This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json) Hash identifier: HJfvQHKpQBU0bDJGPkAXlf23b498+5WIH1Dv2+JpfNc= Subject key identifier: 33:40:70:63:EF:FC:E7:F6:8E:B4:54:F4:92:7C:7D:6F:4D:89:45:4C Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05 Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05 Certificate serial: 019B405BBB9907393C34960A7A365AE22619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft Manifest number: 15E6 Signing time: Sun 21 Dec 2025 10:01:52 +0000 Manifest this update: Sun 21 Dec 2025 10:01:52 +0000 Manifest next update: Mon 22 Dec 2025 10:01:52 +0000 Files and hashes: 1: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: zEboGlv3hz2FNYnUC9JDCMgiSLptfcsj4iKZwKtt8H0=) 2: tUy7VKDDVboY2Qo-sNWljYmxPOI.roa (hash: nOufD9VcAARAPXFJN7YbCFA3vo77wDsfl0JVajaSTdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:bb:99:07:39:3c:34:96:0a:7a:36:5a:e2:26:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05 Validity Not Before: Dec 21 10:01:52 2025 GMT Not After : Dec 22 10:01:52 2025 GMT Subject: CN=33407063effce7f68eb454f4927c7d6f4d89454c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:2d:a9:bb:37:7a:4c:ed:b7:6e:09:ac:f4: 19:ca:be:f2:8d:26:8b:5a:1a:92:33:67:53:a8:91: bd:a7:0a:6d:9a:7b:27:07:77:8a:9f:08:94:fd:a6: 60:ef:e5:73:5e:73:4c:1b:f8:51:eb:d1:4a:b4:60: d6:8c:f7:f5:7d:52:05:27:29:2d:43:f2:ec:60:46: e4:7c:e8:69:5d:80:34:fe:cb:46:31:73:66:a4:1d: d3:a8:30:fd:c9:d8:f8:13:62:c7:79:19:5c:14:da: 82:bc:5c:47:5e:4b:3e:56:1f:9b:12:c5:6d:9e:2c: 94:26:9a:4d:96:a7:b8:60:7b:0a:0f:5a:b9:06:a3: 8b:38:f7:6d:b8:c0:bc:4a:27:1d:ad:19:8d:2c:fb: 63:ea:5f:6b:82:15:d0:fc:2a:ab:3c:0c:98:e9:57: 7d:07:d3:27:fa:ad:c1:1f:6f:92:bb:a2:2a:74:43: 3c:e5:05:59:f0:5c:24:27:70:cf:60:15:cc:56:fe: f6:8f:8e:6e:36:7c:1a:51:a6:95:3d:cf:b5:29:6f: 5a:3c:ba:c7:6b:61:87:46:f6:9a:71:a6:18:92:23: 70:d1:6f:94:25:c6:10:64:9e:1e:b9:e8:a1:ac:e0: ac:71:0f:60:43:30:bb:47:80:56:a9:82:b3:55:69: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:40:70:63:EF:FC:E7:F6:8E:B4:54:F4:92:7C:7D:6F:4D:89:45:4C X509v3 Authority Key Identifier: keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3e:13:00:61:3f:99:ab:d3:5a:19:46:da:6e:8f:4e:b7:c3: d5:a8:f3:76:a1:c8:9f:cf:02:70:39:21:72:da:64:76:9f:06: 8e:7d:22:f4:cc:05:72:b7:04:39:c8:69:3a:aa:43:f0:6f:9b: 05:08:0c:22:fb:7a:22:c5:8d:b7:ec:0b:1d:a7:29:be:9e:f5: 69:22:2a:99:5b:82:4f:02:e5:8f:43:6a:b0:df:5d:06:4f:2c: e5:6a:3b:7c:46:e6:ac:c4:1c:93:b5:ba:d9:f8:e2:68:48:de: 0d:08:67:dd:07:ce:a5:ee:0f:76:b4:0c:1c:bc:51:b0:63:2d: 51:8c:23:a5:48:a6:09:85:80:67:86:fa:64:0c:c7:8b:ea:bc: d0:18:85:1c:4f:9b:55:fe:af:5d:2a:d1:2b:85:8c:3a:b3:68: 81:c6:e5:ea:14:3c:7f:43:44:f0:90:60:cf:70:be:4c:d0:ea: 33:9f:79:20:a0:2a:57:f4:eb:c7:76:c1:14:43:e2:54:e3:de: e3:35:e8:01:c5:dd:82:6d:26:c1:01:29:a3:07:f1:81:08:ab: b1:06:90:2c:29:90:9e:a2:2b:fb:27:78:9f:41:71:cf:d0:66: 9e:5c:f2:b6:82:a1:af:8f:f1:d7:57:e1:95:e5:4c:63:c9:ab: 35:4e:3f:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW7uZBzk8NJYKejZa4iYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNGIxY2RmNTA2Y2U1ZTk5MzdlNzdmODI2M2VjZjZkZGIy NTViMDUwHhcNMjUxMjIxMTAwMTUyWhcNMjUxMjIyMTAwMTUyWjAzMTEwLwYDVQQD EygzMzQwNzA2M2VmZmNlN2Y2OGViNDU0ZjQ5MjdjN2Q2ZjRkODk0NTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQktqbs3ekztt24JrPQZyr7yjSaL WhqSM2dTqJG9pwptmnsnB3eKnwiU/aZg7+VzXnNMG/hR69FKtGDWjPf1fVIFJykt Q/LsYEbkfOhpXYA0/stGMXNmpB3TqDD9ydj4E2LHeRlcFNqCvFxHXks+Vh+bEsVt niyUJppNlqe4YHsKD1q5BqOLOPdtuMC8SicdrRmNLPtj6l9rghXQ/CqrPAyY6Vd9 B9Mn+q3BH2+Su6IqdEM85QVZ8FwkJ3DPYBXMVv72j45uNnwaUaaVPc+1KW9aPLrH a2GHRvaacaYYkiNw0W+UJcYQZJ4eueihrOCscQ9gQzC7R4BWqYKzVWn12QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNAcGPv/Of2jrRU9JJ8fW9NiUVMMB8GA1UdIwQY MBaAFLBLHN9QbOXpk353+CY+z23bJVsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAt Y2U1MDE5MjY0ODk1LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAtY2U1MDE5MjY0ODk1 LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhj4TAGE/ mavTWhlG2m6PTrfD1ajzdqHIn88CcDkhctpkdp8Gjn0i9MwFcrcEOchpOqpD8G+b BQgMIvt6IsWNt+wLHacpvp71aSIqmVuCTwLlj0NqsN9dBk8s5Wo7fEbmrMQck7W6 2fjiaEjeDQhn3QfOpe4PdrQMHLxRsGMtUYwjpUimCYWAZ4b6ZAzHi+q80BiFHE+b Vf6vXSrRK4WMOrNogcbl6hQ8f0NE8JBgz3C+TNDqM595IKAqV/Trx3bBFEPiVOPe 4zXoAcXdgm0mwQEpowfxgQirsQaQLCmQnqIr+yd4n0Fxz9BmnlzytoKhr4/x11fh leVMY8mrNU4/qA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:02:09 2025 by rpki-client