This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft File: IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json) Hash identifier: Ro4wgTDNYSTfkwCQCbAJakN1n0V95oLF+uVD+dePK0Q= Subject key identifier: 38:F7:6F:0B:B6:D8:B0:49:70:C4:26:5A:A8:51:49:2A:49:FA:57:D6 Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF Certificate issuer: /CN=204995c3627f7aacdfe23915e442e3d3900631af Certificate serial: 019AF208ACB2BCBDE9E535DCE7737C367FBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft Manifest number: 080F Signing time: Sat 06 Dec 2025 05:00:46 +0000 Manifest this update: Sat 06 Dec 2025 05:00:46 +0000 Manifest next update: Sun 07 Dec 2025 05:00:46 +0000 Files and hashes: 1: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (hash: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=) 2: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: rVDUtWEGKE/eLkyBuphclAlgTqB13WjFx0OOgcdV1EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ac:b2:bc:bd:e9:e5:35:dc:e7:73:7c:36:7f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af Validity Not Before: Dec 6 05:00:46 2025 GMT Not After : Dec 7 05:00:46 2025 GMT Subject: CN=38f76f0bb6d8b04970c4265aa851492a49fa57d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:63:59:c5:9c:51:47:79:63:00:c5:47:5f:eb: 88:fe:47:ff:d9:75:f4:d9:7a:28:4a:fe:1f:bf:e6: a1:99:fa:2a:6e:49:73:77:c3:95:f4:50:21:1e:a1: 8e:c3:12:6e:cb:ef:bf:61:3a:52:3b:69:66:7a:f7: ce:7c:8b:2a:e7:70:96:9d:a9:21:6e:c5:23:92:c3: 58:aa:4c:67:63:d9:ef:b0:48:ac:2a:e6:83:ca:bf: 1e:c4:03:a9:f9:88:33:79:28:bb:8c:6f:5d:3d:31: 7e:89:76:0e:30:e6:ea:14:18:cc:a4:4e:9f:a3:43: 54:eb:11:24:fa:1b:7d:d7:57:18:ee:22:28:01:1f: b0:df:ea:ad:20:9f:2e:d8:eb:1e:4a:89:f6:87:4d: e8:62:9a:d7:cd:63:a3:17:13:d8:31:66:89:de:14: d1:23:ea:a7:26:f4:8e:19:39:8f:58:70:cb:dd:3c: 65:c1:e1:1e:21:a2:b9:94:34:5a:7b:e3:60:35:54: a3:ba:97:b3:8e:0e:11:29:76:a7:b4:c0:e1:0c:e9: 93:6a:e0:16:8d:c6:a5:cb:29:b2:e5:7d:70:d7:e9: 5a:64:f0:b1:df:d4:20:2e:b8:91:e9:dd:32:aa:c5: c3:4c:92:b3:9e:33:d9:35:12:86:f4:d9:06:08:2e: 01:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F7:6F:0B:B6:D8:B0:49:70:C4:26:5A:A8:51:49:2A:49:FA:57:D6 X509v3 Authority Key Identifier: keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2a:a4:0c:6a:6b:ff:bf:19:d3:e7:78:db:9c:1d:a1:e9:b3: 89:b5:62:53:a3:9f:d2:c8:94:5e:ff:87:01:9d:80:ae:8b:ee: b1:d5:6c:24:21:d9:59:01:10:9f:94:f0:8b:f9:36:6a:51:a1: ed:8e:5d:12:03:ab:0e:f7:98:b6:6c:e9:92:9f:4e:8f:8b:cf: 39:cc:0a:a6:77:98:b5:3c:5f:21:43:e8:bb:f3:7c:e2:dc:80: 5a:69:42:c8:33:19:6d:64:06:08:f1:e8:72:d7:85:ba:56:ba: 86:c6:29:69:3e:fb:76:1f:5c:09:c4:94:d4:40:83:a6:1a:56: 16:38:37:d4:e1:85:1f:bb:ae:35:22:d8:11:03:70:2b:fa:24: ef:b1:97:3e:25:de:aa:b9:86:9d:5d:fc:2a:f0:93:2b:6c:2a: c4:96:09:29:f8:80:ff:6b:7c:14:dc:b0:d9:3f:5f:4f:35:eb: c7:80:4a:94:ed:a4:9c:59:dc:cc:9f:09:94:1b:12:fd:ca:dd: 2d:1b:4d:17:61:5f:16:2d:73:04:9f:5c:f8:01:f8:fb:d0:8b: 7c:13:54:17:ec:d7:80:15:a7:2a:a8:d3:7b:91:f6:5e:73:ba: 9f:f8:67:9d:cf:d0:a9:b3:b7:44:6d:e1:0e:80:30:0e:fe:45: f1:65:21:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKyyvL3p5TXc53N8Nn++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNDk5NWMzNjI3ZjdhYWNkZmUyMzkxNWU0NDJlM2QzOTAw NjMxYWYwHhcNMjUxMjA2MDUwMDQ2WhcNMjUxMjA3MDUwMDQ2WjAzMTEwLwYDVQQD EygzOGY3NmYwYmI2ZDhiMDQ5NzBjNDI2NWFhODUxNDkyYTQ5ZmE1N2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGNZxZxRR3ljAMVHX+uI/kf/2XX0 2XooSv4fv+ahmfoqbklzd8OV9FAhHqGOwxJuy++/YTpSO2lmevfOfIsq53CWnakh bsUjksNYqkxnY9nvsEisKuaDyr8exAOp+YgzeSi7jG9dPTF+iXYOMObqFBjMpE6f o0NU6xEk+ht911cY7iIoAR+w3+qtIJ8u2OseSon2h03oYprXzWOjFxPYMWaJ3hTR I+qnJvSOGTmPWHDL3TxlweEeIaK5lDRae+NgNVSjupezjg4RKXantMDhDOmTauAW jcalyymy5X1w1+laZPCx39QgLriR6d0yqsXDTJKznjPZNRKG9NkGCC4BQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDj3bwu22LBJcMQmWqhRSSpJ+lfWMB8GA1UdIwQY MBaAFCBJlcNif3qs3+I5FeRC49OQBjGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQt NDg0NTlkMDdiNDFlLzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQtNDg0NTlkMDdiNDFl LzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyqkDGpr /78Z0+d425wdoemzibViU6Of0siUXv+HAZ2ArovusdVsJCHZWQEQn5Twi/k2alGh 7Y5dEgOrDveYtmzpkp9Oj4vPOcwKpneYtTxfIUPou/N84tyAWmlCyDMZbWQGCPHo cteFula6hsYpaT77dh9cCcSU1ECDphpWFjg31OGFH7uuNSLYEQNwK/ok77GXPiXe qrmGnV38KvCTK2wqxJYJKfiA/2t8FNyw2T9fTzXrx4BKlO2knFnczJ8JlBsS/crd LRtNF2FfFi1zBJ9c+AH4+9CLfBNUF+zXgBWnKqjTe5H2XnO6n/hnnc/QqbO3RG3h DoAwDv5F8WUhYA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:24 2025 by rpki-client