This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft File: eMceZc96PS4vwrjMPUPUXSs1DfM.mft (raw, json) Hash identifier: Bz1MgAe2h90zawGVjR2V1tlKG9o+9/8jnKbe5WSuY0E= Subject key identifier: 59:0D:44:62:B8:55:E1:1D:65:1B:C9:26:24:BB:F7:FF:3C:6B:D2:1A Authority key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3 Certificate issuer: /CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3 Certificate serial: 019B69C4BD535DC8060EB86C7460B8CFA6AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft Manifest number: 179E Signing time: Mon 29 Dec 2025 11:00:59 +0000 Manifest this update: Mon 29 Dec 2025 11:00:59 +0000 Manifest next update: Tue 30 Dec 2025 11:00:59 +0000 Files and hashes: 1: Ox2PlsCArfAxGifmEfuqjyRe0E4.roa (hash: P6BNeUEGLL42TOaGFO8umGbX15BxZNmI6g3Fgb2PRFA=) 2: eMceZc96PS4vwrjMPUPUXSs1DfM.crl (hash: TPRmjjM5ap0sO+ZYiWIxgwf/e/aDFuRA87IU44WIgFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:bd:53:5d:c8:06:0e:b8:6c:74:60:b8:cf:a6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3 Validity Not Before: Dec 29 11:00:59 2025 GMT Not After : Dec 30 11:00:59 2025 GMT Subject: CN=590d4462b855e11d651bc92624bbf7ff3c6bd21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3f:db:24:36:9f:33:f4:0f:61:d9:fd:4b:0f: 63:ef:a5:e7:40:9a:e2:02:26:df:83:41:48:e6:52: 9c:10:75:6b:ac:4d:50:86:80:72:d1:9c:7b:ce:85: 3f:32:c0:e7:16:0d:69:c5:17:70:4e:ed:72:df:d2: dd:f2:69:eb:77:c6:c0:c0:24:69:c9:5f:db:7c:c4: f6:24:6b:d1:71:28:7f:37:7d:42:be:2c:1c:9d:d5: 17:3a:90:4f:94:da:88:f1:30:14:34:09:c6:47:32: b6:98:de:01:20:3b:ed:09:20:c0:19:99:42:a8:29: cd:52:c6:f1:f8:a2:43:e1:8e:94:ef:8f:38:af:e4: ff:c5:00:10:91:6f:e2:c2:85:74:4a:99:27:d9:31: 5f:a5:07:cb:e2:85:7b:ef:be:ef:0e:10:56:cb:51: 42:ac:0e:3c:20:22:8d:d9:b9:10:09:ce:60:69:5a: aa:5c:cb:a1:c3:3d:9b:2c:38:72:64:d8:df:ed:29: 17:4a:5d:ad:bd:9c:41:a1:17:a1:94:25:e1:f9:d8: 80:b0:2a:71:04:ad:7b:15:29:0f:86:ff:49:33:fb: 17:8d:40:81:70:8a:71:c3:8c:bc:79:78:b0:98:a8: 9f:5c:cb:1e:52:8f:17:41:92:5f:43:77:b3:62:c2: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0D:44:62:B8:55:E1:1D:65:1B:C9:26:24:BB:F7:FF:3C:6B:D2:1A X509v3 Authority Key Identifier: keyid:78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6b:48:6b:2b:a4:9d:32:69:1a:db:0a:f2:d5:0c:90:ed:06: f6:22:bd:d1:41:1b:33:73:ca:3b:00:45:93:db:22:34:f6:ab: