This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft File: EsShfSBma32NKx_-GKRoevkmIY8.mft (raw, json) Hash identifier: HW03gTHHikpKwBvssajqEUyjmRYnnvlaZHDvwdJ0NHw= Subject key identifier: 98:7A:C2:82:5C:FD:F3:D2:B3:65:D0:6B:24:50:89:9B:C5:A8:31:52 Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f Certificate serial: 019AF2ADA852CD2BB6D4DFCF37A8BEF4E17B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:58 +0000 Manifest this update: Sat 06 Dec 2025 08:00:58 +0000 Manifest next update: Sun 07 Dec 2025 08:00:58 +0000 Files and hashes: 1: EsShfSBma32NKx_-GKRoevkmIY8.crl (hash: e+MkkmMrtLEnI1kp/7iXikKJFLvRntKPTFx/JDOjO/U=) 2: nfi8L76Q0CcXdXMuyopjIwMNN1s.roa (hash: yyBzF5vSH0UZ1Eb70mzyyMArzuUjMy9cXtif0oEgNm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a8:52:cd:2b:b6:d4:df:cf:37:a8:be:f4:e1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f Validity Not Before: Dec 6 08:00:58 2025 GMT Not After : Dec 7 08:00:58 2025 GMT Subject: CN=987ac2825cfdf3d2b365d06b2450899bc5a83152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:ab:50:b8:79:7f:9e:3a:52:a0:1d:69:94: f8:57:02:dd:63:cc:d8:ee:5f:e1:db:43:3d:3a:bd: c6:96:f5:99:2c:af:ba:0e:04:84:f1:74:67:57:ca: c8:f7:e4:81:bb:35:97:ca:1b:03:a3:e8:0c:8a:1a: 0b:04:51:00:e8:44:50:86:ff:28:a4:4d:a6:e2:23: 32:3b:25:6f:bf:33:cb:b4:5f:d4:12:1c:a5:f1:9b: 39:03:20:48:4e:c3:b5:79:ee:eb:77:23:94:17:5a: 59:d7:45:dd:65:d9:50:2a:e8:aa:e0:9b:08:1f:39: ac:37:76:fe:4d:3e:73:e0:f1:6e:8d:7f:ac:b2:db: ec:50:b9:97:86:57:33:e2:1a:c2:65:24:7d:2f:a3: 9e:ec:b3:d8:e2:2f:9e:04:90:6f:b3:8b:4b:08:e9: 0a:7d:99:8c:33:a1:9c:c8:14:65:81:87:c4:67:b2: b7:5e:4e:6e:ad:f3:52:e3:fc:78:e1:a6:cf:70:4a: 85:3f:7a:52:12:54:38:b3:da:c8:92:2b:9d:78:11: 37:b6:d2:15:58:c4:bb:59:88:17:76:bc:88:54:28: 87:63:93:7c:bd:e9:aa:df:33:8b:dd:85:4e:1f:6c: 08:10:58:f9:62:f4:8f:af:de:32:4e:44:ef:2f:59: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7A:C2:82:5C:FD:F3:D2:B3:65:D0:6B:24:50:89:9B:C5:A8:31:52 X509v3 Authority Key Identifier: keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:54:9e:33:ba:1b:0f:82:8b:a9:68:6a:42:b7:e6:2a:79:35: 69:1c:27:1e:82:1d:3b:2c:f4:c5:0f:b2:e2:10:69:da:26:22: e8:a6:f6:f1:0f:72:a8:e9:76:5f:09:1b:53:df:2f:e2:8f:0e: 4f:4a:60:9f:4d:a3:9b:57:13:3b:90:f1:6f:ea:99:0f:13:33: 6e:e1:f5:0e:b3:32:0e:f7:4b:ed:48:4c:d2:04:08:45:b4:1c: f9:1a:fb:f8:d4:82:48:e8:72:65:df:dc:cb:7c:c6:69:c8:17: 72:55:ee:44:30:eb:12:ba:5b:45:e6:eb:ef:4e:f1:e0:99:92: b2:95:ee:e9:90:f1:4c:8a:b0:a1:de:96:f7:d8:b6:e0:56:4e: 5b:1a:9a:ce:2c:2d:e7:5b:a8:4b:5b:80:54:01:2f:53:75:69: d0:ef:40:7c:d4:59:b2:42:6b:c3:66:f4:47:5a:a9:b1:74:7b: b0:6e:17:54:03:c4:4f:73:61:7e:49:5d:aa:e7:f3:98:17:80: 9e:90:61:eb:f7:cc:35:6e:70:98:4d:13:2d:e8:c8:91:ec:a0: 74:9e:cd:a6:a9:24:70:fb:9e:26:9e:d1:87:11:a7:ab:35:1b: 1a:d7:c4:20:6e:c6:c3:b1:52:73:3a:e8:5b:8c:e8:81:98:d9: 19:b6:70:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrahSzSu21N/PN6i+9OF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzRhMTdkMjA2NjZiN2Q4ZDJiMWZmZTE4YTQ2ODdhZjky NjIxOGYwHhcNMjUxMjA2MDgwMDU4WhcNMjUxMjA3MDgwMDU4WjAzMTEwLwYDVQQD Eyg5ODdhYzI4MjVjZmRmM2QyYjM2NWQwNmIyNDUwODk5YmM1YTgzMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4+rULh5f546UqAdaZT4VwLdY8zY 7l/h20M9Or3GlvWZLK+6DgSE8XRnV8rI9+SBuzWXyhsDo+gMihoLBFEA6ERQhv8o pE2m4iMyOyVvvzPLtF/UEhyl8Zs5AyBITsO1ee7rdyOUF1pZ10XdZdlQKuiq4JsI HzmsN3b+TT5z4PFujX+sstvsULmXhlcz4hrCZSR9L6Oe7LPY4i+eBJBvs4tLCOkK fZmMM6GcyBRlgYfEZ7K3Xk5urfNS4/x44abPcEqFP3pSElQ4s9rIkiudeBE3ttIV WMS7WYgXdryIVCiHY5N8vemq3zOL3YVOH2wIEFj5YvSPr94yTkTvL1liEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJh6woJc/fPSs2XQayRQiZvFqDFSMB8GA1UdIwQY MBaAFBLEoX0gZmt9jSsf/hikaHr5JiGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNTaGZTQm1hMzJOS3hfLUdLUm9ldmttSVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MzExODEtYjBiMy00YjJlLTg4ZGMt NDlhOTZhODIyMTRlLzEvRXNTaGZTQm1hMzJOS3hfLUdLUm9ldmttSVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84MzExODEtYjBiMy00YjJlLTg4ZGMtNDlhOTZhODIyMTRl LzEvRXNTaGZTQm1hMzJOS3hfLUdLUm9ldmttSVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlSeM7ob D4KLqWhqQrfmKnk1aRwnHoIdOyz0xQ+y4hBp2iYi6Kb28Q9yqOl2XwkbU98v4o8O T0pgn02jm1cTO5Dxb+qZDxMzbuH1DrMyDvdL7UhM0gQIRbQc+Rr7+NSCSOhyZd/c y3zGacgXclXuRDDrErpbRebr707x4JmSspXu6ZDxTIqwod6W99i24FZOWxqaziwt 51uoS1uAVAEvU3Vp0O9AfNRZskJrw2b0R1qpsXR7sG4XVAPET3NhfkldqufzmBeA npBh6/fMNW5wmE0TLejIkeygdJ7NpqkkcPueJp7RhxGnqzUbGtfEIG7Gw7FSczro W4zogZjZGbZw5A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:53 2025 by rpki-client