This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft File: tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json) Hash identifier: vxGHkLZGVBgWDaJ3m40Jyi6wqYmOQa1+4ltTK4lPshw= Subject key identifier: 50:80:5F:B4:57:70:0F:9A:82:B0:1B:3F:53:60:09:2A:AD:CC:B2:01 Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17 Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17 Certificate serial: 019AF051850B5E4CE000449FAA2AA7BDC968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft Manifest number: 1765 Signing time: Fri 05 Dec 2025 21:01:05 +0000 Manifest this update: Fri 05 Dec 2025 21:01:05 +0000 Manifest next update: Sat 06 Dec 2025 21:01:05 +0000 Files and hashes: 1: Ar5ixINRYv4h1JY24F8pTYnNdfU.roa (hash: cerPS0rrVRA1DCH9YtBUW4yHi1b4My2ifCj92CGheoI=) 2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: gastkbDChRS23BaTQQO7MJTXt4DBhme9lCj6u2qenpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:85:0b:5e:4c:e0:00:44:9f:aa:2a:a7:bd:c9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17 Validity Not Before: Dec 5 21:01:05 2025 GMT Not After : Dec 6 21:01:05 2025 GMT Subject: CN=50805fb457700f9a82b01b3f5360092aadccb201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:33:41:a4:b5:d5:5a:14:e0:06:95:92:8a: 91:5f:90:bb:8a:3c:bc:5a:6f:db:4e:47:69:d1:9c: 39:de:1e:60:f1:f5:b4:e0:1d:26:78:25:7b:12:5e: d7:78:5b:84:b6:ca:61:33:cc:8b:d7:f2:3f:d7:dc: 37:1e:8e:c4:c9:55:fd:64:7f:e0:0a:d9:1a:3a:f2: ac:80:00:14:89:27:33:80:0b:f6:77:cb:de:d3:d3: 8b:48:d7:59:de:d2:74:d5:9a:0b:59:4e:cb:29:21: 53:3d:ca:d9:38:c1:23:9d:30:0e:c7:04:e1:e7:5c: 97:f4:ae:63:c7:35:ea:c2:49:6b:a3:13:9c:c2:16: 66:32:1f:69:c2:38:a3:39:57:c3:22:0f:de:ec:aa: 9d:16:96:f3:3a:f4:08:83:5c:de:a9:c9:c2:1e:1e: f5:a1:e2:e5:b9:49:a1:ed:e9:07:dc:c8:8b:8b:cd: 00:78:8b:47:05:69:55:42:8c:92:2f:aa:fa:b2:79: 80:b9:0f:ee:67:f0:5d:1c:8a:60:00:5c:e3:c2:72: cf:75:4b:24:bc:52:fe:d8:80:f6:9a:b2:90:78:7a: d1:5c:f3:c2:e1:79:74:e9:a5:eb:14:de:4c:af:c6: 97:2a:f0:8c:f5:96:b1:3d:f2:33:da:0a:b0:4a:31: 50:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:80:5F:B4:57:70:0F:9A:82:B0:1B:3F:53:60:09:2A:AD:CC:B2:01 X509v3 Authority Key Identifier: keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:81:ad:d5:c2:00:d3:90:ed:07:d7:8e:a1:ec:96:04:8b:2a: 45:a5:f5:d9:ad:49:55:86:e0:7e:2b:87:56:2d:ed:6d:30:89: 04:ee:5e:f0:f6:a2:8b:6f:5c:f9:39:39:e8:bd:de:5a:47:3c: 6c:a6:ee:32:01:6c:6b:88:07:3f:68:d8:d1:5b:f7:ec:89:98: a9:aa:f8:31:0a:1f:63:58:95:f8:14:2b:18:47:40:2b:63:87: 5f:13:b8:c0:85:10:78:62:71:ef:b7:96:32:7d:96:4c:94:d3: 7d:21:7d:a4:54:a8:c8:8f:3f:86:fe:29:43:ab:26:f0:ea:48: d6:9e:f0:cd:d5:20:09:ad:b3:87:02:3d:50:66:96:31:66:ac: 30:44:db:bb:01:32:9b:4f:16:34:19:de:5d:84:70:a0:53:af: 08:b3:7e:d0:a0:89:b4:ff:bc:65:9e:d2:67:9d:27:74:95:a1: 89:78:02:f3:1d:62:b2:72:28:f3:06:05:98:eb:9c:ca:6b:19: f6:cf:29:63:55:c2:95:ae:81:5a:ba:8a:df:f3:e9:d1:e1:cb: a9:4f:66:ec:8b:0e:0d:33:32:90:9d:35:04:b0:31:d4:94:bc: 79:bb:9b:97:e0:11:48:0d:5f:79:71:fc:57:6e:b9:b3:22:84: 71:9e:b2:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUYULXkzgAESfqiqnvcloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDMwYmExMTUwNjc0MWQ2NzZlYTIwMmUyOTFlYzdlYzYx OTFiMTcwHhcNMjUxMjA1MjEwMTA1WhcNMjUxMjA2MjEwMTA1WjAzMTEwLwYDVQQD Eyg1MDgwNWZiNDU3NzAwZjlhODJiMDFiM2Y1MzYwMDkyYWFkY2NiMjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ozQaS11VoU4AaVkoqRX5C7ijy8 Wm/bTkdp0Zw53h5g8fW04B0meCV7El7XeFuEtsphM8yL1/I/19w3Ho7EyVX9ZH/g CtkaOvKsgAAUiSczgAv2d8ve09OLSNdZ3tJ01ZoLWU7LKSFTPcrZOMEjnTAOxwTh 51yX9K5jxzXqwklroxOcwhZmMh9pwjijOVfDIg/e7KqdFpbzOvQIg1zeqcnCHh71 oeLluUmh7ekH3MiLi80AeItHBWlVQoySL6r6snmAuQ/uZ/BdHIpgAFzjwnLPdUsk vFL+2ID2mrKQeHrRXPPC4Xl06aXrFN5Mr8aXKvCM9ZaxPfIz2gqwSjFQvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCAX7RXcA+agrAbP1NgCSqtzLIBMB8GA1UdIwQY MBaAFLRDC6EVBnQdZ26iAuKR7H7GGRsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVNTG9SVUdkQjFuYnFJQzRwSHNmc1laR3hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82MGNjZmEtMDkzMC00NmI0LTgzMTct ZjhjYTljYjYzMzE3LzEvdEVNTG9SVUdkQjFuYnFJQzRwSHNmc1laR3hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi82MGNjZmEtMDkzMC00NmI0LTgzMTctZjhjYTljYjYzMzE3 LzEvdEVNTG9SVUdkQjFuYnFJQzRwSHNmc1laR3hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoGt1cIA 05DtB9eOoeyWBIsqRaX12a1JVYbgfiuHVi3tbTCJBO5e8Paii29c+Tk56L3eWkc8 bKbuMgFsa4gHP2jY0Vv37ImYqar4MQofY1iV+BQrGEdAK2OHXxO4wIUQeGJx77eW Mn2WTJTTfSF9pFSoyI8/hv4pQ6sm8OpI1p7wzdUgCa2zhwI9UGaWMWasMETbuwEy m08WNBneXYRwoFOvCLN+0KCJtP+8ZZ7SZ50ndJWhiXgC8x1isnIo8wYFmOucymsZ 9s8pY1XCla6BWrqK3/Pp0eHLqU9m7IsODTMykJ01BLAx1JS8ebubl+ARSA1feXH8 V265syKEcZ6ykA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:22 2025 by rpki-client