This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json) Hash identifier: KbhaccRFj8CUzN3csRDoYScjAqnECIx8Gog8o4uIqiw= Subject key identifier: 05:0E:08:EC:BF:5B:B6:F3:B7:13:0C:6A:DA:4E:8D:11:A6:E3:3A:75 Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79 Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979 Certificate serial: 019AF31C233C299705D3BA5C87F0445EA508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:38 +0000 Manifest this update: Sat 06 Dec 2025 10:01:38 +0000 Manifest next update: Sun 07 Dec 2025 10:01:38 +0000 Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: 5k9QLDW/rtdR9EVyG/5p8UXtLPpkYjYXDR473UPwNFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:23:3c:29:97:05:d3:ba:5c:87:f0:44:5e:a5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979 Validity Not Before: Dec 6 10:01:38 2025 GMT Not After : Dec 7 10:01:38 2025 GMT Subject: CN=050e08ecbf5bb6f3b7130c6ada4e8d11a6e33a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:be:44:66:84:1e:2c:08:82:e5:78:32:31: ad:55:7f:11:cc:e5:27:30:df:00:5d:44:27:a2:ba: 54:f1:2e:d8:f3:f8:92:13:3a:e8:8c:37:11:0d:49: 89:1e:1e:a5:65:3d:45:4c:51:10:d5:32:3c:f8:02: 7c:c8:c7:73:83:b5:3b:b9:92:a2:b0:c8:ec:57:84: 12:4b:b9:99:85:93:f3:4b:07:3f:33:6b:12:b6:9d: 3b:89:c0:64:1c:07:d7:f0:1e:56:82:6e:5f:80:0f: 37:c6:19:0a:fd:50:fc:87:78:c5:a3:8e:f6:cd:ae: b7:5d:f6:e2:d3:16:41:84:51:7c:55:48:84:3f:ec: 3b:b3:61:07:e5:96:95:e3:de:12:c0:81:f4:63:1c: 28:9e:36:7c:5f:29:ab:5c:34:60:2c:df:f3:de:51: e1:e2:70:37:ca:db:17:cc:dd:56:2d:15:8a:4d:d1: 55:ac:a3:80:de:5e:f9:a6:cc:e1:cd:44:af:d8:1b: 07:70:39:47:0d:d5:ed:f3:45:1f:1f:e2:9b:6d:f4: d7:94:72:e7:38:40:a2:8d:f7:7a:8b:24:37:f1:29: 2e:cb:95:4a:30:ce:c2:38:6b:0f:35:4b:8a:a2:9b: e0:2f:25:60:18:21:b2:e4:61:c0:c7:15:6b:14:e8: c3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0E:08:EC:BF:5B:B6:F3:B7:13:0C:6A:DA:4E:8D:11:A6:E3:3A:75 X509v3 Authority Key Identifier: keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:37:58:47:2c:e5:da:17:d0:7b:86:45:a1:55:e8:ba:8b:72: 60:d1:ff:73:35:62:1d:2a:d1:c8:ba:6b:b0:e9:3d:9c:b2:b3: 7a:44:93:84:9c:8b:c7:f6:b9:1a:2d:72:93:ac:f8:09:a2:d3: 47:7b:21:0f:a3:fb:65:b7:57:f4:c0:45:dc:a8:d7:a3:44:86: 63:17:fb:d2:90:f3:18:b3:c1:b6:b5:83:9f:41:50:55:91:ca: 3e:76:bf:91:e0:f7:87:b8:8f:6c:4e:11:6f:93:2c:0e:7d:9a: 0b:62:8f:16:32:95:56:89:5d:a0:53:e0:58:a7:8c:cc:7a:f0: 94:df:f2:48:5c:72:4d:37:6a:4f:41:6a:2e:5f:3c:87:bc:10: 35:12:83:b8:75:1b:c8:bb:36:eb:c0:c8:c4:3c:ab:72:43:d4: 90:39:cc:ba:ca:4c:af:88:83:6d:45:b4:9c:bd:00:40:44:1d: ab:84:0d:5d:08:27:92:bb:e6:76:9e:0b:87:eb:2d:e0:02:63: 32:03:a6:0d:be:bc:d6:0b:3f:53:fe:a8:76:41:9c:e4:c9:86: e6:fc:e7:d3:18:30:c4:91:43:6f:22:3c:54:21:d2:e8:c3:43: dc:3e:5c:44:15:5a:2e:b8:af:55:d7:55:65:36:85:3c:d8:1f: 54:dd:de:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCM8KZcF07pch/BEXqUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MmI2ZDZlNWJkYTA1MjY1ZmMwY2U5NzE5YTYzM2JlMDRh NmU5NzkwHhcNMjUxMjA2MTAwMTM4WhcNMjUxMjA3MTAwMTM4WjAzMTEwLwYDVQQD EygwNTBlMDhlY2JmNWJiNmYzYjcxMzBjNmFkYTRlOGQxMWE2ZTMzYTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXq+RGaEHiwIguV4MjGtVX8RzOUn MN8AXUQnorpU8S7Y8/iSEzrojDcRDUmJHh6lZT1FTFEQ1TI8+AJ8yMdzg7U7uZKi sMjsV4QSS7mZhZPzSwc/M2sStp07icBkHAfX8B5Wgm5fgA83xhkK/VD8h3jFo472 za63Xfbi0xZBhFF8VUiEP+w7s2EH5ZaV494SwIH0YxwonjZ8XymrXDRgLN/z3lHh 4nA3ytsXzN1WLRWKTdFVrKOA3l75pszhzUSv2BsHcDlHDdXt80UfH+KbbfTXlHLn OECijfd6iyQ38Skuy5VKMM7COGsPNUuKopvgLyVgGCGy5GHAxxVrFOjDjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUOCOy/W7bztxMMatpOjRGm4zp1MB8GA1UdIwQY MBaAFHkrbW5b2gUmX8DOlxmmM74Epul5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYt MjEzZGMzOTliZTZmLzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYtMjEzZGMzOTliZTZm LzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzdYRyzl 2hfQe4ZFoVXouotyYNH/czViHSrRyLprsOk9nLKzekSThJyLx/a5Gi1yk6z4CaLT R3shD6P7ZbdX9MBF3KjXo0SGYxf70pDzGLPBtrWDn0FQVZHKPna/keD3h7iPbE4R b5MsDn2aC2KPFjKVVoldoFPgWKeMzHrwlN/ySFxyTTdqT0FqLl88h7wQNRKDuHUb yLs268DIxDyrckPUkDnMuspMr4iDbUW0nL0AQEQdq4QNXQgnkrvmdp4Lh+st4AJj MgOmDb681gs/U/6odkGc5MmG5vzn0xgwxJFDbyI8VCHS6MND3D5cRBVaLrivVddV ZTaFPNgfVN3e/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:25 2025 by rpki-client