This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft File: eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json) Hash identifier: 083AJNCikzfRKVxbQ+GjZU99MpgEx5TB9Qj1G6XCGKg= Subject key identifier: 71:69:A8:53:D3:41:3C:48:60:8C:70:14:53:50:46:E5:41:C6:DC:27 Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA Certificate issuer: /CN=792304cece7fb6551d621e257743753d7d3e7eba Certificate serial: 019AF3898EFC2455A458842E4B5BADDAB30B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft Manifest number: 14A7 Signing time: Sat 06 Dec 2025 12:01:09 +0000 Manifest this update: Sat 06 Dec 2025 12:01:09 +0000 Manifest next update: Sun 07 Dec 2025 12:01:09 +0000 Files and hashes: 1: IMdPglYzX5a0Y8UZyR6PoX9F3qI.roa (hash: LlemrthVpDv3Bg7I6x+S4EwJBWPGL+Tm33DKrH5qsTc=) 2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: TnHd3TytrMnchcZVcVr0mJ1Z+YlL/w1343lQ//ufVTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:8e:fc:24:55:a4:58:84:2e:4b:5b:ad:da:b3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba Validity Not Before: Dec 6 12:01:09 2025 GMT Not After : Dec 7 12:01:09 2025 GMT Subject: CN=7169a853d3413c48608c7014535046e541c6dc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:ed:28:ce:d7:33:83:6b:93:a7:22:b4:8a: 27:e0:4d:05:f7:44:3d:e4:b3:db:a7:fb:a4:7f:96: c2:65:fe:54:83:3b:05:11:88:a2:d8:7c:7a:3b:ad: ab:47:6d:8e:14:37:d6:f9:25:ec:05:32:88:e5:2f: ec:58:7f:3b:25:f7:da:32:0f:69:f0:c1:6c:90:e5: 97:d5:69:85:73:77:8b:42:9e:87:fc:01:73:95:0f: c7:32:f9:67:8a:f8:ba:99:57:b8:60:27:0b:1c:20: d8:af:77:31:10:85:7c:4f:60:f2:ca:6d:27:ce:9c: d8:f0:3f:f8:5e:4e:1e:4c:63:ef:e9:4d:93:6e:d0: 26:07:84:b9:c6:f6:e6:40:e7:21:8d:f9:7f:70:18: 65:60:d2:b2:5d:56:bd:46:ae:35:67:16:c9:d7:57: 62:2c:1a:e8:86:54:1a:48:91:fc:50:07:f2:d2:05: 01:0d:6c:cc:9b:ab:24:3d:a2:ca:78:f1:1b:77:60: b4:a0:96:c7:49:e6:bc:28:05:86:15:04:62:91:68: 5e:8a:55:4a:2f:86:a8:2d:fe:97:60:63:be:ea:e0: a5:48:57:7e:88:d7:73:51:b6:09:aa:6f:8c:a9:81: 85:51:47:1a:a3:a2:a7:f0:35:a4:9f:b8:15:a5:27: 86:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:69:A8:53:D3:41:3C:48:60:8C:70:14:53:50:46:E5:41:C6:DC:27 X509v3 Authority Key Identifier: keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ff:fd:e5:7b:79:0b:8e:7c:7e:7d:49:c4:87:3c:2c:b0:7f: 58:86:7e:09:39:b9:a3:3d:7d:ed:13:74:f7:04:5f:cf:f2:0f: 61:b6:83:31:d5:7d:1c:b0:6a:0b:a3:0b:0f:bb:b0:da:3d:63: 40:92:c3:d6:88:18:c8:92:16:62:90:05:24:4b:c6:96:bc:7f: 95:54:a8:19:14:84:06:ae:1f:c9:8a:e9:25:24:27:87:bf:80: 3d:ab:3a:e4:8d:05:f4:e1:25:f2:f2:bb:04:b4:67:02:7f:4a: 8d:62:0d:dd:c4:58:2f:7b:21:5b:d3:c1:87:9f:16:b4:8f:f2: ee:dd:2d:79:c3:c1:3c:f7:1d:0d:fa:9b:2a:e7:b3:e9:25:6a: 8c:d1:75:b4:be:db:4a:f8:a1:0e:b3:26:a8:e3:66:ed:3d:74: c9:8f:6c:75:e7:81:9c:fb:ff:e5:a5:0e:69:52:03:c7:21:97: 73:ef:ab:4e:a7:51:94:93:2d:64:11:4c:d3:09:83:d7:8e:47: 42:d1:b9:6c:37:e4:a4:dc:4d:b9:d4:2b:c7:44:4c:ef:2f:b3: d9:16:59:b2:63:75:18:f9:db:92:50:20:60:f1:48:58:eb:d5: 10:e6:fe:5d:11:e7:a0:6f:7b:f5:a7:9a:78:21:b7:fe:bf:7b: 8f:7d:e0:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziY78JFWkWIQuS1ut2rMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MjMwNGNlY2U3ZmI2NTUxZDYyMWUyNTc3NDM3NTNkN2Qz ZTdlYmEwHhcNMjUxMjA2MTIwMTA5WhcNMjUxMjA3MTIwMTA5WjAzMTEwLwYDVQQD Eyg3MTY5YTg1M2QzNDEzYzQ4NjA4YzcwMTQ1MzUwNDZlNTQxYzZkYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjXtKM7XM4Nrk6citIon4E0F90Q9 5LPbp/ukf5bCZf5UgzsFEYii2Hx6O62rR22OFDfW+SXsBTKI5S/sWH87JffaMg9p 8MFskOWX1WmFc3eLQp6H/AFzlQ/HMvlnivi6mVe4YCcLHCDYr3cxEIV8T2Dyym0n zpzY8D/4Xk4eTGPv6U2TbtAmB4S5xvbmQOchjfl/cBhlYNKyXVa9Rq41ZxbJ11di LBrohlQaSJH8UAfy0gUBDWzMm6skPaLKePEbd2C0oJbHSea8KAWGFQRikWheilVK L4aoLf6XYGO+6uClSFd+iNdzUbYJqm+MqYGFUUcao6Kn8DWkn7gVpSeGWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFpqFPTQTxIYIxwFFNQRuVBxtwnMB8GA1UdIwQY MBaAFHkjBM7Of7ZVHWIeJXdDdT19Pn66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEt ZWQ4MmFlN2RiZDU5LzEvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEtZWQ4MmFlN2RiZDU5 LzEvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS//95Xt5 C458fn1JxIc8LLB/WIZ+CTm5oz197RN09wRfz/IPYbaDMdV9HLBqC6MLD7uw2j1j QJLD1ogYyJIWYpAFJEvGlrx/lVSoGRSEBq4fyYrpJSQnh7+APas65I0F9OEl8vK7 BLRnAn9KjWIN3cRYL3shW9PBh58WtI/y7t0tecPBPPcdDfqbKuez6SVqjNF1tL7b SvihDrMmqONm7T10yY9sdeeBnPv/5aUOaVIDxyGXc++rTqdRlJMtZBFM0wmD145H QtG5bDfkpNxNudQrx0RM7y+z2RZZsmN1GPnbklAgYPFIWOvVEOb+XRHnoG979aea eCG3/r97j33gMA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:24 2025 by rpki-client