This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft File: emc1t6VToWgMEa3T5Iw2NbU5eco.mft (raw, json) Hash identifier: rgYzXBsJyI2/lzpI0tbDVritAiLsIYtpXTsc1D5dlbw= Subject key identifier: AA:72:6D:76:21:2A:D8:BC:70:B7:F1:29:FB:EB:A0:8F:16:63:1C:30 Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA Certificate issuer: /CN=7a6735b7a553a1680c11add3e48c3635b53979ca Certificate serial: 019B3FB6724AA6E73FB6EC11C0B89174E854 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 07:01:19 +0000 Manifest this update: Sun 21 Dec 2025 07:01:19 +0000 Manifest next update: Mon 22 Dec 2025 07:01:19 +0000 Files and hashes: 1: Y0QzFQpxED6pQGOSZGJB2X93kKs.roa (hash: QstMZbErBCYp+ToxnOCIPJt5s0/mWI/dSe8BQlrQ6lk=) 2: emc1t6VToWgMEa3T5Iw2NbU5eco.crl (hash: IkUluWMOxxNB+r6u2CKSpeaBaice3uhWxaTVUtwvQxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:72:4a:a6:e7:3f:b6:ec:11:c0:b8:91:74:e8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca Validity Not Before: Dec 21 07:01:19 2025 GMT Not After : Dec 22 07:01:19 2025 GMT Subject: CN=aa726d76212ad8bc70b7f129fbeba08f16631c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:96:2c:b2:04:fc:94:88:63:df:e8:f6:9e:96: 77:87:b0:e2:14:47:52:16:c9:4d:db:50:f8:db:3f: b6:dd:55:ed:7c:09:c5:ef:9c:b8:77:6f:78:2d:27: 61:e3:7f:e0:9a:9c:cd:35:65:80:0b:b2:af:10:8f: 25:93:3a:9b:98:26:fb:b5:0b:6c:3e:d5:99:69:91: a9:95:36:60:72:f3:40:2c:28:3f:79:33:0f:c2:72: b5:a5:a1:e4:4e:99:0b:71:09:2e:3b:f6:71:c0:5e: d5:b6:f0:0b:96:24:f4:14:7e:14:45:6b:af:96:9c: 68:23:e5:2f:2f:c8:59:31:7d:6d:ef:c3:9f:5c:4e: 3f:cd:4d:35:ad:e4:d0:19:a5:b3:76:83:8c:44:8d: f8:54:40:12:99:e0:98:3e:ec:da:0e:40:73:c2:c2: 40:3e:db:de:e3:0e:6d:08:b7:7a:d7:94:c2:3c:d2: f2:20:89:6f:90:57:f2:11:79:31:27:08:16:81:72: 78:c9:6d:36:2e:c8:3e:12:5d:a0:08:0b:3e:af:08: b2:ee:31:a1:53:a6:81:98:69:bb:73:7c:22:b0:46: 8a:9a:0b:5f:41:fd:c6:f7:68:19:43:9e:0b:15:6e: 87:ae:f3:81:48:9b:f7:d2:70:2a:78:4d:c9:87:c3: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:72:6D:76:21:2A:D8:BC:70:B7:F1:29:FB:EB:A0:8F:16:63:1C:30 X509v3 Authority Key Identifier: keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:76:8b:44:51:e3:8b:8a:ab:40:a4:23:77:ac:bb:6b:67:f8: 1d:98:40:e5:16:20:04:c0:e4:a6:fe:c3:fe:03:ac:1e:84:ba: f4:90:67:d9:15:4b:44:7f:ae:58:fd:6a:42:4a:9e:a7:79:04: 7a:a9:e2:ba:65:a4:53:da:cd:e2:7d:33:92:82:b3:aa:f3:1a: e2:68:6c:b4:05:5f:88:26:d1:65:f7:9b:17:8b:5a:a6:c1:2f: 6b:0f:02:53:fd:92:12:d1:52:7f:0c:cc:df:da:7f:ee:8f:65: ec:a9:4f:d5:ed:44:55:fd:5b:d4:5c:94:11:e8:5d:52:59:33: e7:36:6f:76:d6:e4:3b:56:be:40:33:f6:b6:9d:87:7c:21:04: 02:5c:22:d8:75:6b:c3:9f:62:59:0a:0b:dd:2f:a7:3a:c2:b9: 35:d9:9b:c7:5c:8b:5c:f6:20:98:9a:f4:f6:94:4e:39:de:f4: d3:0d:d0:b7:7e:5e:28:67:c3:ab:a4:58:87:21:8d:b6:c2:1f: b8:11:fa:32:38:d3:12:cb:f4:14:74:cb:40:30:03:0d:64:d0: ed:7f:88:66:01:e3:ef:ea:50:5f:2f:c6:43:90:1c:13:99:75: 52:c4:58:82:7d:db:4e:62:8d:6f:17:c9:7f:23:3f:ba:c2:87: 9f:b1:41:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tnJKpuc/tuwRwLiRdOhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNjczNWI3YTU1M2ExNjgwYzExYWRkM2U0OGMzNjM1YjUz OTc5Y2EwHhcNMjUxMjIxMDcwMTE5WhcNMjUxMjIyMDcwMTE5WjAzMTEwLwYDVQQD EyhhYTcyNmQ3NjIxMmFkOGJjNzBiN2YxMjlmYmViYTA4ZjE2NjMxYzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJYssgT8lIhj3+j2npZ3h7DiFEdS FslN21D42z+23VXtfAnF75y4d294LSdh43/gmpzNNWWAC7KvEI8lkzqbmCb7tQts PtWZaZGplTZgcvNALCg/eTMPwnK1paHkTpkLcQkuO/ZxwF7VtvALliT0FH4URWuv lpxoI+UvL8hZMX1t78OfXE4/zU01reTQGaWzdoOMRI34VEASmeCYPuzaDkBzwsJA Ptve4w5tCLd615TCPNLyIIlvkFfyEXkxJwgWgXJ4yW02Lsg+El2gCAs+rwiy7jGh U6aBmGm7c3wisEaKmgtfQf3G92gZQ54LFW6HrvOBSJv30nAqeE3Jh8Pj1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpybXYhKti8cLfxKfvroI8WYxwwMB8GA1UdIwQY MBaAFHpnNbelU6FoDBGt0+SMNjW1OXnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iYjI2NDctMDk1MC00NmE0LWI1NmQt MzRlYjY3YjQ3NWY2LzEvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iYjI2NDctMDk1MC00NmE0LWI1NmQtMzRlYjY3YjQ3NWY2 LzEvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXaLRFHj i4qrQKQjd6y7a2f4HZhA5RYgBMDkpv7D/gOsHoS69JBn2RVLRH+uWP1qQkqep3kE eqniumWkU9rN4n0zkoKzqvMa4mhstAVfiCbRZfebF4tapsEvaw8CU/2SEtFSfwzM 39p/7o9l7KlP1e1EVf1b1FyUEehdUlkz5zZvdtbkO1a+QDP2tp2HfCEEAlwi2HVr w59iWQoL3S+nOsK5Ndmbx1yLXPYgmJr09pROOd700w3Qt35eKGfDq6RYhyGNtsIf uBH6MjjTEsv0FHTLQDADDWTQ7X+IZgHj7+pQXy/GQ5AcE5l1UsRYgn3bTmKNbxfJ fyM/usKHn7FBLQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:53:07 2025 by rpki-client