This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft File: ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json) Hash identifier: 4yG2Z6+5zvwutNSbTP+trMMe3Yzy+hEfqsQwq44nmm4= Subject key identifier: 88:A8:02:DE:5E:65:86:96:AE:EC:33:81:38:87:EF:07:C9:6E:C7:05 Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7 Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7 Certificate serial: 019B16158E0859A1AF467A72EEB691272F3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft Manifest number: 1774 Signing time: Sat 13 Dec 2025 05:01:09 +0000 Manifest this update: Sat 13 Dec 2025 05:01:09 +0000 Manifest next update: Sun 14 Dec 2025 05:01:09 +0000 Files and hashes: 1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: /H/KbTeo2B7y3GZULHhtpL3xb17W4wosrBG2bhKyzRo=) 2: N6ILORbRZvbQFYCBBRtXEQJq4EE.roa (hash: mmnPcV9IaUAzNHOhWtx5CYix9aLEDcUiIi0yf9zddR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 00:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:15:8e:08:59:a1:af:46:7a:72:ee:b6:91:27:2f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7 Validity Not Before: Dec 13 05:01:09 2025 GMT Not After : Dec 14 05:01:09 2025 GMT Subject: CN=88a802de5e658696aeec33813887ef07c96ec705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:f7:05:6c:16:3c:7e:c9:f2:a4:92:5a:9e: 6d:47:c4:9a:23:93:be:b4:e7:fd:17:ef:91:09:40: ff:77:a6:63:d1:7e:ae:30:45:95:6f:49:04:81:36: 8d:bc:85:fb:bd:fa:cf:bc:0a:12:37:1a:2a:3e:2f: 47:70:46:a2:d4:9d:8e:d4:2c:1e:a5:91:ce:03:6d: d4:28:82:cc:a5:17:0b:24:e7:4e:5c:85:9e:a5:7b: 4b:e8:36:00:d1:f2:4f:0e:d5:d4:c0:be:6d:88:b2: 62:26:86:d8:a8:df:3f:b5:60:0c:ed:42:e0:8b:b2: 65:2f:6c:ce:93:a4:5a:9b:29:84:19:9e:82:08:bd: a9:81:0e:2a:7b:ff:09:b7:49:ba:96:98:82:ac:01: 70:0b:aa:79:56:b1:67:3c:1f:f7:df:a1:54:39:dd: f4:f0:8a:f4:97:0e:be:ac:a0:99:c4:31:50:24:68: ba:20:14:df:2a:a0:31:96:70:c2:64:8a:ab:67:8d: 0b:60:7d:5f:6b:a8:80:08:82:82:47:82:be:a5:54: 6b:9f:0a:56:3e:03:b9:8e:e6:d3:17:c7:ef:d2:00: f4:af:55:bd:76:d7:cb:c6:c9:0b:8a:f8:0b:7c:99: 43:8a:79:03:37:e4:ba:e7:66:ab:08:c3:3e:85:59: cd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A8:02:DE:5E:65:86:96:AE:EC:33:81:38:87:EF:07:C9:6E:C7:05 X509v3 Authority Key Identifier: keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:18:c9:8a:c3:41:a9:4a:59:36:8f:c2:7e:78:b9:85:80:3c: 60:75:f7:eb:ab:de:bc:bb:2d:f4:14:76:a0:c6:cd:26:38:c0: cf:0f:13:0a:b9:da:7b:25:b0:ef:2e:df:ee:f8:aa:93:71:44: 66:4f:af:87:68:2a:bf:25:80:49:bc:79:b6:86:48:1a:72:45: d5:ed:09:ad:c3:b1:25:9d:2d:31:f6:ab:8e:c5:2e:03:0b:d3: ca:f6:d8:1b:bb:6d:a4:c1:3b:d8:44:7a:b5:00:88:b2:2b:3d: 8a:7e:ca:a3:82:81:eb:9c:1a:84:68:ec:ba:2c:10:6a:03:89: 79:89:86:fa:50:5f:d4:e0:0e:f1:27:63:6b:6a:b0:32:bc:13: b2:89:80:8c:c8:62:b3:33:7b:a3:83:20:c7:61:3f:f1:c9:a6: e0:02:bd:df:d1:9f:16:c1:48:7b:60:27:5f:27:95:a1:72:5d: 73:c3:cd:9c:76:f6:5f:e0:d1:2f:9f:c2:64:1a:16:a4:08:11: 7a:67:74:b4:f7:de:c0:84:e0:2f:01:0f:4a:43:89:b9:cb:dd: 3f:72:d9:ab:a0:80:22:f9:a5:07:62:7d:61:41:eb:e3:ab:d3: 3a:27:ac:77:79:cb:79:ac:5d:2a:ad:d8:25:18:14:6f:8f:d0: f8:27:b0:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWFY4IWaGvRnpy7raRJy88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjdiOGQ1YTUwNDAyMDliODk5M2JmMjAzMTc4OWMzYjJi YWI3YzcwHhcNMjUxMjEzMDUwMTA5WhcNMjUxMjE0MDUwMTA5WjAzMTEwLwYDVQQD Eyg4OGE4MDJkZTVlNjU4Njk2YWVlYzMzODEzODg3ZWYwN2M5NmVjNzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnr3BWwWPH7J8qSSWp5tR8SaI5O+ tOf9F++RCUD/d6Zj0X6uMEWVb0kEgTaNvIX7vfrPvAoSNxoqPi9HcEai1J2O1Cwe pZHOA23UKILMpRcLJOdOXIWepXtL6DYA0fJPDtXUwL5tiLJiJobYqN8/tWAM7ULg i7JlL2zOk6RamymEGZ6CCL2pgQ4qe/8Jt0m6lpiCrAFwC6p5VrFnPB/336FUOd30 8Ir0lw6+rKCZxDFQJGi6IBTfKqAxlnDCZIqrZ40LYH1fa6iACIKCR4K+pVRrnwpW PgO5jubTF8fv0gD0r1W9dtfLxskLivgLfJlDinkDN+S652arCMM+hVnNawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIioAt5eZYaWruwzgTiH7wfJbscFMB8GA1UdIwQY MBaAFBEnuNWlBAIJuJk78gMXicOyurfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2Mt M2ViY2FkYWJmMGQ4LzEvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2MtM2ViY2FkYWJmMGQ4 LzEvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxjJisNB qUpZNo/Cfni5hYA8YHX366vevLst9BR2oMbNJjjAzw8TCrnaeyWw7y7f7viqk3FE Zk+vh2gqvyWASbx5toZIGnJF1e0JrcOxJZ0tMfarjsUuAwvTyvbYG7ttpME72ER6 tQCIsis9in7Ko4KB65wahGjsuiwQagOJeYmG+lBf1OAO8Sdja2qwMrwTsomAjMhi szN7o4Mgx2E/8cmm4AK939GfFsFIe2AnXyeVoXJdc8PNnHb2X+DRL5/CZBoWpAgR emd0tPfewITgLwEPSkOJucvdP3LZq6CAIvmlB2J9YUHr46vTOiesd3nLeaxdKq3Y JRgUb4/Q+CewOw== -----END CERTIFICATE-----Generated at Sat Dec 13 06:36:34 2025 by rpki-client