ac:9f:ab:55:44:a1:cf:2c:41:c6:6c:62:f8:67:3c:5f:85:97: 4d:b8:67:8f:e0:d7:ed:7f:13:22:1d:66:be:12:a3:13:5b:50: 5b:72:da:26:5a:4c:f0:c0:9e:34:5e:d4:e0:95:84:81:55:12: 79:04:37:39:e7:44:04:d9:49:47:7d:5b:f9:dc:8a:41:9a:5d: 9f:45:78:34:13:57:fc:bb:2f:9d:2a:9b:43:4a:12:a4:09:0f: 9b:e5:17:72:da:f4:66:12:9d:93:eb:24:50:b9:8a:04:17:0b: e7:7f:80:0a:6f:8d:6e:e0:57:5d:0e:44:55:55:72:87:90:0c: 7e:2c:55:a6:47:bf:7c:3c:22:56:ba:34:03:05:2b:ea:04:b1: c6:10:18:93:ca:6f:fe:44:05:6c:ed:10:a7:b0:1d:81:b3:0a: dd:fb:5b:21:25:d4:5c:d3:2c:cf:85:45:fe:bf:7a:e3:16:f7: 78:1d:96:0d:da:23:6a:cb:da:76:49:c6:db:94:13:2c:3a:ad: 24:5f:1a:58:8f:33:41:93:d1:19:da:8b:72:5c:fc:00:fd:be: 5b:d0:92:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxL1TXcgGDrhsdGC4z6asMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YzcxZTY1Y2Y3YTNkMmUyZmMyYjhjYzNkNDNkNDVkMmIz NTBkZjMwHhcNMjUxMjI5MTEwMDU5WhcNMjUxMjMwMTEwMDU5WjAzMTEwLwYDVQQD Eyg1OTBkNDQ2MmI4NTVlMTFkNjUxYmM5MjYyNGJiZjdmZjNjNmJkMjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz/bJDafM/QPYdn9Sw9j76XnQJri Aibfg0FI5lKcEHVrrE1QhoBy0Zx7zoU/MsDnFg1pxRdwTu1y39Ld8mnrd8bAwCRp yV/bfMT2JGvRcSh/N31CviwcndUXOpBPlNqI8TAUNAnGRzK2mN4BIDvtCSDAGZlC qCnNUsbx+KJD4Y6U7484r+T/xQAQkW/iwoV0Spkn2TFfpQfL4oV7777vDhBWy1FC rA48ICKN2bkQCc5gaVqqXMuhwz2bLDhyZNjf7SkXSl2tvZxBoRehlCXh+diAsCpx BK17FSkPhv9JM/sXjUCBcIpxw4y8eXiwmKifXMseUo8XQZJfQ3ezYsJSVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkNRGK4VeEdZRvJJiS79/88a9IaMB8GA1UdIwQY MBaAFHjHHmXPej0uL8K4zD1D1F0rNQ3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU1jZVpjOTZQUzR2d3JqTVBVUFVYU3MxRGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjAyODAtOWQ4Ni00YzExLTg5ZDEt ODc4ODExMjdmY2JmLzEvZU1jZVpjOTZQUzR2d3JqTVBVUFVYU3MxRGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mYjAyODAtOWQ4Ni00YzExLTg5ZDEtODc4ODExMjdmY2Jm LzEvZU1jZVpjOTZQUzR2d3JqTVBVUFVYU3MxRGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmtIayuk nTJpGtsK8tUMkO0G9iK90UEbM3PKOwBFk9siNParrJ+rVUShzyxBxmxi+Gc8X4WX Tbhnj+DX7X8TIh1mvhKjE1tQW3LaJlpM8MCeNF7U4JWEgVUSeQQ3OedEBNlJR31b +dyKQZpdn0V4NBNX/LsvnSqbQ0oSpAkPm+UXctr0ZhKdk+skULmKBBcL53+ACm+N buBXXQ5EVVVyh5AMfixVpke/fDwiVro0AwUr6gSxxhAYk8pv/kQFbO0Qp7AdgbMK 3ftbISXUXNMsz4VF/r964xb3eB2WDdojasvadknG25QTLDqtJF8aWI8zQZPRGdqL clz8AP2+W9CSjA== -----END CERTIFICATE-----Generated at Mon Dec 29 19:37:30 2025 by rpki-client