This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json) Hash identifier: WflkZSelWmxRcU7Ue+3kEa5vZfG7pKA0PKPA7+C5jEg= Subject key identifier: 00:73:44:C2:B0:5E:5C:33:B1:60:7F:06:DA:02:E6:43:10:EB:1D:07 Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54 Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754 Certificate serial: 019B3043293379E6FB8C7CEF0C418DE703DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft Manifest number: 0659 Signing time: Thu 18 Dec 2025 07:01:06 +0000 Manifest this update: Thu 18 Dec 2025 07:01:06 +0000 Manifest next update: Fri 19 Dec 2025 07:01:06 +0000 Files and hashes: 1: 1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa (hash: /fbcJU0cKGryVcZvtSX4RD7kNCeOfa1xibBR/Nj3P7Q=) 2: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: guyymHs28Bnc7q5sEbvpNI5sjtAW99g77IMRYivHKGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:29:33:79:e6:fb:8c:7c:ef:0c:41:8d:e7:03:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754 Validity Not Before: Dec 18 07:01:06 2025 GMT Not After : Dec 19 07:01:06 2025 GMT Subject: CN=007344c2b05e5c33b1607f06da02e64310eb1d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:76:cb:f5:58:4a:92:e1:e5:94:d9:e3:db:9c: 50:2d:a8:f8:00:5a:ba:3d:3a:a5:2c:72:b2:a4:3e: 4f:2b:d2:17:05:a6:2c:40:ec:c8:17:ee:3f:99:c9: 0c:1d:88:14:73:a3:bc:bf:66:80:62:80:55:6b:11: 43:32:b6:0e:c3:26:a3:82:43:01:18:27:b3:da:1a: d4:6e:d3:e7:9d:e3:49:c5:9d:5c:9f:5c:4b:ef:48: f7:26:62:e6:dd:d5:ff:94:84:fc:1a:ed:69:53:f6: 28:cb:0a:99:ed:2d:20:bd:c3:d3:d6:ce:a0:05:cd: 10:8a:95:90:b8:df:b0:3f:71:55:cd:bc:ee:95:e9: d1:d2:63:26:cb:29:d0:88:25:50:09:1d:0e:02:a1: 2d:50:fd:44:1e:95:e3:b2:6f:43:1d:92:7c:90:a5: 72:68:a5:45:9f:0b:6f:51:8a:2b:b9:83:2c:14:6c: 36:74:38:bc:6f:14:ab:a5:b1:fb:65:f2:c1:29:f3: 12:fa:91:94:4a:e7:65:a4:f5:25:be:a2:94:38:28: 31:de:cd:55:89:df:77:c4:ac:da:2b:62:4b:4a:a9: 47:67:76:42:61:b6:de:3a:78:04:28:08:47:ef:ba: 3a:8d:40:63:27:99:14:fa:2c:61:89:e9:7f:2b:32: 5c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:73:44:C2:B0:5E:5C:33:B1:60:7F:06:DA:02:E6:43:10:EB:1D:07 X509v3 Authority Key Identifier: keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:19:9f:91:16:5f:01:30:68:5f:dd:a2:a2:32:7b:6d:89:a1: c6:3c:40:11:c9:17:2c:f4:24:f4:92:d0:07:24:b9:98:29:42: d3:74:c5:f5:bc:90:b8:3d:07:f1:54:21:2b:c0:b5:d3:fb:b4: 32:39:46:30:4b:13:e3:d5:4f:f6:d3:e9:b9:09:ab:4c:c6:07: 82:5f:b6:fd:91:b0:b9:31:c4:96:1e:0d:59:be:db:3b:5b:be: 2d:57:87:59:1a:5d:44:65:e4:6e:49:ed:1f:d5:32:9a:74:4a: 59:b8:25:41:27:ca:c6:e6:fe:5b:dd:23:26:3b:9a:43:35:c3: 6b:b0:95:5b:cb:3d:40:df:a0:63:67:2c:87:c5:7c:29:49:42: 34:54:ff:cc:09:4d:2c:36:09:91:c5:a8:5d:60:b8:d4:4f:e0: ad:03:8e:c5:84:93:b8:e0:51:52:35:1a:d7:9a:4e:24:b0:ff: c0:c7:e2:2a:3b:12:fb:1d:b4:f1:5f:73:e1:8b:b7:ed:f2:c4: ab:8e:1e:69:cc:3a:e6:73:d0:5c:20:8b:b4:c6:2b:17:b7:6e: 01:af:b3:cc:e3:1e:2d:26:8c:9a:d0:38:31:f9:16:06:a7:e8: d9:9f:21:42:84:c8:dc:6b:29:ed:32:a2:e3:bf:d4:06:1b:86: 46:1b:62:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQykzeeb7jHzvDEGN5wPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmE2YTI2MGQxZTY3ZTBhN2I0ZTZkY2Y0MDNmZDM5ZjZk ZTk3NTQwHhcNMjUxMjE4MDcwMTA2WhcNMjUxMjE5MDcwMTA2WjAzMTEwLwYDVQQD EygwMDczNDRjMmIwNWU1YzMzYjE2MDdmMDZkYTAyZTY0MzEwZWIxZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XbL9VhKkuHllNnj25xQLaj4AFq6 PTqlLHKypD5PK9IXBaYsQOzIF+4/mckMHYgUc6O8v2aAYoBVaxFDMrYOwyajgkMB GCez2hrUbtPnneNJxZ1cn1xL70j3JmLm3dX/lIT8Gu1pU/YoywqZ7S0gvcPT1s6g Bc0QipWQuN+wP3FVzbzulenR0mMmyynQiCVQCR0OAqEtUP1EHpXjsm9DHZJ8kKVy aKVFnwtvUYoruYMsFGw2dDi8bxSrpbH7ZfLBKfMS+pGUSudlpPUlvqKUOCgx3s1V id93xKzaK2JLSqlHZ3ZCYbbeOngEKAhH77o6jUBjJ5kU+ixhiel/KzJctwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABzRMKwXlwzsWB/BtoC5kMQ6x0HMB8GA1UdIwQY MBaAFBEqaiYNHmfgp7Tm3PQD/Tn23pdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NGZhZWQtMGNiNS00Nzk5LTk0NDct YTM5ODhmYzkwZDYwLzEvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84NGZhZWQtMGNiNS00Nzk5LTk0NDctYTM5ODhmYzkwZDYw LzEvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBmfkRZf ATBoX92iojJ7bYmhxjxAEckXLPQk9JLQByS5mClC03TF9byQuD0H8VQhK8C10/u0 MjlGMEsT49VP9tPpuQmrTMYHgl+2/ZGwuTHElh4NWb7bO1u+LVeHWRpdRGXkbknt H9UymnRKWbglQSfKxub+W90jJjuaQzXDa7CVW8s9QN+gY2csh8V8KUlCNFT/zAlN LDYJkcWoXWC41E/grQOOxYSTuOBRUjUa15pOJLD/wMfiKjsS+x208V9z4Yu37fLE q44eacw65nPQXCCLtMYrF7duAa+zzOMeLSaMmtA4MfkWBqfo2Z8hQoTI3Gsp7TKi 47/UBhuGRhtitw== -----END CERTIFICATE-----Generated at Thu Dec 18 13:09:14 2025 by rpki-client