This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft File: e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json) Hash identifier: 4LDXBZctDD7ooMgZC6TxiK9IBTWtZfi1iirmmbvJEo4= Subject key identifier: E1:0F:C9:DC:02:88:D5:A1:AC:39:96:9C:10:20:26:72:4E:73:AD:74 Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4 Certificate issuer: /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4 Certificate serial: 019AF163E5E81F46F8DD419BE20BAD377343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft Manifest number: 055A Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: 7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa (hash: W6gsf8oTn0VsRjkJRSnQZjA1UWhDIyT1LhfUV5ExzMo=) 2: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: Fl9wzUMcIHD259S0MSmfnVIT+afksYArmZzqXruorKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e5:e8:1f:46:f8:dd:41:9b:e2:0b:ad:37:73:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4 Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=e10fc9dc0288d5a1ac39969c102026724e73ad74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:2c:c4:fb:8b:b4:c1:c6:07:13:e8:1e:9d:37: 39:71:98:15:00:fd:b1:e6:4c:56:b5:09:8b:bc:ca: 8e:0f:1c:f0:16:c1:ba:ad:26:18:7b:b8:17:ee:94: e1:e5:82:ce:1b:9c:c4:6d:08:34:90:54:94:45:ed: 64:50:f4:f2:d2:06:5a:4d:f4:d1:3a:c7:fa:e4:b8: bb:8e:ca:09:d9:af:f1:9c:e7:f7:98:bd:2e:d7:a2: 7b:71:fe:89:94:b6:d0:08:bf:4e:de:ba:5d:9e:9e: 97:47:86:61:3c:23:96:4f:c0:01:b1:22:6f:15:d7: 21:1e:80:92:d6:27:3d:5d:07:3a:67:3c:ea:7c:4b: 90:3e:a0:4f:6f:89:a4:f4:2c:5b:81:dd:36:99:85: 4c:69:1c:38:ec:e1:9d:20:a3:d3:33:62:8a:a5:a3: 1c:29:e4:d8:80:4a:1a:e5:c8:00:25:d0:08:0f:ad: 3f:d3:33:b4:3a:2f:5f:6b:35:bc:a4:c2:18:e6:64: ac:a1:64:25:a2:02:52:a5:d9:77:72:33:20:c9:fe: b8:f9:fe:53:68:5e:1e:89:b4:04:ac:e3:26:13:2f: 9c:27:a4:d0:60:af:06:1d:88:b9:cc:6c:de:12:2d: 05:d6:bf:79:4b:39:ac:af:2b:b2:bc:5d:e6:b1:30: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0F:C9:DC:02:88:D5:A1:AC:39:96:9C:10:20:26:72:4E:73:AD:74 X509v3 Authority Key Identifier: keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:c8:f5:ce:9f:b0:4c:70:cb:d7:ea:c9:66:e6:c9:25:0d:fa: 6a:68:19:2a:7a:5b:5f:4f:e1:c2:b1:38:8c:1c:6a:22:f1:19: 87:0e:cb:69:23:cd:4e:3f:a2:35:f0:22:1a:27:f7:63:6d:59: cf:b1:08:e7:51:a1:03:d9:21:f0:f9:6e:a3:ad:94:5a:34:f5: 95:7b:99:07:bd:3c:5c:2a:14:bc:3a:32:41:f2:32:58:8e:de: 16:39:d9:5e:19:7c:85:14:aa:5a:8b:b5:7f:d5:2d:9d:30:d7: c8:a2:7f:ad:97:76:ae:f3:ec:bb:80:bb:de:c4:63:f3:26:ff: c7:1c:c5:a4:13:d6:79:ef:11:6d:83:64:39:67:af:b9:e2:6f: b6:cb:c2:03:17:a8:6f:36:c0:ee:af:48:41:7e:d3:34:ce:7e: ed:dd:e0:e0:25:30:5b:30:2e:f8:7d:93:f8:dc:71:54:18:33: 0a:a3:9d:5b:8d:db:7b:37:a6:d7:8b:47:7c:cf:39:93:81:58: 99:23:0a:e8:2a:48:56:73:35:12:47:5f:73:57:db:de:26:fb: 33:50:f6:e1:75:88:f1:0c:57:8a:c1:27:10:0a:00:44:02:70: 91:c3:d5:21:84:d0:12:02:93:27:79:b0:ef:30:28:45:a5:e8: a8:a3:8f:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+XoH0b43UGb4gutN3NDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZjdhY2U1NTMwZTVkNTA5MDdkMmRkYjQzNWJmMjliNGRm MWQ2ZTQwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD EyhlMTBmYzlkYzAyODhkNWExYWMzOTk2OWMxMDIwMjY3MjRlNzNhZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yzE+4u0wcYHE+genTc5cZgVAP2x 5kxWtQmLvMqODxzwFsG6rSYYe7gX7pTh5YLOG5zEbQg0kFSURe1kUPTy0gZaTfTR Osf65Li7jsoJ2a/xnOf3mL0u16J7cf6JlLbQCL9O3rpdnp6XR4ZhPCOWT8ABsSJv FdchHoCS1ic9XQc6ZzzqfEuQPqBPb4mk9Cxbgd02mYVMaRw47OGdIKPTM2KKpaMc KeTYgEoa5cgAJdAID60/0zO0Oi9fazW8pMIY5mSsoWQlogJSpdl3cjMgyf64+f5T aF4eibQErOMmEy+cJ6TQYK8GHYi5zGzeEi0F1r95SzmsryuyvF3msTBh6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEPydwCiNWhrDmWnBAgJnJOc610MB8GA1UdIwQY MBaAFHv3rOVTDl1QkH0t20Nb8ptN8dbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81MTcxYzctOGRmYy00ZDExLWFlMjIt YzI4YmU0ODM4NzhhLzEvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi81MTcxYzctOGRmYy00ZDExLWFlMjItYzI4YmU0ODM4Nzhh LzEvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcj1zp+w THDL1+rJZubJJQ36amgZKnpbX0/hwrE4jBxqIvEZhw7LaSPNTj+iNfAiGif3Y21Z z7EI51GhA9kh8Pluo62UWjT1lXuZB708XCoUvDoyQfIyWI7eFjnZXhl8hRSqWou1 f9UtnTDXyKJ/rZd2rvPsu4C73sRj8yb/xxzFpBPWee8RbYNkOWevueJvtsvCAxeo bzbA7q9IQX7TNM5+7d3g4CUwWzAu+H2T+NxxVBgzCqOdW43bezem14tHfM85k4FY mSMK6CpIVnM1Ekdfc1fb3ib7M1D24XWI8QxXisEnEAoARAJwkcPVIYTQEgKTJ3mw 7zAoRaXoqKOPhw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:14 2025 by rpki-client