This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft File: ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json) Hash identifier: z3iy9kNrAnnDxfBvoN4oBW6m8hfCYujgq0EqGZ+jkHM= Subject key identifier: 5B:07:10:6F:A9:BE:E7:52:5F:77:E3:12:1A:6C:30:64:92:3A:E1:21 Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3 Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3 Certificate serial: 019AF19BA5BE0E82B16D8780A7D9035DB86A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: AADjiLiLiX8OU2/DX83XkRtdtIU3+U8+137GdgXrLQk=) 2: LbvGosx0sr1hJwd78ZXVswGnqXM.roa (hash: zrhSsms7Xu5tLT+xCwRwdoOuFODUIch3dzNZbH3HeT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a5:be:0e:82:b1:6d:87:80:a7:d9:03:5d:b8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3 Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=5b07106fa9bee7525f77e3121a6c3064923ae121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ed:4e:8a:61:e7:ff:6e:df:c4:ae:2d:1a:d6: f9:86:bf:38:72:8f:6e:70:48:9f:78:63:70:d7:28: 92:b4:3b:ca:1b:be:0e:d0:3d:4a:1a:b0:97:93:7f: 62:c6:f2:1d:6f:bc:7e:c8:39:54:73:7b:1f:bb:04: 85:4b:94:e5:68:e6:64:b9:7f:e1:5d:60:dd:c4:33: a8:8b:45:e5:8f:86:6f:50:cf:70:e7:64:f7:12:41: c5:66:28:84:4d:68:a6:c0:73:ab:98:2d:87:03:ed: d1:7d:8e:00:57:95:a8:f1:ad:34:74:9b:8a:b3:b1: 55:08:70:97:1c:5c:5c:00:d7:ee:d4:b2:b6:e9:de: 16:22:0d:48:f6:f2:6e:5d:1c:9f:51:1d:ef:39:c1: 50:4a:9d:e5:56:74:aa:d2:77:74:58:62:5a:d0:07: f4:56:6a:95:33:7d:7d:b5:42:21:0c:4d:e2:67:d8: 68:dd:fd:8b:45:84:fe:d3:3b:1e:26:2f:ba:83:f4: a9:ec:d9:eb:41:97:7b:56:a6:d1:a5:43:35:61:b1: bf:03:56:50:44:c0:67:f1:68:6b:d9:a2:b8:c4:dd: 46:d6:15:5a:d6:ac:22:c6:a2:27:fd:88:7a:9e:cf: 19:fb:76:77:7b:3a:bc:d6:45:95:26:62:01:6e:03: 84:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:07:10:6F:A9:BE:E7:52:5F:77:E3:12:1A:6C:30:64:92:3A:E1:21 X509v3 Authority Key Identifier: keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:bc:9e:55:87:47:cd:e4:d6:59:fa:17:5c:f7:06:67:f0:a3: c1:dd:df:d9:dd:86:5d:75:0f:48:38:fe:a2:92:e0:64:aa:b2: 5b:26:44:1f:1c:8c:b9:36:7f:de:ae:ac:fc:f8:c5:6b:20:1d: e4:4e:7d:80:68:1a:62:7d:91:7a:07:ef:36:0c:2d:5d:f1:7a: 22:35:ec:3e:a4:a8:d3:75:c8:a6:02:32:97:95:b2:47:c8:d0: cf:7d:d8:52:e6:1d:51:28:9e:ac:99:f5:a4:53:9d:f1:7d:73: e8:75:d1:48:9f:b5:c9:10:1d:18:9c:0e:78:5c:a9:37:9c:27: c5:b5:4e:3f:af:00:ef:23:c1:65:47:03:6f:18:bf:54:6b:db: 13:23:47:d1:9d:90:b3:e2:d4:d8:54:3d:d1:4c:e6:c7:d3:8e: 1c:e1:1e:46:cf:2b:c6:2f:5a:50:b0:e9:ee:35:4b:ba:07:38: 08:fd:ac:d7:21:89:ff:21:a6:58:ef:4f:7d:5b:29:04:8b:64: 05:96:18:64:a9:7e:5d:10:82:90:b3:4a:cb:85:5e:92:b8:08: 7f:e4:ce:4f:35:5b:92:4f:63:04:a9:40:eb:32:03:eb:85:4c: f5:0f:dc:6c:c0:66:41:ee:ab:5d:c8:0f:f5:73:f1:87:cd:72: 9b:59:7f:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6W+DoKxbYeAp9kDXbhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZDQ5YjczY2FkYTAxZWU4NTE4MTJlYzQ0MGI3YTFlYzk4 NjQ4YjMwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD Eyg1YjA3MTA2ZmE5YmVlNzUyNWY3N2UzMTIxYTZjMzA2NDkyM2FlMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+1OimHn/27fxK4tGtb5hr84co9u cEifeGNw1yiStDvKG74O0D1KGrCXk39ixvIdb7x+yDlUc3sfuwSFS5TlaOZkuX/h XWDdxDOoi0Xlj4ZvUM9w52T3EkHFZiiETWimwHOrmC2HA+3RfY4AV5Wo8a00dJuK s7FVCHCXHFxcANfu1LK26d4WIg1I9vJuXRyfUR3vOcFQSp3lVnSq0nd0WGJa0Af0 VmqVM319tUIhDE3iZ9ho3f2LRYT+0zseJi+6g/Sp7NnrQZd7VqbRpUM1YbG/A1ZQ RMBn8Whr2aK4xN1G1hVa1qwixqIn/Yh6ns8Z+3Z3ezq81kWVJmIBbgOEfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsHEG+pvudSX3fjEhpsMGSSOuEhMB8GA1UdIwQY MBaAFBDUm3PK2gHuhRgS7EQLeh7JhkizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wZGRjYTItODFiMy00Yjk5LWJlMDIt YWEwM2VjNjYyOTBmLzEvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wZGRjYTItODFiMy00Yjk5LWJlMDItYWEwM2VjNjYyOTBm LzEvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcryeVYdH zeTWWfoXXPcGZ/Cjwd3f2d2GXXUPSDj+opLgZKqyWyZEHxyMuTZ/3q6s/PjFayAd 5E59gGgaYn2RegfvNgwtXfF6IjXsPqSo03XIpgIyl5WyR8jQz33YUuYdUSierJn1 pFOd8X1z6HXRSJ+1yRAdGJwOeFypN5wnxbVOP68A7yPBZUcDbxi/VGvbEyNH0Z2Q s+LU2FQ90Uzmx9OOHOEeRs8rxi9aULDp7jVLugc4CP2s1yGJ/yGmWO9PfVspBItk BZYYZKl+XRCCkLNKy4VekrgIf+TOTzVbkk9jBKlA6zID64VM9Q/cbMBmQe6rXcgP 9XPxh81ym1l/+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:21 2025 by rpki-client