This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json) Hash identifier: JS5tyjti906lqgztvsoqRh2f5PaZni4+JXJtR049P1I= Subject key identifier: 2F:0A:2D:EE:21:A9:6B:76:64:A6:E9:08:4A:18:F9:FC:9C:35:B8:76 Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09 Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609 Certificate serial: 019B12387618FF096B702412DDF3488384D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft Manifest number: 12D8 Signing time: Fri 12 Dec 2025 11:00:48 +0000 Manifest this update: Fri 12 Dec 2025 11:00:48 +0000 Manifest next update: Sat 13 Dec 2025 11:00:48 +0000 Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: ThHsanPJweXj3moKDbLmdwIMRaertQWZvOUT2kbksX0=) 2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:76:18:ff:09:6b:70:24:12:dd:f3:48:83:84:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609 Validity Not Before: Dec 12 11:00:48 2025 GMT Not After : Dec 13 11:00:48 2025 GMT Subject: CN=2f0a2dee21a96b7664a6e9084a18f9fc9c35b876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:34:66:01:51:18:8f:3b:47:6c:ae:5a:9b:6a: e5:eb:df:00:bb:42:b0:6b:81:26:74:3d:4e:01:a8: 33:15:f3:f8:c5:4b:7e:00:11:15:39:9d:9c:8a:b7: e5:91:ee:a5:d7:e7:99:be:3d:87:d8:25:7a:1d:15: 3d:98:b4:d2:81:e2:76:50:4b:8a:56:61:f0:95:72: 2a:a8:f6:b7:1a:f3:8a:f8:ba:c1:7e:05:17:f4:d6: 23:88:86:11:f7:5f:e0:66:dc:d6:e8:9b:47:17:fc: d2:c8:2c:fc:a8:f9:c1:bb:29:e7:37:d6:d0:03:43: 83:fe:e5:1f:a0:06:c3:9c:48:02:ff:f2:9e:35:16: c4:71:86:57:9e:6c:0d:18:00:0c:c6:55:0c:39:88: c5:4d:61:48:09:03:4b:ab:3a:f7:fc:ce:96:46:48: 01:8a:f2:ad:4d:29:25:ec:d1:44:cd:11:b9:97:f2: 5b:6f:36:70:ea:f9:56:85:d9:a8:fe:2f:45:5f:37: 41:c0:02:6f:8f:2c:0a:e2:f5:1f:1f:86:72:3f:44: 10:5c:07:36:43:7f:25:aa:bb:88:76:c1:f1:d5:ad: 98:e4:e3:12:ab:c2:54:3f:44:22:89:1c:d2:0e:ec: 4b:2b:0e:00:03:73:a1:61:7c:50:8d:65:91:9d:3d: c4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0A:2D:EE:21:A9:6B:76:64:A6:E9:08:4A:18:F9:FC:9C:35:B8:76 X509v3 Authority Key Identifier: keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4e:59:bf:4f:b8:d5:ec:58:65:23:24:f5:70:11:7e:a0:87: a7:1a:b6:29:03:32:c8:77:84:92:ed:f8:01:9b:1b:ba:1c:e2: c5:ae:52:02:52:d7:80:b4:b1:74:43:e0:8d:a8:96:fe:5e:f3: e0:ce:d5:2b:50:61:9c:6b:dd:89:be:f3:1d:32:b5:26:a5:03: b9:b1:d9:ba:fb:72:68:42:87:2b:7c:be:f3:67:9f:7f:04:4f: a4:71:3a:fe:a0:54:3b:65:11:dd:50:3a:db:e5:63:62:e8:1c: 38:c3:71:2f:94:7a:fc:62:35:9a:56:36:f2:2c:16:3a:68:2a: 1a:d9:5d:56:73:20:c7:23:17:e4:c4:21:4a:6b:02:03:91:eb: 8e:5c:25:d4:42:36:9d:51:d3:38:b8:86:ae:fc:45:cd:80:59: e1:1c:1e:64:2c:c6:33:f8:fc:1e:d0:cd:dd:b3:a3:37:3e:67: e9:a1:d5:45:0d:67:8f:0b:69:bf:f7:dd:63:0a:a0:56:79:42: 22:94:f3:f5:15:6c:49:ae:d2:50:8a:c9:6f:9b:b9:a8:17:d0: 06:29:19:df:76:b8:af:51:c7:36:50:4d:d3:2a:29:23:1d:9b: ab:ba:92:4b:c0:1f:56:35:78:ee:a6:62:87:c2:e8:cc:35:f5: 01:e1:c1:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOHYY/wlrcCQS3fNIg4TWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzQ1YmQzOGQ0YmRjNjhlM2Q3OWRlMDI0NGRmMDZkMmVj YjY2MDkwHhcNMjUxMjEyMTEwMDQ4WhcNMjUxMjEzMTEwMDQ4WjAzMTEwLwYDVQQD EygyZjBhMmRlZTIxYTk2Yjc2NjRhNmU5MDg0YTE4ZjlmYzljMzViODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjRmAVEYjztHbK5am2rl698Au0Kw a4EmdD1OAagzFfP4xUt+ABEVOZ2cirflke6l1+eZvj2H2CV6HRU9mLTSgeJ2UEuK VmHwlXIqqPa3GvOK+LrBfgUX9NYjiIYR91/gZtzW6JtHF/zSyCz8qPnBuynnN9bQ A0OD/uUfoAbDnEgC//KeNRbEcYZXnmwNGAAMxlUMOYjFTWFICQNLqzr3/M6WRkgB ivKtTSkl7NFEzRG5l/JbbzZw6vlWhdmo/i9FXzdBwAJvjywK4vUfH4ZyP0QQXAc2 Q38lqruIdsHx1a2Y5OMSq8JUP0QiiRzSDuxLKw4AA3OhYXxQjWWRnT3ElQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8KLe4hqWt2ZKbpCEoY+fycNbh2MB8GA1UdIwQY MBaAFBLEW9ONS9xo49ed4CRN8G0uy2YJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUt MjIwMjhhNzg2ZjYwLzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUtMjIwMjhhNzg2ZjYw LzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJE5Zv0+4 1exYZSMk9XARfqCHpxq2KQMyyHeEku34AZsbuhzixa5SAlLXgLSxdEPgjaiW/l7z 4M7VK1BhnGvdib7zHTK1JqUDubHZuvtyaEKHK3y+82effwRPpHE6/qBUO2UR3VA6 2+VjYugcOMNxL5R6/GI1mlY28iwWOmgqGtldVnMgxyMX5MQhSmsCA5Hrjlwl1EI2 nVHTOLiGrvxFzYBZ4RweZCzGM/j8HtDN3bOjNz5n6aHVRQ1njwtpv/fdYwqgVnlC IpTz9RVsSa7SUIrJb5u5qBfQBikZ33a4r1HHNlBN0yopIx2bq7qSS8AfVjV47qZi h8LozDX1AeHBpw== -----END CERTIFICATE-----Generated at Fri Dec 12 14:23:08 2025 by rpki-client