This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json) Hash identifier: RrhztE+X81oYf5iEojUEjTPI8h2fUBfAfg/G7t0mI2A= Subject key identifier: B5:28:C9:17:0E:AC:C4:34:1D:D3:49:EB:8F:25:F5:9F:6B:EE:D3:91 Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3 Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3 Certificate serial: 019B446E6D6416C1907F65838FCB065FE22A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft Manifest number: 16E3 Signing time: Mon 22 Dec 2025 05:00:46 +0000 Manifest this update: Mon 22 Dec 2025 05:00:46 +0000 Manifest next update: Tue 23 Dec 2025 05:00:46 +0000 Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: eM3kew4Dy96xMCTl6mKtl4+XLJSHrgVXSyZKl14t+CM=) 2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:6d:64:16:c1:90:7f:65:83:8f:cb:06:5f:e2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3 Validity Not Before: Dec 22 05:00:46 2025 GMT Not After : Dec 23 05:00:46 2025 GMT Subject: CN=b528c9170eacc4341dd349eb8f25f59f6beed391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ee:48:d9:a3:9b:3a:3f:70:09:f4:5e:5b:f1: ff:27:c9:0a:fa:de:a6:d1:41:51:e0:c0:26:6d:3f: 2a:82:fb:97:9b:8e:47:6d:b5:f2:c5:dd:04:1b:3d: 5a:71:ae:c1:8d:c0:3b:14:6d:2c:6d:4f:7f:29:63: 4e:70:0d:f7:63:63:ac:1f:d0:8d:cc:ed:8a:59:e8: 78:5d:74:10:a7:e5:dd:7c:dc:82:b3:84:17:64:fd: 51:62:0e:93:b7:06:3f:a8:e8:14:b7:0e:16:7c:f6: 90:63:6d:99:9c:6c:41:84:0f:cf:00:71:ed:8f:ae: da:80:f9:f8:11:df:9b:3d:c8:78:b6:d8:e7:7b:db: 78:dd:d4:63:ab:42:b3:14:63:e2:56:37:46:d7:c3: d8:8f:02:9b:ce:36:93:15:a3:dc:29:d0:62:b0:da: 18:1f:c6:14:6e:72:72:e1:86:ca:3b:e0:8b:37:4f: 3b:a8:a1:0d:ac:63:af:89:5b:5a:71:16:15:32:c4: 4a:4e:b2:23:ea:e5:3a:b4:0d:da:f1:38:f2:1e:99: 7e:99:fb:51:8e:ef:2c:91:9b:a7:a0:08:7b:4a:fb: 14:69:1c:71:d5:27:f0:f7:bc:04:e3:fc:33:4b:df: f4:5c:f9:56:5d:e1:d9:68:31:36:25:ad:0e:2f:8d: 98:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:28:C9:17:0E:AC:C4:34:1D:D3:49:EB:8F:25:F5:9F:6B:EE:D3:91 X509v3 Authority Key Identifier: keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:96:0f:f9:77:20:22:45:8c:9e:4e:84:65:bb:08:b1:e4:2e: f8:54:5a:88:44:06:f0:2e:fb:d9:93:a8:52:3d:c6:05:be:20: 54:86:8a:b0:24:24:b3:f4:9e:6b:fc:3d:8c:e2:d0:5f:89:95: 8d:1b:e7:0c:6e:0c:a8:4f:49:bd:d4:d1:f3:f8:ca:59:d7:5b: c3:be:29:59:de:12:fa:25:7c:fa:a9:d1:45:68:9c:16:d9:d0: c2:7e:b7:b9:e9:67:b1:18:73:64:0d:fd:69:1f:cf:20:f6:83: 27:a5:69:57:6e:7e:5d:48:5c:49:b4:e0:93:82:3a:04:70:c1: 01:76:86:ea:e2:b7:b5:94:f5:53:1e:17:9b:51:ad:9d:8f:66: c9:4b:9c:82:66:c8:10:32:9c:e3:a4:1d:9e:a6:91:8e:25:64: a8:d1:db:cf:bc:9c:52:a4:19:90:0f:89:de:9d:3b:8b:2a:3c: 19:24:fc:d2:5f:d4:d9:ac:c6:50:17:fb:c1:b4:0d:ae:14:fd: cf:7c:67:f0:fd:ff:cd:13:9e:94:64:fa:66:8f:3c:9f:9f:5b: 1e:0e:ad:1d:86:ba:42:a2:73:f4:b7:a5:2e:ed:b7:61:06:c3: cf:a4:3d:11:2e:4a:88:57:0e:dc:10:99:9b:c4:31:7a:96:a0: aa:3f:9e:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbm1kFsGQf2WDj8sGX+IqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwODlhMDI1MWUzMmJmM2M0ODBmNWE5NGFiYjVmYjRlYjkw NmE1YjMwHhcNMjUxMjIyMDUwMDQ2WhcNMjUxMjIzMDUwMDQ2WjAzMTEwLwYDVQQD EyhiNTI4YzkxNzBlYWNjNDM0MWRkMzQ5ZWI4ZjI1ZjU5ZjZiZWVkMzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO5I2aObOj9wCfReW/H/J8kK+t6m 0UFR4MAmbT8qgvuXm45HbbXyxd0EGz1aca7BjcA7FG0sbU9/KWNOcA33Y2OsH9CN zO2KWeh4XXQQp+XdfNyCs4QXZP1RYg6TtwY/qOgUtw4WfPaQY22ZnGxBhA/PAHHt j67agPn4Ed+bPch4ttjne9t43dRjq0KzFGPiVjdG18PYjwKbzjaTFaPcKdBisNoY H8YUbnJy4YbKO+CLN087qKENrGOviVtacRYVMsRKTrIj6uU6tA3a8TjyHpl+mftR ju8skZunoAh7SvsUaRxx1Sfw97wE4/wzS9/0XPlWXeHZaDE2Ja0OL42YVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUoyRcOrMQ0HdNJ648l9Z9r7tORMB8GA1UdIwQY MBaAFBCJoCUeMr88SA9alKu1+065BqWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzkt YjhjNDZmOTU2NDBlLzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzktYjhjNDZmOTU2NDBl LzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJYP+Xcg IkWMnk6EZbsIseQu+FRaiEQG8C772ZOoUj3GBb4gVIaKsCQks/Sea/w9jOLQX4mV jRvnDG4MqE9JvdTR8/jKWddbw74pWd4S+iV8+qnRRWicFtnQwn63uelnsRhzZA39 aR/PIPaDJ6VpV25+XUhcSbTgk4I6BHDBAXaG6uK3tZT1Ux4Xm1GtnY9myUucgmbI EDKc46QdnqaRjiVkqNHbz7ycUqQZkA+J3p07iyo8GST80l/U2azGUBf7wbQNrhT9 z3xn8P3/zROelGT6Zo88n59bHg6tHYa6QqJz9LelLu23YQbDz6Q9ES5KiFcO3BCZ m8Qxepagqj+e2Q== -----END CERTIFICATE-----Generated at Mon Dec 22 07:04:01 2025 by rpki-client