This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json) Hash identifier: q8D+qLl3wPtK9j3mO2zR+qkkhv0QeH93Gd7t8X6whS4= Subject key identifier: 77:4A:2B:38:57:8F:7E:32:94:0F:E6:26:B5:45:D0:5A:BA:E4:D3:91 Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Certificate serial: 019AF57804DEB06EF7BDAD99211409ABD70B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft Manifest number: 0747 Signing time: Sat 06 Dec 2025 21:01:14 +0000 Manifest this update: Sat 06 Dec 2025 21:01:14 +0000 Manifest next update: Sun 07 Dec 2025 21:01:14 +0000 Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: aSyQjxj2x24eXN92FZsJc1jvA7LZMAqThNUX8cRxpQg=) 2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:04:de:b0:6e:f7:bd:ad:99:21:14:09:ab:d7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Validity Not Before: Dec 6 21:01:14 2025 GMT Not After : Dec 7 21:01:14 2025 GMT Subject: CN=774a2b38578f7e32940fe626b545d05abae4d391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:a8:44:f0:96:86:a0:e6:7f:0e:b3:26:d9: 6e:9f:79:48:03:f6:c7:05:75:46:36:5c:4f:ff:a7: e4:1e:98:98:2b:b2:47:d4:32:6f:ff:00:ef:f4:d6: c5:2f:59:78:4a:98:6c:28:2f:84:91:d8:4c:ca:a7: b1:f5:3c:89:f1:0b:b4:f2:4f:bf:d9:84:a7:38:3e: 15:07:15:b0:5a:a8:00:75:1a:08:a3:ef:b7:50:f4: c8:6e:06:2d:e1:ba:a1:33:dd:d8:51:ed:9c:13:a8: 52:af:11:ba:de:30:f1:5e:20:c2:80:88:9e:57:b6: be:ac:75:5e:cc:00:1b:16:81:25:df:ff:c8:4f:94: 0f:7e:68:7b:1a:9e:4a:63:b8:0b:78:2c:cc:5f:de: 47:bf:44:a2:fa:05:38:1d:08:df:0f:4e:c0:b1:88: 64:dd:c5:33:da:b4:6d:51:d1:06:a3:46:f7:68:1f: b5:c5:6d:0a:92:23:33:b0:d4:df:23:95:c9:a3:64: 20:e4:e9:5a:cc:25:51:54:f7:29:ba:cc:c3:40:7e: 07:d8:05:ff:a9:5d:e3:bc:31:38:9b:55:8e:20:08: cf:c3:a9:ea:0c:de:0c:03:f6:00:15:7f:b0:83:96: a7:0b:c2:b6:e7:a8:09:0a:dc:33:69:93:d7:3a:fa: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4A:2B:38:57:8F:7E:32:94:0F:E6:26:B5:45:D0:5A:BA:E4:D3:91 X509v3 Authority Key Identifier: keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:29:97:0f:b8:d3:0b:85:d1:00:e2:70:69:70:f5:0e:94:46: 29:7c:f5:fb:02:da:ef:2c:5d:78:08:45:80:44:81:7d:75:8b: c4:4b:de:16:8a:d0:c3:0d:c2:6c:4f:ae:03:e2:90:f1:6f:ca: dd:59:64:d2:db:54:02:38:ae:89:15:a0:54:85:f3:b2:7c:eb: e9:b2:e6:53:00:83:cb:40:65:17:aa:93:02:71:44:d6:e5:75: c9:18:af:f3:4f:90:17:8f:e6:34:76:3c:48:4a:3b:6d:df:24: cf:c7:24:dc:a0:ee:1f:5e:ec:9a:b0:4e:23:21:9d:67:3b:71: c0:34:30:b8:f2:b9:dd:0a:9f:3c:ed:22:c9:92:e1:4e:09:5d: 4e:28:b0:4f:d8:70:f1:69:3e:6b:cf:54:c4:1f:d5:37:ef:ec: 31:78:45:55:2a:3b:a3:48:97:5b:05:24:0d:32:96:2d:7c:0e: 35:27:e9:97:3f:3c:14:59:b7:36:e1:92:9e:96:ca:49:bb:25: 53:36:fd:b3:87:c9:72:2c:0b:5c:b3:1b:c4:d9:20:0f:a4:f3: db:ff:bc:66:7a:b8:1f:88:42:45:fe:c3:16:01:1f:bd:51:1b: 40:85:cd:d9:89:a6:af:6b:ca:8a:1e:3e:b3:d3:6e:b0:20:9f: f1:30:25:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eATesG73va2ZIRQJq9cLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYzgzNmU1Y2UyYmZlYjgyMWYzN2Q2NGE0OWMxNjE4NTVm ZTJjNTIwHhcNMjUxMjA2MjEwMTE0WhcNMjUxMjA3MjEwMTE0WjAzMTEwLwYDVQQD Eyg3NzRhMmIzODU3OGY3ZTMyOTQwZmU2MjZiNTQ1ZDA1YWJhZTRkMzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPmoRPCWhqDmfw6zJtlun3lIA/bH BXVGNlxP/6fkHpiYK7JH1DJv/wDv9NbFL1l4SphsKC+EkdhMyqex9TyJ8Qu08k+/ 2YSnOD4VBxWwWqgAdRoIo++3UPTIbgYt4bqhM93YUe2cE6hSrxG63jDxXiDCgIie V7a+rHVezAAbFoEl3//IT5QPfmh7Gp5KY7gLeCzMX95Hv0Si+gU4HQjfD07AsYhk 3cUz2rRtUdEGo0b3aB+1xW0KkiMzsNTfI5XJo2Qg5OlazCVRVPcpuszDQH4H2AX/ qV3jvDE4m1WOIAjPw6nqDN4MA/YAFX+wg5anC8K256gJCtwzaZPXOvqg2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdKKzhXj34ylA/mJrVF0Fq65NORMB8GA1UdIwQY MBaAFBDINuXOK/64IfN9ZKScFhhV/ixSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4Yjgt OWYzYzA5YmI3NDFjLzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4YjgtOWYzYzA5YmI3NDFj LzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSmXD7jT C4XRAOJwaXD1DpRGKXz1+wLa7yxdeAhFgESBfXWLxEveForQww3CbE+uA+KQ8W/K 3Vlk0ttUAjiuiRWgVIXzsnzr6bLmUwCDy0BlF6qTAnFE1uV1yRiv80+QF4/mNHY8 SEo7bd8kz8ck3KDuH17smrBOIyGdZztxwDQwuPK53QqfPO0iyZLhTgldTiiwT9hw 8Wk+a89UxB/VN+/sMXhFVSo7o0iXWwUkDTKWLXwONSfplz88FFm3NuGSnpbKSbsl Uzb9s4fJciwLXLMbxNkgD6Tz2/+8Znq4H4hCRf7DFgEfvVEbQIXN2Ymmr2vKih4+ s9NusCCf8TAlbA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:22 2025 by rpki-client