This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft File: ESunl1d-pgpWGvmkWYxFBg47cIg.mft (raw, json) Hash identifier: fthCp1+WnGDtj1do6ZrDljPOLPy/ABXjSlsuGDi+CCE= Subject key identifier: E6:A4:63:90:52:8B:C7:FB:07:0F:13:8A:35:C6:42:7C:D3:CC:46:5A Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88 Certificate issuer: /CN=112ba797577ea60a561af9a4598c45060e3b7088 Certificate serial: 019B269B9568389E056BE2DEFBAFC4B28EAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft Manifest number: 1785 Signing time: Tue 16 Dec 2025 10:01:29 +0000 Manifest this update: Tue 16 Dec 2025 10:01:29 +0000 Manifest next update: Wed 17 Dec 2025 10:01:29 +0000 Files and hashes: 1: 0mKnnBxNDPUWW0TdKD82TEOVdS4.roa (hash: Lo4k+eo1K7P5fia7s3jKfkvAW4fzukEV2ibTeSf86Xg=) 2: ESunl1d-pgpWGvmkWYxFBg47cIg.crl (hash: fl6Conzh7Vf9uYALVAp0jo108XIAmX2gRrtwmHe2Yts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:95:68:38:9e:05:6b:e2:de:fb:af:c4:b2:8e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088 Validity Not Before: Dec 16 10:01:29 2025 GMT Not After : Dec 17 10:01:29 2025 GMT Subject: CN=e6a46390528bc7fb070f138a35c6427cd3cc465a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d8:e0:5a:ab:3f:21:99:26:5b:c5:e2:98:9a: e1:52:20:af:45:08:d0:ce:b8:a7:3c:03:10:e2:a1: 5a:59:97:88:b2:6f:39:1c:29:1e:a8:4f:be:2d:10: f4:82:c6:93:a1:b9:20:7d:61:48:33:f6:45:f5:66: 08:23:ab:d6:38:9a:58:5d:8a:50:06:31:5b:f3:06: 08:e3:77:c8:f2:5b:bd:13:ae:97:a1:6b:05:fb:78: 0e:a1:95:ad:9c:3b:10:f6:a8:50:9c:7a:6e:78:c8: 64:c1:b3:a8:b1:45:a7:da:21:40:75:b9:d7:7c:e4: e5:48:c7:1b:11:05:6f:45:50:1c:ef:f6:8d:c8:da: 31:0a:82:a5:50:7a:5e:04:79:a5:75:15:96:fe:57: 53:ac:60:05:66:aa:52:ec:a8:52:d7:2f:00:53:d6: c1:4b:7e:51:00:af:0b:bd:0c:eb:42:ff:d3:fe:75: 76:d9:51:6d:54:04:d7:45:b3:af:71:5b:19:d3:f1: 6e:a1:d4:01:05:42:45:06:d9:0e:7e:13:80:0f:6d: 72:ef:c6:c7:f3:72:54:22:67:e3:39:ff:1e:66:86: c4:d5:a9:28:7c:9d:bf:3d:3c:4f:cd:ca:8b:b4:fe: 41:1e:44:e0:54:61:99:32:2e:40:eb:df:17:9d:cc: ac:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A4:63:90:52:8B:C7:FB:07:0F:13:8A:35:C6:42:7C:D3:CC:46:5A X509v3 Authority Key Identifier: keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c1:ff:5b:fa:27:82:9a:d6:53:2a:4a:ce:ab:c7:52:3f:24: 02:27:e0:62:60:09:cb:1f:35:86:4f:35:a5:10:b5:29:78:73: