This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json) Hash identifier: o4IfQ4ff0YNwNlrrdC7JItL81Sg/vYpdIvSBMk4e2Bg= Subject key identifier: 03:65:28:08:2A:BE:2E:36:18:03:AD:EC:C7:C8:16:C6:5D:B6:0B:95 Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c Certificate serial: 019B0EC96599D1022A9720FFE049C6F975EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 19:00:38 +0000 Manifest this update: Thu 11 Dec 2025 19:00:38 +0000 Manifest next update: Fri 12 Dec 2025 19:00:38 +0000 Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: 1kSsEIWOVYR+GRyGdHBVTOQZwwJXfcgV4i8hSWDDfT8=) 2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=) 3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:65:99:d1:02:2a:97:20:ff:e0:49:c6:f9:75:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c Validity Not Before: Dec 11 19:00:38 2025 GMT Not After : Dec 12 19:00:38 2025 GMT Subject: CN=036528082abe2e361803adecc7c816c65db60b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e3:38:87:23:df:c0:ae:b3:82:43:e6:7c:62: 63:75:99:54:ec:0e:0e:36:d1:72:c6:eb:e5:cb:12: 06:ce:76:13:fe:65:46:21:22:17:3b:6a:35:06:b2: be:98:1c:2a:fd:ed:3d:ee:11:f1:cc:9b:e4:6f:ec: de:fb:91:7b:ff:2a:23:a1:c0:5d:b0:fc:24:7d:4d: 32:4d:61:5b:4b:18:35:04:e5:5e:6e:87:ad:a4:cf: 4c:15:f0:50:36:47:6d:9e:63:12:7b:40:1c:37:b8: 6a:4a:29:30:c8:e7:40:fa:b1:06:ef:80:69:a8:80: b6:e7:82:91:f0:16:34:93:b7:6d:33:f6:85:13:57: e7:07:c5:c4:99:d5:d3:2d:b9:b0:34:8d:8b:b3:31: ce:92:3a:90:72:57:d9:b0:9e:40:fb:a0:9b:62:50: 59:8b:54:9a:ca:58:82:57:bc:41:17:90:ef:e2:5f: 34:2e:21:f8:c7:36:a2:b5:eb:1b:7e:f5:b2:cf:49: 5d:00:cb:44:bd:73:80:ea:09:a3:07:68:26:22:ea: 9d:e4:ca:ef:2f:39:bc:d7:54:61:52:88:11:c7:dc: 3c:d8:94:47:c4:2e:bc:5b:58:17:1c:b8:53:be:f0: ea:94:56:c8:b3:3b:6d:8c:d6:69:f5:65:d9:97:7b: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:65:28:08:2A:BE:2E:36:18:03:AD:EC:C7:C8:16:C6:5D:B6:0B:95 X509v3 Authority Key Identifier: keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:81:86:6c:0a:a5:40:35:76:64:c3:bb:b1:25:70:1e:84:95: 4a:20:6c:dc:04:7f:fa:11:61:89:e2:54:c9:7f:fc:12:e2:75: 9b:9a:b4:19:0b:77:69:8f:dd:9f:ea:90:e4:45:91:e9:72:a3: 29:20:60:93:9e:d0:84:f8:f1:28:6f:d3:60:36:fb:62:45:52: 58:b0:94:a1:cb:a6:c1:12:27:85:89:73:33:f4:a7:96:9a:b5: c3:bf:36:09:c5:7a:6b:3d:b6:7e:56:60:18:86:e6:d7:cd:a6: 61:4c:65:3d:b5:49:bd:a1:71:4c:c8:98:f0:39:de:8d:95:21: 47:06:b9:51:40:75:39:04:5e:e7:1d:2c:f8:fc:1e:d3:0a:01: c0:86:6b:f9:37:84:09:e8:9c:da:9c:6c:e9:df:31:94:62:17: 8f:a3:70:43:3f:ab:5b:7b:9c:a7:37:55:06:42:00:68:ea:54: 13:3d:b2:bd:12:ac:da:f9:90:c5:bd:f8:4e:e3:c0:92:bd:3b: de:e8:60:77:bf:40:0b:34:50:ed:9d:11:5e:9d:0b:d6:ac:7c: 50:92:e8:22:d3:4a:cd:f6:3b:e5:ca:b4:f1:dc:61:f0:a7:0a: 3f:9d:15:21:6e:f4:0b:71:cc:4f:90:0f:ba:ad:03:8c:e4:b0: 35:57:18:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyWWZ0QIqlyD/4EnG+XXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2UxNzZhNjljY2M5Yzk5NmUxNjEwOTI1YzBiNmJkZjc2 YjIwN2MwHhcNMjUxMjExMTkwMDM4WhcNMjUxMjEyMTkwMDM4WjAzMTEwLwYDVQQD EygwMzY1MjgwODJhYmUyZTM2MTgwM2FkZWNjN2M4MTZjNjVkYjYwYjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+M4hyPfwK6zgkPmfGJjdZlU7A4O NtFyxuvlyxIGznYT/mVGISIXO2o1BrK+mBwq/e097hHxzJvkb+ze+5F7/yojocBd sPwkfU0yTWFbSxg1BOVeboetpM9MFfBQNkdtnmMSe0AcN7hqSikwyOdA+rEG74Bp qIC254KR8BY0k7dtM/aFE1fnB8XEmdXTLbmwNI2LszHOkjqQclfZsJ5A+6CbYlBZ i1SayliCV7xBF5Dv4l80LiH4xzaitesbfvWyz0ldAMtEvXOA6gmjB2gmIuqd5Mrv Lzm811RhUogRx9w82JRHxC68W1gXHLhTvvDqlFbIszttjNZp9WXZl3vVlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANlKAgqvi42GAOt7MfIFsZdtguVMB8GA1UdIwQY MBaAFHrOF2ppzMnJluFhCSXAtr33ayB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQt YzYxODAzYzM0NjU3LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQtYzYxODAzYzM0NjU3 LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIGGbAql QDV2ZMO7sSVwHoSVSiBs3AR/+hFhieJUyX/8EuJ1m5q0GQt3aY/dn+qQ5EWR6XKj KSBgk57QhPjxKG/TYDb7YkVSWLCUocumwRInhYlzM/Snlpq1w782CcV6az22flZg GIbm182mYUxlPbVJvaFxTMiY8DnejZUhRwa5UUB1OQRe5x0s+Pwe0woBwIZr+TeE Ceic2pxs6d8xlGIXj6NwQz+rW3ucpzdVBkIAaOpUEz2yvRKs2vmQxb34TuPAkr07 3uhgd79ACzRQ7Z0RXp0L1qx8UJLoItNKzfY75cq08dxh8KcKP50VIW70C3HMT5AP uq0DjOSwNVcYvA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:20:29 2025 by rpki-client