This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json) Hash identifier: YVwbW+CbHvWk8qd81KcfnqvOm+Dv5SLe99eAtokXwLg= Subject key identifier: FD:D4:4C:FF:8A:90:4E:21:EA:28:CD:19:97:15:25:25:FF:85:0C:EF Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1 Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1 Certificate serial: 019B5A1A936EF63CA45569C5E94AB9D60D58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft Manifest number: 1505 Signing time: Fri 26 Dec 2025 10:00:49 +0000 Manifest this update: Fri 26 Dec 2025 10:00:49 +0000 Manifest next update: Sat 27 Dec 2025 10:00:49 +0000 Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: y3x66prH5CaLDf2JeKT2OFGQbfQOu/py6+SocE9nr6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:93:6e:f6:3c:a4:55:69:c5:e9:4a:b9:d6:0d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1 Validity Not Before: Dec 26 10:00:49 2025 GMT Not After : Dec 27 10:00:49 2025 GMT Subject: CN=fdd44cff8a904e21ea28cd1997152525ff850cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:53:7c:42:10:f8:9f:a5:b2:cb:a5:b2:af:60: 1e:64:43:dd:f8:e5:06:19:5f:69:a7:73:ab:0e:9c: 3d:e5:15:11:5b:d1:b3:e7:86:e7:63:c4:be:bb:5b: 25:75:f4:75:2a:4e:af:4c:dc:71:5a:1b:78:2a:02: 3e:1a:ba:3e:11:a4:b7:1c:54:8a:8b:8a:0c:3a:fe: 0c:d9:4a:5f:d6:52:29:4c:47:5a:b2:fa:7d:8b:0f: 59:81:06:e7:62:dc:6c:c8:e5:fc:b8:70:1b:96:8b: 9d:66:60:e8:5e:d9:56:01:e1:50:84:54:3b:b1:59: a5:46:88:7e:f0:1f:de:dc:08:8c:ac:4e:66:17:d8: c8:74:05:54:9d:59:e1:b1:72:27:d3:dd:93:b0:53: 41:b1:d1:35:7b:8a:58:bd:84:5a:6e:96:89:42:ad: 03:cf:6f:ca:36:92:ad:d0:7a:2a:ed:2c:bd:c7:3f: 6f:5b:b3:a9:97:d7:5a:71:96:4a:15:40:8c:93:04: a2:79:96:a5:12:f6:4a:2f:3f:0a:07:ef:6b:ee:67: 7c:e6:bd:8e:bc:29:a7:50:76:2c:4f:dd:05:28:07: ee:54:67:65:cb:4f:70:61:8b:f8:4c:f8:ee:f7:7e: 03:f1:b3:6d:4d:09:59:c1:db:1e:1f:da:2f:71:66: 55:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:4C:FF:8A:90:4E:21:EA:28:CD:19:97:15:25:25:FF:85:0C:EF X509v3 Authority Key Identifier: keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:71:08:6c:e2:aa:3b:3a:bb:7c:d4:fc:a9:c8:59:54:b7:13: a6:70:1d:37:14:de:5c:c3:a9:d1:26:bc:bd:4f:d5:0e:90:1c: 22:75:8f:11:18:00:93:e3:3b:6d:00:e6:06:73:0b:10:ee:0a: 64:d5:2b:71:cb:45:a5:4f:79:e2:b5:a1:6e:86:0c:ca:b4:92: cb:36:ed:43:f9:a0:a9:ec:f6:49:c5:4a:02:7b:40:0a:01:ef: 41:01:1e:1e:eb:f4:c4:4e:8e:87:bf:73:20:0f:2e:d3:20:3b: d4:fc:6e:77:c0:83:11:9f:7a:d1:94:ff:2b:c5:55:01:4b:27: a9:9b:bc:f5:79:86:b8:af:26:93:15:52:bb:5f:a5:fc:a8:1c: 0e:c9:10:16:84:51:1e:8c:d2:9e:16:7c:0b:e3:44:0b:a0:c4: 29:9e:4c:69:11:7b:09:2f:fd:c5:f8:5c:b3:3b:0f:89:6e:33: 75:bf:64:3a:ec:cf:78:1b:fc:93:bd:db:dd:5e:f5:64:60:49: db:21:af:c4:1a:6d:51:aa:0a:ce:07:da:2d:54:5b:07:b4:c4: 55:33:95:12:92:90:af:2e:a6:d4:49:21:7f:d1:60:75:46:9e: f2:e8:22:fa:26:19:c1:ab:8c:45:71:22:61:af:a8:3f:3b:97: 48:d6:d8:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGpNu9jykVWnF6Uq51g1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzBiMzk5YmNhN2NkN2ZjYTIzNjgxMzkwNjc5ZjVjY2E5 NWI5ZTEwHhcNMjUxMjI2MTAwMDQ5WhcNMjUxMjI3MTAwMDQ5WjAzMTEwLwYDVQQD EyhmZGQ0NGNmZjhhOTA0ZTIxZWEyOGNkMTk5NzE1MjUyNWZmODUwY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVN8QhD4n6Wyy6Wyr2AeZEPd+OUG GV9pp3OrDpw95RURW9Gz54bnY8S+u1sldfR1Kk6vTNxxWht4KgI+Gro+EaS3HFSK i4oMOv4M2Upf1lIpTEdasvp9iw9ZgQbnYtxsyOX8uHAbloudZmDoXtlWAeFQhFQ7 sVmlRoh+8B/e3AiMrE5mF9jIdAVUnVnhsXIn092TsFNBsdE1e4pYvYRabpaJQq0D z2/KNpKt0Hoq7Sy9xz9vW7Opl9dacZZKFUCMkwSieZalEvZKLz8KB+9r7md85r2O vCmnUHYsT90FKAfuVGdly09wYYv4TPju934D8bNtTQlZwdseH9ovcWZVqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3UTP+KkE4h6ijNGZcVJSX/hQzvMB8GA1UdIwQY MBaAFBLAs5m8p81/yiNoE5Bnn1zKlbnhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMGNhOWUtN2NjNi00YWRjLThiZTQt ZjRlZDI2ZTQ0Yzk3LzEvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9iMGNhOWUtN2NjNi00YWRjLThiZTQtZjRlZDI2ZTQ0Yzk3 LzEvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXEIbOKq Ozq7fNT8qchZVLcTpnAdNxTeXMOp0Sa8vU/VDpAcInWPERgAk+M7bQDmBnMLEO4K ZNUrcctFpU954rWhboYMyrSSyzbtQ/mgqez2ScVKAntACgHvQQEeHuv0xE6Oh79z IA8u0yA71Pxud8CDEZ960ZT/K8VVAUsnqZu89XmGuK8mkxVSu1+l/KgcDskQFoRR HozSnhZ8C+NEC6DEKZ5MaRF7CS/9xfhcszsPiW4zdb9kOuzPeBv8k73b3V71ZGBJ 2yGvxBptUaoKzgfaLVRbB7TEVTOVEpKQry6m1Ekhf9FgdUae8ugi+iYZwauMRXEi Ya+oPzuXSNbYzw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:34 2025 by rpki-client