This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json) Hash identifier: qa0gXDBwdhgUCDL/OV2TemSVcaOau2o+LhziFgl/EIk= Subject key identifier: 1E:8C:B3:83:15:A8:16:BC:FF:F8:50:5A:4C:64:39:1C:6F:0F:CD:46 Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3 Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3 Certificate serial: 019AF1640BCE2BA9364D25B36C1575EB7E73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft Manifest number: 16B8 Signing time: Sat 06 Dec 2025 02:00:56 +0000 Manifest this update: Sat 06 Dec 2025 02:00:56 +0000 Manifest next update: Sun 07 Dec 2025 02:00:56 +0000 Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: yyXZIGeBYleINykdoYBUTwT4r2V2ubZB0JEhQ0aq3V0=) 2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0b:ce:2b:a9:36:4d:25:b3:6c:15:75:eb:7e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3 Validity Not Before: Dec 6 02:00:56 2025 GMT Not After : Dec 7 02:00:56 2025 GMT Subject: CN=1e8cb38315a816bcfff8505a4c64391c6f0fcd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:72:23:03:27:d5:72:27:ca:4e:b6:ff:d9: 6a:a6:9f:45:1f:10:c4:86:0e:0c:73:25:fa:3a:81: b2:5e:cb:ab:62:02:a0:d8:29:0c:f7:57:8a:4d:e4: 1b:45:8c:59:c0:37:9c:ca:16:87:e9:83:a6:00:1d: 01:a3:e6:35:ec:aa:57:9e:a4:06:b1:3d:e6:ab:b8: ce:c2:d6:a0:bf:35:9c:0a:01:0e:70:2d:90:29:b1: ce:a2:f0:06:f3:29:bc:8d:30:ae:87:9b:3f:e6:d3: 9c:86:50:88:71:e7:c4:98:e4:c1:61:90:26:d1:34: 21:59:94:88:38:48:2f:56:e3:b6:b0:d0:82:25:cb: 5d:5c:ab:54:8e:66:58:69:bc:27:18:67:88:01:41: 56:61:36:b9:cf:5a:f5:36:99:22:79:2d:34:a7:3f: 68:3c:b8:0c:f7:9a:24:fc:20:f3:61:1c:ef:d6:5a: 38:a8:ea:3b:48:d9:24:40:92:d7:c3:33:9f:20:b6: 8f:29:8d:d2:9b:df:95:7b:ce:01:b9:5d:a4:73:0e: 4b:ff:38:49:86:94:a3:fb:0f:44:7e:9f:01:71:2c: 3c:d8:66:ab:80:1c:f8:2a:2c:6d:55:90:36:d0:31: c7:dc:13:eb:f7:a2:e8:4d:bb:20:4c:57:18:ea:c9: 5d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8C:B3:83:15:A8:16:BC:FF:F8:50:5A:4C:64:39:1C:6F:0F:CD:46 X509v3 Authority Key Identifier: keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7b:f8:b0:da:b0:b2:af:cb:68:dd:03:8f:e7:69:db:9c:6e: 32:75:0b:45:a5:03:ce:ac:e9:3e:b3:46:63:85:92:73:20:ae: db:7e:6d:a2:8c:84:53:43:40:b8:fa:5b:1c:36:95:32:8a:32: 87:08:3c:7f:bf:ed:5d:56:68:96:00:d0:1d:b2:f5:d9:c8:3b: b5:fc:8d:fd:34:07:c4:b1:a9:31:0d:28:92:9a:71:02:8e:f0: cb:ae:95:d8:56:fe:31:ac:28:8f:b6:69:6c:15:a0:61:09:d4: 23:6c:41:63:4b:23:5e:0a:c0:e9:ff:a7:58:58:1e:03:85:f0: 17:fb:98:df:90:24:cd:7b:c9:6a:db:80:cd:1f:46:3d:76:f7: f5:29:1a:a2:c8:de:11:49:66:7e:98:9b:84:2c:06:28:45:db: 4b:f6:c9:a9:75:c5:9c:91:6e:68:bd:e5:b6:12:bf:b6:72:0d: 4a:20:d0:ca:70:65:d2:c8:94:0c:90:62:99:18:a3:31:59:53: 07:08:ee:53:ad:6d:2f:66:24:11:17:fd:5d:15:67:92:27:19: 30:6d:ab:74:48:44:7f:8e:7d:c9:6e:5e:89:13:6b:60:1e:c7: 0e:0b:77:a9:01:eb:2d:ed:fa:c1:e8:b2:0f:24:5f:bc:fa:1a: 6e:4e:a5:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAvOK6k2TSWzbBV1635zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwODlhMDI1MWUzMmJmM2M0ODBmNWE5NGFiYjVmYjRlYjkw NmE1YjMwHhcNMjUxMjA2MDIwMDU2WhcNMjUxMjA3MDIwMDU2WjAzMTEwLwYDVQQD EygxZThjYjM4MzE1YTgxNmJjZmZmODUwNWE0YzY0MzkxYzZmMGZjZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArspyIwMn1XInyk62/9lqpp9FHxDE hg4McyX6OoGyXsurYgKg2CkM91eKTeQbRYxZwDecyhaH6YOmAB0Bo+Y17KpXnqQG sT3mq7jOwtagvzWcCgEOcC2QKbHOovAG8ym8jTCuh5s/5tOchlCIcefEmOTBYZAm 0TQhWZSIOEgvVuO2sNCCJctdXKtUjmZYabwnGGeIAUFWYTa5z1r1NpkieS00pz9o PLgM95ok/CDzYRzv1lo4qOo7SNkkQJLXwzOfILaPKY3Sm9+Ve84BuV2kcw5L/zhJ hpSj+w9Efp8BcSw82GargBz4KixtVZA20DHH3BPr96LoTbsgTFcY6sldCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6Ms4MVqBa8//hQWkxkORxvD81GMB8GA1UdIwQY MBaAFBCJoCUeMr88SA9alKu1+065BqWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzkt YjhjNDZmOTU2NDBlLzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzktYjhjNDZmOTU2NDBl LzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3v4sNqw sq/LaN0Dj+dp25xuMnULRaUDzqzpPrNGY4WScyCu235tooyEU0NAuPpbHDaVMooy hwg8f7/tXVZolgDQHbL12cg7tfyN/TQHxLGpMQ0okppxAo7wy66V2Fb+Mawoj7Zp bBWgYQnUI2xBY0sjXgrA6f+nWFgeA4XwF/uY35AkzXvJatuAzR9GPXb39Skaosje EUlmfpibhCwGKEXbS/bJqXXFnJFuaL3lthK/tnINSiDQynBl0siUDJBimRijMVlT BwjuU61tL2YkERf9XRVnkicZMG2rdEhEf459yW5eiRNrYB7HDgt3qQHrLe36weiy DyRfvPoabk6log== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:57 2025 by rpki-client