This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json) Hash identifier: aI4Vq+0Fc8sDWOft360zEIxyZDcDP0dhwiyefPPhQF0= Subject key identifier: 26:02:A5:8E:E9:16:8F:57:4E:AC:F5:89:3B:11:5E:52:6D:D2:00:FE Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09 Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209 Certificate serial: 019B711093CD238D8DA99A8614F5209FCE13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 21:01:10 +0000 Manifest this update: Tue 30 Dec 2025 21:01:10 +0000 Manifest next update: Wed 31 Dec 2025 21:01:10 +0000 Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: JxJAvxz0hfqGpd+RXWCbp9PN+Q1MaEhqjl/7y8wTcq4=) 2: Siq3LXChf-J1kOdJHhD69EXWg8I.roa (hash: lqCjq1rRDcc2EL/o5bsRWvZA2ja39pIDJxSTPY+sOJk=) 3: ecaHIJxcx1Mgp1auyXMniU5m_AU.roa (hash: nk96xRsdyKFZrxulWblmb/pOYCvYpvcjJToJzvaxa8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:93:cd:23:8d:8d:a9:9a:86:14:f5:20:9f:ce:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c603666719e979bef0921451a2ec264ed01209 Validity Not Before: Dec 30 21:01:10 2025 GMT Not After : Dec 31 21:01:10 2025 GMT Subject: CN=2602a58ee9168f574eacf5893b115e526dd200fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:93:64:36:ed:cf:e8:2f:bc:3b:82:56:4d: a8:a6:bd:d0:31:ff:fc:8c:c9:35:d1:aa:f8:84:35: ae:fd:e7:23:0c:db:4f:f4:dd:82:aa:2c:d2:81:c4: 65:aa:32:c8:f5:0e:7d:76:73:4d:cc:97:17:04:df: ce:3f:eb:f3:63:c4:76:e6:c3:a3:26:1e:54:b7:99: c6:1d:e6:9b:d7:70:04:fc:bc:5d:63:9a:fd:09:a8: d6:c4:69:71:d4:6b:9c:a7:de:08:d6:4c:dc:08:37: 59:61:6d:fa:03:5f:1b:14:57:1b:1a:36:58:a8:85: 7f:35:5f:02:f2:45:3f:9e:e9:73:7e:7a:f1:b7:a8: 08:e7:a7:ae:c8:58:08:06:c9:cf:4b:da:d1:c1:9e: 45:90:80:96:c6:10:8d:42:78:46:e0:5a:6e:41:4e: ac:61:94:41:2b:a2:e9:18:44:ef:bb:66:2d:71:ee: c9:a1:8d:79:74:c0:42:0c:74:ad:35:c5:12:a2:14: a1:35:9c:ff:85:0a:c0:08:44:fb:4d:48:a4:dd:f7: f4:38:bf:d4:7c:c9:ab:b8:6e:66:82:f6:23:25:19: 52:18:1a:24:3b:30:c6:22:8e:06:79:b8:d2:4b:44: fd:49:86:18:0d:49:8c:82:3a:d0:9c:5a:e0:37:18: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:02:A5:8E:E9:16:8F:57:4E:AC:F5:89:3B:11:5E:52:6D:D2:00:FE X509v3 Authority Key Identifier: keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:0e:88:e6:b2:fb:4e:c9:1b:d3:26:7a:c3:38:cd:a8:9d:d8: c8:0a:c6:e9:a3:c3:c1:65:0a:3f:69:87:b9:f4:8a:15:66:d2: 98:43:89:85:ed:6e:ab:a4:ba:30:95:f4:4f:4f:d0:b5:90:1a: fe:1b:97:34:30:ac:3a:d6:52:81:38:44:0f:90:e0:b1:48:20: 9c:70:82:38:09:6e:16:4e:42:f0:c0:b7:11:7e:09:e7:9f:c1: ad:7a:9c:dc:2a:e0:59:9e:58:36:2d:6d:10:be:22:cd:07:f1: b4:d7:bb:42:35:3f:98:ab:b2:30:55:95:1e:1e:b8:da:94:69: 06:6c:05:98:60:a7:d3:6c:b5:7b:a4:f1:82:3b:1b:20:fd:ca: 18:08:23:c1:f2:a0:f4:9b:c5:a8:c1:2d:ee:9d:86:24:a1:c8: 3f:7e:66:7d:da:dc:b6:d1:de:45:79:1e:ff:df:ab:89:9f:5f: f0:60:dc:8e:b0:12:da:a9:97:b1:4e:2f:df:00:37:b5:da:64: d9:26:df:79:b5:07:f8:eb:16:38:99:59:6e:d4:06:d5:3e:2c: fa:c3:e1:bf:59:e0:90:22:20:01:45:db:45:db:e7:df:89:c5: 62:05:c4:55:5a:46:52:72:dd:a8:25:e4:f8:6f:41:46:42:92: 95:80:76:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEJPNI42NqZqGFPUgn84TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzYwMzY2NjcxOWU5NzliZWYwOTIxNDUxYTJlYzI2NGVk MDEyMDkwHhcNMjUxMjMwMjEwMTEwWhcNMjUxMjMxMjEwMTEwWjAzMTEwLwYDVQQD EygyNjAyYTU4ZWU5MTY4ZjU3NGVhY2Y1ODkzYjExNWU1MjZkZDIwMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY6TZDbtz+gvvDuCVk2opr3QMf/8 jMk10ar4hDWu/ecjDNtP9N2CqizSgcRlqjLI9Q59dnNNzJcXBN/OP+vzY8R25sOj Jh5Ut5nGHeab13AE/LxdY5r9CajWxGlx1Gucp94I1kzcCDdZYW36A18bFFcbGjZY qIV/NV8C8kU/nulzfnrxt6gI56euyFgIBsnPS9rRwZ5FkICWxhCNQnhG4FpuQU6s YZRBK6LpGETvu2Ytce7JoY15dMBCDHStNcUSohShNZz/hQrACET7TUik3ff0OL/U fMmruG5mgvYjJRlSGBokOzDGIo4GebjSS0T9SYYYDUmMgjrQnFrgNxgj0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYCpY7pFo9XTqz1iTsRXlJt0gD+MB8GA1UdIwQY MBaAFBLGA2ZnGel5vvCSFFGi7CZO0BIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEt NThlZmEwYmVlMDg0LzEvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEtNThlZmEwYmVlMDg0 LzEvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhw6I5rL7 Tskb0yZ6wzjNqJ3YyArG6aPDwWUKP2mHufSKFWbSmEOJhe1uq6S6MJX0T0/QtZAa /huXNDCsOtZSgThED5DgsUggnHCCOAluFk5C8MC3EX4J55/BrXqc3CrgWZ5YNi1t EL4izQfxtNe7QjU/mKuyMFWVHh642pRpBmwFmGCn02y1e6TxgjsbIP3KGAgjwfKg 9JvFqMEt7p2GJKHIP35mfdrcttHeRXke/9+riZ9f8GDcjrAS2qmXsU4v3wA3tdpk 2SbfebUH+OsWOJlZbtQG1T4s+sPhv1ngkCIgAUXbRdvn34nFYgXEVVpGUnLdqCXk +G9BRkKSlYB22Q== -----END CERTIFICATE-----Generated at Wed Dec 31 05:05:35 2025 by rpki-client