This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json) Hash identifier: 2EcSrrdprVl5qv4mSZJoXM1c3XV/SbPMoWjq7+NbzrQ= Subject key identifier: 10:11:26:27:21:D8:79:39:63:BE:0F:C0:8A:60:53:53:53:C8:58:68 Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1 Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1 Certificate serial: 019AF1D1E78BD19FE531DE219556ADD7DA41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: Z+jji0k8iYM2WNe26Z+2gov+wYcKyerO80bxFeDu79Y=) 2: l3o0cPreMKkY6Zin7N9ceMUABWg.roa (hash: IkZ3DQrsK1OPin+reh8WbUesG/v7qTfWkg1bNypSLzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e7:8b:d1:9f:e5:31:de:21:95:56:ad:d7:da:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=1011262721d8793963be0fc08a60535353c85868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:9e:c5:a4:ba:95:5e:63:d8:49:93:02:d6: c4:a0:48:f2:b3:ff:63:ce:6e:23:ef:cc:d0:c6:19: d1:44:ae:5f:b3:39:d2:2d:35:44:68:14:b1:68:8f: 5e:21:9f:6a:02:3c:1a:62:60:0f:a4:84:82:44:f6: 80:5f:f9:53:90:c2:31:03:65:1a:61:52:32:4d:3f: 74:b5:c3:e2:6b:bd:3d:3a:9c:10:70:b2:67:ac:f8: 31:4b:55:4f:3e:8c:21:e5:a7:e9:b1:23:92:50:cd: c9:5b:fa:37:22:6a:2f:fc:43:05:5c:b3:7b:95:3b: 65:cd:4d:a1:62:f0:db:d2:ed:5b:ae:27:d3:89:b9: e8:c7:52:c8:49:f3:6a:07:ef:d0:06:53:6a:b6:5e: 16:bc:95:19:3f:3f:2a:a8:3c:fb:cf:27:73:86:15: 1b:9f:6a:dd:a6:03:eb:3a:93:a2:d0:b8:f3:04:7e: d9:fd:7a:f9:b5:3d:f9:0e:b8:53:91:c9:b6:de:7d: 0e:49:9f:a8:aa:1c:5b:47:74:f5:73:d4:b7:d2:a0: 18:52:9a:15:14:2c:42:55:34:15:ca:91:b4:79:98: 9b:10:ee:32:b7:99:f2:ee:1a:92:c8:a0:05:e2:7e: 38:cf:b7:71:27:08:bd:ed:c8:a8:8e:d0:cb:3b:ff: f9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:11:26:27:21:D8:79:39:63:BE:0F:C0:8A:60:53:53:53:C8:58:68 X509v3 Authority Key Identifier: keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2e:bb:99:d3:a3:8f:2e:76:12:6c:1c:38:3b:06:b7:88:ea: df:c1:0f:80:95:db:c3:78:d6:3b:39:28:13:74:44:a0:38:a1: 85:e6:27:cd:73:3d:2e:e8:04:b6:91:df:9c:3c:f9:eb:b8:0b: 8c:eb:34:34:08:dd:dd:85:dd:25:25:56:76:59:76:e3:4c:fb: 6f:94:fb:c0:ca:b2:d5:ff:ff:d7:6f:a1:df:91:ea:6a:f6:7b: a6:e6:ec:db:ea:8a:aa:5a:18:d0:a0:2f:a0:fa:41:64:b0:dd: d1:e0:0e:e8:72:49:ea:7c:e7:7e:d7:84:89:43:d5:8e:f1:00: 21:a0:cd:5b:6a:2b:6b:47:ce:39:8a:8d:84:7a:3f:46:b5:44: e6:4f:f9:63:ed:ed:4b:c4:4f:7a:77:82:59:b0:9b:5b:a4:0e: f4:06:11:92:75:c0:f9:a0:ff:ed:62:6a:82:3e:93:0e:d7:dc: fd:d1:a1:34:7b:1d:77:fc:b0:5b:dc:26:f9:39:d1:3c:02:8a: 36:5e:b5:2b:20:46:d9:05:be:1d:0f:39:10:1a:7b:69:66:5c: 47:ee:86:53:b4:f4:15:31:72:20:12:4a:2a:7c:21:08:7c:4f: 65:69:a6:89:1b:2c:12:f3:9d:c8:d3:3b:53:52:0b:23:ed:74: 67:04:de:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eeL0Z/lMd4hlVat19pBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyY2Q5YWRkMTYxMzdlOGJhYjk4ZDc4ZTJhMzM2MGJjOGJk NmYwZjEwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD EygxMDExMjYyNzIxZDg3OTM5NjNiZTBmYzA4YTYwNTM1MzUzYzg1ODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk+exaS6lV5j2EmTAtbEoEjys/9j zm4j78zQxhnRRK5fsznSLTVEaBSxaI9eIZ9qAjwaYmAPpISCRPaAX/lTkMIxA2Ua YVIyTT90tcPia709OpwQcLJnrPgxS1VPPowh5afpsSOSUM3JW/o3Imov/EMFXLN7 lTtlzU2hYvDb0u1brifTibnox1LISfNqB+/QBlNqtl4WvJUZPz8qqDz7zydzhhUb n2rdpgPrOpOi0LjzBH7Z/Xr5tT35DrhTkcm23n0OSZ+oqhxbR3T1c9S30qAYUpoV FCxCVTQVypG0eZibEO4yt5ny7hqSyKAF4n44z7dxJwi97ciojtDLO//5SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBARJich2Hk5Y74PwIpgU1NTyFhoMB8GA1UdIwQY MBaAFBLNmt0WE36Lq5jXjiozYLyL1vDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMt MTcyZGY2YmNkNDViLzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMtMTcyZGY2YmNkNDVi LzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmi67mdOj jy52EmwcODsGt4jq38EPgJXbw3jWOzkoE3REoDihheYnzXM9LugEtpHfnDz567gL jOs0NAjd3YXdJSVWdll240z7b5T7wMqy1f//12+h35HqavZ7pubs2+qKqloY0KAv oPpBZLDd0eAO6HJJ6nznfteEiUPVjvEAIaDNW2ora0fOOYqNhHo/RrVE5k/5Y+3t S8RPeneCWbCbW6QO9AYRknXA+aD/7WJqgj6TDtfc/dGhNHsdd/ywW9wm+TnRPAKK Nl61KyBG2QW+HQ85EBp7aWZcR+6GU7T0FTFyIBJKKnwhCHxPZWmmiRssEvOdyNM7 U1ILI+10ZwTeTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:32 2025 by rpki-client