This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json) Hash identifier: JH5QqYBxOvwmQ5mITHVBOlN4AbxpbLbfFex2ITzuoto= Subject key identifier: 49:40:54:26:F0:FB:2C:DE:60:A8:31:62:68:EB:DF:40:7B:81:FB:77 Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09 Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609 Certificate serial: 019B4C27C8CF818234166555C5AC535E601B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft Manifest number: 12F6 Signing time: Tue 23 Dec 2025 17:00:34 +0000 Manifest this update: Tue 23 Dec 2025 17:00:34 +0000 Manifest next update: Wed 24 Dec 2025 17:00:34 +0000 Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: Ptk+NcCzM+3lN85n+zmCSPiJr3OD7ysV+lB2Nj2XYeQ=) 2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:27:c8:cf:81:82:34:16:65:55:c5:ac:53:5e:60:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609 Validity Not Before: Dec 23 17:00:34 2025 GMT Not After : Dec 24 17:00:34 2025 GMT Subject: CN=49405426f0fb2cde60a8316268ebdf407b81fb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:43:ea:fc:3d:1a:c2:52:0f:9c:6b:a8:0e: d4:e6:6d:a7:1a:09:2a:a1:f9:7c:b1:ea:3a:00:36: 68:52:aa:ba:ae:7f:05:6c:9d:03:87:9b:74:e7:a0: d8:29:ab:8d:59:5b:56:44:e5:c0:95:e8:94:e3:9e: e8:99:ec:c0:31:9c:0e:d7:6e:48:54:81:b5:12:ac: d2:47:b4:a8:f9:78:bc:7d:9b:9a:03:d3:09:84:7f: 60:b8:e3:21:77:f7:df:e3:9b:40:3b:7a:0c:6f:fc: 9d:6c:49:f3:23:a8:cb:1c:61:7d:c5:61:73:dd:02: 76:2c:9e:a4:2f:8a:79:e7:64:d1:85:a1:8c:b4:09: 92:36:cd:b9:a5:bc:78:58:58:8f:c2:67:bc:9d:c6: 2c:37:fd:06:5d:6e:fc:9f:e1:c2:45:a4:eb:4e:5f: fe:bc:d8:c1:4d:bf:65:be:d3:77:8f:d6:ab:74:b7: 36:8f:43:c1:2b:53:90:4a:7f:32:07:e1:18:f5:2c: 49:2d:51:b4:41:26:0b:48:67:0f:90:3d:94:51:fa: fe:cf:67:d2:61:53:71:b1:fc:5e:2f:66:ec:1d:84: a7:ff:3f:dd:bd:56:da:31:11:e1:a0:b3:51:4b:22: 89:c1:7b:d9:96:db:8a:61:33:5d:0b:50:9a:8c:32: f7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:40:54:26:F0:FB:2C:DE:60:A8:31:62:68:EB:DF:40:7B:81:FB:77 X509v3 Authority Key Identifier: keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d7:c2:7f:dc:f7:c9:1d:da:95:77:a8:22:80:62:63:82:98: bf:61:b6:91:8b:1e:50:1a:26:d2:43:8b:bf:f8:cd:6a:64:a0: f8:45:da:41:c9:cd:51:7f:f4:74:2f:4f:cf:3c:46:03:50:5f: cf:66:4d:e3:49:92:99:aa:01:91:4f:09:37:2b:31:39:c7:ba: 0a:de:c6:aa:ae:2c:69:f0:64:17:89:36:26:31:0c:4a:29:a7: d9:e5:9f:bb:8b:6b:ae:95:ca:9a:26:33:e9:d5:3a:3b:a5:9c: 1a:81:73:fe:3e:c2:c0:8f:32:9e:a8:b6:c5:7e:41:95:c0:a2: 5d:1a:65:6d:e7:c3:53:32:fa:4e:6a:cf:f1:ee:48:31:ea:76: ab:e7:57:2f:db:80:b4:40:b4:59:3f:e0:e4:8e:33:49:8b:4f: 56:a3:c3:05:ef:de:ce:44:3d:5e:02:77:2c:bf:3f:ea:0a:75: 52:09:9d:12:b1:17:fd:06:e2:2f:03:a0:ee:cb:e4:10:4b:8d: b7:e3:d8:71:35:04:29:f7:8c:f1:4b:f1:f9:ad:bc:2c:28:13: bc:88:7b:de:15:ae:16:c4:76:86:74:8c:85:f3:70:1c:c5:8c: fc:41:f1:7e:2c:0f:9c:b5:d2:88:6d:51:40:95:9d:fd:07:41: 6c:b5:6b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMJ8jPgYI0FmVVxaxTXmAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzQ1YmQzOGQ0YmRjNjhlM2Q3OWRlMDI0NGRmMDZkMmVj YjY2MDkwHhcNMjUxMjIzMTcwMDM0WhcNMjUxMjI0MTcwMDM0WjAzMTEwLwYDVQQD Eyg0OTQwNTQyNmYwZmIyY2RlNjBhODMxNjI2OGViZGY0MDdiODFmYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqRD6vw9GsJSD5xrqA7U5m2nGgkq ofl8seo6ADZoUqq6rn8FbJ0Dh5t056DYKauNWVtWROXAleiU457omezAMZwO125I VIG1EqzSR7So+Xi8fZuaA9MJhH9guOMhd/ff45tAO3oMb/ydbEnzI6jLHGF9xWFz 3QJ2LJ6kL4p552TRhaGMtAmSNs25pbx4WFiPwme8ncYsN/0GXW78n+HCRaTrTl/+ vNjBTb9lvtN3j9ardLc2j0PBK1OQSn8yB+EY9SxJLVG0QSYLSGcPkD2UUfr+z2fS YVNxsfxeL2bsHYSn/z/dvVbaMRHhoLNRSyKJwXvZltuKYTNdC1CajDL3wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElAVCbw+yzeYKgxYmjr30B7gft3MB8GA1UdIwQY MBaAFBLEW9ONS9xo49ed4CRN8G0uy2YJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUt MjIwMjhhNzg2ZjYwLzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUtMjIwMjhhNzg2ZjYw LzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdfCf9z3 yR3alXeoIoBiY4KYv2G2kYseUBom0kOLv/jNamSg+EXaQcnNUX/0dC9PzzxGA1Bf z2ZN40mSmaoBkU8JNysxOce6Ct7Gqq4safBkF4k2JjEMSimn2eWfu4trrpXKmiYz 6dU6O6WcGoFz/j7CwI8ynqi2xX5BlcCiXRplbefDUzL6TmrP8e5IMep2q+dXL9uA tEC0WT/g5I4zSYtPVqPDBe/ezkQ9XgJ3LL8/6gp1UgmdErEX/QbiLwOg7svkEEuN t+PYcTUEKfeM8Uvx+a28LCgTvIh73hWuFsR2hnSMhfNwHMWM/EHxfiwPnLXSiG1R QJWd/QdBbLVrog== -----END CERTIFICATE-----Generated at Wed Dec 24 02:22:45 2025 by rpki-client