This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json) Hash identifier: l4U+cPgqtx0XmCJllAF93NyJ6z6rOreyfReB0plGAjE= Subject key identifier: 84:DD:7A:97:24:D4:E7:30:64:EB:E6:14:22:4F:1A:A1:BB:7B:57:94 Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09 Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609 Certificate serial: 019AF163F79C54B5926D2C199CC5FF819360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft Manifest number: 12C7 Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: Hpway+9TjOitRqko7/r5rEB06tV/7floRNS3pAU+1ug=) 2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f7:9c:54:b5:92:6d:2c:19:9c:c5:ff:81:93:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609 Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=84dd7a9724d4e73064ebe614224f1aa1bb7b5794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:2d:af:33:3d:d5:19:95:39:d7:73:24:62: f4:3e:5b:db:e6:70:9e:c2:54:ae:43:6c:5f:6e:52: 19:cc:47:3b:08:92:2f:d9:35:9c:47:e7:db:c5:b7: 0f:eb:b6:4e:d0:fa:4d:74:9a:2e:3f:fc:81:70:ef: 96:58:e3:e0:79:b5:47:4b:d4:62:a2:77:b0:35:f0: 4e:3a:38:95:0f:a0:69:ae:57:4c:8d:f4:d2:42:0b: b8:51:99:ad:3e:9f:17:83:cb:bf:53:51:24:ac:ca: 46:2c:c3:86:b3:e5:52:56:3a:14:20:7e:2a:5f:ea: 76:be:52:6b:b8:11:e5:11:0e:52:84:d9:17:07:a3: 19:bc:af:68:61:a4:9e:f1:9b:ef:2d:d7:e4:49:24: 98:05:cc:cb:aa:b4:16:93:6c:ce:75:89:ea:b5:ab: 82:d3:24:ca:fa:b6:f0:6b:ce:ba:15:1d:7b:9e:54: 16:2f:63:82:3d:f7:91:54:5b:98:e8:c9:7e:fe:62: d5:c4:df:c5:21:98:2b:bd:66:39:36:bf:b3:1d:6e: 0c:6b:91:ba:3c:61:04:b7:8e:f6:a6:74:5f:b3:44: 44:dd:c5:0f:98:44:ac:2a:ee:3a:54:f7:12:a2:7b: 3c:ee:c0:67:89:fa:36:57:b3:8f:e9:ca:ed:0b:1c: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DD:7A:97:24:D4:E7:30:64:EB:E6:14:22:4F:1A:A1:BB:7B:57:94 X509v3 Authority Key Identifier: keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:76:e8:64:b4:d5:e1:ac:6a:c9:2c:14:7a:72:ba:5b:e0:60: 86:20:e6:d3:d3:9b:fa:ac:80:d4:ca:58:5a:3f:f1:8b:f3:8c: 11:2c:4f:32:ee:6d:52:59:0e:9b:f8:f3:84:94:78:6e:2e:d0: d4:4f:c2:86:e3:53:88:eb:95:ac:65:89:d2:fb:bc:6d:1c:b6: c5:56:ec:7e:ce:cb:13:4c:4e:42:ff:f7:89:6c:fa:ca:27:3a: f7:ca:1f:06:60:27:30:85:92:17:0e:b9:6a:34:7f:0b:9e:b2: c3:ce:14:79:34:d7:18:3f:5b:21:9e:3a:c4:81:62:ea:6a:61: 9c:84:c3:f9:bb:d2:af:60:45:1f:4b:7f:d0:02:64:09:47:0f: 60:5a:a6:89:77:19:bd:25:5e:ab:28:45:9d:22:9b:88:51:f2: b2:2b:20:28:56:a9:b1:ef:b4:ad:f1:71:15:96:5a:95:ba:3d: 31:5f:63:3a:33:72:30:65:da:05:40:0f:bf:f0:c7:b5:14:a1: 1b:2c:95:c7:c6:d8:06:1d:d0:41:50:84:fb:b2:d7:01:0b:14: c8:83:fb:a7:49:58:b8:57:c0:1b:6a:bf:2d:51:5f:27:f0:e2: b5:19:c4:85:17:8c:23:35:a3:03:38:12:e0:2f:4b:06:97:c9: 91:47:b2:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/ecVLWSbSwZnMX/gZNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzQ1YmQzOGQ0YmRjNjhlM2Q3OWRlMDI0NGRmMDZkMmVj YjY2MDkwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD Eyg4NGRkN2E5NzI0ZDRlNzMwNjRlYmU2MTQyMjRmMWFhMWJiN2I1Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucctrzM91RmVOddzJGL0Plvb5nCe wlSuQ2xfblIZzEc7CJIv2TWcR+fbxbcP67ZO0PpNdJouP/yBcO+WWOPgebVHS9Ri onewNfBOOjiVD6BprldMjfTSQgu4UZmtPp8Xg8u/U1EkrMpGLMOGs+VSVjoUIH4q X+p2vlJruBHlEQ5ShNkXB6MZvK9oYaSe8ZvvLdfkSSSYBczLqrQWk2zOdYnqtauC 0yTK+rbwa866FR17nlQWL2OCPfeRVFuY6Ml+/mLVxN/FIZgrvWY5Nr+zHW4Ma5G6 PGEEt472pnRfs0RE3cUPmESsKu46VPcSons87sBnifo2V7OP6crtCxzIgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITdepck1OcwZOvmFCJPGqG7e1eUMB8GA1UdIwQY MBaAFBLEW9ONS9xo49ed4CRN8G0uy2YJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUt MjIwMjhhNzg2ZjYwLzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUtMjIwMjhhNzg2ZjYw LzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHboZLTV 4axqySwUenK6W+BghiDm09Ob+qyA1MpYWj/xi/OMESxPMu5tUlkOm/jzhJR4bi7Q 1E/ChuNTiOuVrGWJ0vu8bRy2xVbsfs7LE0xOQv/3iWz6yic698ofBmAnMIWSFw65 ajR/C56yw84UeTTXGD9bIZ46xIFi6mphnITD+bvSr2BFH0t/0AJkCUcPYFqmiXcZ vSVeqyhFnSKbiFHysisgKFapse+0rfFxFZZalbo9MV9jOjNyMGXaBUAPv/DHtRSh GyyVx8bYBh3QQVCE+7LXAQsUyIP7p0lYuFfAG2q/LVFfJ/DitRnEhReMIzWjAzgS 4C9LBpfJkUey5A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:06 2025 by rpki-client