This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft File: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft (raw, json) Hash identifier: C53s7DFYP6fUHtfM6ensYsQFDrpAEq2ReBh7eg/WNcY= Subject key identifier: 45:50:F8:6B:70:A7:CE:F4:11:27:01:2B:CE:1A:C2:C9:EA:02:1A:FA Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4 Certificate issuer: /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4 Certificate serial: 019B41DB4E92F98EAE1C2EEE6316C4E3730B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft Manifest number: 15CE Signing time: Sun 21 Dec 2025 17:00:49 +0000 Manifest this update: Sun 21 Dec 2025 17:00:49 +0000 Manifest next update: Mon 22 Dec 2025 17:00:49 +0000 Files and hashes: 1: 3aNd9eZsJolPAPy2WUcnIA679FQ.roa (hash: eblt98UAYSnzgUqaK1ZwDyinlKt8BByqD/nttuJnoYY=) 2: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl (hash: /FzhJm2Recopw71fGhEYJhoDJ8u0kGoylLv6z8DjP7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:4e:92:f9:8e:ae:1c:2e:ee:63:16:c4:e3:73:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4 Validity Not Before: Dec 21 17:00:49 2025 GMT Not After : Dec 22 17:00:49 2025 GMT Subject: CN=4550f86b70a7cef41127012bce1ac2c9ea021afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:85:82:b8:68:08:e7:8e:a5:b7:b6:fc:59: 01:47:bf:99:ba:99:77:a8:45:de:56:2c:50:18:08: 75:10:39:8c:a3:0d:03:6b:d9:db:7e:37:47:61:2f: f5:32:ce:0b:8c:76:75:a8:a8:80:3a:43:65:79:07: 58:59:72:a1:46:d0:91:ad:5e:56:c4:84:44:fa:96: cb:ba:3d:01:bc:a6:ea:b2:0a:0e:06:7a:4a:c0:f5: 36:10:a1:09:e2:dd:99:31:6c:5e:da:49:64:66:ef: 4b:55:55:23:52:0e:27:d6:ab:d8:e8:20:f0:96:8a: 8e:c0:22:2b:36:93:93:ed:55:95:5f:70:44:ef:28: a4:a6:ca:fa:3b:da:cc:a5:99:b2:c9:53:8e:bc:06: 6a:92:ed:2a:de:2a:d1:ca:d5:b4:6e:3a:e3:ce:d6: 92:70:d5:28:f7:25:79:2c:14:3a:f8:15:63:a4:1e: 87:62:e6:61:19:41:b3:a6:db:d6:f0:bd:06:fe:80: 4d:dd:e6:4e:f5:6c:7c:98:e8:e6:f3:7a:97:58:99: b4:a1:49:ee:46:12:7d:8e:83:3e:3d:b3:f6:5e:d3: 5d:39:72:ab:fc:9d:06:28:d7:62:b1:65:b9:82:70: c9:36:39:0f:06:0d:a3:71:c5:08:03:fb:0b:a7:10: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:50:F8:6B:70:A7:CE:F4:11:27:01:2B:CE:1A:C2:C9:EA:02:1A:FA X509v3 Authority Key Identifier: keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0c:eb:27:3a:fb:2d:11:42:c1:a1:5a:b5:f2:85:0c:a8:77: 8e:ae:ce:6c:51:81:03:d4:3c:31:21:43:e6:ad:2d:8c:d3:ca: 94:39:ec:33:f0:09:3f:3e:c3:ac:81:c2:e7:39:78:da:45:10: 9e:0f:7a:41:a3:d7:0a:95:71:d0:51:6d:88:8d:37:9d:44:0f: c5:dd:5b:5c:ed:3a:cc:09:c6:25:26:14:14:d8:f6:1b:71:9a: 1e:7e:3d:c3:e3:9a:8a:2d:f3:da:e6:82:a1:d3:3d:4b:e5:c7: af:37:61:a6:2c:a4:9d:23:ae:0e:53:7e:90:3d:66:96:fb:84: 5b:ad:2a:7e:da:39:b0:38:ef:17:b1:57:82:2d:79:51:08:4a: 3f:84:43:23:8c:4d:30:10:11:08:ce:79:f1:71:82:e7:7d:fd: 6f:7d:01:5b:5e:26:bd:2c:18:32:ad:41:d5:53:b9:79:7c:84: b9:9f:28:03:fd:f5:37:2f:8c:86:f0:01:fd:a4:f1:65:19:ee: 92:20:2c:dc:6e:9c:c7:ec:1a:f8:70:c2:a5:1c:41:38:1e:01: b1:45:be:e1:44:c1:44:59:c3:82:e4:dc:72:8a:23:41:88:d4: f4:aa:d8:da:5f:f9:98:ab:a5:a2:00:8e:10:b3:2e:f4:13:e1: 36:74:73:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB206S+Y6uHC7uYxbE43MLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjJmN2RhOGZlZTVkMmE3YmNkZDQwMTRhNzBhOTI3ZGI0 OTlmYTQwHhcNMjUxMjIxMTcwMDQ5WhcNMjUxMjIyMTcwMDQ5WjAzMTEwLwYDVQQD Eyg0NTUwZjg2YjcwYTdjZWY0MTEyNzAxMmJjZTFhYzJjOWVhMDIxYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqECFgrhoCOeOpbe2/FkBR7+Zupl3 qEXeVixQGAh1EDmMow0Da9nbfjdHYS/1Ms4LjHZ1qKiAOkNleQdYWXKhRtCRrV5W xIRE+pbLuj0BvKbqsgoOBnpKwPU2EKEJ4t2ZMWxe2klkZu9LVVUjUg4n1qvY6CDw loqOwCIrNpOT7VWVX3BE7yikpsr6O9rMpZmyyVOOvAZqku0q3irRytW0bjrjztaS cNUo9yV5LBQ6+BVjpB6HYuZhGUGzptvW8L0G/oBN3eZO9Wx8mOjm83qXWJm0oUnu RhJ9joM+PbP2XtNdOXKr/J0GKNdisWW5gnDJNjkPBg2jccUIA/sLpxALowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVQ+Gtwp870EScBK84awsnqAhr6MB8GA1UdIwQY MBaAFBJi99qP7l0qe83UAUpwqSfbSZ+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAt YTYxMGQ3NWMzMmUyLzEvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAtYTYxMGQ3NWMzMmUy LzEvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwzrJzr7 LRFCwaFatfKFDKh3jq7ObFGBA9Q8MSFD5q0tjNPKlDnsM/AJPz7DrIHC5zl42kUQ ng96QaPXCpVx0FFtiI03nUQPxd1bXO06zAnGJSYUFNj2G3GaHn49w+Oaii3z2uaC odM9S+XHrzdhpiyknSOuDlN+kD1mlvuEW60qfto5sDjvF7FXgi15UQhKP4RDI4xN MBARCM558XGC5339b30BW14mvSwYMq1B1VO5eXyEuZ8oA/31Ny+MhvAB/aTxZRnu kiAs3G6cx+wa+HDCpRxBOB4BsUW+4UTBRFnDguTccoojQYjU9KrY2l/5mKulogCO ELMu9BPhNnRzrQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:21 2025 by rpki-client