fc:f1:18:b7:21:c2:b5:2b:c0:75:75:9e:21:be:82:2a:db:b1: c6:bb:f8:7a:60:7a:d5:bf:49:2f:c5:08:e2:87:5a:ac:08:d5: ed:5f:df:4c:f7:0a:bf:49:7e:97:70:87:2a:3b:2b:81:da:d9: cb:39:3b:4f:6f:a0:db:00:8a:3c:ad:5a:69:ef:a3:f0:44:e9: ee:b6:0d:3c:52:cf:8c:ad:27:69:97:8c:43:56:92:bf:ad:29: 5e:38:2a:88:5e:77:9c:5d:4d:2e:8d:bf:95:11:39:84:d5:c0: 9d:e8:f0:86:32:b0:91:b0:cb:65:f5:45:23:fb:29:52:84:9b: 48:ff:76:71:ba:89:e1:60:cf:05:2c:0b:1e:0d:31:0f:c2:6a: 57:cf:b2:43:9f:8f:a5:73:43:d0:01:5c:97:f7:be:c2:7c:bd: 7e:e7:e0:2e:ba:5b:fc:fb:e1:07:7b:64:18:bd:d6:d3:31:56: d5:cb:d4:37:56:83:44:a1:2e:07:5f:88:e8:ef:cb:1b:34:63: 0f:5a:25:d6:f3:11:e2:a8:80:74:96:be:48:7e:d5:b4:a8:1d: 76:39:ff:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm5VoOJ4Fa+Le+6/Eso6rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmJhNzk3NTc3ZWE2MGE1NjFhZjlhNDU5OGM0NTA2MGUz YjcwODgwHhcNMjUxMjE2MTAwMTI5WhcNMjUxMjE3MTAwMTI5WjAzMTEwLwYDVQQD EyhlNmE0NjM5MDUyOGJjN2ZiMDcwZjEzOGEzNWM2NDI3Y2QzY2M0NjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tjgWqs/IZkmW8XimJrhUiCvRQjQ zrinPAMQ4qFaWZeIsm85HCkeqE++LRD0gsaTobkgfWFIM/ZF9WYII6vWOJpYXYpQ BjFb8wYI43fI8lu9E66XoWsF+3gOoZWtnDsQ9qhQnHpueMhkwbOosUWn2iFAdbnX fOTlSMcbEQVvRVAc7/aNyNoxCoKlUHpeBHmldRWW/ldTrGAFZqpS7KhS1y8AU9bB S35RAK8LvQzrQv/T/nV22VFtVATXRbOvcVsZ0/FuodQBBUJFBtkOfhOAD21y78bH 83JUImfjOf8eZobE1akofJ2/PTxPzcqLtP5BHkTgVGGZMi5A698XncyszQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOakY5BSi8f7Bw8TijXGQnzTzEZaMB8GA1UdIwQY MBaAFBErp5dXfqYKVhr5pFmMRQYOO3CIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVN1bmwxZC1wZ3BXR3Zta1dZeEZCZzQ3Y0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZTVjNWQtNTgxMi00ZmU4LWIzYzAt NmJjNDQzZjM1NTQ0LzEvRVN1bmwxZC1wZ3BXR3Zta1dZeEZCZzQ3Y0lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZTVjNWQtNTgxMi00ZmU4LWIzYzAtNmJjNDQzZjM1NTQ0 LzEvRVN1bmwxZC1wZ3BXR3Zta1dZeEZCZzQ3Y0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcH/W/on gprWUypKzqvHUj8kAifgYmAJyx81hk81pRC1KXhz/PEYtyHCtSvAdXWeIb6CKtux xrv4emB61b9JL8UI4odarAjV7V/fTPcKv0l+l3CHKjsrgdrZyzk7T2+g2wCKPK1a ae+j8ETp7rYNPFLPjK0naZeMQ1aSv60pXjgqiF53nF1NLo2/lRE5hNXAnejwhjKw kbDLZfVFI/spUoSbSP92cbqJ4WDPBSwLHg0xD8JqV8+yQ5+PpXND0AFcl/e+wny9 fufgLrpb/PvhB3tkGL3W0zFW1cvUN1aDRKEuB1+I6O/LGzRjD1ol1vMR4qiAdJa+ SH7VtKgddjn/Rw== -----END CERTIFICATE-----Generated at Tue Dec 16 17:21:59 2025 by rpki-client