzbhLV6Jqi H1Rcug7jEcbl5cbQnwHgnPXsplM18XNc6tmJFpAhQPrS6XndaNp3EDkmtMY7OVcq iCxwieM2JDvYfjfPr9qdXJctaLlAeTunAQIxQtcySR1po1R3boACQyzIaciPq25w 6uo9tZ8hN1lWCw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:04 2025 by rpki-client