This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json) Hash identifier: jGUC7hlhKT2vjfIPnbggWNZ5oGcGz0z3YuclcwBYhf0= Subject key identifier: B4:74:E7:F3:AA:51:19:5E:A2:95:8C:F2:C1:C6:B6:16:47:C4:6D:DE Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Certificate serial: 019B27AD72A0B1B407B24F3447A989855377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft Manifest number: 0761 Signing time: Tue 16 Dec 2025 15:00:37 +0000 Manifest this update: Tue 16 Dec 2025 15:00:37 +0000 Manifest next update: Wed 17 Dec 2025 15:00:37 +0000 Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: rk7/+QpNeEuZwXzHpD0vVMknURnKDJwbYyq9oymC/7Q=) 2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:72:a0:b1:b4:07:b2:4f:34:47:a9:89:85:53:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Validity Not Before: Dec 16 15:00:37 2025 GMT Not After : Dec 17 15:00:37 2025 GMT Subject: CN=b474e7f3aa51195ea2958cf2c1c6b61647c46dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:18:8f:e4:36:e9:ab:e9:fd:29:12:29:cb: 3d:fc:b5:ca:66:e6:53:3c:67:ee:24:0c:56:69:11: db:9b:bb:5f:7c:c0:ee:c7:ee:80:6b:f9:74:58:0e: 22:31:b2:34:bb:bd:5f:ae:4f:5d:de:8c:76:fa:cb: 78:aa:19:d3:49:19:3f:6f:d4:21:ee:72:7b:dc:a9: 50:5f:df:f3:2b:c7:48:af:7a:27:c9:38:88:5f:45: 49:03:b0:94:04:24:ab:0d:bc:01:58:ea:e9:84:0b: b7:55:c2:43:b9:53:d5:ff:88:be:76:9c:fa:dd:9f: 6e:6e:dc:55:92:9c:7c:39:f5:8b:62:55:02:45:ae: ea:b3:15:bf:75:c6:79:88:52:24:2c:87:0b:d9:2c: 03:35:00:7a:d6:98:6b:36:c9:9d:2a:96:36:af:0e: 13:7d:74:a0:43:ac:07:19:db:fe:6d:e4:39:dc:31: 82:2f:4e:63:90:4c:55:3b:33:33:09:c3:bb:27:f3: ac:cc:ad:4e:b2:00:5c:05:d3:6c:3d:65:5c:47:a2: 45:79:25:bc:89:db:8f:9f:c0:dd:86:4b:a4:9e:4b: c5:b5:98:49:ed:2d:c3:0d:14:5c:be:67:c9:28:a2: b0:3c:02:95:f7:f0:7e:0f:5d:9b:de:22:9f:97:c2: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:74:E7:F3:AA:51:19:5E:A2:95:8C:F2:C1:C6:B6:16:47:C4:6D:DE X509v3 Authority Key Identifier: keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d2:d1:58:6a:ee:60:d3:d1:a3:a4:f5:51:99:bc:ed:6e:66: 02:34:66:6e:0b:4a:fb:74:1b:f5:ad:8f:cf:f3:bb:c7:1d:03: c2:c9:47:a3:49:73:20:73:78:d4:39:4c:c2:4f:ad:69:a2:5d: 10:99:df:86:08:c8:f1:7b:a0:0a:21:7d:a6:54:27:51:44:20: 15:e8:57:5e:c5:5d:56:bc:dd:8e:2a:25:88:c3:f6:de:d1:68: d4:ad:32:56:81:3e:bf:42:1b:e1:ad:14:4f:cb:f4:78:3a:1d: 5a:86:46:2e:51:ff:a2:cd:3a:f3:b1:83:7d:28:c4:12:43:fb: a0:c8:f2:ea:7c:40:e7:04:9a:fd:c2:b8:7c:b2:32:7a:58:4b: 03:99:cc:1b:4e:c8:98:87:2c:2d:a3:b0:a1:45:ee:66:b2:c8: d7:96:93:13:38:64:3d:6e:ef:db:df:17:b0:16:54:3c:5a:b3: 26:dd:3d:cd:69:fa:d2:74:0c:cc:73:bd:ae:3a:9e:0a:3b:78: de:92:86:43:82:96:90:89:be:ac:51:3f:56:1c:9c:9f:9b:c5: 8b:2e:cd:fd:55:53:aa:ea:8b:19:10:92:8d:11:86:67:c6:bb: 64:00:3f:1b:1f:d6:75:ae:4f:2e:fe:8f:1f:f4:b1:2c:11:26: 83:7a:bd:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrXKgsbQHsk80R6mJhVN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYzgzNmU1Y2UyYmZlYjgyMWYzN2Q2NGE0OWMxNjE4NTVm ZTJjNTIwHhcNMjUxMjE2MTUwMDM3WhcNMjUxMjE3MTUwMDM3WjAzMTEwLwYDVQQD EyhiNDc0ZTdmM2FhNTExOTVlYTI5NThjZjJjMWM2YjYxNjQ3YzQ2ZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxysYj+Q26avp/SkSKcs9/LXKZuZT PGfuJAxWaRHbm7tffMDux+6Aa/l0WA4iMbI0u71frk9d3ox2+st4qhnTSRk/b9Qh 7nJ73KlQX9/zK8dIr3onyTiIX0VJA7CUBCSrDbwBWOrphAu3VcJDuVPV/4i+dpz6 3Z9ubtxVkpx8OfWLYlUCRa7qsxW/dcZ5iFIkLIcL2SwDNQB61phrNsmdKpY2rw4T fXSgQ6wHGdv+beQ53DGCL05jkExVOzMzCcO7J/OszK1OsgBcBdNsPWVcR6JFeSW8 iduPn8DdhkuknkvFtZhJ7S3DDRRcvmfJKKKwPAKV9/B+D12b3iKfl8IDfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLR05/OqURleopWM8sHGthZHxG3eMB8GA1UdIwQY MBaAFBDINuXOK/64IfN9ZKScFhhV/ixSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4Yjgt OWYzYzA5YmI3NDFjLzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4YjgtOWYzYzA5YmI3NDFj LzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtLRWGru YNPRo6T1UZm87W5mAjRmbgtK+3Qb9a2Pz/O7xx0DwslHo0lzIHN41DlMwk+taaJd EJnfhgjI8XugCiF9plQnUUQgFehXXsVdVrzdjioliMP23tFo1K0yVoE+v0Ib4a0U T8v0eDodWoZGLlH/os0687GDfSjEEkP7oMjy6nxA5wSa/cK4fLIyelhLA5nMG07I mIcsLaOwoUXuZrLI15aTEzhkPW7v298XsBZUPFqzJt09zWn60nQMzHO9rjqeCjt4 3pKGQ4KWkIm+rFE/Vhycn5vFiy7N/VVTquqLGRCSjRGGZ8a7ZAA/Gx/Wda5PLv6P H/SxLBEmg3q9kg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:47:17 2025 by rpki-client