This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft File: EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft (raw, json) Hash identifier: jO+OQt0vXHmoG3rCOqlJ2zzCYaTimUq6NelZmStP8xs= Subject key identifier: BB:5F:6E:A1:E2:CD:3A:D9:28:20:FA:CA:A6:6D:59:30:6E:AE:C6:08 Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b Certificate serial: 019AF9F9ADF27267DDEA6BA474F404C26A96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft Manifest number: 0E4E Signing time: Sun 07 Dec 2025 18:01:21 +0000 Manifest this update: Sun 07 Dec 2025 18:01:21 +0000 Manifest next update: Mon 08 Dec 2025 18:01:21 +0000 Files and hashes: 1: EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl (hash: T1gFzE9Q2yiJpJ9PUIT1MdCj5mUZM2FJsUVPj8txrYY=) 2: OMC8JBvCYl7bQ9ngInMd0aMZ-oE.roa (hash: 4qqAXlUiD4s2s0wNKmpYnzZpaP7ycT4Hqs2PhA8Ebd4=) 3: bMZAGJiSL37RYjG0omxqUzfw6RQ.roa (hash: GC8GdghFTzQFHElrcSiH/7+b0UQBvz9Pyt1qThrmjO4=) 4: cA-3PBWL1bUwOarNEMZiyyIevMU.roa (hash: cnw/uPeaFuZ+fncW2i8jJnwO4+wUVJ2d2gj1ViPSrJQ=) 5: fw-BT1lvrjBkddYCCHDg1oZutT4.roa (hash: iAaplhiCg6/Cmk5M9afSn42FhZ9hgGQtswmLjCZlPus=) 6: mOheAjZvIR3dWuAdDZpcmihTHzQ.roa (hash: zDN/FrzOeeK98CYXtLxiPly6YpcVp+cmbxmn8fxsrMs=) 7: p1DQi1u18C75Ohux7URg7YfrGs8.roa (hash: INt16ax1DFlOoo29QJUQDnOPGS2CLSORfkcRk285y/0=) 8: xEHBG-sDPVKJ9XXxM6Z9mKuo0U0.roa (hash: G3jD6yODhofSNU3PUJZMmjQCNj42WLMnZ0Laof6Aj28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:f9:ad:f2:72:67:dd:ea:6b:a4:74:f4:04:c2:6a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b Validity Not Before: Dec 7 18:01:21 2025 GMT Not After : Dec 8 18:01:21 2025 GMT Subject: CN=bb5f6ea1e2cd3ad92820facaa66d59306eaec608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:f4:4b:f3:06:06:c8:1f:39:77:36:6f:9c: 83:9f:f4:f3:10:83:a7:a3:56:f9:17:3d:e3:e3:e4: 86:bb:af:4a:6b:d6:82:23:45:d4:c0:c2:66:1a:05: 8c:8b:cb:68:c5:9b:84:dd:ef:f6:bd:c9:71:b2:f9: 64:56:9e:84:50:74:4c:69:0d:12:6c:a3:25:ad:49: de:f5:30:15:3e:7b:aa:d2:01:f2:ec:07:7e:26:a9: 4d:55:30:b7:a0:62:d2:db:82:63:54:ee:dd:e7:82: 16:0b:d0:c4:36:11:34:fd:eb:9c:6f:2b:a9:d2:22: 47:51:f8:3d:d0:79:b4:3e:b6:f3:f7:c2:94:0f:4b: 5c:01:8a:e3:93:73:51:71:22:f1:aa:30:ce:37:04: bd:8e:9a:2f:4a:af:e4:20:65:d6:6d:ae:cd:d6:ed: fa:c5:17:70:3e:76:ba:b5:c0:5b:c0:39:43:d7:dd: e3:ba:d3:df:fb:5d:e9:36:08:76:42:dc:c7:6e:60: 90:4e:1f:2e:47:1a:13:32:51:6e:7c:c7:d2:16:86: e7:71:56:ea:b6:ba:72:92:b8:f4:1c:f7:16:d9:66: f6:8f:b1:17:29:c7:e6:f3:6b:a7:13:69:b2:19:fe: 