This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft File: EsMFQE6AtaTXDSHauG_FtrgBqLg.mft (raw, json) Hash identifier: geKjybAC2qB6ZNU/OLKqe5BzTxU9RnOdKIYcFAUTPu8= Subject key identifier: C9:C2:6B:80:35:A1:C4:95:08:CB:0D:D0:F0:D5:B4:8E:ED:68:72:22 Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8 Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8 Certificate serial: 019AF0BF15B9908ABEE9ACC51EB5ABD01F92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:45 +0000 Manifest this update: Fri 05 Dec 2025 23:00:45 +0000 Manifest next update: Sat 06 Dec 2025 23:00:45 +0000 Files and hashes: 1: EsMFQE6AtaTXDSHauG_FtrgBqLg.crl (hash: YC28k15Up1BRGwwjfwOTnHMpspAn9fa5ulutcr2q1gA=) 2: UKIFbdEhJSvRJBhQ9UZ29Ixwxd8.roa (hash: djsrsXvlKMi85HEyAQmyat+QxO41fFJrWFnZ+KpDs6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:15:b9:90:8a:be:e9:ac:c5:1e:b5:ab:d0:1f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8 Validity Not Before: Dec 5 23:00:45 2025 GMT Not After : Dec 6 23:00:45 2025 GMT Subject: CN=c9c26b8035a1c49508cb0dd0f0d5b48eed687222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:f4:8a:e3:cd:b0:e6:9c:f5:02:a6:59:e1: 69:8b:99:28:ca:27:e1:e0:2c:9e:3c:d1:25:07:eb: d8:53:05:67:ef:a8:f8:89:a9:ea:10:d9:e7:ff:2e: f3:c0:ad:13:ca:73:2b:e8:10:35:2d:af:76:4b:0a: 77:25:ed:a6:23:e3:32:15:57:36:7c:de:5f:c5:94: 68:4a:3f:9f:b1:e3:20:3b:c8:ce:18:40:04:48:bc: bb:1b:4e:27:94:e0:41:af:e1:cf:51:d4:fb:9b:59: bb:56:bd:9f:37:56:db:fc:68:68:1c:f4:98:99:a9: 58:d4:d3:45:ab:ab:a1:33:99:14:d5:6f:29:f9:5d: f1:6d:6b:ae:ff:df:d2:63:3c:24:ea:b9:03:36:79: be:44:cb:8b:ed:ff:d0:15:3e:37:18:5f:6f:62:36: 4f:40:54:eb:7d:f7:40:da:4d:be:b3:99:f5:8a:52: 0f:cd:92:94:5e:d5:ce:ae:4b:d7:14:08:c4:42:4e: 06:f4:2a:38:7f:f8:f2:dd:8b:e5:94:3a:ef:81:5b: cd:cc:08:e8:44:54:7d:8b:03:76:73:17:5c:18:c5: 11:69:8f:a6:a3:2d:4e:96:cf:09:6a:ad:0e:6a:28: 0c:bb:3f:49:4b:95:23:96:bd:0c:97:c6:1d:15:c1: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C2:6B:80:35:A1:C4:95:08:CB:0D:D0:F0:D5:B4:8E:ED:68:72:22 X509v3 Authority Key Identifier: keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:2f:3e:32:77:17:3a:c1:ab:41:4c:d4:ca:2c:95:b0:df:82: 75:fd:b6:b4:db:62:f4:05:f0:62:ce:25:48:be:53:31:11:72: 9b:6f:36:4d:b5:12:36:ef:62:f8:84:5c:84:02:3c:8b:9c:b7: fa:a5:91:50:5b:52:a7:b6:ec:59:f3:fd:c2:fb:9d:e5:11:e1: 9d:c5:99:22:8d:af:25:ae:ca:c7:64:03:fc:d6:da:05:40:b6: a6:45:cf:02:7a:81:d0:18:11:22:22:3a:4b:93:5c:6e:2e:98: ae:3b:ee:1a:96:f6:66:cc:1d:e3:ff:54:c4:93:20:23:9c:32: d2:ef:0a:ed:41:fc:b1:4f:ef:2a:66:c6:91:55:ae:7b:af:5e: a7:7a:ec:99:c6:d9:3d:ca:d9:2b:0c:97:70:72:28:fd:ca:bf: 20:6b:d3:d5:57:3c:51:e0:19:30:d5:e8:5d:7e:bc:75:dc:64: 5d:72:e0:ef:9b:16:a9:dc:00:33:b8:b8:7b:85:36:34:76:9b: e7:6e:a1:d2:7e:49:23:f8:81:33:ca:c1:f6:86:6d:31:ec:d1: 70:19:af:68:3f:9c:7f:0d:c9:02:a0:33:f5:cf:50:8e:31:cf: 94:98:37:8b:9b:36:69:95:00:ff:52:a5:29:1c:ac:b7:f5:e6: 4c:a3:11:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxW5kIq+6azFHrWr0B+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzMwNTQwNGU4MGI1YTRkNzBkMjFkYWI4NmZjNWI2Yjgw MWE4YjgwHhcNMjUxMjA1MjMwMDQ1WhcNMjUxMjA2MjMwMDQ1WjAzMTEwLwYDVQQD EyhjOWMyNmI4MDM1YTFjNDk1MDhjYjBkZDBmMGQ1YjQ4ZWVkNjg3MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu//0iuPNsOac9QKmWeFpi5koyifh 4CyePNElB+vYUwVn76j4ianqENnn/y7zwK0TynMr6BA1La92Swp3Je2mI+MyFVc2 fN5fxZRoSj+fseMgO8jOGEAESLy7G04nlOBBr+HPUdT7m1m7Vr2fN1bb/GhoHPSY malY1NNFq6uhM5kU1W8p+V3xbWuu/9/SYzwk6rkDNnm+RMuL7f/QFT43GF9vYjZP QFTrffdA2k2+s5n1ilIPzZKUXtXOrkvXFAjEQk4G9Co4f/jy3YvllDrvgVvNzAjo RFR9iwN2cxdcGMURaY+moy1Ols8Jaq0OaigMuz9JS5Ujlr0Ml8YdFcFpIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnCa4A1ocSVCMsN0PDVtI7taHIiMB8GA1UdIwQY MBaAFBLDBUBOgLWk1w0h2rhvxba4Aai4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEt Y2U5MjNkMTk1MDhmLzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEtY2U5MjNkMTk1MDhm LzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEy8+MncX OsGrQUzUyiyVsN+Cdf22tNti9AXwYs4lSL5TMRFym282TbUSNu9i+IRchAI8i5y3 +qWRUFtSp7bsWfP9wvud5RHhncWZIo2vJa7Kx2QD/NbaBUC2pkXPAnqB0BgRIiI6 S5Ncbi6YrjvuGpb2Zswd4/9UxJMgI5wy0u8K7UH8sU/vKmbGkVWue69ep3rsmcbZ PcrZKwyXcHIo/cq/IGvT1Vc8UeAZMNXoXX68ddxkXXLg75sWqdwAM7i4e4U2NHab 526h0n5JI/iBM8rB9oZtMezRcBmvaD+cfw3JAqAz9c9QjjHPlJg3i5s2aZUA/1Kl KRyst/XmTKMRJw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:56 2025 by rpki-client