This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json) Hash identifier: NkqgYo6O/QSRdCUVeEHiztUR7OY9XIjqJJQg+CKe+08= Subject key identifier: E4:DC:65:FA:B7:C1:4B:1A:AA:2D:9C:C6:D7:D0:6B:4E:5A:55:CA:72 Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91 Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291 Certificate serial: 019B3BA2BBB41DE39916831711B7ABBA12C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft Manifest number: 070C Signing time: Sat 20 Dec 2025 12:01:19 +0000 Manifest this update: Sat 20 Dec 2025 12:01:19 +0000 Manifest next update: Sun 21 Dec 2025 12:01:19 +0000 Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: d27mFOmvEOwkKPnqaf1NSduZI9lQ6j87dTFPUddfUZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:bb:b4:1d:e3:99:16:83:17:11:b7:ab:ba:12:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291 Validity Not Before: Dec 20 12:01:19 2025 GMT Not After : Dec 21 12:01:19 2025 GMT Subject: CN=e4dc65fab7c14b1aaa2d9cc6d7d06b4e5a55ca72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:85:4d:4c:d9:2d:cc:21:28:94:56:c9:a2:af: a4:e4:12:59:a7:1c:77:4d:3c:6b:c8:86:82:c8:a9: e3:28:4c:22:21:d2:1a:7a:4e:57:03:32:04:ba:2a: 83:08:20:19:44:cf:7f:d4:fd:6f:38:7b:6e:cb:ca: 7a:6e:27:e9:5c:99:b8:f6:cb:38:b6:28:50:52:88: 8d:7f:08:54:10:68:eb:0c:6b:cc:23:19:18:9d:b9: d2:7b:36:dd:2d:58:21:4d:0e:88:42:b4:f4:1f:69: 38:86:5b:b3:d0:67:05:4a:3e:fc:a0:f3:56:24:f8: 8b:88:90:fb:de:d0:7f:74:78:a3:15:c7:aa:f0:3a: 61:ff:0d:4c:57:88:13:9b:ba:c4:64:4d:73:52:82: 66:e8:69:9d:ed:79:86:db:5e:c0:fc:af:68:7b:0c: f8:db:be:48:d6:0e:04:2c:f5:6d:9b:6f:bf:0e:1a: 02:39:bd:5f:aa:3c:3b:65:79:e6:41:08:23:95:30: e3:6a:40:5c:5b:f6:43:01:fb:98:55:77:07:24:dc: ce:cb:f7:08:6d:02:8c:69:ae:50:a4:cd:34:e4:4f: c9:61:85:99:a4:5f:96:4b:10:05:bf:eb:a3:5a:eb: b2:1d:fd:84:27:8b:99:d4:5b:e9:ff:1b:ce:e1:d1: 7c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DC:65:FA:B7:C1:4B:1A:AA:2D:9C:C6:D7:D0:6B:4E:5A:55:CA:72 X509v3 Authority Key Identifier: keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:45:c9:1d:72:05:f3:b4:0b:97:65:f6:0b:d4:f7:2d:ed:7a: 34:8a:63:86:b5:3b:5e:73:dc:33:32:9e:b3:de:11:1d:b9:a7: 9e:24:ad:17:2a:e5:b4:98:1f:34:b0:25:f3:ca:70:a8:22:6e: 95:6d:ff:20:2c:89:ce:55:9d:3d:7b:6b:d5:71:56:1b:05:59: 9b:ce:00:85:6e:5f:f6:21:ee:fc:da:7a:19:ef:64:2e:92:cb: 0b:8c:5e:0e:45:bf:aa:ac:19:24:dd:ca:da:2c:0d:f0:b0:fd: bf:0c:36:93:d1:89:64:ba:e7:22:a1:02:c8:80:b1:9e:94:4d: 94:34:04:75:00:4d:c2:81:e4:5f:4e:e0:25:24:dc:92:a2:e9: 56:eb:6a:20:52:cc:25:be:7e:ac:cb:91:56:de:cd:da:c0:5a: 78:20:a7:3b:68:b9:57:ef:ef:cc:15:50:4b:1f:59:16:e7:83: f4:19:ba:1d:f1:51:e2:a4:0f:61:78:b6:14:33:43:bc:b8:44: 33:d9:4c:6b:96:4a:e3:29:39:1f:09:87:22:46:e0:a5:84:25: a9:3f:b3:21:a5:44:ed:ec:55:f2:a0:72:8c:4b:d1:5f:ad:58: df:0e:94:0f:81:15:c2:59:b3:41:15:a2:8e:be:33:a9:40:e5: b0:97:ac:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oru0HeOZFoMXEberuhLGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDk5YzE2N2EyMzZkY2Y0NTVlYjk4NzFmMGRjZWQwYmEw ZGMyOTEwHhcNMjUxMjIwMTIwMTE5WhcNMjUxMjIxMTIwMTE5WjAzMTEwLwYDVQQD EyhlNGRjNjVmYWI3YzE0YjFhYWEyZDljYzZkN2QwNmI0ZTVhNTVjYTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14VNTNktzCEolFbJoq+k5BJZpxx3 TTxryIaCyKnjKEwiIdIaek5XAzIEuiqDCCAZRM9/1P1vOHtuy8p6bifpXJm49ss4 tihQUoiNfwhUEGjrDGvMIxkYnbnSezbdLVghTQ6IQrT0H2k4hluz0GcFSj78oPNW JPiLiJD73tB/dHijFceq8Dph/w1MV4gTm7rEZE1zUoJm6Gmd7XmG217A/K9oewz4 275I1g4ELPVtm2+/DhoCOb1fqjw7ZXnmQQgjlTDjakBcW/ZDAfuYVXcHJNzOy/cI bQKMaa5QpM005E/JYYWZpF+WSxAFv+ujWuuyHf2EJ4uZ1Fvp/xvO4dF8wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTcZfq3wUsaqi2cxtfQa05aVcpyMB8GA1UdIwQY MBaAFKhJnBZ6I23PRV65hx8NztC6DcKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mY2Q0MWItNWUxZC00YjFhLWE1NmQt MTYxM2U4ZDUwNjVmLzEvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mY2Q0MWItNWUxZC00YjFhLWE1NmQtMTYxM2U4ZDUwNjVm LzEvcUVtY0Zub2piYzlGWHJtSEh3M08wTG9Od3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEXJHXIF 87QLl2X2C9T3Le16NIpjhrU7XnPcMzKes94RHbmnniStFyrltJgfNLAl88pwqCJu lW3/ICyJzlWdPXtr1XFWGwVZm84AhW5f9iHu/Np6Ge9kLpLLC4xeDkW/qqwZJN3K 2iwN8LD9vww2k9GJZLrnIqECyICxnpRNlDQEdQBNwoHkX07gJSTckqLpVutqIFLM Jb5+rMuRVt7N2sBaeCCnO2i5V+/vzBVQSx9ZFueD9Bm6HfFR4qQPYXi2FDNDvLhE M9lMa5ZK4yk5HwmHIkbgpYQlqT+zIaVE7exV8qByjEvRX61Y3w6UD4EVwlmzQRWi jr4zqUDlsJesvw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:31:39 2025 by rpki-client