This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json) Hash identifier: YCrh05EBOwSnQiwXZGXCx0tlnBgrv0Oclv8mwQzKzZ8= Subject key identifier: C3:E7:66:72:7A:43:07:9B:87:05:5B:2A:BF:0F:4C:3D:C5:F2:BB:F7 Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Certificate serial: 019B390EF1E2F2FA0A528DE2E8F20A36082E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft Manifest number: 076A Signing time: Sat 20 Dec 2025 00:00:39 +0000 Manifest this update: Sat 20 Dec 2025 00:00:39 +0000 Manifest next update: Sun 21 Dec 2025 00:00:39 +0000 Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: IcBzYXKCwPKAact0zWLQUbSPZjkMm78S9DCNbKH54o8=) 2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:f1:e2:f2:fa:0a:52:8d:e2:e8:f2:0a:36:08:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Validity Not Before: Dec 20 00:00:39 2025 GMT Not After : Dec 21 00:00:39 2025 GMT Subject: CN=c3e766727a43079b87055b2abf0f4c3dc5f2bbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:84:a6:86:84:43:7b:4e:71:80:9c:f0:c3:aa: 3c:1a:b6:4c:e8:76:87:54:d7:cc:e9:f6:be:1b:e8: 87:e2:df:dd:c6:b9:61:09:08:93:8a:23:b2:8f:1b: 98:b4:b3:08:cf:f7:e4:e9:8e:c8:5f:8e:dd:6b:d6: ec:2c:ad:cd:2b:5b:22:90:c9:5b:b5:74:54:7b:2e: 84:02:e1:42:68:41:25:3f:40:b6:01:94:f8:38:c1: 34:20:82:a3:29:29:4f:ca:4f:a1:77:c6:d6:17:4b: 5d:d5:50:72:83:7f:10:42:f6:fc:69:b8:a9:ce:89: b1:b2:91:f3:0e:3e:c9:f7:50:cb:ae:78:f0:bd:f8: 0c:2f:25:d8:ac:92:71:7d:60:e3:4a:53:e3:d5:d2: 4a:66:37:21:f8:53:0b:d8:07:ec:84:3e:c6:ae:a8: 68:34:34:92:45:c0:c9:0f:1f:06:a2:9f:ec:8e:fe: 59:e4:9d:d1:08:b6:bf:62:73:e3:64:1e:54:e4:59: 8e:5c:21:b4:a6:59:f4:da:b4:b7:e0:a7:77:58:a3: 72:3a:b6:9d:57:65:ed:e4:a0:71:51:9c:42:dd:9a: b9:f0:7c:fb:ae:1e:73:29:e2:bb:49:a7:cb:20:42: de:39:4d:94:fe:3f:be:9f:d5:9b:23:a9:2a:a6:7e: 93:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E7:66:72:7A:43:07:9B:87:05:5B:2A:BF:0F:4C:3D:C5:F2:BB:F7 X509v3 Authority Key Identifier: keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:fe:88:51:a9:65:4a:06:d3:45:69:4f:a7:35:4d:65:43:dd: ba:4d:b2:c2:10:83:d5:d5:a5:b2:3b:ac:5a:ae:f2:4d:fc:74: a4:b7:99:fa:9d:ba:bb:e0:ac:ff:b0:e7:aa:4b:fa:fc:0d:59: a4:66:34:17:d9:52:0e:86:0d:27:9d:9d:90:a5:05:81:cb:0b: a8:42:53:cb:4b:1e:c5:6d:84:e4:dc:a9:43:04:7f:95:e3:99: 5e:02:e8:8f:c2:79:a4:88:64:6e:1f:25:0e:01:45:1e:46:c8: 92:1f:4c:a0:68:31:ae:a3:72:a5:b0:f4:12:80:49:22:6d:3d: b4:e8:ea:1f:12:9c:ec:95:99:a2:a5:27:2a:22:33:05:d6:bc: 7d:31:39:87:8e:6a:5c:a3:7d:1f:25:8c:ab:41:68:ac:08:a7: 36:b7:c9:af:ff:81:10:0a:3f:ea:fa:bd:7b:43:67:5f:fd:48: d8:9c:fc:d4:18:29:b8:1e:f2:2f:a4:6a:b9:7c:92:df:3c:c1: 29:f6:bd:3b:73:f3:b9:e5:85:4e:2b:6a:f7:ce:8d:9f:11:36: ee:c5:4a:20:69:cc:42:f3:1b:49:eb:e7:c3:38:9d:bf:4a:4b: a1:db:db:9c:e0:29:03:69:56:c6:e1:93:98:3c:3c:a6:31:ac: bd:6e:83:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DvHi8voKUo3i6PIKNgguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYzgzNmU1Y2UyYmZlYjgyMWYzN2Q2NGE0OWMxNjE4NTVm ZTJjNTIwHhcNMjUxMjIwMDAwMDM5WhcNMjUxMjIxMDAwMDM5WjAzMTEwLwYDVQQD EyhjM2U3NjY3MjdhNDMwNzliODcwNTViMmFiZjBmNGMzZGM1ZjJiYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54SmhoRDe05xgJzww6o8GrZM6HaH VNfM6fa+G+iH4t/dxrlhCQiTiiOyjxuYtLMIz/fk6Y7IX47da9bsLK3NK1sikMlb tXRUey6EAuFCaEElP0C2AZT4OME0IIKjKSlPyk+hd8bWF0td1VByg38QQvb8abip zomxspHzDj7J91DLrnjwvfgMLyXYrJJxfWDjSlPj1dJKZjch+FML2AfshD7Grqho NDSSRcDJDx8Gop/sjv5Z5J3RCLa/YnPjZB5U5FmOXCG0pln02rS34Kd3WKNyOrad V2Xt5KBxUZxC3Zq58Hz7rh5zKeK7SafLIELeOU2U/j++n9WbI6kqpn6TtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPnZnJ6QwebhwVbKr8PTD3F8rv3MB8GA1UdIwQY MBaAFBDINuXOK/64IfN9ZKScFhhV/ixSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4Yjgt OWYzYzA5YmI3NDFjLzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4YjgtOWYzYzA5YmI3NDFj LzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdf6IUall SgbTRWlPpzVNZUPduk2ywhCD1dWlsjusWq7yTfx0pLeZ+p26u+Cs/7Dnqkv6/A1Z pGY0F9lSDoYNJ52dkKUFgcsLqEJTy0sexW2E5NypQwR/leOZXgLoj8J5pIhkbh8l DgFFHkbIkh9MoGgxrqNypbD0EoBJIm09tOjqHxKc7JWZoqUnKiIzBda8fTE5h45q XKN9HyWMq0ForAinNrfJr/+BEAo/6vq9e0NnX/1I2Jz81BgpuB7yL6RquXyS3zzB Kfa9O3PzueWFTitq986NnxE27sVKIGnMQvMbSevnwzidv0pLodvbnOApA2lWxuGT mDw8pjGsvW6DWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:31:08 2025 by rpki-client