This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft File: ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json) Hash identifier: I3qH7XNZR1oG7+WdZt9RpM4Cg9CgiPKHo8669blmFbE= Subject key identifier: 58:9E:62:DD:24:61:50:20:A4:2D:12:C4:39:9B:8C:B0:AC:5C:82:C5 Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c Certificate serial: 019AF19B920D07A9D28B9A5B039355FC006E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft Manifest number: 0F0E Signing time: Sat 06 Dec 2025 03:01:35 +0000 Manifest this update: Sat 06 Dec 2025 03:01:35 +0000 Manifest next update: Sun 07 Dec 2025 03:01:35 +0000 Files and hashes: 1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: U9m3s25M/66ss4gVG5HUfJiUL+n4rAX5t57lh9m+5hE=) 2: lTwE90XrCNGA5eJTFjnSjOK1bSM.roa (hash: /sO0aTlcuRH7YD2SVxbEfIzYX6MelmZ8Ycirgk+wG1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:92:0d:07:a9:d2:8b:9a:5b:03:93:55:fc:00:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c Validity Not Before: Dec 6 03:01:35 2025 GMT Not After : Dec 7 03:01:35 2025 GMT Subject: CN=589e62dd24615020a42d12c4399b8cb0ac5c82c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:21:90:9f:a0:4e:fd:d8:49:b0:b8:2c:bb: 25:ac:d4:ce:b4:9c:cc:ff:66:4a:4e:af:c7:ee:c6: e4:4f:6a:ca:c8:b2:f5:95:f3:6c:27:cb:a2:35:1f: 3d:7e:08:c8:49:80:1f:c1:43:c9:6a:61:ce:12:6c: 02:c9:d1:8f:92:11:f0:27:83:24:7d:c1:b3:40:f9: ef:97:8b:3a:07:c5:de:11:ae:fc:6a:3d:36:75:c0: c6:56:ee:fe:93:c3:a4:8c:05:86:41:37:ee:f5:41: 0b:93:59:69:04:74:ee:bd:72:21:b5:f4:e2:7e:46: b3:26:90:63:e9:ce:f6:fa:68:96:5e:17:0f:e5:31: 0b:ce:c0:e6:e3:15:69:5f:ff:b3:4b:e8:d6:57:61: 87:7a:c3:4c:44:1c:b5:a8:b2:da:95:4c:e7:b8:1d: 89:85:40:30:f7:de:88:7f:08:42:de:57:04:36:9a: af:44:44:ea:ae:6f:f7:16:a4:89:eb:c4:11:da:0d: fd:8a:a3:65:e0:67:d9:1c:a2:dc:5f:d8:c4:f6:2c: 2c:d9:64:e3:c3:76:77:2c:eb:b2:0d:bb:cb:c6:fb: 22:14:5b:8d:25:31:a4:ce:a2:dc:1f:3b:55:92:8e: 24:30:db:56:cc:fa:9d:1c:a7:cf:68:19:94:2c:dc: a7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:62:DD:24:61:50:20:A4:2D:12:C4:39:9B:8C:B0:AC:5C:82:C5 X509v3 Authority Key Identifier: keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e9:ea:3d:43:a4:8d:1a:2e:4f:56:65:c5:c6:ef:39:56:f2: 25:3a:03:f0:0e:6d:87:e9:f8:fb:8f:54:65:7a:bb:75:71:6f: 05:70:c1:21:df:d5:3b:38:60:13:f6:f2:3a:f0:db:b8:d0:87: 43:28:d9:ed:4f:07:b5:b5:65:1b:4b:ab:e2:0c:8a:df:54:dd: 77:27:cf:f7:b9:49:e7:dc:66:9e:58:fd:1a:87:9c:8b:04:d3: ab:99:66:43:20:61:52:b2:f2:7b:ae:35:3a:13:1e:65:a1:31: 58:14:0f:5a:02:59:ba:08:b0:c4:42:ce:18:c2:94:b0:72:74: dc:ab:d6:a3:39:87:30:37:1f:d3:07:94:88:eb:fc:47:b4:8b: 85:15:bf:50:a8:ad:5e:11:4a:a7:e9:6f:03:c3:fe:c1:d4:ff: ef:d0:b9:e2:98:79:70:41:99:a2:c4:75:8b:6c:a3:85:52:dd: 74:d6:1c:f3:ed:5b:5d:79:78:a8:e8:9e:42:6c:c7:5c:a6:0e: 1a:fd:b0:da:56:e6:21:cd:85:d7:13:1c:ae:79:5f:f9:c5:7c: 3d:a6:b2:67:d9:57:68:5a:e5:a5:b1:1c:e6:bd:19:9e:af:0c: a1:e5:99:4f:35:6c:40:56:12:8e:8c:65:c8:57:11:2c:00:3a: 14:49:ba:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5INB6nSi5pbA5NV/ABuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjlhZDAxNDA3MmRlNjYxNzQzOGZiMWFmYmU0MWEyZGJk YzgxMWMwHhcNMjUxMjA2MDMwMTM1WhcNMjUxMjA3MDMwMTM1WjAzMTEwLwYDVQQD Eyg1ODllNjJkZDI0NjE1MDIwYTQyZDEyYzQzOTliOGNiMGFjNWM4MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZUhkJ+gTv3YSbC4LLslrNTOtJzM /2ZKTq/H7sbkT2rKyLL1lfNsJ8uiNR89fgjISYAfwUPJamHOEmwCydGPkhHwJ4Mk fcGzQPnvl4s6B8XeEa78aj02dcDGVu7+k8OkjAWGQTfu9UELk1lpBHTuvXIhtfTi fkazJpBj6c72+miWXhcP5TELzsDm4xVpX/+zS+jWV2GHesNMRBy1qLLalUznuB2J hUAw996IfwhC3lcENpqvRETqrm/3FqSJ68QR2g39iqNl4GfZHKLcX9jE9iws2WTj w3Z3LOuyDbvLxvsiFFuNJTGkzqLcHztVko4kMNtWzPqdHKfPaBmULNynZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFieYt0kYVAgpC0SxDmbjLCsXILFMB8GA1UdIwQY MBaAFBEprQFAct5mF0OPsa++QaLb3IEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzIt YWM4ODE0OTdlMGEyLzEvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzItYWM4ODE0OTdlMGEy LzEvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOnqPUOk jRouT1ZlxcbvOVbyJToD8A5th+n4+49UZXq7dXFvBXDBId/VOzhgE/byOvDbuNCH QyjZ7U8HtbVlG0ur4gyK31TddyfP97lJ59xmnlj9GoeciwTTq5lmQyBhUrLye641 OhMeZaExWBQPWgJZugiwxELOGMKUsHJ03KvWozmHMDcf0weUiOv8R7SLhRW/UKit XhFKp+lvA8P+wdT/79C54ph5cEGZosR1i2yjhVLddNYc8+1bXXl4qOieQmzHXKYO Gv2w2lbmIc2F1xMcrnlf+cV8PaayZ9lXaFrlpbEc5r0Znq8MoeWZTzVsQFYSjoxl yFcRLAA6FEm6qA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:58 2025 by rpki-client