This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft File: ESCgzgE-LVKm_zVKJwiUu5mORUc.mft (raw, json) Hash identifier: ldZe4ZJJ5MId5CZMIJNA8xwF8xb1/hNQJmghiWYLZHE= Subject key identifier: B6:5A:B9:58:68:2E:29:80:7B:B5:57:85:EC:52:92:7C:6D:44:0D:8A Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Certificate serial: 019AF2097CD68BCA176C3660E2FCA7BCE57E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: 4kEhevkpP_AXSHtDbQt_y5XXD_U.roa (hash: Utfr4kFbDvk1+qjjuuuYnoLkGoHhJpPo3BK4RGIg74g=) 2: ESCgzgE-LVKm_zVKJwiUu5mORUc.crl (hash: VLY+gzE0L8+0nvMmYvmgfvizVI07+R6Pl6loCrcEC88=) 3: VFGtTmctOrCjqkuRTfIPjlhNsbU.roa (hash: Kx2OzOjQfSX7IzHAKC1pKf9P1rkGaVbawrDwIeTytCo=) 4: hPKrgzhYrZ1-hIZdPIo3sHpuSd4.roa (hash: E3NJlfBqIWJ89UYs9nMw+LOY3dmFw01LCnketh8FRY0=) 5: jx1FgPOkBbayLbn8i9fFX-3vhJI.roa (hash: du1QA1Pa5BxqPJI19sJCDEas0RaG543HI6Un8BqtN7g=) 6: lauLTK6HRr7436pAd14mrAaE3vU.roa (hash: ahn5yKzybexoFBgNe3W5HKkjK7F19TopqaCzFWkZQgs=) 7: xVwjRhSfq67xc9Qi_wrSVn11vY0.roa (hash: iJyeTnFvoMMSPwtJkLmVhK7+FVvlX6Jx0lnFlM/s3fE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7c:d6:8b:ca:17:6c:36:60:e2:fc:a7:bc:e5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=b65ab958682e29807bb55785ec52927c6d440d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:8d:33:94:98:00:f8:64:ac:4c:77:19:a2: 77:23:43:2d:49:b5:ca:3f:1f:dd:a4:6b:4e:5c:ed: e7:bf:a7:96:fe:99:7b:44:78:db:3c:7a:93:28:a3: 9f:4c:d7:f7:68:31:6c:50:8c:b7:13:d6:f6:50:72: d2:1b:00:1c:4d:b3:fa:38:96:d1:45:aa:4a:df:72: c6:5c:35:56:0c:9e:43:b1:ae:91:a1:22:4d:6e:8e: f4:1e:88:b2:69:df:33:41:31:3e:7c:01:52:e9:3d: a5:af:70:a6:b5:76:6a:45:9b:4a:4f:bb:d7:ef:64: 24:ab:8c:ea:09:7d:f0:1e:90:00:17:5a:4a:c1:30: e1:71:fb:02:e1:54:ac:20:c0:1b:a3:92:e4:a2:fb: 15:03:5e:a5:80:f9:45:66:fa:27:30:db:7e:54:85: a5:99:2b:49:e2:c5:05:b2:d2:6e:fa:93:3f:69:0b: 4a:08:16:d2:35:56:8a:25:0f:9c:c0:3a:94:d9:63: 1b:15:1d:5c:1c:2c:2a:85:9d:b9:9b:dc:27:2a:ab: f1:d4:72:27:04:7e:8a:49:b2:f5:46:1e:bb:cf:50: ea:5f:8a:75:15:e1:af:a0:3e:c4:22:26:c3:d7:72: 94:a7:76:5c:6d:88:9a:eb:fe:d0:67:b0:a5:01:87: 8b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5A:B9:58:68:2E:29:80:7B:B5:57:85:EC:52:92:7C:6D:44:0D:8A X509v3 Authority Key Identifier: keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:31:a4:a7:ff:c3:35:1e:d6:9b:a0:eb:4c:db:b2:0c:fd:85: d6:c5:49:01:1c:6e:91:16:bb:9e:81:1e:a9:cf:07:78:b7:98: 71:8f:0d:fa:6a:21:ff:d5:c8:0c:92:0c:19:68:ea:ec:9f:bd: 21:42:3c:08:23:4d:24:b0:66:b3:d5:ef:d2:16:d7:c0:32:da: f4:5a:72:78:f5:88:57:d0:ba:46:e1:7d:94:d7:0f:fb:2c:4e: ea:6f:ba:4b:d7:0e:7a:8c:29:8c:b4:de:9b:3a:12:4c:68:ec: 1e:89:6c:63:12:33:66:23:9e:43:30:4f:a6:b4:21:9a:89:91: 63:a7:bf:33:9b:78:7f:0b:9f:bb:b8:91:e9:b5:e0:e3:44:40: fd:53:a7:24:c5:9a:ed:d8:65:49:5d:54:93:9e:fd:ac:c5:99: 1c:1f:93:b5:2d:21:a8:32:63:5e:93:04:7b:6b:0b:f2:77:df: 88:d9:94:c5:fc:26:b7:10:34:46:5c:df:2f:de:94:03:8a:5a: f8:44:4a:ad:fe:15:c3:82:77:a4:84:b0:41:9f:be:ea:07:61: d3:f3:41:42:df:bb:81:02:a9:89:8c:53:1e:94:d8:45:de:08: 8e:9a:61:14:38:37:66:ff:53:fa:f7:62:c2:57:0f:5d:a0:41: 90:9b:5d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXzWi8oXbDZg4vynvOV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjBhMGNlMDEzZTJkNTJhNmZmMzU0YTI3MDg5NGJiOTk4 ZTQ1NDcwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD EyhiNjVhYjk1ODY4MmUyOTgwN2JiNTU3ODVlYzUyOTI3YzZkNDQwZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr26NM5SYAPhkrEx3GaJ3I0MtSbXK Px/dpGtOXO3nv6eW/pl7RHjbPHqTKKOfTNf3aDFsUIy3E9b2UHLSGwAcTbP6OJbR RapK33LGXDVWDJ5Dsa6RoSJNbo70Hoiyad8zQTE+fAFS6T2lr3CmtXZqRZtKT7vX 72Qkq4zqCX3wHpAAF1pKwTDhcfsC4VSsIMAbo5LkovsVA16lgPlFZvonMNt+VIWl mStJ4sUFstJu+pM/aQtKCBbSNVaKJQ+cwDqU2WMbFR1cHCwqhZ25m9wnKqvx1HIn BH6KSbL1Rh67z1DqX4p1FeGvoD7EIibD13KUp3ZcbYia6/7QZ7ClAYeLCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZauVhoLimAe7VXhexSknxtRA2KMB8GA1UdIwQY MBaAFBEgoM4BPi1Spv81SicIlLuZjkVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUt MzFhZjNlMjk0NjcxLzEvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUtMzFhZjNlMjk0Njcx LzEvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjGkp//D NR7Wm6DrTNuyDP2F1sVJARxukRa7noEeqc8HeLeYcY8N+moh/9XIDJIMGWjq7J+9 IUI8CCNNJLBms9Xv0hbXwDLa9FpyePWIV9C6RuF9lNcP+yxO6m+6S9cOeowpjLTe mzoSTGjsHolsYxIzZiOeQzBPprQhmomRY6e/M5t4fwufu7iR6bXg40RA/VOnJMWa 7dhlSV1Uk579rMWZHB+TtS0hqDJjXpMEe2sL8nffiNmUxfwmtxA0RlzfL96UA4pa +ERKrf4Vw4J3pISwQZ++6gdh0/NBQt+7gQKpiYxTHpTYRd4IjpphFDg3Zv9T+vdi wlcPXaBBkJtdmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:27 2025 by rpki-client