This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft File: eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json) Hash identifier: Ry0rgpRpLE5g3PvNNZGgTQ4zTWsDIJ+BEZy1bgDbNk4= Subject key identifier: 52:3A:65:D1:DA:D5:E2:65:15:4B:82:E6:2F:91:D0:83:61:19:37:BC Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2 Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2 Certificate serial: 019B3EDACA7E4F8D5FF81CA88A09C06DA0FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft Manifest number: 0C33 Signing time: Sun 21 Dec 2025 03:01:24 +0000 Manifest this update: Sun 21 Dec 2025 03:01:24 +0000 Manifest next update: Mon 22 Dec 2025 03:01:24 +0000 Files and hashes: 1: 5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa (hash: voEtz6mEruRpxmdJ50z2YHPNPHZIPj+18ktBBGi8uuc=) 2: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: wPjnyzQ/F/2tqVqbzFydTtBW1Hi9F/ieqZk5HJZwcPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:ca:7e:4f:8d:5f:f8:1c:a8:8a:09:c0:6d:a0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2 Validity Not Before: Dec 21 03:01:24 2025 GMT Not After : Dec 22 03:01:24 2025 GMT Subject: CN=523a65d1dad5e265154b82e62f91d083611937bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bd:bc:9a:8e:0d:70:c4:92:74:b0:64:d3:8e: da:0a:25:a2:1d:8c:7f:96:5f:7e:c0:6d:6c:4b:2a: fc:6a:24:b6:b4:3d:72:de:73:84:13:7f:5c:0b:91: 4b:f0:f2:51:e7:01:f6:a1:fb:3f:55:45:7d:2e:05: 89:d3:40:b7:61:9d:53:c5:29:7f:20:7a:0d:b7:70: 07:2c:e4:93:c5:d2:3b:e9:7f:3f:d1:49:7e:a6:81: e0:c0:79:0c:0b:e6:c1:d8:c5:cb:cc:75:bb:10:58: 15:9f:c2:e3:32:47:56:7f:96:8e:5c:0b:f8:64:4e: 11:ff:ce:c2:2d:a7:93:d0:1d:1e:fd:35:d8:49:31: ba:f0:5e:17:a6:fb:5b:e5:62:58:d9:d9:2e:b0:f9: 7d:a1:e8:32:39:11:d7:ab:6a:99:17:d0:ec:9e:bb: cb:48:27:fb:18:81:8b:57:a5:7f:8a:52:ef:3f:ac: fb:9b:85:b6:61:c9:0f:b5:5e:4b:42:bb:3d:91:3d: 35:b4:db:32:07:b1:9c:5f:e3:84:c2:08:9c:df:de: 8f:a5:9d:8c:56:7f:3d:75:b6:e6:26:94:c9:26:72: 0b:21:5c:97:f7:79:72:f3:0f:81:47:44:df:4e:5e: a4:03:13:0a:e1:d6:45:41:83:96:e0:79:df:a2:8b: d5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3A:65:D1:DA:D5:E2:65:15:4B:82:E6:2F:91:D0:83:61:19:37:BC X509v3 Authority Key Identifier: keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0d:5c:d0:c4:29:22:d4:77:c7:6d:54:5c:75:af:7a:fc:c7: 30:d2:b3:7d:0f:0b:38:cf:9b:97:dd:5b:d0:6e:d2:08:29:a6: cb:c7:fc:ea:05:54:af:1b:f5:5c:5d:e3:6c:16:bc:10:17:50: 3d:22:a7:36:4d:8c:31:59:94:04:73:71:27:a5:ba:d9:bd:e9: ff:11:b5:42:b7:4c:ca:4b:05:7e:fd:77:d3:43:58:32:a8:22: 1d:7a:de:fa:60:7a:07:de:0b:14:25:d4:45:dc:8e:d9:40:98: 88:59:fc:d4:f0:48:bd:fa:d0:3f:e2:cf:b8:9f:1c:1c:ba:e9: 39:c1:c9:a3:ea:c8:da:ca:3a:09:cd:ed:6b:84:33:ef:26:86: 06:07:47:62:15:c6:c1:ed:df:1c:2a:0e:4c:e9:d0:dd:16:80: 01:81:a4:41:db:a1:be:f1:56:3c:8e:dd:da:cd:eb:cd:1a:93: e4:1f:35:49:1e:3a:97:19:bd:80:9b:5e:43:55:41:e3:a4:39: 16:21:99:00:bb:5b:57:78:be:7c:6f:99:1b:60:37:3f:01:14: 97:a9:bd:6e:d0:c1:30:48:45:f1:9b:f3:e7:2f:72:d3:d9:ce: 4c:66:d8:ce:5d:55:b5:6d:67:2a:2b:9e:1b:95:62:84:ac:ea: 83:72:cf:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2sp+T41f+ByoignAbaD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4Y2I0OTc1YjkzYjQ1OTM1NzYwNDgzMzg1NjRlYTNlYjA5 ZGM4ZTIwHhcNMjUxMjIxMDMwMTI0WhcNMjUxMjIyMDMwMTI0WjAzMTEwLwYDVQQD Eyg1MjNhNjVkMWRhZDVlMjY1MTU0YjgyZTYyZjkxZDA4MzYxMTkzN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7728mo4NcMSSdLBk047aCiWiHYx/ ll9+wG1sSyr8aiS2tD1y3nOEE39cC5FL8PJR5wH2ofs/VUV9LgWJ00C3YZ1TxSl/ IHoNt3AHLOSTxdI76X8/0Ul+poHgwHkMC+bB2MXLzHW7EFgVn8LjMkdWf5aOXAv4 ZE4R/87CLaeT0B0e/TXYSTG68F4Xpvtb5WJY2dkusPl9oegyORHXq2qZF9DsnrvL SCf7GIGLV6V/ilLvP6z7m4W2YckPtV5LQrs9kT01tNsyB7GcX+OEwgic396PpZ2M Vn89dbbmJpTJJnILIVyX93ly8w+BR0TfTl6kAxMK4dZFQYOW4HnfoovVvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFI6ZdHa1eJlFUuC5i+R0INhGTe8MB8GA1UdIwQY MBaAFHjLSXW5O0WTV2BIM4Vk6j6wncjiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUt ZmE3OTg4YjcxNGJjLzEvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUtZmE3OTg4YjcxNGJj LzEvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdw1c0MQp ItR3x21UXHWvevzHMNKzfQ8LOM+bl91b0G7SCCmmy8f86gVUrxv1XF3jbBa8EBdQ PSKnNk2MMVmUBHNxJ6W62b3p/xG1QrdMyksFfv1300NYMqgiHXre+mB6B94LFCXU RdyO2UCYiFn81PBIvfrQP+LPuJ8cHLrpOcHJo+rI2so6Cc3ta4Qz7yaGBgdHYhXG we3fHCoOTOnQ3RaAAYGkQduhvvFWPI7d2s3rzRqT5B81SR46lxm9gJteQ1VB46Q5 FiGZALtbV3i+fG+ZG2A3PwEUl6m9btDBMEhF8Zvz5y9y09nOTGbYzl1VtW1nKiue G5VihKzqg3LPSw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:25:48 2025 by rpki-client