This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft File: ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json) Hash identifier: mWk1DA7nyLdIzlrkboObMP8NX1OceU9P3sQMskMxLPM= Subject key identifier: 2F:80:7D:3C:8F:00:0E:9D:CC:14:F7:09:FA:9E:4E:FA:6B:D7:F2:2F Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c Certificate serial: 019B1FF4CCD604E99C3DF4699CA2A0EAFE23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft Manifest number: 0F26 Signing time: Mon 15 Dec 2025 03:01:35 +0000 Manifest this update: Mon 15 Dec 2025 03:01:35 +0000 Manifest next update: Tue 16 Dec 2025 03:01:35 +0000 Files and hashes: 1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: jfp8AmIJBqEA9AHZ+iaycxqhgg/TSV11FNwNgqo0QU0=) 2: lTwE90XrCNGA5eJTFjnSjOK1bSM.roa (hash: /sO0aTlcuRH7YD2SVxbEfIzYX6MelmZ8Ycirgk+wG1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:cc:d6:04:e9:9c:3d:f4:69:9c:a2:a0:ea:fe:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c Validity Not Before: Dec 15 03:01:35 2025 GMT Not After : Dec 16 03:01:35 2025 GMT Subject: CN=2f807d3c8f000e9dcc14f709fa9e4efa6bd7f22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:ba:fe:0f:70:2e:97:d6:0a:4f:8e:13:42: de:5a:c3:1c:a5:70:f2:b9:1e:13:c7:fe:ef:18:f6: c6:bc:3e:38:9d:96:c7:01:b5:72:49:d2:43:b9:d0: fa:a6:9e:95:fd:19:16:fe:73:49:b4:14:c5:c9:dc: b0:50:d0:97:e3:a7:22:c2:22:4e:40:7b:4e:ea:31: 6e:e5:66:47:0a:e9:83:78:49:69:ef:1c:49:51:e7: cd:08:5d:8e:58:87:08:b4:66:c3:b8:48:7d:9e:ad: 1c:86:4c:28:f8:b3:d5:58:c0:48:a8:1d:4b:94:ed: de:42:4f:c0:73:d7:73:02:f4:71:11:d7:05:a1:e2: 0a:7d:ba:4c:a6:ab:cd:f3:45:11:93:15:83:83:c7: 4a:77:56:d2:d2:55:0d:19:a6:1c:6a:d7:09:7b:53: 12:f8:c3:1f:38:a9:1c:b1:74:7c:23:b9:c1:93:1b: 04:a0:26:71:54:cb:7f:3a:28:6d:4f:fc:0c:92:35: 76:18:2e:f2:ea:b6:67:65:7e:4e:d4:4b:92:58:45: 7f:39:ca:50:23:9e:95:d5:02:95:62:ee:3c:1f:c9: 6f:66:63:e6:2d:51:d4:83:f4:d3:24:93:e2:d7:d5: 58:d9:45:38:5b:35:01:eb:c9:b6:10:d1:7d:50:13: 8a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:80:7D:3C:8F:00:0E:9D:CC:14:F7:09:FA:9E:4E:FA:6B:D7:F2:2F X509v3 Authority Key Identifier: keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:99:09:9b:3c:c3:1b:25:f8:14:90:21:97:d9:c6:7e:84:6e: 30:f4:68:31:4d:bd:3d:32:12:74:7a:cc:13:ec:b4:42:9c:be: dd:af:c5:25:5d:86:c5:a3:52:6c:f0:96:04:48:9c:a0:4c:c1: 53:f6:c3:97:ad:d5:bc:6d:a0:75:fb:47:bf:9f:97:de:2e:20: 4f:76:ad:3a:00:cd:4f:f6:3a:ee:71:58:2c:05:a0:19:06:7d: d6:87:2a:9e:ee:6b:b4:c5:72:18:4b:ae:fa:79:dc:65:9c:ff: 23:31:23:8c:ea:79:68:ff:91:6a:06:74:fc:ca:ea:88:cf:d2: f0:32:0f:b5:74:22:7b:ae:84:50:c2:21:f8:5a:9e:74:e3:57: e6:03:8d:14:b7:52:cc:60:91:68:87:8b:0d:eb:d3:8b:34:83: c3:c4:f5:0f:bc:67:29:4a:1c:97:94:fa:df:b6:a0:71:17:ed: 7f:69:49:f7:3f:9c:15:30:c6:11:f7:08:b8:f8:ff:4f:3e:0f: a9:d2:da:2c:85:8e:a7:51:9d:53:7a:5a:2d:39:93:f1:d6:09: bf:09:e5:a9:81:6c:49:7b:8b:f3:38:ec:aa:4d:36:5a:8a:7a: e5:4f:45:cd:41:06:43:c1:06:45:1a:af:aa:12:88:f2:e9:6a: e7:12:72:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9MzWBOmcPfRpnKKg6v4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjlhZDAxNDA3MmRlNjYxNzQzOGZiMWFmYmU0MWEyZGJk YzgxMWMwHhcNMjUxMjE1MDMwMTM1WhcNMjUxMjE2MDMwMTM1WjAzMTEwLwYDVQQD EygyZjgwN2QzYzhmMDAwZTlkY2MxNGY3MDlmYTllNGVmYTZiZDdmMjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ia6/g9wLpfWCk+OE0LeWsMcpXDy uR4Tx/7vGPbGvD44nZbHAbVySdJDudD6pp6V/RkW/nNJtBTFydywUNCX46ciwiJO QHtO6jFu5WZHCumDeElp7xxJUefNCF2OWIcItGbDuEh9nq0chkwo+LPVWMBIqB1L lO3eQk/Ac9dzAvRxEdcFoeIKfbpMpqvN80URkxWDg8dKd1bS0lUNGaYcatcJe1MS +MMfOKkcsXR8I7nBkxsEoCZxVMt/OihtT/wMkjV2GC7y6rZnZX5O1EuSWEV/OcpQ I56V1QKVYu48H8lvZmPmLVHUg/TTJJPi19VY2UU4WzUB68m2ENF9UBOK+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+AfTyPAA6dzBT3CfqeTvpr1/IvMB8GA1UdIwQY MBaAFBEprQFAct5mF0OPsa++QaLb3IEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzIt YWM4ODE0OTdlMGEyLzEvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzItYWM4ODE0OTdlMGEy LzEvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5kJmzzD GyX4FJAhl9nGfoRuMPRoMU29PTISdHrME+y0Qpy+3a/FJV2GxaNSbPCWBEicoEzB U/bDl63VvG2gdftHv5+X3i4gT3atOgDNT/Y67nFYLAWgGQZ91ocqnu5rtMVyGEuu +nncZZz/IzEjjOp5aP+RagZ0/MrqiM/S8DIPtXQie66EUMIh+FqedONX5gONFLdS zGCRaIeLDevTizSDw8T1D7xnKUocl5T637agcRftf2lJ9z+cFTDGEfcIuPj/Tz4P qdLaLIWOp1GdU3paLTmT8dYJvwnlqYFsSXuL8zjsqk02Wop65U9FzUEGQ8EGRRqv qhKI8ulq5xJyKg== -----END CERTIFICATE-----Generated at Mon Dec 15 12:04:12 2025 by rpki-client