This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json) Hash identifier: wXSZDM6VfPH5c1wBosCI8v8G+pSq7/YGmkh3yKKTql8= Subject key identifier: 45:B5:1A:7C:CE:88:5E:6E:02:3D:F5:20:9C:8F:22:E7:CA:67:3B:46 Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9 Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9 Certificate serial: 019B424AB2CAD861FA2181C566F998691CED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft Manifest number: 143B Signing time: Sun 21 Dec 2025 19:02:30 +0000 Manifest this update: Sun 21 Dec 2025 19:02:30 +0000 Manifest next update: Mon 22 Dec 2025 19:02:30 +0000 Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: oYGYD7FNBBdaxw8sxlgfpi9BXmPSmlIPd335Rf6DVW0=) 2: f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa (hash: jPD7nunzn9cSBTS41yie793CY1UObq7bXZ4qPAfEbsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:b2:ca:d8:61:fa:21:81:c5:66:f9:98:69:1c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9 Validity Not Before: Dec 21 19:02:30 2025 GMT Not After : Dec 22 19:02:30 2025 GMT Subject: CN=45b51a7cce885e6e023df5209c8f22e7ca673b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:b3:9b:96:d8:79:92:f2:df:f7:97:1d:5f: 30:e3:78:eb:e6:80:33:ab:f8:7b:83:22:6f:aa:cf: f9:af:6f:a3:c5:35:3f:03:2b:f3:f9:3d:fc:01:b6: ae:22:37:25:ee:90:36:0f:72:3c:97:b7:4c:83:f2: fc:12:c3:d9:a5:8a:22:0b:f0:a1:9b:b3:4e:dd:f0: 2d:ac:13:10:67:4e:af:f6:f8:2f:77:9d:e9:1e:76: 1f:b3:d0:23:9f:c8:18:a6:9f:a1:f1:d7:36:33:bf: a2:6b:7c:a6:eb:21:05:36:24:19:47:c3:90:63:5a: 6f:e9:d1:a2:c1:fd:69:ed:c6:5d:7b:db:fc:8e:45: a5:9d:e9:0e:c1:0e:b4:90:bd:63:1c:7d:3a:c6:e3: f8:7f:75:99:a1:e4:73:c8:01:28:e9:d0:bd:a4:6a: 67:ba:a7:ca:90:c2:56:37:6d:52:19:ee:ea:4a:d8: 82:9d:20:b8:61:ec:33:71:b7:05:5f:5d:42:cc:5f: 6d:c5:77:67:a2:77:de:62:6c:7b:ef:ac:da:7e:76: 65:dc:26:26:52:97:0e:92:2f:f1:92:9e:6c:78:13: b1:97:f2:99:88:42:00:8b:ed:d5:2f:2e:81:6f:21: 29:7b:52:4a:5b:92:8f:30:65:cd:0b:d1:62:c3:7f: 29:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B5:1A:7C:CE:88:5E:6E:02:3D:F5:20:9C:8F:22:E7:CA:67:3B:46 X509v3 Authority Key Identifier: keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:be:5f:e1:2f:ed:f6:43:a5:fb:a9:5f:8a:e8:f5:ae:3f:4e: 54:ae:3c:1a:02:11:8f:45:ad:f8:41:61:0b:39:1c:87:ec:09: f1:73:07:c6:cc:90:5c:fa:82:2b:78:ac:de:f0:3c:f4:3d:24: 99:cf:1e:4a:05:99:9f:6f:4d:cc:7d:00:42:c0:8b:ed:22:2e: aa:c0:0b:9d:b6:15:47:93:f6:f7:48:70:fe:96:0c:88:3f:45: 09:92:4a:e6:83:28:f6:7a:13:1d:45:9d:ed:16:d4:88:9d:f1: 5b:72:24:f0:e0:e9:f8:23:7f:27:2a:c5:ec:b4:c5:b4:20:ce: 58:d8:89:ce:58:38:e0:74:6c:ce:d0:3e:39:e7:1d:67:13:72: 29:17:41:2c:ca:1c:43:73:12:67:03:72:93:a7:ea:ed:9a:9b: c7:0b:e4:e8:30:11:6d:e7:a9:69:f1:b5:ba:89:de:34:91:dd: 69:05:7a:29:8e:4b:f0:10:c0:a4:6c:c0:63:12:b0:9d:04:ba: 5b:ad:65:9b:db:49:13:fd:19:60:96:a7:37:32:65:a0:4a:49: 18:c3:eb:51:41:89:52:af:d8:9a:e7:08:19:2e:11:77:75:ad: 8a:c2:3a:f0:8b:80:d7:f9:7b:fd:c5:fe:9c:a2:e3:43:58:eb: f8:fe:7b:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSrLK2GH6IYHFZvmYaRztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDhlNjUwNmVjNmQ1M2M1OTE1ZGM4ZjI5NjQ0NDg1ZGY5 MmZjZTkwHhcNMjUxMjIxMTkwMjMwWhcNMjUxMjIyMTkwMjMwWjAzMTEwLwYDVQQD Eyg0NWI1MWE3Y2NlODg1ZTZlMDIzZGY1MjA5YzhmMjJlN2NhNjczYjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzOzm5bYeZLy3/eXHV8w43jr5oAz q/h7gyJvqs/5r2+jxTU/Ayvz+T38AbauIjcl7pA2D3I8l7dMg/L8EsPZpYoiC/Ch m7NO3fAtrBMQZ06v9vgvd53pHnYfs9Ajn8gYpp+h8dc2M7+ia3ym6yEFNiQZR8OQ Y1pv6dGiwf1p7cZde9v8jkWlnekOwQ60kL1jHH06xuP4f3WZoeRzyAEo6dC9pGpn uqfKkMJWN21SGe7qStiCnSC4YewzcbcFX11CzF9txXdnonfeYmx776zafnZl3CYm UpcOki/xkp5seBOxl/KZiEIAi+3VLy6BbyEpe1JKW5KPMGXNC9Fiw38pqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEW1GnzOiF5uAj31IJyPIufKZztGMB8GA1UdIwQY MBaAFPxI5lBuxtU8WRXcjylkRIXfkvzpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMt ZjViZWUxNmVkM2E3LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMtZjViZWUxNmVkM2E3 LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlb5f4S/t 9kOl+6lfiuj1rj9OVK48GgIRj0Wt+EFhCzkch+wJ8XMHxsyQXPqCK3is3vA89D0k mc8eSgWZn29NzH0AQsCL7SIuqsALnbYVR5P290hw/pYMiD9FCZJK5oMo9noTHUWd 7RbUiJ3xW3Ik8ODp+CN/JyrF7LTFtCDOWNiJzlg44HRsztA+OecdZxNyKRdBLMoc Q3MSZwNyk6fq7Zqbxwvk6DARbeepafG1uoneNJHdaQV6KY5L8BDApGzAYxKwnQS6 W61lm9tJE/0ZYJanNzJloEpJGMPrUUGJUq/YmucIGS4Rd3WtisI68IuA1/l7/cX+ nKLjQ1jr+P572Q== -----END CERTIFICATE-----Generated at Mon Dec 22 03:30:41 2025 by rpki-client