This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft File: EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft (raw, json) Hash identifier: m4SDxF9QyBL67gC13vhrf3/tYXkrswd/Vtt2sCduowI= Subject key identifier: EC:81:4F:07:A1:52:92:98:80:9F:02:08:60:3F:49:F9:59:01:0D:E4 Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8 Certificate issuer: /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8 Certificate serial: 019B7711F6DF8177A14FC5F59D9B2579921D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft Manifest number: 14B5 Signing time: Thu 01 Jan 2026 01:00:24 +0000 Manifest this update: Thu 01 Jan 2026 01:00:24 +0000 Manifest next update: Fri 02 Jan 2026 01:00:24 +0000 Files and hashes: 1: 5xCjSbVj0eQI-CbUmHCn2zV_TYM.roa (hash: oYg7Hd7YagslknVGleyR1QDuiaGvaAsro+gwXQIpa8k=) 2: EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl (hash: HJGSNA/yQxYfIn8rK3ythpLEerZ+XWZVxMBpbx/jlfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 01:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:11:f6:df:81:77:a1:4f:c5:f5:9d:9b:25:79:92:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8 Validity Not Before: Jan 1 01:00:24 2026 GMT Not After : Jan 2 01:00:24 2026 GMT Subject: CN=ec814f07a1529298809f0208603f49f959010de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:ea:18:b9:a5:66:f3:f2:c2:4b:66:67:f7: 31:b6:9d:74:5c:c1:21:db:df:35:d9:cd:f2:f0:64: 53:f7:67:09:71:c8:31:61:f3:bc:89:99:8d:e1:ea: 4c:bc:45:ef:3d:76:a8:74:77:f3:88:ad:97:6e:07: e3:45:b8:e7:87:ab:70:38:f4:00:43:56:71:0f:5d: 04:18:35:dc:15:09:31:6b:be:26:d1:74:02:e3:4f: c5:c7:b5:88:c4:8f:45:bc:b1:43:1c:82:b0:90:ca: 81:bc:38:d5:9f:39:43:85:80:30:ad:70:be:2d:8e: f0:eb:a3:19:84:e9:2f:e5:a5:6d:04:37:5f:15:af: 42:d7:c3:11:65:ea:5f:61:e5:0d:02:21:fc:d5:2f: 89:d3:0d:14:1f:c1:cf:aa:21:a9:3c:74:ae:87:6f: a4:14:73:dd:8a:1d:61:b2:d6:34:76:1c:92:77:b4: e1:02:bb:9c:75:f2:11:42:7d:26:b6:dd:f9:de:0d: fb:6f:e9:be:36:b6:d5:7d:f0:22:2a:a7:a3:ea:49: 2f:43:91:f5:9f:c6:22:d4:1b:44:bf:a7:41:65:0d: 56:89:12:0f:0a:c1:34:0f:20:67:ce:99:4f:b6:ae: 64:67:c1:87:23:85:ad:28:32:87:42:ed:9c:75:0f: 7b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:81:4F:07:A1:52:92:98:80:9F:02:08:60:3F:49:F9:59:01:0D:E4 X509v3 Authority Key Identifier: keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5a:20:b1:6f:7c:f8:90:e7:be:3e:70:ea:51:23:d9:3a:9c: 0d:eb:8d:e1:5a:8c:4c:cd:69:94:53:88:7b:19:38:20:e2:a0: d6:4b:b9:1b:c1:9e:36:c4:c8:25:d1:10:f4:1f:f8:f7:18:47: ec:0d:52:01:b1:df:a8:f9:0b:d4:99:3e:20:58:3e:b1:09:fd: 88:61:ad:57:c1:15:f9:c6:77:01:98:b4:b2:7e:ca:0f:06:ac: 54:37:ee:ff:17:77:08:6f:74:37:a1:73:15:0b:0c:d2:52:26: 3b:7a:07:13:33:b6:c3:ff:fb:da:f3:be:4a:b9:15:f6:1c:f6: 6d:d7:06:62:f0:eb:26:44:78:5e:cc:20:55:55:1f:c8:2e:dc: a1:db:63:7c:b7:f2:1b:8a:c1:ff:de:2b:4f:4e:67:84:5d:31: 75:32:4c:ac:84:be:c3:e0:9b:ac:a5:41:29:6d:72:21:02:a6: f3:64:e4:83:36:86:00:b6:cd:55:b0:af:4b:60:a8:ac:ac:c9: 60:d4:f8:9a:f5:88:55:7e:4f:09:78:c1:ec:a4:9a:29:fa:c6: b9:df:f3:a1:06:b3:ea:8e:42:ec:fd:dc:a8:fe:7f:1e:ee:1e: 95:4a:93:6a:55:09:fd:7c:9a:ac:eb:ec:70:6a:23:f5:38:c9: d2:f9:c6:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3EfbfgXehT8X1nZsleZIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYzA5NGFkMGZjN2JmMTYwYWExYzFhZDBjNTM4ZTliZjgw ZTU5ZjgwHhcNMjYwMTAxMDEwMDI0WhcNMjYwMTAyMDEwMDI0WjAzMTEwLwYDVQQD EyhlYzgxNGYwN2ExNTI5Mjk4ODA5ZjAyMDg2MDNmNDlmOTU5MDEwZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMTqGLmlZvPywktmZ/cxtp10XMEh 29812c3y8GRT92cJccgxYfO8iZmN4epMvEXvPXaodHfziK2XbgfjRbjnh6twOPQA Q1ZxD10EGDXcFQkxa74m0XQC40/Fx7WIxI9FvLFDHIKwkMqBvDjVnzlDhYAwrXC+ LY7w66MZhOkv5aVtBDdfFa9C18MRZepfYeUNAiH81S+J0w0UH8HPqiGpPHSuh2+k FHPdih1hstY0dhySd7ThArucdfIRQn0mtt353g37b+m+NrbVffAiKqej6kkvQ5H1 n8Yi1BtEv6dBZQ1WiRIPCsE0DyBnzplPtq5kZ8GHI4WtKDKHQu2cdQ97iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyBTwehUpKYgJ8CCGA/SflZAQ3kMB8GA1UdIwQY MBaAFBDAlK0Px78WCqHBrQxTjpv4Dln4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU1DVXJRX0h2eFlLb2NHdERGT09tX2dPV2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83ZmUwZTctOGRiMS00MDU3LWI1ZmYt NjUwNDVmN2Q4ZWE1LzEvRU1DVXJRX0h2eFlLb2NHdERGT09tX2dPV2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy83ZmUwZTctOGRiMS00MDU3LWI1ZmYtNjUwNDVmN2Q4ZWE1 LzEvRU1DVXJRX0h2eFlLb2NHdERGT09tX2dPV2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1ogsW98 +JDnvj5w6lEj2TqcDeuN4VqMTM1plFOIexk4IOKg1ku5G8GeNsTIJdEQ9B/49xhH 7A1SAbHfqPkL1Jk+IFg+sQn9iGGtV8EV+cZ3AZi0sn7KDwasVDfu/xd3CG90N6Fz FQsM0lImO3oHEzO2w//72vO+SrkV9hz2bdcGYvDrJkR4XswgVVUfyC7codtjfLfy G4rB/94rT05nhF0xdTJMrIS+w+CbrKVBKW1yIQKm82TkgzaGALbNVbCvS2CorKzJ YNT4mvWIVX5PCXjB7KSaKfrGud/zoQaz6o5C7P3cqP5/Hu4elUqTalUJ/XyarOvs cGoj9TjJ0vnGDw== -----END CERTIFICATE-----Generated at Thu Jan 1 10:52:21 2026 by rpki-client