This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft File: _EMwm9pG6O0l7AweipMAbyJpHjw.mft (raw, json) Hash identifier: O0DrNysx6noPgLevG2mAm3pGNhRGVTT06I+wqVMsKC8= Subject key identifier: 8E:8D:75:92:C9:0B:C1:21:EA:44:08:DB:39:58:EF:10:1A:CC:23:6F Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C Certificate issuer: /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c Certificate serial: 019B435C433DA0246506789B3D838D22EBDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft Manifest number: 0C70 Signing time: Mon 22 Dec 2025 00:01:18 +0000 Manifest this update: Mon 22 Dec 2025 00:01:18 +0000 Manifest next update: Tue 23 Dec 2025 00:01:18 +0000 Files and hashes: 1: P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa (hash: 75J3FI/MjvsUpmT1+e7f6kq+Idon95nr5b/vGurSSfM=) 2: _EMwm9pG6O0l7AweipMAbyJpHjw.crl (hash: 50LlDV1ivIrOzE9GqrAyW8dKBDuRihmqzVHV3R/UyfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:43:3d:a0:24:65:06:78:9b:3d:83:8d:22:eb:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c Validity Not Before: Dec 22 00:01:18 2025 GMT Not After : Dec 23 00:01:18 2025 GMT Subject: CN=8e8d7592c90bc121ea4408db3958ef101acc236f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:13:6f:fd:f6:89:e1:bd:d6:65:c6:d2:98:9a: dc:af:bd:9a:7b:e7:3e:df:15:1f:38:a8:1c:38:91: e6:09:90:2b:4b:57:73:9a:e2:06:fe:36:37:7b:c8: f5:e1:7b:65:bf:8a:30:54:e5:15:42:f7:c6:e1:99: c6:87:89:3a:fe:6a:37:07:60:ce:af:15:e0:ec:2e: 21:2b:91:4f:5a:4a:13:a6:09:48:fe:c9:3d:8a:bc: fd:e9:7d:66:36:40:58:3b:ce:9f:9d:75:43:96:3d: 9a:94:78:11:7c:6c:a1:da:ae:42:e9:54:36:ee:3a: c8:f9:69:59:be:8c:15:ae:40:52:94:c5:ba:51:7a: 53:51:3d:09:e2:75:f0:80:ec:30:fe:da:8e:99:73: 88:63:78:59:d7:7e:20:e9:be:7d:61:30:d2:32:7b: 13:59:82:6e:1e:8e:89:97:64:42:39:3e:50:46:26: 49:e2:61:5c:9f:73:28:11:5a:f4:86:eb:cf:90:00: 64:56:72:2e:c8:2f:71:b4:86:a3:ae:47:60:b5:36: bb:ca:19:c8:15:8a:0a:bb:02:a4:5d:b2:e9:ea:ed: 8a:1c:03:88:4d:bb:00:f0:9c:5a:30:6b:d1:19:c0: 7e:11:a1:1c:c4:db:6a:b6:2d:33:90:5c:6c:8c:13: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:75:92:C9:0B:C1:21:EA:44:08:DB:39:58:EF:10:1A:CC:23:6F X509v3 Authority Key Identifier: keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d4:32:54:df:83:b9:f4:e7:b4:ef:a3:c3:a5:12:14:39:5e: 8b:17:5e:16:d4:71:e6:a6:ba:09:fe:5b:c3:40:a3:da:82:de: db:29:5e:e7:13:85:b8:36:b0:19:64:e2:de:4b:64:e7:eb:43: ad:47:3d:fc:62:d4:63:d9:b1:ea:c6:d4:b4:ec:45:d1:cf:0e: 58:5e:d3:9d:98:2f:70:b5:cd:0b:3a:54:f0:26:bc:21:c9:16: 78:43:45:18:1f:b1:ef:c9:d3:36:8a:d4:38:e9:80:9b:d6:64: 92:03:48:c2:cf:5a:73:2c:01:b5:d0:39:d9:73:01:a1:ed:32: 7f:47:38:42:0d:f6:7f:e4:d4:7e:c7:df:8e:0c:54:af:66:e6: 6e:97:43:77:9d:f1:a3:e2:d1:a8:b8:54:8f:2f:0e:b5:71:4d: 3f:de:d9:1a:66:d3:19:72:d2:41:da:0a:15:25:25:41:c6:bd: 45:3d:10:31:ea:aa:82:55:3c:d0:15:ea:92:6b:1f:47:bb:e0: 06:5c:fc:fb:7f:88:6c:42:00:7a:25:ca:cb:48:66:4d:46:2f: bf:8f:27:e4:36:a0:ca:5c:f9:90:61:4e:e9:e6:84:0c:0a:c3: 1e:8d:29:0e:5d:87:98:e4:9b:19:c1:a7:eb:d0:c6:3e:e4:5d: 3a:df:b0:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXEM9oCRlBnibPYONIuvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDMzMDliZGE0NmU4ZWQyNWVjMGMxZThhOTMwMDZmMjI2 OTFlM2MwHhcNMjUxMjIyMDAwMTE4WhcNMjUxMjIzMDAwMTE4WjAzMTEwLwYDVQQD Eyg4ZThkNzU5MmM5MGJjMTIxZWE0NDA4ZGIzOTU4ZWYxMDFhY2MyMzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRNv/faJ4b3WZcbSmJrcr72ae+c+ 3xUfOKgcOJHmCZArS1dzmuIG/jY3e8j14Xtlv4owVOUVQvfG4ZnGh4k6/mo3B2DO rxXg7C4hK5FPWkoTpglI/sk9irz96X1mNkBYO86fnXVDlj2alHgRfGyh2q5C6VQ2 7jrI+WlZvowVrkBSlMW6UXpTUT0J4nXwgOww/tqOmXOIY3hZ134g6b59YTDSMnsT WYJuHo6Jl2RCOT5QRiZJ4mFcn3MoEVr0huvPkABkVnIuyC9xtIajrkdgtTa7yhnI FYoKuwKkXbLp6u2KHAOITbsA8JxaMGvRGcB+EaEcxNtqti0zkFxsjBP51wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6NdZLJC8Eh6kQI2zlY7xAazCNvMB8GA1UdIwQY MBaAFPxDMJvaRujtJewMHoqTAG8iaR48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VNd205cEc2TzBsN0F3ZWlwTUFieUpwSGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wMDgyMTctNjAzNC00ZjhmLThlMjgt NjAyNDczZGU2ZTNkLzEvX0VNd205cEc2TzBsN0F3ZWlwTUFieUpwSGp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wMDgyMTctNjAzNC00ZjhmLThlMjgtNjAyNDczZGU2ZTNk LzEvX0VNd205cEc2TzBsN0F3ZWlwTUFieUpwSGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9QyVN+D ufTntO+jw6USFDleixdeFtRx5qa6Cf5bw0Cj2oLe2yle5xOFuDawGWTi3ktk5+tD rUc9/GLUY9mx6sbUtOxF0c8OWF7TnZgvcLXNCzpU8Ca8IckWeENFGB+x78nTNorU OOmAm9ZkkgNIws9acywBtdA52XMBoe0yf0c4Qg32f+TUfsffjgxUr2bmbpdDd53x o+LRqLhUjy8OtXFNP97ZGmbTGXLSQdoKFSUlQca9RT0QMeqqglU80BXqkmsfR7vg Blz8+3+IbEIAeiXKy0hmTUYvv48n5Dagylz5kGFO6eaEDArDHo0pDl2HmOSbGcGn 69DGPuRdOt+wdg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:33:03 2025 by rpki-client