This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft File: ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json) Hash identifier: 8RDrhs82clRSKMP7AxKSzJjuwV1uU6e5azme9omElWk= Subject key identifier: 2A:DA:C6:9C:90:F2:D3:EA:B8:62:C2:52:DD:FF:11:77:A2:03:14:F2 Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5 Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5 Certificate serial: 019B2D0AE017E67A231901A9869D56A56144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 16:00:45 +0000 Manifest this update: Wed 17 Dec 2025 16:00:45 +0000 Manifest next update: Thu 18 Dec 2025 16:00:45 +0000 Files and hashes: 1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: YRv6s1cIwhkPicw/6TtzGkGwYa3RL4jCTdC5fUKMzss=) 2: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (hash: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0a:e0:17:e6:7a:23:19:01:a9:86:9d:56:a5:61:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5 Validity Not Before: Dec 17 16:00:45 2025 GMT Not After : Dec 18 16:00:45 2025 GMT Subject: CN=2adac69c90f2d3eab862c252ddff1177a20314f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8d:49:74:ce:3a:3b:21:09:8d:79:a1:0a:0e: d8:15:ac:db:7d:0a:70:91:31:1a:bf:26:01:7e:b1: dc:9c:5b:02:c4:c8:1f:cd:bb:b6:39:76:3c:c5:e6: 42:d6:4e:75:b7:d0:81:5c:69:ac:89:ba:3b:04:16: 0b:dc:02:03:a6:ec:37:0c:91:41:b0:8f:c7:1e:a3: 08:0a:e6:72:2c:fb:52:83:27:3d:f5:f3:29:f7:23: 09:4f:df:2c:01:e5:61:6d:46:77:df:a8:14:60:08: cc:10:3f:95:87:13:8f:47:4d:79:3b:47:e9:a6:96: c6:11:c5:f7:5b:5a:4e:2f:7f:ee:a9:ff:4d:be:cc: d3:6d:36:56:6d:e9:55:99:7e:8e:26:bb:f7:e4:ee: d4:c9:31:96:21:89:04:95:c8:74:1b:ba:34:09:0a: 12:6f:4d:df:3a:4e:cb:89:ad:40:08:5e:b3:89:58: 50:e8:48:7f:4e:d9:c4:c0:c8:eb:da:96:ad:db:2b: bf:a2:38:ca:ae:83:f3:31:df:1c:5b:a7:55:32:73: 30:9a:f7:b4:41:6f:77:32:16:65:70:c2:d9:f1:d0: 1a:bb:3a:74:34:a8:fd:ab:8f:67:4c:81:a3:83:0e: b7:ed:c1:b7:97:f9:98:29:37:6c:bb:95:ff:3e:88: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DA:C6:9C:90:F2:D3:EA:B8:62:C2:52:DD:FF:11:77:A2:03:14:F2 X509v3 Authority Key Identifier: keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d9:85:1d:9d:a4:c1:93:aa:59:5e:a0:d1:6b:ce:7f:7b:18: 9a:c2:ae:da:48:45:96:9d:80:0a:d6:80:90:96:29:d9:a1:94: ae:8a:fe:42:0b:5a:eb:e0:ea:16:31:87:1d:47:0a:06:6a:47: 73:5c:0a:37:1f:9d:b8:e4:dc:60:49:df:a3:aa:5b:b2:05:35: 4b:a3:f5:a3:26:74:20:98:33:ec:8b:69:72:1a:1d:09:a3:a5: 23:7d:24:e7:f1:77:c9:ec:df:9b:28:dd:5a:57:03:21:03:22: cc:82:ee:78:f2:41:25:89:73:04:b9:d3:36:88:4e:c0:c9:10: 97:94:67:03:9f:4c:60:15:8f:4a:db:2d:b7:56:50:40:1b:38: c5:52:47:23:42:80:d3:7b:b5:45:9e:7e:78:74:df:5c:0a:86: d7:2f:e8:2e:18:ec:bf:5c:0b:e5:21:f8:89:53:6e:99:b8:dc: bb:9d:5d:c7:6f:64:d0:57:cf:9b:3f:d7:0b:a2:1d:f5:65:55: 36:b4:c4:df:d7:a8:4b:fb:dc:5a:21:da:b6:25:a6:92:46:72: 3c:3c:52:ed:94:de:3a:c6:15:50:55:df:d7:26:e3:7f:cc:54: 4c:2a:4f:9a:f7:aa:e2:f4:26:9a:e9:4a:ee:a3:9e:43:e0:86: fc:11:3a:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCuAX5nojGQGphp1WpWFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmQwYzRmMTZkYzg5MjIxMjlmZjYwNTBlMjM1NTYyMzE3 NTY1ZTUwHhcNMjUxMjE3MTYwMDQ1WhcNMjUxMjE4MTYwMDQ1WjAzMTEwLwYDVQQD EygyYWRhYzY5YzkwZjJkM2VhYjg2MmMyNTJkZGZmMTE3N2EyMDMxNGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I1JdM46OyEJjXmhCg7YFazbfQpw kTEavyYBfrHcnFsCxMgfzbu2OXY8xeZC1k51t9CBXGmsibo7BBYL3AIDpuw3DJFB sI/HHqMICuZyLPtSgyc99fMp9yMJT98sAeVhbUZ336gUYAjMED+VhxOPR015O0fp ppbGEcX3W1pOL3/uqf9NvszTbTZWbelVmX6OJrv35O7UyTGWIYkElch0G7o0CQoS b03fOk7Lia1ACF6ziVhQ6Eh/TtnEwMjr2pat2yu/ojjKroPzMd8cW6dVMnMwmve0 QW93MhZlcMLZ8dAauzp0NKj9q49nTIGjgw637cG3l/mYKTdsu5X/PoiaxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCraxpyQ8tPquGLCUt3/EXeiAxTyMB8GA1UdIwQY MBaAFBEtDE8W3IkiEp/2BQ4jVWIxdWXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80NTgzMGMtNGE4Ni00MDJjLWExZWUt NDAwOWQ4NzliOTdlLzEvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80NTgzMGMtNGE4Ni00MDJjLWExZWUtNDAwOWQ4NzliOTdl LzEvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdmFHZ2k wZOqWV6g0WvOf3sYmsKu2khFlp2ACtaAkJYp2aGUror+Qgta6+DqFjGHHUcKBmpH c1wKNx+duOTcYEnfo6pbsgU1S6P1oyZ0IJgz7ItpchodCaOlI30k5/F3yezfmyjd WlcDIQMizILuePJBJYlzBLnTNohOwMkQl5RnA59MYBWPStstt1ZQQBs4xVJHI0KA 03u1RZ5+eHTfXAqG1y/oLhjsv1wL5SH4iVNumbjcu51dx29k0FfPmz/XC6Id9WVV NrTE39eoS/vcWiHatiWmkkZyPDxS7ZTeOsYVUFXf1ybjf8xUTCpPmveq4vQmmulK 7qOeQ+CG/BE6xg== -----END CERTIFICATE-----Generated at Wed Dec 17 23:44:06 2025 by rpki-client