This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft File: EmXJFl_TNt9t_oSa69zkaF-xmTw.mft (raw, json) Hash identifier: kTwmTRbzdJ35t+ahmLOoA7btfCjDGcPSvYFNtpNBDjs= Subject key identifier: 02:00:1F:CC:BA:53:19:AA:B9:27:7C:C3:B8:0C:F3:74:82:A7:2C:57 Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C Certificate issuer: /CN=1265c9165fd336df6dfe849aebdce4685fb1993c Certificate serial: 019B40C8AFA46A842D126486CCB84E44EC9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft Manifest number: 14C5 Signing time: Sun 21 Dec 2025 12:00:52 +0000 Manifest this update: Sun 21 Dec 2025 12:00:52 +0000 Manifest next update: Mon 22 Dec 2025 12:00:52 +0000 Files and hashes: 1: EmXJFl_TNt9t_oSa69zkaF-xmTw.crl (hash: 2HuuDy0jiZCFIMH5OGYpDyffDfpnCev3kI6CoFHx2gw=) 2: uUsYYdThPpGgjymK3Ultz58Gf_Q.roa (hash: kzn/M2n+sxLUH2VEd8vrpqyKNhTOto1w+Nu3LrsxmjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:af:a4:6a:84:2d:12:64:86:cc:b8:4e:44:ec:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c Validity Not Before: Dec 21 12:00:52 2025 GMT Not After : Dec 22 12:00:52 2025 GMT Subject: CN=02001fccba5319aab9277cc3b80cf37482a72c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:d0:23:d0:bd:49:a1:8c:da:8e:8e:c5:e0: dd:29:21:16:6b:43:9c:34:ab:56:02:2f:b7:d9:d3: 5e:d8:c2:e5:90:13:ac:1d:51:30:80:e7:76:f8:39: e0:5b:52:0c:ad:8a:97:cb:77:21:09:fa:f3:2f:c2: 36:40:be:71:da:ca:68:b6:52:59:f3:d3:08:d9:1a: 1d:a6:84:b2:35:80:31:5d:18:d9:dc:48:9d:4b:a4: d7:51:78:47:13:aa:af:39:80:5b:a9:e1:1a:d7:56: 75:ca:55:63:f8:9e:d2:0a:8e:9a:f0:08:c6:d9:d9: 0b:de:60:51:b2:8c:a8:2b:6d:b9:33:52:21:45:48: 5f:91:63:07:e5:13:63:5d:ba:fd:a3:7a:37:17:d9: 14:96:8b:7f:8e:05:a8:10:fa:3f:62:ca:0c:91:26: c7:4c:85:32:be:60:62:14:7b:93:71:9f:9f:bf:9d: d2:17:0a:63:61:b6:06:c1:1a:d4:47:d5:d5:2c:a4: 14:da:47:3e:af:e3:d7:b7:24:6b:f8:cb:96:95:70: 3e:82:5c:24:ab:7a:54:b4:8d:10:c5:7e:b0:3b:f6: 55:1d:79:6b:98:90:6c:42:7a:83:fb:cc:7a:ea:90: 0b:7a:6a:b7:ca:60:cf:4d:b2:76:81:81:4e:d5:fb: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:00:1F:CC:BA:53:19:AA:B9:27:7C:C3:B8:0C:F3:74:82:A7:2C:57 X509v3 Authority Key Identifier: keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a1:92:33:fa:06:82:a1:b8:19:78:cf:c7:09:c8:f8:1c:c3: 06:db:5a:40:ef:a2:3b:f1:59:63:88:c3:b9:c9:c0:a6:7c:29: 66:d3:8b:07:3b:a0:60:9b:e6:e8:de:69:79:3f:fc:75:9f:7e: 64:dd:51:8b:09:e0:ee:c0:3b:f5:ea:70:55:7c:2d:42:cd:3c: 70:07:29:00:95:b9:cf:9f:6d:19:25:40:a3:25:07:d6:4f:dd: 2e:c8:3f:b5:11:a0:6c:26:ba:ae:9c:5b:ff:4e:61:f8:1e:87: 4a:58:9d:3c:ee:cc:94:a3:80:c2:14:d7:e1:69:34:48:8c:7a: 98:ba:92:bb:b4:8d:e5:97:57:64:09:fa:38:52:2b:4c:a9:03: aa:eb:74:c9:74:02:10:3a:40:35:2b:a2:27:3f:78:e8:1f:ce: ee:e7:66:42:da:d6:68:c9:bd:fb:04:de:9d:39:c2:16:34:1a: 22:83:5e:f3:2e:4a:b0:e9:c6:ed:3f:85:34:ea:8a:ec:56:5c: 20:cd:ad:07:ee:4c:dd:99:5d:6b:ae:76:4a:c7:23:ba:25:d3: b2:ff:9b:90:7c:70:5e:38:01:1a:df:16:17:fa:74:f7:5e:62: 46:2f:6f:4e:16:fa:b5:57:88:91:84:ca:c4:47:56:19:1f:6b: 0c:04:3e:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyK+kaoQtEmSGzLhOROybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjVjOTE2NWZkMzM2ZGY2ZGZlODQ5YWViZGNlNDY4NWZi MTk5M2MwHhcNMjUxMjIxMTIwMDUyWhcNMjUxMjIyMTIwMDUyWjAzMTEwLwYDVQQD EygwMjAwMWZjY2JhNTMxOWFhYjkyNzdjYzNiODBjZjM3NDgyYTcyYzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JHQI9C9SaGM2o6OxeDdKSEWa0Oc NKtWAi+32dNe2MLlkBOsHVEwgOd2+DngW1IMrYqXy3chCfrzL8I2QL5x2spotlJZ 89MI2RodpoSyNYAxXRjZ3EidS6TXUXhHE6qvOYBbqeEa11Z1ylVj+J7SCo6a8AjG 2dkL3mBRsoyoK225M1IhRUhfkWMH5RNjXbr9o3o3F9kUlot/jgWoEPo/YsoMkSbH TIUyvmBiFHuTcZ+fv53SFwpjYbYGwRrUR9XVLKQU2kc+r+PXtyRr+MuWlXA+glwk q3pUtI0QxX6wO/ZVHXlrmJBsQnqD+8x66pALemq3ymDPTbJ2gYFO1fuRdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIAH8y6UxmquSd8w7gM83SCpyxXMB8GA1UdIwQY MBaAFBJlyRZf0zbfbf6Emuvc5GhfsZk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYt NjhlOTg2ZmQ2NDE5LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8yNDcxMTYtOTY5MC00YjIwLTliMGYtNjhlOTg2ZmQ2NDE5 LzEvRW1YSkZsX1ROdDl0X29TYTY5emthRi14bVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKGSM/oG gqG4GXjPxwnI+BzDBttaQO+iO/FZY4jDucnApnwpZtOLBzugYJvm6N5peT/8dZ9+ ZN1Riwng7sA79epwVXwtQs08cAcpAJW5z59tGSVAoyUH1k/dLsg/tRGgbCa6rpxb /05h+B6HSlidPO7MlKOAwhTX4Wk0SIx6mLqSu7SN5ZdXZAn6OFIrTKkDqut0yXQC EDpANSuiJz946B/O7udmQtrWaMm9+wTenTnCFjQaIoNe8y5KsOnG7T+FNOqK7FZc IM2tB+5M3Zlda652SscjuiXTsv+bkHxwXjgBGt8WF/p0915iRi9vThb6tVeIkYTK xEdWGR9rDAQ+xA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:25 2025 by rpki-client