This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json) Hash identifier: y9XiBl8fEc+0630j/gr84NIkSiWN7eJXL5f0DRnthdI= Subject key identifier: 08:9A:19:97:F1:8D:2D:63:86:12:8F:75:FE:CC:F8:1C:AA:BA:08:1C Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54 Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754 Certificate serial: 019B3DC7DF2E72D64B175F6FAC8AB02BCA35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft Manifest number: 0660 Signing time: Sat 20 Dec 2025 22:01:07 +0000 Manifest this update: Sat 20 Dec 2025 22:01:07 +0000 Manifest next update: Sun 21 Dec 2025 22:01:07 +0000 Files and hashes: 1: 1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa (hash: /fbcJU0cKGryVcZvtSX4RD7kNCeOfa1xibBR/Nj3P7Q=) 2: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: YuIOvwFGIAa/8VQ7zDB8101uzbjMjv3BAbdLsfn3HWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:df:2e:72:d6:4b:17:5f:6f:ac:8a:b0:2b:ca:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754 Validity Not Before: Dec 20 22:01:07 2025 GMT Not After : Dec 21 22:01:07 2025 GMT Subject: CN=089a1997f18d2d6386128f75feccf81caaba081c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6a:12:05:65:74:9f:0f:89:3b:f0:70:b3:fd: b0:21:0e:f3:d2:87:ef:26:44:27:e6:b8:00:66:d0: e8:07:de:78:5a:24:16:27:df:c9:8a:5d:f3:39:d9: 33:01:91:dd:36:ce:64:23:c5:66:78:06:5e:0e:f6: e2:6b:3f:18:e5:90:c5:b8:c7:79:67:56:b5:da:0f: 37:3e:83:ea:60:c6:5a:a2:f4:bb:c9:e6:16:e8:21: 87:e6:24:9c:bc:34:17:e5:5c:ac:ea:d6:c4:f3:d0: 45:6c:87:d5:26:16:aa:1d:cd:29:a0:8c:38:3c:0a: 61:2c:b4:82:bf:be:7a:ed:37:43:c4:3b:50:c3:64: ab:b2:e6:79:03:4b:b1:f7:0a:f3:54:31:21:16:b4: b8:60:5a:49:50:e2:56:70:d5:2b:a6:73:50:e2:90: 7a:50:c0:57:db:b3:b8:97:4b:f8:4a:33:c8:4d:b4: 5a:33:30:96:48:9c:9d:ed:d4:07:b4:63:38:97:da: 6d:02:bc:1d:ad:81:90:4c:69:30:1a:b9:13:19:03: b0:e2:0e:63:e8:10:b0:b4:9a:d7:26:06:18:40:e6: 32:8d:0e:b0:1e:ce:ee:f8:37:24:b1:b2:6a:2c:ae: 6e:14:c6:dc:d5:8e:a3:e9:f0:fc:93:54:f0:b8:c8: 4e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9A:19:97:F1:8D:2D:63:86:12:8F:75:FE:CC:F8:1C:AA:BA:08:1C X509v3 Authority Key Identifier: keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ad:a1:c3:73:0e:38:9f:10:68:46:68:14:1c:e5:04:f0:e2: e2:8f:bb:06:e1:03:f3:18:ea:82:e4:b6:02:e3:11:51:e7:6d: df:23:b5:76:09:f6:5b:b5:e1:ae:75:67:c7:01:64:0a:3a:d7: 5f:b8:46:cf:db:1b:93:23:57:05:0a:a9:29:73:ca:4e:f4:14: 3f:c0:4f:2b:0c:a4:f5:a1:07:5e:23:9f:e9:e7:98:f2:97:f4: 99:bf:27:42:64:15:a2:a1:a0:90:9e:e3:5b:b0:ee:1f:70:bb: e5:05:76:2b:cd:bf:da:99:c1:78:f7:a8:1c:d2:9d:b4:7c:07: b8:ab:1b:18:4f:4e:31:68:54:00:62:b1:54:40:a7:3d:05:6e: c0:ea:57:52:4c:4a:9f:1f:68:fd:8a:5a:47:d5:70:a3:c5:f2: 57:80:4f:da:ce:c6:33:e8:69:1e:d2:60:f8:55:69:cd:35:f7: fe:2d:35:8e:da:12:0a:d7:7a:0e:dc:02:cc:ff:74:c8:6d:ef: 69:a5:7c:91:8b:3e:62:da:e8:53:2e:81:4b:84:84:f9:d4:4a: 16:49:df:b2:cb:12:fc:2d:93:46:56:ae:df:99:f4:8b:58:b1: 45:e7:14:3f:fe:11:d7:fc:ce:69:bc:11:cd:cd:2a:eb:e8:c0: 4f:5a:83:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x98uctZLF19vrIqwK8o1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmE2YTI2MGQxZTY3ZTBhN2I0ZTZkY2Y0MDNmZDM5ZjZk ZTk3NTQwHhcNMjUxMjIwMjIwMTA3WhcNMjUxMjIxMjIwMTA3WjAzMTEwLwYDVQQD EygwODlhMTk5N2YxOGQyZDYzODYxMjhmNzVmZWNjZjgxY2FhYmEwODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmoSBWV0nw+JO/Bws/2wIQ7z0ofv JkQn5rgAZtDoB954WiQWJ9/Jil3zOdkzAZHdNs5kI8VmeAZeDvbiaz8Y5ZDFuMd5 Z1a12g83PoPqYMZaovS7yeYW6CGH5iScvDQX5Vys6tbE89BFbIfVJhaqHc0poIw4 PAphLLSCv7567TdDxDtQw2SrsuZ5A0ux9wrzVDEhFrS4YFpJUOJWcNUrpnNQ4pB6 UMBX27O4l0v4SjPITbRaMzCWSJyd7dQHtGM4l9ptArwdrYGQTGkwGrkTGQOw4g5j 6BCwtJrXJgYYQOYyjQ6wHs7u+DcksbJqLK5uFMbc1Y6j6fD8k1TwuMhOrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiaGZfxjS1jhhKPdf7M+ByquggcMB8GA1UdIwQY MBaAFBEqaiYNHmfgp7Tm3PQD/Tn23pdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NGZhZWQtMGNiNS00Nzk5LTk0NDct YTM5ODhmYzkwZDYwLzEvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84NGZhZWQtMGNiNS00Nzk5LTk0NDctYTM5ODhmYzkwZDYw LzEvRVNwcUpnMGVaLUNudE9iYzlBUDlPZmJlbDFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANa2hw3MO OJ8QaEZoFBzlBPDi4o+7BuED8xjqguS2AuMRUedt3yO1dgn2W7XhrnVnxwFkCjrX X7hGz9sbkyNXBQqpKXPKTvQUP8BPKwyk9aEHXiOf6eeY8pf0mb8nQmQVoqGgkJ7j W7DuH3C75QV2K82/2pnBePeoHNKdtHwHuKsbGE9OMWhUAGKxVECnPQVuwOpXUkxK nx9o/YpaR9Vwo8XyV4BP2s7GM+hpHtJg+FVpzTX3/i01jtoSCtd6DtwCzP90yG3v aaV8kYs+YtroUy6BS4SE+dRKFknfsssS/C2TRlau35n0i1ixRecUP/4R1/zOabwR zc0q6+jAT1qD1w== -----END CERTIFICATE-----Generated at Sun Dec 21 00:01:56 2025 by rpki-client