This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft File: ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json) Hash identifier: Ag8kDSwIg9EaiQBQVJpIJrZOSb+Mjr5lwNeBMqfI77A= Subject key identifier: EF:05:58:41:33:DF:56:84:3C:C9:15:20:76:29:C2:DD:24:53:FC:6B Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7 Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7 Certificate serial: 019AF3526042BF8D2D985C5C03621C615A65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:00:53 +0000 Manifest this update: Sat 06 Dec 2025 11:00:53 +0000 Manifest next update: Sun 07 Dec 2025 11:00:53 +0000 Files and hashes: 1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: FXIRlypz/FcnFh8b7LSb5IDH064WdjZ1wViAd1IotQE=) 2: N6ILORbRZvbQFYCBBRtXEQJq4EE.roa (hash: mmnPcV9IaUAzNHOhWtx5CYix9aLEDcUiIi0yf9zddR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:60:42:bf:8d:2d:98:5c:5c:03:62:1c:61:5a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7 Validity Not Before: Dec 6 11:00:53 2025 GMT Not After : Dec 7 11:00:53 2025 GMT Subject: CN=ef05584133df56843cc915207629c2dd2453fc6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:2d:1d:16:16:43:77:f7:3e:76:67:fe:49: 88:9c:fa:91:35:52:6a:d3:7c:a7:cd:f4:44:df:69: 90:5d:30:a6:1a:3b:e2:d5:a9:d1:b6:5b:7c:b3:d8: e1:df:3e:a7:ce:c7:c2:6a:d0:96:6a:6d:ff:ea:0e: 37:27:38:d4:0a:2a:05:37:a4:1a:e6:35:cc:d3:ef: e2:9c:b1:ee:ec:37:16:bd:bf:50:b3:93:8e:3f:3a: ce:63:de:ac:84:bb:7f:bd:a7:30:f8:b3:b2:ee:f4: 77:53:82:23:17:6d:74:39:12:d3:b5:c7:4e:b1:0b: d9:28:08:ae:e0:0a:cf:f7:09:02:74:39:f5:9b:7f: 83:81:ba:5f:af:89:c5:93:7b:10:5e:47:95:ec:0a: 18:d7:a5:71:e6:c1:4f:39:ea:9d:ec:d3:ae:b7:e3: 2c:56:32:d1:13:d5:d7:c0:de:c3:13:12:7c:82:60: bb:62:9b:87:a4:0c:bd:04:50:84:aa:ea:16:3b:b1: c4:a0:a0:82:70:26:3a:34:87:02:9a:9b:b8:08:ee: 75:3d:e6:64:82:07:26:ac:76:8a:4b:e4:83:6f:e8: 50:b8:9c:5d:0a:cf:a6:7f:8f:de:1b:37:23:7f:f6: 9c:1a:f5:54:e5:0e:85:e1:72:8a:6a:46:68:b5:83: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:05:58:41:33:DF:56:84:3C:C9:15:20:76:29:C2:DD:24:53:FC:6B X509v3 Authority Key Identifier: keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6a:ea:98:f1:0f:93:05:e5:b2:da:e7:2e:26:bf:ac:14:81: bd:64:5a:5a:fc:b7:91:ab:d1:0f:e5:71:ed:23:d1:11:03:13: 1b:31:e6:d7:1e:c7:22:d7:5c:79:77:d8:de:50:c5:a7:43:ef: bf:31:9a:23:79:7f:53:95:aa:09:ee:5a:9c:f6:b7:6a:ad:a7: d4:71:a9:08:60:1c:37:c0:ac:69:86:34:56:cc:26:40:97:31: 36:f2:41:5a:23:28:79:71:41:17:67:2b:e6:fb:3c:7e:dd:3a: 71:78:97:24:64:ab:15:81:e1:4b:e5:10:10:4d:42:c0:d2:c8: 3d:8d:10:c4:2b:e5:e7:50:78:c5:d0:bf:f2:8c:14:e3:2b:c6: 8d:8b:62:79:c8:1c:fb:47:d1:28:0b:22:7e:63:40:b4:c9:07: 9a:f1:48:29:e7:f9:03:bc:b3:cd:cc:1d:ea:59:44:75:ba:b3: e9:56:f9:4e:0b:1c:55:e0:6d:ce:96:db:b3:78:19:16:33:b8: c8:a1:5a:15:44:57:70:0b:fc:3b:15:0a:19:a8:82:14:76:0f: f1:5d:01:e2:b4:35:15:c0:44:08:ec:91:3e:e7:a1:9c:74:0e: 11:ae:8c:34:66:37:b9:eb:42:f4:3b:9f:b9:32:a3:71:ba:9c: 45:a2:5d:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUmBCv40tmFxcA2IcYVplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjdiOGQ1YTUwNDAyMDliODk5M2JmMjAzMTc4OWMzYjJi YWI3YzcwHhcNMjUxMjA2MTEwMDUzWhcNMjUxMjA3MTEwMDUzWjAzMTEwLwYDVQQD EyhlZjA1NTg0MTMzZGY1Njg0M2NjOTE1MjA3NjI5YzJkZDI0NTNmYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk4tHRYWQ3f3PnZn/kmInPqRNVJq 03ynzfRE32mQXTCmGjvi1anRtlt8s9jh3z6nzsfCatCWam3/6g43JzjUCioFN6Qa 5jXM0+/inLHu7DcWvb9Qs5OOPzrOY96shLt/vacw+LOy7vR3U4IjF210ORLTtcdO sQvZKAiu4ArP9wkCdDn1m3+Dgbpfr4nFk3sQXkeV7AoY16Vx5sFPOeqd7NOut+Ms VjLRE9XXwN7DExJ8gmC7YpuHpAy9BFCEquoWO7HEoKCCcCY6NIcCmpu4CO51PeZk ggcmrHaKS+SDb+hQuJxdCs+mf4/eGzcjf/acGvVU5Q6F4XKKakZotYMEXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8FWEEz31aEPMkVIHYpwt0kU/xrMB8GA1UdIwQY MBaAFBEnuNWlBAIJuJk78gMXicOyurfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2Mt M2ViY2FkYWJmMGQ4LzEvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2MtM2ViY2FkYWJmMGQ4 LzEvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmrqmPEP kwXlstrnLia/rBSBvWRaWvy3kavRD+Vx7SPREQMTGzHm1x7HItdceXfY3lDFp0Pv vzGaI3l/U5WqCe5anPa3aq2n1HGpCGAcN8CsaYY0VswmQJcxNvJBWiMoeXFBF2cr 5vs8ft06cXiXJGSrFYHhS+UQEE1CwNLIPY0QxCvl51B4xdC/8owU4yvGjYtiecgc +0fRKAsifmNAtMkHmvFIKef5A7yzzcwd6llEdbqz6Vb5TgscVeBtzpbbs3gZFjO4 yKFaFURXcAv8OxUKGaiCFHYP8V0B4rQ1FcBECOyRPuehnHQOEa6MNGY3uetC9Duf uTKjcbqcRaJdYA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:39:23 2025 by rpki-client