This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json) Hash identifier: fcilRA4ntry4YLQ8UOuLwwcMvPmG1IjOgfwi5lm1vmk= Subject key identifier: 80:30:08:1A:7C:AA:72:11:A6:0A:7D:BB:A8:B3:15:B5:C2:0A:26:A6 Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4 Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4 Certificate serial: 019AF5E613DD7D4F20D72D9C71F9D50EC325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 23:01:27 +0000 Manifest this update: Sat 06 Dec 2025 23:01:27 +0000 Manifest next update: Sun 07 Dec 2025 23:01:27 +0000 Files and hashes: 1: PLgTSJDM8uR1juxDHza74Z8KK_I.roa (hash: /HOZXmmTK+cwdAQ1MraVBMBWJRzaxZ+R5OdqeyYD36Q=) 2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: eawdUVh9Z0+sWVh/oYOAvBttxk4ed6hzBdYBbA/0t7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:13:dd:7d:4f:20:d7:2d:9c:71:f9:d5:0e:c3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4 Validity Not Before: Dec 6 23:01:27 2025 GMT Not After : Dec 7 23:01:27 2025 GMT Subject: CN=8030081a7caa7211a60a7dbba8b315b5c20a26a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c6:e0:36:36:16:68:b4:18:99:1f:dd:98:17: ef:98:be:fd:3e:aa:05:60:79:f1:07:55:40:d4:d1: 78:b0:cb:f5:72:b4:3a:bd:7f:f2:74:d5:e7:1e:fa: 18:63:b7:26:de:ec:e4:1f:30:6c:ec:2f:df:13:d1: 4f:da:08:3c:b0:69:d1:3b:a8:76:fb:0a:1a:7b:4b: bd:e5:92:ef:5b:76:72:53:f4:fe:b3:12:cd:e7:dc: 40:6b:d3:39:cb:ae:8c:de:9d:98:f8:80:67:ec:10: 72:e1:77:51:64:a6:c4:d9:f8:d8:26:4a:5a:02:8a: 33:3a:f3:ae:78:a6:fe:10:1e:9f:d9:66:c7:f6:62: 32:a7:9d:fe:97:14:22:1a:04:07:92:a2:94:db:80: 39:5c:2b:e7:b7:84:b6:6f:5f:44:37:24:2c:f0:90: d3:36:e2:51:6b:31:b6:b4:67:fe:f5:1b:9b:3d:f2: 91:25:9c:97:c4:03:a8:74:d7:8b:e0:7a:1d:62:41: 75:8a:0d:19:f1:41:e4:9c:93:7e:d3:a5:8d:0b:d7: f2:90:a8:23:9c:ad:14:6e:23:87:83:56:df:6c:0f: f9:57:6f:4e:a6:a4:45:d5:9c:95:dc:ec:02:c3:0b: b8:b6:ab:93:30:45:0d:ce:30:b9:6e:40:b7:a7:3c: 3b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:30:08:1A:7C:AA:72:11:A6:0A:7D:BB:A8:B3:15:B5:C2:0A:26:A6 X509v3 Authority Key Identifier: keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f5:77:7a:a5:f6:c1:57:40:eb:7f:b3:a6:39:1f:7f:5b:08: 30:3b:10:29:d3:48:11:bd:02:c7:84:0f:c8:79:ff:8f:af:41: ac:53:78:0b:37:35:40:c5:e2:6c:82:9a:92:86:f3:13:1e:fd: a0:a1:df:1e:2c:fe:66:19:ea:15:04:00:e1:9c:6e:37:bf:2d: 26:82:37:17:ae:9f:9b:cd:0a:4e:6c:8b:8d:f8:96:e3:53:20: 13:70:15:c9:92:1e:9d:da:d0:b5:bd:aa:00:ec:49:f3:d1:3d: 91:bb:ee:76:20:7b:e1:80:de:e6:b8:70:1d:4e:85:5a:54:b3: 2b:44:28:4f:84:0a:fc:91:8d:e3:d2:b9:e4:24:36:84:0c:97: f5:d2:d2:df:87:18:5b:e9:c9:9c:57:c7:a0:1a:1b:06:3c:df: 8f:53:b9:40:fa:13:b5:bc:75:78:03:70:03:fc:71:5d:17:1a: d1:13:03:af:87:ee:6a:8f:ef:2f:28:4a:b5:84:0d:c1:07:41: 21:be:bc:f0:d7:f8:3f:cf:90:11:82:09:ed:c5:37:9a:98:9b: c2:75:a6:5d:7b:19:b7:26:fc:76:97:50:48:cb:a2:6f:ae:d0: ee:a3:31:05:70:0e:02:f2:e3:4b:7c:81:75:fb:25:cd:93:f2: d1:89:3a:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15hPdfU8g1y2ccfnVDsMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2NmMTM3MjQ1YWVjNjZiMmY2NzRhODU4MWE3NDQ5YWUy Y2ZjZTQwHhcNMjUxMjA2MjMwMTI3WhcNMjUxMjA3MjMwMTI3WjAzMTEwLwYDVQQD Eyg4MDMwMDgxYTdjYWE3MjExYTYwYTdkYmJhOGIzMTViNWMyMGEyNmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MbgNjYWaLQYmR/dmBfvmL79PqoF YHnxB1VA1NF4sMv1crQ6vX/ydNXnHvoYY7cm3uzkHzBs7C/fE9FP2gg8sGnRO6h2 +woae0u95ZLvW3ZyU/T+sxLN59xAa9M5y66M3p2Y+IBn7BBy4XdRZKbE2fjYJkpa AoozOvOueKb+EB6f2WbH9mIyp53+lxQiGgQHkqKU24A5XCvnt4S2b19ENyQs8JDT NuJRazG2tGf+9RubPfKRJZyXxAOodNeL4HodYkF1ig0Z8UHknJN+06WNC9fykKgj nK0UbiOHg1bfbA/5V29OpqRF1ZyV3OwCwwu4tquTMEUNzjC5bkC3pzw7KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAwCBp8qnIRpgp9u6izFbXCCiamMB8GA1UdIwQY MBaAFHrM8TckWuxmsvZ0qFgadEmuLPzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTIt N2ZjM2ZlMDVmMzEwLzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTItN2ZjM2ZlMDVmMzEw LzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/V3eqX2 wVdA63+zpjkff1sIMDsQKdNIEb0Cx4QPyHn/j69BrFN4Czc1QMXibIKakobzEx79 oKHfHiz+ZhnqFQQA4ZxuN78tJoI3F66fm80KTmyLjfiW41MgE3AVyZIendrQtb2q AOxJ89E9kbvudiB74YDe5rhwHU6FWlSzK0QoT4QK/JGN49K55CQ2hAyX9dLS34cY W+nJnFfHoBobBjzfj1O5QPoTtbx1eANwA/xxXRca0RMDr4fuao/vLyhKtYQNwQdB Ib688Nf4P8+QEYIJ7cU3mpibwnWmXXsZtyb8dpdQSMuib67Q7qMxBXAOAvLjS3yB dfslzZPy0Yk6Mg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:26 2025 by rpki-client