This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json) Hash identifier: NyIYGbv1w9qsh7vD+EpLFB99uyP/QdSDlxWOkxx8rww= Subject key identifier: 2A:D8:F4:B9:D1:46:43:14:2F:6D:D0:0C:0B:0B:E3:24:84:95:D3:BB Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05 Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05 Certificate serial: 019B2364035EEA6B7138110E294DE80C10C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft Manifest number: 15D7 Signing time: Mon 15 Dec 2025 19:01:55 +0000 Manifest this update: Mon 15 Dec 2025 19:01:55 +0000 Manifest next update: Tue 16 Dec 2025 19:01:55 +0000 Files and hashes: 1: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: j3ys6nN7uXyNKNiuj3m0sTXJaCjU3PmVM/HqLNnDg44=) 2: tUy7VKDDVboY2Qo-sNWljYmxPOI.roa (hash: nOufD9VcAARAPXFJN7YbCFA3vo77wDsfl0JVajaSTdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:03:5e:ea:6b:71:38:11:0e:29:4d:e8:0c:10:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05 Validity Not Before: Dec 15 19:01:55 2025 GMT Not After : Dec 16 19:01:55 2025 GMT Subject: CN=2ad8f4b9d14643142f6dd00c0b0be3248495d3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:78:2d:4a:8f:20:8a:f5:e6:16:00:3c:b2: 11:8a:b2:d4:fb:63:8d:0c:f7:aa:2b:7f:d3:49:cd: 59:75:6e:dd:2a:eb:02:29:c0:22:a7:c6:84:25:74: 00:e2:39:9d:8e:4c:17:52:2c:4b:51:5b:43:4e:41: d5:b8:81:20:77:27:78:7f:88:97:a0:fa:91:23:91: bb:22:fe:c1:c1:f7:86:02:34:58:6c:03:8c:10:69: 26:c1:78:8a:18:1a:65:49:ac:0e:19:6f:76:43:33: bc:85:40:3c:7c:b5:be:7f:4e:8b:25:87:13:49:20: 28:f8:37:08:1d:1e:f0:ee:42:39:4e:42:bb:6e:1f: ce:46:ee:1d:c3:a5:d2:e7:61:6c:21:f9:95:93:56: 0b:9c:ec:fd:cf:32:1a:9d:ae:9a:c2:b5:a9:7e:a4: 96:b5:18:96:a5:71:be:57:bd:c6:fa:aa:00:76:f0: d6:1a:cd:9d:5e:61:40:c5:12:0c:87:6f:48:81:88: b8:f5:5d:85:ae:6a:f2:38:1d:3e:80:54:b6:58:f2: 43:c2:8d:4a:53:e4:ff:6b:8c:2f:38:8c:e1:ea:c2: 6d:91:48:5f:e1:3f:12:36:0a:df:95:72:37:d0:b3: f9:97:86:b5:40:77:e7:5c:b8:da:9d:26:11:e6:d6: f6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D8:F4:B9:D1:46:43:14:2F:6D:D0:0C:0B:0B:E3:24:84:95:D3:BB X509v3 Authority Key Identifier: keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7c:65:04:0b:5d:d8:f5:38:4e:fe:fb:c1:10:e9:67:81:6d: bb:32:c6:a8:eb:95:b4:c7:a2:79:3c:8f:07:40:1e:b9:2f:d1: e7:a9:ea:82:d2:ac:90:a7:4b:02:98:6a:97:31:5b:97:b3:32: e3:5d:6e:15:7d:9e:60:6f:c6:c3:2d:c2:21:a4:91:47:1b:6e: 71:e2:9d:04:d1:a5:82:33:c6:1e:9c:85:c8:eb:4c:2b:be:7c: 82:36:03:3b:e1:3a:0e:1a:ba:b3:a5:97:a1:30:3b:9c:ed:22: 9f:16:97:f3:6c:78:a7:b9:f9:09:7f:aa:05:59:ce:86:5a:06: cc:5e:d8:6f:dd:98:ff:d0:23:d7:1c:17:ce:45:4f:fc:6b:8b: 46:68:19:48:7f:a9:64:9a:ea:17:1d:e0:c9:3f:b7:56:bf:a5: 18:42:79:97:fc:15:cd:36:ef:72:a1:4c:cc:d7:86:14:d4:71: 6c:75:9b:c1:6d:d1:47:4a:9a:46:a9:59:fb:3d:85:d9:7b:e1: 7b:a1:e4:69:e5:0c:05:b7:a2:55:3c:dd:dd:35:5f:9b:4e:31: d2:78:13:dd:79:26:be:59:9d:ff:69:6e:1c:8e:d6:c2:0f:dc: a5:f5:1a:ba:4e:d6:f4:36:bd:26:ab:b5:26:e8:ce:34:6c:0d: 2d:cb:cf:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZANe6mtxOBEOKU3oDBDCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNGIxY2RmNTA2Y2U1ZTk5MzdlNzdmODI2M2VjZjZkZGIy NTViMDUwHhcNMjUxMjE1MTkwMTU1WhcNMjUxMjE2MTkwMTU1WjAzMTEwLwYDVQQD EygyYWQ4ZjRiOWQxNDY0MzE0MmY2ZGQwMGMwYjBiZTMyNDg0OTVkM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kl4LUqPIIr15hYAPLIRirLU+2ON DPeqK3/TSc1ZdW7dKusCKcAip8aEJXQA4jmdjkwXUixLUVtDTkHVuIEgdyd4f4iX oPqRI5G7Iv7BwfeGAjRYbAOMEGkmwXiKGBplSawOGW92QzO8hUA8fLW+f06LJYcT SSAo+DcIHR7w7kI5TkK7bh/ORu4dw6XS52FsIfmVk1YLnOz9zzIana6awrWpfqSW tRiWpXG+V73G+qoAdvDWGs2dXmFAxRIMh29IgYi49V2FrmryOB0+gFS2WPJDwo1K U+T/a4wvOIzh6sJtkUhf4T8SNgrflXI30LP5l4a1QHfnXLjanSYR5tb2dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrY9LnRRkMUL23QDAsL4ySEldO7MB8GA1UdIwQY MBaAFLBLHN9QbOXpk353+CY+z23bJVsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAt Y2U1MDE5MjY0ODk1LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAtY2U1MDE5MjY0ODk1 LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHxlBAtd 2PU4Tv77wRDpZ4FtuzLGqOuVtMeieTyPB0AeuS/R56nqgtKskKdLAphqlzFbl7My 411uFX2eYG/Gwy3CIaSRRxtuceKdBNGlgjPGHpyFyOtMK758gjYDO+E6Dhq6s6WX oTA7nO0inxaX82x4p7n5CX+qBVnOhloGzF7Yb92Y/9Aj1xwXzkVP/GuLRmgZSH+p ZJrqFx3gyT+3Vr+lGEJ5l/wVzTbvcqFMzNeGFNRxbHWbwW3RR0qaRqlZ+z2F2Xvh e6HkaeUMBbeiVTzd3TVfm04x0ngT3Xkmvlmd/2luHI7Wwg/cpfUauk7W9Da9Jqu1 JujONGwNLcvP/g== -----END CERTIFICATE-----Generated at Tue Dec 16 05:39:44 2025 by rpki-client