This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json) Hash identifier: 900RQlNBEv+nSjo/fY/Zq7/ZEFIIsOVIKszrK8dS7hA= Subject key identifier: 5C:A1:F6:B9:1B:EC:8D:D2:67:73:1B:CB:36:F4:58:DF:92:77:F1:86 Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43 Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743 Certificate serial: 019B27ADBCF47D6FC8AB782E84151B061FFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft Manifest number: 1113 Signing time: Tue 16 Dec 2025 15:00:55 +0000 Manifest this update: Tue 16 Dec 2025 15:00:55 +0000 Manifest next update: Wed 17 Dec 2025 15:00:55 +0000 Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: xEjWxnZ2AipBTMBkLX0t/piTwg/60B3+qaTzkBirei4=) 2: wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa (hash: W+sz9TCOY3wSjFpbMXmTZluRFQBYvoOF99W06O++/x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:bc:f4:7d:6f:c8:ab:78:2e:84:15:1b:06:1f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743 Validity Not Before: Dec 16 15:00:55 2025 GMT Not After : Dec 17 15:00:55 2025 GMT Subject: CN=5ca1f6b91bec8dd267731bcb36f458df9277f186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:55:17:fa:44:36:a8:45:ae:4d:e0:ce:78: e3:3f:0e:48:ce:99:f5:8d:0d:f7:a1:05:d4:8d:5d: 93:af:54:e3:8d:b1:af:7b:94:20:e3:7e:43:90:3c: 63:bd:2c:3b:d5:47:6a:43:d0:d9:35:60:90:19:c4: 6f:a4:c4:2c:fa:b5:9e:19:21:93:75:51:d4:d1:ff: be:69:d8:f5:9b:af:e7:f3:06:f5:b4:f9:8b:ea:2b: db:44:25:73:65:13:3a:9c:6d:3c:2a:7b:1f:50:f3: 2d:98:85:89:af:74:75:be:52:4b:0b:86:85:00:36: 5a:dc:f4:a7:f5:ff:5f:4b:2b:95:9a:53:97:71:71: 5b:7a:26:c3:5d:8f:60:44:1e:7f:af:00:58:27:41: 8a:a9:b8:a6:16:13:74:45:a7:fd:69:9b:26:0c:6d: 80:cb:fe:15:85:79:32:04:9c:da:22:6a:a1:06:4f: b8:bf:7c:f1:84:44:74:4e:a4:0b:3d:1e:e1:be:8e: c7:c1:b7:49:83:eb:22:6c:3c:30:ae:e5:97:a1:b4: 43:ba:5a:ef:e4:d7:c9:58:81:f1:f9:df:12:89:48: 16:94:d2:86:76:6a:85:15:e6:38:58:61:ae:0d:33: c1:e9:b9:6f:cd:71:2a:66:dc:9a:04:60:96:e9:bf: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A1:F6:B9:1B:EC:8D:D2:67:73:1B:CB:36:F4:58:DF:92:77:F1:86 X509v3 Authority Key Identifier: keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:f9:ee:34:92:ee:a3:55:b1:07:e2:69:9b:0a:91:cf:d5:ae: 32:0d:ab:62:a3:6e:b1:3a:f0:8f:48:43:4f:db:bf:b0:c4:58: 49:90:37:5f:92:51:3a:23:1f:85:41:6a:f3:13:2d:3c:2a:1d: ae:33:fe:a6:6b:85:4a:1e:e7:24:6f:d1:bf:0f:6e:d0:d5:0e: 7c:89:38:f7:88:eb:8c:e9:5e:ed:e7:83:43:19:ea:66:38:37: 10:6d:b8:84:97:64:a9:2b:e8:55:dd:9d:ab:a8:4a:13:de:6a: e3:7c:c2:9d:fa:38:05:c8:6d:5c:af:20:72:86:4d:c4:5e:b4: 27:fa:3e:6e:37:e3:1f:b1:d7:5c:96:75:74:b2:42:d0:09:54: 54:17:8d:2a:8f:b6:f8:7e:1d:55:8a:79:37:8b:e6:ed:f0:c9: fb:02:25:77:e7:c7:e9:cf:58:14:a6:0f:20:6b:67:3b:c2:3c: 04:16:29:f4:31:84:53:19:a7:1d:cb:08:64:a2:5e:d9:f4:11: 2d:54:dd:91:80:6e:1f:33:73:f8:1f:4a:da:38:08:37:18:3d: d4:7e:34:ac:eb:01:cd:a3:21:94:8c:27:4f:01:1d:b2:d2:c4: c5:fc:0d:08:cd:57:56:77:41:02:a4:a7:90:71:c1:0b:e8:69: 7e:57:3a:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrbz0fW/Iq3guhBUbBh/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmZmYzAwOTZjNjkzYmJjNDIwZWViOGNjZWYzNGJjN2I1 Mzg3NDMwHhcNMjUxMjE2MTUwMDU1WhcNMjUxMjE3MTUwMDU1WjAzMTEwLwYDVQQD Eyg1Y2ExZjZiOTFiZWM4ZGQyNjc3MzFiY2IzNmY0NThkZjkyNzdmMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3elVF/pENqhFrk3gznjjPw5Izpn1 jQ33oQXUjV2Tr1TjjbGve5Qg435DkDxjvSw71UdqQ9DZNWCQGcRvpMQs+rWeGSGT dVHU0f++adj1m6/n8wb1tPmL6ivbRCVzZRM6nG08KnsfUPMtmIWJr3R1vlJLC4aF ADZa3PSn9f9fSyuVmlOXcXFbeibDXY9gRB5/rwBYJ0GKqbimFhN0Raf9aZsmDG2A y/4VhXkyBJzaImqhBk+4v3zxhER0TqQLPR7hvo7HwbdJg+sibDwwruWXobRDulrv 5NfJWIHx+d8SiUgWlNKGdmqFFeY4WGGuDTPB6blvzXEqZtyaBGCW6b/gPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyh9rkb7I3SZ3Mbyzb0WN+Sd/GGMB8GA1UdIwQY MBaAFBJv/ACWxpO7xCDuuMzvNLx7U4dDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUt MWM4NmM1N2UyZTlmLzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUtMWM4NmM1N2UyZTlm LzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvnuNJLu o1WxB+JpmwqRz9WuMg2rYqNusTrwj0hDT9u/sMRYSZA3X5JROiMfhUFq8xMtPCod rjP+pmuFSh7nJG/Rvw9u0NUOfIk494jrjOle7eeDQxnqZjg3EG24hJdkqSvoVd2d q6hKE95q43zCnfo4BchtXK8gcoZNxF60J/o+bjfjH7HXXJZ1dLJC0AlUVBeNKo+2 +H4dVYp5N4vm7fDJ+wIld+fH6c9YFKYPIGtnO8I8BBYp9DGEUxmnHcsIZKJe2fQR LVTdkYBuHzNz+B9K2jgINxg91H40rOsBzaMhlIwnTwEdstLExfwNCM1XVndBAqSn kHHBC+hpflc64A== -----END CERTIFICATE-----Generated at Tue Dec 16 23:15:25 2025 by rpki-client