This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json) Hash identifier: pzdx3txMzT7YOqAqz07h2WZkF+rEnxeDrpSwIWrCatE= Subject key identifier: 0F:D6:27:B0:BD:DD:B8:58:37:58:51:8F:AB:44:1D:AC:C4:9C:EE:2B Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54 Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754 Certificate serial: 019AF276699F2781B1616063F34E0D7E05F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft Manifest number: 0639 Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: 1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa (hash: /fbcJU0cKGryVcZvtSX4RD7kNCeOfa1xibBR/Nj3P7Q=) 2: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: 1609yxzTpGq8na3AG+w4YkMy6i85gmwuUTyvgZPUcMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:69:9f:27:81:b1:61:60:63:f3:4e:0d:7e:05:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754 Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=0fd627b0bdddb8583758518fab441dacc49cee2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:9e:05:d0:c7:b7:b0:01:c3:d4:17:5f:0e: 08:35:2d:d5:fa:72:99:52:66:fd:f2:8c:dc:86:86: d5:fb:f8:ff:af:e1:c1:39:45:7e:19:c4:5b:5d:b0: bf:4a:99:2c:27:bd:d0:52:33:8f:84:56:16:e2:72: 86:75:4a:9a:6c:42:d0:f2:7d:e2:91:90:84:d6:3c: 78:f8:ec:38:f5:2b:6d:29:5e:e3:d4:02:e8:5b:83: ab:e6:2d:67:02:00:00:5e:5e:fa:39:b6:59:85:fa: 46:eb:79:31:92:e2:9e:fc:e8:7c:7a:b4:1f:9a:0e: 88:6a:b1:7f:57:eb:d0:2c:8d:d3:b3:04:25:20:54: 90:94:21:dc:90:a2:7c:0e:19:d2:bc:f5:5d:f2:c8: 0f:8f:c6:99:87:db:95:2a:71:88:df:95:a9:d3:3c: 27:81:ee:9d:a1:6c:08:74:5a:2e:99:53:50:62:ef: 8c:07:fc:95:da:51:1b:78:02:e7:03:f6:e6:1c:42: 6e:8d:54:ee:da:95:3e:49:e6:24:0e:cd:40:1e:56: b7:55:0d:9b:f9:1d:25:98:62:73:69:95:71:9a:ef: 1a:6d:78:46:fc:a9:bc:5d:ad:ef:9d:32:56:66:97: 75:c2:1f:64:9a:ec:45:eb:08:6f:56:fb:d4:be:4e: a3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D6:27:B0:BD:DD:B8:58:37:58:51:8F:AB:44:1D:AC:C4:9C:EE:2B X509v3 Authority Key Identifier: keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3c:1e:e7:c6:9f:ea:14:59:8a:1b:a9:9d:09:11:99:5d:0f: 7a:d6:c9:38:9d:73:db:3b:10:12:c1:75:2c:0f:83:53:66:04: 80:18:c0:d5:c5:db:c1:11:a1:fd:88:e9:f1:36:b9:f7:7d:62: 9c:dd:b4:ed:b7:70:50:6d:cb:d3:0a:71:26:eb:cc:90:00:2d: 6d:46:43:19:e5:85:af:67:a6:8e:48:14:57:72:66:e4:a0:ba: 94:79:05:40:1a:4f:ca:c6:50:6b:e3:3a:e8:88:85:85:3a:6a: 3b:13:2f:8e:1f:e6:68:b9:bd:a1:fd:ab:fe:b8:f9:37:fd:b3: a4:a5:a4:6c:50:46:09:08:a3:af:dc:91:b5:70:14:a5:93:a2: 56:e0:a0:23:77:48:37:02:dc:f8:cb:da:5d:6e:6b:cb:f5:a7: dd:35:da:39:50:5e:01:b8:88:1a:77:cf:e7:ba:36:5b:60:02: 9a:d0:d0:20:ce:4e:3f:b5:06:90:b7:c3:be:65:76:76:bf:5c: 2b:64:d6:c2:c9:50:7e:8d:b7:a2:74:9d:85:21:52:3f:06:6c: 0d:4b:3e:0c:20:44:bc:5c:e3:ac:36:2d:ba:f2:f2:8e:34:bf: 49:50:9b:42:64:97:ea:6c:ff:5a:a8:4e:47:b1:d1:52:ed:c7: 4b:42:7d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmmfJ4GxYWBj804NfgXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmE2YTI2MGQxZTY3ZTBhN2I0ZTZkY2Y0MDNmZDM5ZjZk ZTk3NTQwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD EygwZmQ2MjdiMGJkZGRiODU4Mzc1ODUxOGZhYjQ0MWRhY2M0OWNlZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHaeBdDHt7ABw9QXXw4INS3V+nKZ Umb98ozchobV+/j/r+HBOUV+GcRbXbC/SpksJ73QUjOPhFYW4nKGdUqabELQ8n3i kZCE1jx4+Ow49SttKV7j1ALoW4Or5i1nAgAAXl76ObZZhfpG63kxkuKe/Oh8erQf mg6IarF/V+vQLI3TswQlIFSQlCHckKJ8DhnSvPVd8sgPj8aZh9uVKnGI35Wp0zwn ge6doWwIdFoumVNQYu+MB/yV2lEbeALnA/bmHEJujVTu2pU+SeYkDs1AHla3VQ2b +R0lmGJzaZVxmu8abXhG/Km8Xa3vnTJWZpd1wh9kmuxF6whvVvvUvk6jsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/WJ7C93bhYN1hRj6tEHazEnO4rMB8GA1UdIwQY MBaAFBEqaiYNHmfgp7Tm3PQD/Tn23pdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NGZhZWQtMGNiNS00Nzk5LTk0NDct YTM5ODhmYzkwZDYwLzEvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84NGZhZWQtMGNiNS00Nzk5LTk0NDctYTM5ODhmYzkwZDYw LzEvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDwe58af 6hRZihupnQkRmV0PetbJOJ1z2zsQEsF1LA+DU2YEgBjA1cXbwRGh/Yjp8Ta5931i nN207bdwUG3L0wpxJuvMkAAtbUZDGeWFr2emjkgUV3Jm5KC6lHkFQBpPysZQa+M6 6IiFhTpqOxMvjh/maLm9of2r/rj5N/2zpKWkbFBGCQijr9yRtXAUpZOiVuCgI3dI NwLc+MvaXW5ry/Wn3TXaOVBeAbiIGnfP57o2W2ACmtDQIM5OP7UGkLfDvmV2dr9c K2TWwslQfo23onSdhSFSPwZsDUs+DCBEvFzjrDYtuvLyjjS/SVCbQmSX6mz/WqhO R7HRUu3HS0J9aQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:34 2025 by rpki-client