This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json) Hash identifier: B1uW1tqc3DtelR1LXs1Me7LVkEP7Q/kqXhG3WRg7mLU= Subject key identifier: 44:F1:0F:1B:70:47:F5:1F:6F:9F:55:07:15:F7:81:D3:E9:FD:0B:C0 Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91 Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291 Certificate serial: 019AF23FE96722C76AE65EF1F0F89CBC5320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft Manifest number: 06E6 Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: EGprX42vt6XNgU2MdFtCKiQycKFp6Ac1ni22/UAz4zI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e9:67:22:c7:6a:e6:5e:f1:f0:f8:9c:bc:53:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291 Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=44f10f1b7047f51f6f9f550715f781d3e9fd0bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a7:84:d4:06:9d:cd:e7:bc:06:56:49:73:b9: df:44:58:a8:e1:4e:a7:1b:23:f8:d6:fa:26:15:3e: fa:87:20:e8:e9:31:a8:c8:76:97:6c:ca:f9:19:9b: 7f:a3:60:cc:51:8c:6a:5c:49:f8:04:27:c7:2f:ba: b9:c1:7b:13:da:1a:17:41:02:7c:95:e5:ba:33:ec: a6:3d:16:e7:5e:ef:10:5a:66:49:2c:fb:14:9d:fd: 79:08:45:d6:03:ef:67:1a:48:8c:94:d9:a7:d0:37: a0:4e:aa:c9:3f:b3:94:80:7d:be:07:ca:d8:00:40: f0:26:57:61:bd:2a:47:be:2a:48:54:28:57:e8:0a: 58:3b:61:93:f2:dd:f2:ac:f9:35:b6:2e:8e:41:39: dc:4b:a8:e6:9a:94:18:c5:0f:7e:ff:d7:eb:ad:6b: 04:89:3b:9e:ab:08:e8:b2:51:92:d9:1d:9a:df:7c: 34:85:65:dc:78:75:68:a9:27:e5:8a:d6:46:fe:dc: 9c:14:d5:c5:3b:ad:b8:52:e9:58:a1:df:c4:0e:d6: a5:35:06:ab:b7:3a:f4:e0:d1:66:6b:8c:2b:18:10: 98:f1:0a:1d:50:72:7d:bc:d6:bd:c4:cf:0c:f0:86: ec:de:76:0c:06:e3:f2:68:e3:c3:82:0d:67:74:c0: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F1:0F:1B:70:47:F5:1F:6F:9F:55:07:15:F7:81:D3:E9:FD:0B:C0 X509v3 Authority Key Identifier: keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:5f:88:73:df:7b:13:e8:ce:f6:22:40:7a:9d:ed:ee:9c:76: 73:63:9e:58:fd:6f:29:8a:3b:a7:34:9f:a4:02:4f:8e:56:27: 45:14:d9:46:bb:8d:8f:0c:57:2e:bf:bc:5a:51:db:28:81:6b: e1:a7:5e:9b:86:2f:f3:25:98:8c:29:3d:4c:dc:d2:1e:67:c7: cc:13:07:21:ee:06:27:b3:fc:de:e3:22:fa:16:d5:e0:a2:62: bb:4d:9b:96:e1:1f:4d:40:ea:f5:c2:18:91:09:4e:df:e2:03: b5:20:19:b6:2d:5e:87:fd:ad:01:ea:17:b1:22:07:75:68:5a: 8c:10:33:4c:a9:7f:ab:da:ba:73:17:26:20:ec:be:04:40:63: 2b:2b:ef:96:93:ce:2e:c6:c0:27:2e:7c:23:b6:fe:ee:82:19: 3b:ca:af:48:55:54:87:b3:cc:06:17:af:5f:56:f2:45:09:b4: f7:e9:e8:ae:45:f0:2b:95:84:0e:c1:da:d1:40:74:64:29:31: 2b:93:ad:b6:23:4c:1e:b6:41:68:66:b4:0a:ba:4d:a9:4a:d8: 01:ef:bf:e7:4b:8f:9b:10:f1:94:19:d3:a4:e9:9a:7c:16:f4: 8a:20:c6:f3:2c:f5:a9:2e:24:55:1b:1e:47:d8:25:46:3a:3a: 4a:93:f5:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+lnIsdq5l7x8PicvFMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDk5YzE2N2EyMzZkY2Y0NTVlYjk4NzFmMGRjZWQwYmEw ZGMyOTEwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD Eyg0NGYxMGYxYjcwNDdmNTFmNmY5ZjU1MDcxNWY3ODFkM2U5ZmQwYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6eE1Aadzee8BlZJc7nfRFio4U6n GyP41vomFT76hyDo6TGoyHaXbMr5GZt/o2DMUYxqXEn4BCfHL7q5wXsT2hoXQQJ8 leW6M+ymPRbnXu8QWmZJLPsUnf15CEXWA+9nGkiMlNmn0DegTqrJP7OUgH2+B8rY AEDwJldhvSpHvipIVChX6ApYO2GT8t3yrPk1ti6OQTncS6jmmpQYxQ9+/9frrWsE iTueqwjoslGS2R2a33w0hWXceHVoqSflitZG/tycFNXFO624UulYod/EDtalNQar tzr04NFma4wrGBCY8QodUHJ9vNa9xM8M8Ibs3nYMBuPyaOPDgg1ndMD8cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETxDxtwR/Ufb59VBxX3gdPp/QvAMB8GA1UdIwQY MBaAFKhJnBZ6I23PRV65hx8NztC6DcKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mY2Q0MWItNWUxZC00YjFhLWE1NmQt MTYxM2U4ZDUwNjVmLzEvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mY2Q0MWItNWUxZC00YjFhLWE1NmQtMTYxM2U4ZDUwNjVm LzEvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFF+Ic997 E+jO9iJAep3t7px2c2OeWP1vKYo7pzSfpAJPjlYnRRTZRruNjwxXLr+8WlHbKIFr 4adem4Yv8yWYjCk9TNzSHmfHzBMHIe4GJ7P83uMi+hbV4KJiu02bluEfTUDq9cIY kQlO3+IDtSAZti1eh/2tAeoXsSIHdWhajBAzTKl/q9q6cxcmIOy+BEBjKyvvlpPO LsbAJy58I7b+7oIZO8qvSFVUh7PMBhevX1byRQm09+norkXwK5WEDsHa0UB0ZCkx K5OttiNMHrZBaGa0CrpNqUrYAe+/50uPmxDxlBnTpOmafBb0iiDG8yz1qS4kVRse R9glRjo6SpP1/w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:14 2025 by rpki-client