This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json) Hash identifier: s2/8bWR3tHTfBeGdiBCsHgmQ+bFgq9eyAXgJqA7VH9w= Subject key identifier: E7:9D:BA:64:CC:5F:E2:BB:E8:BC:A2:DB:CA:B1:A2:99:F7:AE:1D:80 Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18 Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418 Certificate serial: 019AF3C003BD7D39550163BBF368075706DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 13:00:38 +0000 Manifest this update: Sat 06 Dec 2025 13:00:38 +0000 Manifest next update: Sun 07 Dec 2025 13:00:38 +0000 Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: 5yCbVXJGqat0pr5t8FOC5uICmsTIzhGELJ3xugiU1Zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:03:bd:7d:39:55:01:63:bb:f3:68:07:57:06:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418 Validity Not Before: Dec 6 13:00:38 2025 GMT Not After : Dec 7 13:00:38 2025 GMT Subject: CN=e79dba64cc5fe2bbe8bca2dbcab1a299f7ae1d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:8d:8b:59:ed:59:18:2f:df:8f:0b:ed:77: 47:aa:a1:c4:a7:fe:b5:19:7f:75:5b:5d:7d:dc:14: 9a:6c:1b:47:dc:de:f5:ad:e9:9d:eb:26:f1:ab:e2: 97:3e:8f:46:4e:b8:ba:58:ca:b7:a3:87:01:18:aa: e9:38:71:8c:a8:73:6b:b8:ae:4b:c6:a6:f0:9c:b3: 78:eb:f0:c4:41:1d:d2:bc:71:91:b7:b2:ba:3b:9b: 4e:8a:55:ae:11:f6:57:b0:80:b7:52:e8:10:89:d4: ef:39:b6:b6:5b:05:75:62:03:31:78:ae:bf:42:52: be:bf:bf:8f:a7:ea:94:b6:5c:a8:c6:f1:d9:42:c4: 04:fa:68:05:b7:98:26:75:9e:1b:0b:d1:91:8c:2b: cc:40:78:e4:79:34:90:e8:f9:8c:8f:8e:31:0c:29: 1a:4e:00:74:c3:f0:a6:17:70:5b:86:11:cd:64:14: c8:5a:3c:9e:90:d5:4a:41:71:de:68:fe:b0:64:f3: 35:d6:5a:f4:5e:3c:22:c0:36:17:f8:f8:04:f9:aa: 3f:14:ac:bb:81:8c:e6:c9:8b:ed:16:3f:5e:ed:5f: e5:e5:5e:10:8e:81:a0:e9:b5:4c:46:c7:29:36:82: a7:88:be:98:61:54:fb:b3:25:3f:11:2f:bb:3b:1b: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9D:BA:64:CC:5F:E2:BB:E8:BC:A2:DB:CA:B1:A2:99:F7:AE:1D:80 X509v3 Authority Key Identifier: keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:35:1c:45:48:13:fc:04:ba:77:4c:b9:55:17:dc:26:3d:0e: 30:d0:21:5c:55:e6:09:b3:51:a4:61:ae:1f:0c:7f:8d:d4:0f: 7b:97:2c:c0:3b:68:93:bb:3a:9e:e2:0b:c8:61:d8:fe:7d:26: 3c:a7:74:77:e2:c1:88:3d:ea:b6:96:4b:5e:c5:1f:43:49:19: 81:21:87:80:05:c3:07:21:42:37:92:8e:ee:c1:10:75:9b:0b: 36:86:37:05:d0:60:ba:9a:9e:62:c1:20:b8:c4:19:b4:17:8e: 1e:a6:d9:f3:07:79:4a:cd:8f:23:bc:0f:d8:5c:f4:7a:98:4f: 04:35:11:4e:e5:e8:91:7e:5f:b5:1d:75:15:3e:9c:e3:c9:29: 88:d2:83:d3:b0:f3:4a:e1:d1:d0:39:a1:4f:a3:3b:f8:b4:8e: 12:77:6b:b3:f4:0d:75:dd:57:5c:34:be:ce:5c:71:fc:a4:d4: 0f:0b:0a:8f:94:9f:ba:14:db:5f:a5:39:5b:16:b5:4b:ac:ed: a1:17:3f:29:2a:78:57:5f:4c:23:85:a9:57:50:32:0c:6d:73: 4d:46:95:e8:d1:ce:a4:e3:61:ef:6b:12:90:33:a0:14:01:8d: 02:e9:e4:31:f9:be:5a:d0:37:81:53:f5:94:08:16:d1:0f:e1: 71:4c:2b:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAO9fTlVAWO782gHVwbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyY2YzOGM4ZTdiMTkyMmY2ZWJmM2ZkMzQwNzM1Y2RiMDQy MzE0MTgwHhcNMjUxMjA2MTMwMDM4WhcNMjUxMjA3MTMwMDM4WjAzMTEwLwYDVQQD EyhlNzlkYmE2NGNjNWZlMmJiZThiY2EyZGJjYWIxYTI5OWY3YWUxZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0neNi1ntWRgv348L7XdHqqHEp/61 GX91W1193BSabBtH3N71remd6ybxq+KXPo9GTri6WMq3o4cBGKrpOHGMqHNruK5L xqbwnLN46/DEQR3SvHGRt7K6O5tOilWuEfZXsIC3UugQidTvOba2WwV1YgMxeK6/ QlK+v7+Pp+qUtlyoxvHZQsQE+mgFt5gmdZ4bC9GRjCvMQHjkeTSQ6PmMj44xDCka TgB0w/CmF3BbhhHNZBTIWjyekNVKQXHeaP6wZPM11lr0XjwiwDYX+PgE+ao/FKy7 gYzmyYvtFj9e7V/l5V4QjoGg6bVMRscpNoKniL6YYVT7syU/ES+7OxsLZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOedumTMX+K76Lyi28qxopn3rh2AMB8GA1UdIwQY MBaAFBLPOMjnsZIvbr8/00BzXNsEIxQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2Mt YmUwYmFmYjc4MmVlLzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2MtYmUwYmFmYjc4MmVl LzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzUcRUgT /AS6d0y5VRfcJj0OMNAhXFXmCbNRpGGuHwx/jdQPe5cswDtok7s6nuILyGHY/n0m PKd0d+LBiD3qtpZLXsUfQ0kZgSGHgAXDByFCN5KO7sEQdZsLNoY3BdBgupqeYsEg uMQZtBeOHqbZ8wd5Ss2PI7wP2Fz0ephPBDURTuXokX5ftR11FT6c48kpiNKD07Dz SuHR0DmhT6M7+LSOEndrs/QNdd1XXDS+zlxx/KTUDwsKj5SfuhTbX6U5Wxa1S6zt oRc/KSp4V19MI4WpV1AyDG1zTUaV6NHOpONh72sSkDOgFAGNAunkMfm+WtA3gVP1 lAgW0Q/hcUwrXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:55:24 2025 by rpki-client