This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json) Hash identifier: Cc0FjGIp6tvlT4mMHEa5Jqe1TF+N+7ybockTevQzW1s= Subject key identifier: 3D:88:6B:12:73:84:E0:A5:B8:93:00:FB:39:1C:0A:37:99:F0:F5:7C Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578 Certificate serial: 019B0F377B72A141355F69479C1FA411D3C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft Manifest number: 1776 Signing time: Thu 11 Dec 2025 21:00:52 +0000 Manifest this update: Thu 11 Dec 2025 21:00:52 +0000 Manifest next update: Fri 12 Dec 2025 21:00:52 +0000 Files and hashes: 1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=) 2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=) 3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: Ggp4zFlNS4c2L+nPiq6LHC0tFxIgOyppRcoiPyX+1A8=) 4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=) 5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=) 6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=) 7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=) 8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:7b:72:a1:41:35:5f:69:47:9c:1f:a4:11:d3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578 Validity Not Before: Dec 11 21:00:52 2025 GMT Not After : Dec 12 21:00:52 2025 GMT Subject: CN=3d886b127384e0a5b89300fb391c0a3799f0f57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:91:39:2e:84:4e:a9:5b:32:e9:1c:1d:81:83: d1:46:b5:33:39:35:90:ab:1b:91:87:ab:42:ce:45: d7:53:f9:01:d3:18:88:c6:cd:06:ab:4c:cb:55:18: e1:b8:94:55:80:17:47:5a:f9:7a:2a:fd:f9:09:c4: b1:7e:47:a6:39:63:1e:7a:40:3f:2b:f4:4b:2d:9f: 5d:6f:59:e8:42:ba:6a:b7:80:5b:3b:00:0e:ac:76: 2c:00:77:d3:55:d4:4c:5a:b0:8b:71:02:2a:b9:a5: b3:9f:40:d9:4b:d3:ee:e0:66:63:17:48:8e:64:47: 34:65:fc:e2:aa:40:79:38:f4:11:f2:98:61:d6:87: 35:9c:1a:ef:ea:cb:d3:7b:be:09:58:f0:63:d9:7d: df:c8:89:f4:3f:53:ab:13:bf:7e:88:8f:e1:44:65: 74:f6:e3:8f:4d:00:42:dc:74:81:d5:66:6a:bf:d8: 5d:c4:72:b9:66:c6:87:ca:15:38:90:28:f9:e6:c9: 4b:71:29:b5:2e:3c:e0:69:85:dd:97:99:d8:24:bb: 29:f4:0c:a3:e4:0c:d6:a8:7c:79:96:5e:88:9a:4f: b0:aa:ef:a9:03:0e:10:97:a7:49:9b:4c:1b:51:af: 2b:da:5f:8d:24:67:e4:d2:ea:b5:25:9b:3c:32:5a: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:88:6B:12:73:84:E0:A5:B8:93:00:FB:39:1C:0A:37:99:F0:F5:7C X509v3 Authority Key Identifier: keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:3d:50:9b:7b:7a:17:75:a6:6b:33:1d:f2:bf:c6:61:76:11: 94:1d:cb:e9:9d:e5:1d:3c:60:e9:14:fb:0e:7e:ec:66:16:ef: 87:40:39:3c:ec:56:dd:1b:1a:15:95:ab:1c:ae:9c:25:41:86: c4:cb:f5:b5:1b:4e:53:e8:8e:17:55:f3:2f:4a:e5:5b:ab:df: 5c:d3:6a:98:36:fb:ab:e8:b2:aa:98:46:b5:01:8b:29:13:c6: ef:14:c7:66:03:ee:d9:38:5e:22:0a:ad:b7:c0:3d:82:4c:b1: 54:4e:aa:07:eb:69:16:06:40:43:51:48:92:c0:1e:3e:be:50: 34:5b:c5:15:e3:33:57:9f:df:b6:69:bc:67:61:62:60:d3:07: b0:83:88:79:37:f4:f5:98:cd:65:4f:f2:32:94:26:57:84:75: bd:55:47:72:d4:2c:a0:1a:f2:b2:7c:32:be:4a:c2:42:7e:60: e6:a4:cb:e8:19:cd:a7:2f:9c:8d:71:97:5c:10:e2:73:55:af: 5d:e8:0b:98:2c:a5:75:43:cd:c0:aa:06:24:f9:3e:13:77:88: 1b:1b:0d:08:de:e9:2b:4f:36:87:a6:5f:92:a2:8b:04:49:eb: ec:cc:68:47:1b:76:a1:a4:ca:59:24:48:4e:0b:f0:78:a8:5a: c1:58:1d:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN3tyoUE1X2lHnB+kEdPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx MzM1NzgwHhcNMjUxMjExMjEwMDUyWhcNMjUxMjEyMjEwMDUyWjAzMTEwLwYDVQQD EygzZDg4NmIxMjczODRlMGE1Yjg5MzAwZmIzOTFjMGEzNzk5ZjBmNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45E5LoROqVsy6RwdgYPRRrUzOTWQ qxuRh6tCzkXXU/kB0xiIxs0Gq0zLVRjhuJRVgBdHWvl6Kv35CcSxfkemOWMeekA/ K/RLLZ9db1noQrpqt4BbOwAOrHYsAHfTVdRMWrCLcQIquaWzn0DZS9Pu4GZjF0iO ZEc0ZfziqkB5OPQR8phh1oc1nBrv6svTe74JWPBj2X3fyIn0P1OrE79+iI/hRGV0 9uOPTQBC3HSB1WZqv9hdxHK5ZsaHyhU4kCj55slLcSm1LjzgaYXdl5nYJLsp9Ayj 5AzWqHx5ll6Imk+wqu+pAw4Ql6dJm0wbUa8r2l+NJGfk0uq1JZs8MlpAKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2IaxJzhOCluJMA+zkcCjeZ8PV8MB8GA1UdIwQY MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt YWQ2ZjBiZjg4NDM4LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4 LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuj1Qm3t6 F3WmazMd8r/GYXYRlB3L6Z3lHTxg6RT7Dn7sZhbvh0A5POxW3RsaFZWrHK6cJUGG xMv1tRtOU+iOF1XzL0rlW6vfXNNqmDb7q+iyqphGtQGLKRPG7xTHZgPu2TheIgqt t8A9gkyxVE6qB+tpFgZAQ1FIksAePr5QNFvFFeMzV5/ftmm8Z2FiYNMHsIOIeTf0 9ZjNZU/yMpQmV4R1vVVHctQsoBrysnwyvkrCQn5g5qTL6BnNpy+cjXGXXBDic1Wv XegLmCyldUPNwKoGJPk+E3eIGxsNCN7pK082h6ZfkqKLBEnr7MxoRxt2oaTKWSRI TgvweKhawVgdkg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:23 2025 by rpki-client