This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json) Hash identifier: w+CP6c6ffE0yHBpsiS30PnoHvCxbtszz+VyUUEh/wDs= Subject key identifier: 18:D7:62:CE:F8:FE:07:A9:F0:B5:C7:38:37:BA:75:B2:EC:6F:A6:40 Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09 Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209 Certificate serial: 019B4E4DC7B0A04C9369F6E47E396A056FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 03:01:18 +0000 Manifest this update: Wed 24 Dec 2025 03:01:18 +0000 Manifest next update: Thu 25 Dec 2025 03:01:18 +0000 Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: UYslqzKgPXh8WBxwy66TSIfDTq5df8lJmu597AdohHk=) 2: Siq3LXChf-J1kOdJHhD69EXWg8I.roa (hash: lqCjq1rRDcc2EL/o5bsRWvZA2ja39pIDJxSTPY+sOJk=) 3: ecaHIJxcx1Mgp1auyXMniU5m_AU.roa (hash: nk96xRsdyKFZrxulWblmb/pOYCvYpvcjJToJzvaxa8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:c7:b0:a0:4c:93:69:f6:e4:7e:39:6a:05:6f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c603666719e979bef0921451a2ec264ed01209 Validity Not Before: Dec 24 03:01:18 2025 GMT Not After : Dec 25 03:01:18 2025 GMT Subject: CN=18d762cef8fe07a9f0b5c73837ba75b2ec6fa640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:a7:4d:4d:12:f6:1f:05:ed:f0:15:80:b0: d1:3e:ed:3b:f3:43:2a:51:f3:a4:ac:53:bd:43:c8: 64:2d:30:03:57:9b:2c:a2:df:50:78:76:e7:53:40: d5:d1:74:ba:5b:5d:01:3c:12:13:88:7f:58:ac:34: 23:6d:dd:dd:22:46:3c:f6:f1:aa:c7:ef:21:d8:20: 12:fa:00:c4:21:5b:a0:f8:ad:5a:49:14:03:18:ea: b0:79:5c:b6:ef:ff:ba:e8:a7:f8:1d:b3:6e:29:a6: c9:66:4d:2f:10:f0:bd:32:5f:c8:56:66:13:e4:64: 14:41:44:13:16:41:92:f9:cd:7b:24:fe:2e:9e:98: e8:a3:2b:5f:6b:df:41:35:94:e6:b0:41:d3:52:25: 28:23:c3:1d:86:da:22:fb:b2:30:c3:16:c7:c4:27: 2b:ca:d9:f4:f0:9e:26:69:58:e6:52:a1:64:34:b0: a8:c8:3a:50:cb:14:7f:b2:ee:b9:9e:15:2d:91:5f: d9:8e:78:8b:48:e1:dc:3b:36:31:3a:89:94:8f:1a: 95:f2:95:6d:1e:a8:c5:67:5f:63:24:63:35:52:57: 04:5b:4b:96:90:1e:7a:24:16:84:d5:94:00:b1:92: d6:df:15:94:a7:39:38:32:bd:4d:36:39:88:b2:b8: 53:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D7:62:CE:F8:FE:07:A9:F0:B5:C7:38:37:BA:75:B2:EC:6F:A6:40 X509v3 Authority Key Identifier: keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2f:03:8d:3c:cd:b0:52:3c:de:b8:05:f9:4b:b5:c4:8c:f4: 47:59:c7:55:65:56:b5:7d:fb:80:e9:67:64:48:7a:bd:ba:7a: 0e:74:f5:6e:09:02:d6:83:46:96:d4:21:2b:aa:db:85:09:25: ea:d8:58:a3:d3:f4:91:4c:9a:08:a3:cf:69:35:33:f8:c6:ee: 3e:2c:19:48:8d:74:3e:a5:7b:34:b9:a0:13:d7:65:65:96:21: 07:aa:27:3a:4b:00:2b:c4:79:0f:99:63:fe:d1:1e:df:19:06: 2e:07:8b:e0:59:91:f6:79:fe:30:22:26:ec:b6:0c:e8:4f:25: ee:6f:1c:ba:7d:81:e9:eb:6c:ed:0e:db:cb:68:24:ef:63:3a: 32:09:74:db:80:7e:39:45:a0:23:fb:08:5a:f9:39:c5:0a:6e: 3a:07:0a:31:16:ff:7b:e5:83:81:9b:c7:69:d5:de:3c:81:02: e9:f1:44:bc:12:60:50:b2:63:83:36:9d:b5:57:a6:e1:30:7a: f4:1c:0d:90:df:42:8b:7b:96:58:95:f2:14:46:47:3c:8b:42: 95:7e:7b:ec:d9:49:2f:e3:e6:15:b5:f9:49:6a:a3:30:08:35: 8e:6b:b9:3d:f1:ea:eb:60:4b:01:d2:c6:9f:10:9f:f6:8b:40: 1c:e7:fb:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTcewoEyTafbkfjlqBW+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzYwMzY2NjcxOWU5NzliZWYwOTIxNDUxYTJlYzI2NGVk MDEyMDkwHhcNMjUxMjI0MDMwMTE4WhcNMjUxMjI1MDMwMTE4WjAzMTEwLwYDVQQD EygxOGQ3NjJjZWY4ZmUwN2E5ZjBiNWM3MzgzN2JhNzViMmVjNmZhNjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVWnTU0S9h8F7fAVgLDRPu0780Mq UfOkrFO9Q8hkLTADV5ssot9QeHbnU0DV0XS6W10BPBITiH9YrDQjbd3dIkY89vGq x+8h2CAS+gDEIVug+K1aSRQDGOqweVy27/+66Kf4HbNuKabJZk0vEPC9Ml/IVmYT 5GQUQUQTFkGS+c17JP4unpjooytfa99BNZTmsEHTUiUoI8Mdhtoi+7IwwxbHxCcr ytn08J4maVjmUqFkNLCoyDpQyxR/su65nhUtkV/ZjniLSOHcOzYxOomUjxqV8pVt HqjFZ19jJGM1UlcEW0uWkB56JBaE1ZQAsZLW3xWUpzk4Mr1NNjmIsrhTIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjXYs74/gep8LXHODe6dbLsb6ZAMB8GA1UdIwQY MBaAFBLGA2ZnGel5vvCSFFGi7CZO0BIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEt NThlZmEwYmVlMDg0LzEvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEtNThlZmEwYmVlMDg0 LzEvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATi8DjTzN sFI83rgF+Uu1xIz0R1nHVWVWtX37gOlnZEh6vbp6DnT1bgkC1oNGltQhK6rbhQkl 6thYo9P0kUyaCKPPaTUz+MbuPiwZSI10PqV7NLmgE9dlZZYhB6onOksAK8R5D5lj /tEe3xkGLgeL4FmR9nn+MCIm7LYM6E8l7m8cun2B6ets7Q7by2gk72M6Mgl024B+ OUWgI/sIWvk5xQpuOgcKMRb/e+WDgZvHadXePIEC6fFEvBJgULJjgzadtVem4TB6 9BwNkN9Ci3uWWJXyFEZHPItClX577NlJL+PmFbX5SWqjMAg1jmu5PfHq62BLAdLG nxCf9otAHOf7rw== -----END CERTIFICATE-----Generated at Wed Dec 24 13:23:30 2025 by rpki-client