This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft File: e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json) Hash identifier: CYumf8WxxvQ1i0LALcK/3LM4fzyu7wjMJXyWZosV100= Subject key identifier: 9B:9D:2A:58:5F:8B:3A:CA:9E:E0:BA:89:27:0D:39:9A:33:9E:0C:01 Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4 Certificate issuer: /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4 Certificate serial: 019B59AC984A3771C72DED849A4F2E236226 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft Manifest number: 0590 Signing time: Fri 26 Dec 2025 08:00:41 +0000 Manifest this update: Fri 26 Dec 2025 08:00:41 +0000 Manifest next update: Sat 27 Dec 2025 08:00:41 +0000 Files and hashes: 1: 7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa (hash: W6gsf8oTn0VsRjkJRSnQZjA1UWhDIyT1LhfUV5ExzMo=) 2: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: Dd7TfDEK2D3FtYR0axemAo3KXjHmiusrDmCV/EigWEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:98:4a:37:71:c7:2d:ed:84:9a:4f:2e:23:62:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4 Validity Not Before: Dec 26 08:00:41 2025 GMT Not After : Dec 27 08:00:41 2025 GMT Subject: CN=9b9d2a585f8b3aca9ee0ba89270d399a339e0c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ef:83:11:f9:f7:1b:d9:7c:14:70:ec:38:4b: ed:79:6c:fe:5c:40:1b:4a:06:38:54:71:f9:7d:6f: 5a:94:f9:2f:06:d3:84:93:12:ae:16:3c:a7:56:f9: cd:2a:42:27:5c:f3:72:e2:22:19:2c:50:13:d1:3c: 22:84:b6:b7:24:68:54:ee:f3:11:c3:b1:70:25:99: 43:5a:d6:a1:8d:e0:18:cb:a9:9e:be:de:ea:99:82: b1:f9:79:15:ed:29:c4:f1:b5:b7:03:71:b1:fe:56: 15:eb:8a:45:22:ff:9e:a4:a5:fa:a0:94:81:1a:87: 7c:99:44:d9:7d:10:11:bf:0e:1f:4c:22:9e:82:c0: 89:86:db:4e:5c:ff:98:b8:50:aa:0b:d8:0c:f4:14: 4a:e5:c4:23:1d:ce:95:8f:b4:04:9b:fc:f2:e5:b3: 42:a2:05:51:12:a3:1d:05:9f:7e:d6:58:87:a7:c8: 6a:3b:c5:cf:cc:8b:ab:ea:32:63:59:7f:2c:01:ec: 4e:2a:e7:cc:c1:a0:c0:1d:99:a3:b1:38:d0:25:45: 1c:9b:f8:4e:1d:42:98:76:c3:98:82:7b:2d:d9:32: f1:d0:77:3b:f7:73:db:36:00:73:97:36:8b:8b:e0: c2:7c:f0:a8:84:ea:d6:a8:7b:92:d5:e5:e0:cb:9c: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9D:2A:58:5F:8B:3A:CA:9E:E0:BA:89:27:0D:39:9A:33:9E:0C:01 X509v3 Authority Key Identifier: keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:af:2e:f6:a9:60:78:23:45:16:c6:b3:a2:0b:9a:c5:48:39: 80:48:88:34:30:5d:41:0a:97:6a:c1:37:d3:33:db:74:bf:45: 78:3e:6c:3f:fa:de:a4:c9:79:3b:50:b0:57:fa:7a:e2:ae:79: e0:0b:b7:e4:7e:3f:ac:6a:6f:65:8f:7b:d2:14:f7:1d:a6:f0: 27:6f:b6:71:1e:bf:43:32:8a:58:94:8d:c3:23:d7:56:8c:f9: d2:e4:86:7d:2a:49:d6:59:c7:2f:17:1e:96:c3:23:38:e2:b9: 8b:c7:54:4e:48:f2:23:21:90:8f:27:cd:29:e2:32:e7:ca:cb: 9d:22:95:58:a2:43:e8:ed:7b:fa:f2:a5:ac:4c:62:cd:93:6c: 6a:d8:c3:6a:f2:34:d4:a1:07:9c:c5:6e:a8:de:a2:33:4a:04: d8:43:2c:8a:00:bd:e2:56:ce:04:01:dc:e2:08:6c:42:74:65: 33:e4:ff:f0:cb:a8:3a:e8:f2:02:3f:88:29:2a:65:2c:95:ad: 5a:47:44:d9:93:64:b4:01:23:c5:ba:b2:f7:1c:91:76:e3:37: c7:bb:82:00:c6:12:4a:4f:54:3f:97:e7:5e:be:5b:c0:62:0c: 6b:82:fc:02:8b:a8:9a:7c:d1:f2:ef:06:c0:30:ca:cd:b5:c7: 33:58:9e:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJhKN3HHLe2Emk8uI2ImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZjdhY2U1NTMwZTVkNTA5MDdkMmRkYjQzNWJmMjliNGRm MWQ2ZTQwHhcNMjUxMjI2MDgwMDQxWhcNMjUxMjI3MDgwMDQxWjAzMTEwLwYDVQQD Eyg5YjlkMmE1ODVmOGIzYWNhOWVlMGJhODkyNzBkMzk5YTMzOWUwYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O+DEfn3G9l8FHDsOEvteWz+XEAb SgY4VHH5fW9alPkvBtOEkxKuFjynVvnNKkInXPNy4iIZLFAT0TwihLa3JGhU7vMR w7FwJZlDWtahjeAYy6mevt7qmYKx+XkV7SnE8bW3A3Gx/lYV64pFIv+epKX6oJSB God8mUTZfRARvw4fTCKegsCJhttOXP+YuFCqC9gM9BRK5cQjHc6Vj7QEm/zy5bNC ogVREqMdBZ9+1liHp8hqO8XPzIur6jJjWX8sAexOKufMwaDAHZmjsTjQJUUcm/hO HUKYdsOYgnst2TLx0Hc793PbNgBzlzaLi+DCfPCohOrWqHuS1eXgy5wmLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJudKlhfizrKnuC6iScNOZozngwBMB8GA1UdIwQY MBaAFHv3rOVTDl1QkH0t20Nb8ptN8dbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81MTcxYzctOGRmYy00ZDExLWFlMjIt YzI4YmU0ODM4NzhhLzEvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi81MTcxYzctOGRmYy00ZDExLWFlMjItYzI4YmU0ODM4Nzhh LzEvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApq8u9qlg eCNFFsazoguaxUg5gEiINDBdQQqXasE30zPbdL9FeD5sP/repMl5O1CwV/p64q55 4Au35H4/rGpvZY970hT3HabwJ2+2cR6/QzKKWJSNwyPXVoz50uSGfSpJ1lnHLxce lsMjOOK5i8dUTkjyIyGQjyfNKeIy58rLnSKVWKJD6O17+vKlrExizZNsatjDavI0 1KEHnMVuqN6iM0oE2EMsigC94lbOBAHc4ghsQnRlM+T/8MuoOujyAj+IKSplLJWt WkdE2ZNktAEjxbqy9xyRduM3x7uCAMYSSk9UP5fnXr5bwGIMa4L8AouomnzR8u8G wDDKzbXHM1ieMg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:27 2025 by rpki-client