3c:fd:9c:3b:0b:6d:02:bd:b0:81:5b:42:4e:ca:9c: 34:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5F:6E:A1:E2:CD:3A:D9:28:20:FA:CA:A6:6D:59:30:6E:AE:C6:08 X509v3 Authority Key Identifier: keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:37:fc:c7:b3:fa:f5:af:bf:a2:a2:b0:14:95:72:27:42:0c: a0:42:06:cc:e4:b8:60:16:de:18:24:d2:ab:03:58:b2:95:3d: a1:a8:31:d6:7b:a3:ee:65:a8:33:67:40:c0:3c:e0:1b:ea:2a: 39:af:9a:45:21:56:ca:79:6e:4e:ba:1c:00:c0:d8:e1:ce:64: 96:2b:04:45:3f:2d:d4:e8:d8:0a:f9:6d:ea:dd:30:93:f1:67: c7:d1:52:c9:5d:ce:20:a5:4d:14:e3:87:9e:06:96:7c:f9:ef: 45:3c:3d:03:7a:9b:e5:53:16:2d:62:1c:87:97:d4:57:07:5e: cc:70:fc:c0:96:7d:92:8d:6c:c4:bf:ea:1f:c3:5c:5c:b2:4b: d9:35:4b:2e:93:a5:90:aa:6a:de:ab:27:0f:f2:09:5a:22:0b: 2e:18:cb:6e:80:6f:45:0d:ef:f7:64:3d:2a:2a:5e:9f:ab:41: c7:20:86:79:f5:9c:8d:83:9f:91:69:e8:57:ba:78:c6:0c:b8: eb:03:64:2c:1b:5f:91:d7:46:d5:28:08:43:08:27:c7:0d:aa: 16:a7:4e:38:9e:7c:f1:cd:45:d5:8e:7c:6b:44:99:75:14:7d: c9:0b:de:8d:b5:f4:1e:bd:72:9b:68:a9:a7:a4:f5:0e:d3:69: a3:6c:c9:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5+a3ycmfd6mukdPQEwmqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjk0ZjY5NDVhMjFkMDhkMzAxOTJjZmMxYTZiNzgwZGU3 MjhlM2IwHhcNMjUxMjA3MTgwMTIxWhcNMjUxMjA4MTgwMTIxWjAzMTEwLwYDVQQD EyhiYjVmNmVhMWUyY2QzYWQ5MjgyMGZhY2FhNjZkNTkzMDZlYWVjNjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5b0S/MGBsgfOXc2b5yDn/TzEIOn o1b5Fz3j4+SGu69Ka9aCI0XUwMJmGgWMi8toxZuE3e/2vclxsvlkVp6EUHRMaQ0S bKMlrUne9TAVPnuq0gHy7Ad+JqlNVTC3oGLS24JjVO7d54IWC9DENhE0/eucbyup 0iJHUfg90Hm0Prbz98KUD0tcAYrjk3NRcSLxqjDONwS9jpovSq/kIGXWba7N1u36 xRdwPna6tcBbwDlD193jutPf+13pNgh2QtzHbmCQTh8uRxoTMlFufMfSFobncVbq trpykrj0HPcW2Wb2j7EXKcfm82unE2myGf48/Zw7C20CvbCBW0JOypw0LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtfbqHizTrZKCD6yqZtWTBursYIMB8GA1UdIwQY MBaAFBJpT2lFoh0I0wGSz8Gmt4Deco47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDkt NjU5OGI0Y2ViMDY5LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDktNjU5OGI0Y2ViMDY5 LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTf8x7P6 9a+/oqKwFJVyJ0IMoEIGzOS4YBbeGCTSqwNYspU9oagx1nuj7mWoM2dAwDzgG+oq Oa+aRSFWynluTrocAMDY4c5klisERT8t1OjYCvlt6t0wk/Fnx9FSyV3OIKVNFOOH ngaWfPnvRTw9A3qb5VMWLWIch5fUVwdezHD8wJZ9ko1sxL/qH8NcXLJL2TVLLpOl kKpq3qsnD/IJWiILLhjLboBvRQ3v92Q9Kipen6tBxyCGefWcjYOfkWnoV7p4xgy4 6wNkLBtfkddG1SgIQwgnxw2qFqdOOJ588c1F1Y58a0SZdRR9yQvejbX0Hr1ym2ip p6T1DtNpo2zJsw== -----END CERTIFICATE-----Generated at Sun Dec 7 22:23:27 2025 by rpki-client