This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft File: ESCgzgE-LVKm_zVKJwiUu5mORUc.mft (raw, json) Hash identifier: xtBH+qXV0iSthlwlQHxPQqWHZxYL9vKbD6mNJC/7wyc= Subject key identifier: C2:5E:FF:0D:8C:C6:4B:34:A7:74:61:FB:35:16:69:A5:9D:B4:FB:8D Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Certificate serial: 019B8A2BE8632F75854E45D6E48121CD5308 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft Manifest number: 17B5 Signing time: Sun 04 Jan 2026 18:01:31 +0000 Manifest this update: Sun 04 Jan 2026 18:01:31 +0000 Manifest next update: Mon 05 Jan 2026 18:01:31 +0000 Files and hashes: 1: ESCgzgE-LVKm_zVKJwiUu5mORUc.crl (hash: 7kBvrGKVoglipFqgpONjvCR0Qjxe/KjcWWy5DQV7mRc=) 2: Nj-fcrd8btYTmooIT07USGH4uhc.roa (hash: NGae1BAct6VWVRLG8OfFbqQcDMzJnoL00dhPvysFzMY=) 3: dV-H29alZEFLImGmyiY7hQJaEAY.roa (hash: Li61GxGOSJxUgraJk65DXVq0NLMB+4WQGr7Nxv/T31Q=) 4: e-tZ1DdZl0dxPJy0N9Yn-0Al0M8.roa (hash: QAdbievfGnFmg15O+j0D44UXxw3G9rYuADuFC3J6DdQ=) 5: kNeO88W6WiZjVCqS0huGRYDNIkU.roa (hash: lTC2ffNYxbrVzusWfHz2XumlwYx6P/xuLd8Z8WVhDpk=) 6: tqA8MnPED0zVZqFPU0EtU7Uh-p8.roa (hash: nbXmQvCUG27Q3g4mguFw6ecZllhpCxpa9WaI9lGnt70=) 7: uMoLLTIIp3goMEn7y4z_relYCj0.roa (hash: OkL4CzvIc+/+beHGUC2g9z5v1OG6NY0LtX6M7jVvI9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:2b:e8:63:2f:75:85:4e:45:d6:e4:81:21:cd:53:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Validity Not Before: Jan 4 18:01:31 2026 GMT Not After : Jan 5 18:01:31 2026 GMT Subject: CN=c25eff0d8cc64b34a77461fb351669a59db4fb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9e:f6:dd:f1:2c:5c:91:23:94:6a:e4:ea:6e: e1:16:e3:04:7b:8c:c2:65:d6:34:af:ae:89:9b:de: b2:d5:49:43:92:f1:d4:ac:b0:2c:d3:4d:ce:3a:98: 52:fe:ea:ed:cf:93:ff:70:00:ee:7d:14:69:d1:69: f9:91:3d:a2:a9:e8:28:c8:e0:9a:b7:42:90:f6:fa: 88:65:df:eb:df:95:67:fc:28:f2:1f:29:ba:97:fb: 5b:b3:b8:ac:2f:04:08:23:f1:4d:45:34:b5:27:4d: 00:bd:a8:35:85:20:ea:b5:6a:62:ce:92:e5:94:5a: d2:a6:c4:f2:85:d6:28:68:9b:a6:4f:8a:6b:9d:6e: 80:99:c4:56:d6:2f:55:43:1c:8f:79:db:01:60:12: 97:12:60:27:31:fa:91:fc:61:c9:29:37:1b:4b:6c: 64:6b:90:30:fa:6e:79:e2:20:27:50:db:9b:8c:4c: cf:6d:77:5c:99:57:b6:b5:15:e0:24:81:5c:21:26: d7:1a:5f:50:fd:3f:6f:76:3d:37:6d:80:80:51:1c: 4d:ce:bb:c7:8b:bd:63:68:e3:d2:6c:78:e2:03:eb: 22:af:67:ab:53:60:06:a0:89:80:aa:08:44:70:16: dc:81:7f:70:e9:5e:7c:30:54:81:10:e5:a5:21:dd: 3f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5E:FF:0D:8C:C6:4B:34:A7:74:61:FB:35:16:69:A5:9D:B4:FB:8D X509v3 Authority Key Identifier: keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:88:ac:b5:3d:9e:5b:6e:35:63:15:26:ce:02:97:9c:74:b1: 3f:31:01:a1:67:99:2a:20:5b:29:0b:36:86:d0:4e:6d:37:37: 43:ee:1d:9b:3b:43:60:fe:30:4c:4b:50:ef:d8:13:fd:db:ca: 50:5f:11:03:3e:30:60:4d:7d:e4:13:5d:8b:41:1a:00:12:e9: 31:15:6a:d0:d9:52:38:15:66:a3:e4:1b:7e:da:78:6b:cc:90: 23:88:84:92:f2:f9:6f:8b:e9:cd:c1:8c:ea:c9:07:18:4f:11: d4:3c:5e:2e:e9:27:8d:b6:9f:5d:22:84:d6:71:7f:c0:78:f6: 9c:8f:6e:93:a5:97:bd:9a:04:73:f2:61:e0:8d:1a:03:e2:5f: 6b:e5:79:e0:18:5e:58:8e:f9:ea:30:32:7d:66:02:c6:cf:4c: 15:e7:11:eb:8d:bd:67:8f:6c:45:23:03:9d:b9:78:fd:ed:50: 73:70:1b:c5:dc:e9:c0:50:fe:ec:f4:0c:5e:94:04:2f:1c:e0: e2:ef:59:23:7e:83:d2:4c:a1:1d:29:3b:af:dc:79:a7:44:4d: cb:23:ae:e5:90:f1:bc:1b:23:32:ee:63:a3:78:df:ce:81:ad: b8:f0:38:96:c8:41:16:f7:53:cb:e8:a5:d0:56:80:d1:c9:b1: 88:a7:4c:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuKK+hjL3WFTkXW5IEhzVMIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjBhMGNlMDEzZTJkNTJhNmZmMzU0YTI3MDg5NGJiOTk4 ZTQ1NDcwHhcNMjYwMTA0MTgwMTMxWhcNMjYwMTA1MTgwMTMxWjAzMTEwLwYDVQQD EyhjMjVlZmYwZDhjYzY0YjM0YTc3NDYxZmIzNTE2NjlhNTlkYjRmYjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5723fEsXJEjlGrk6m7hFuMEe4zC ZdY0r66Jm96y1UlDkvHUrLAs003OOphS/urtz5P/cADufRRp0Wn5kT2iqegoyOCa t0KQ9vqIZd/r35Vn/CjyHym6l/tbs7isLwQII/FNRTS1J00Avag1hSDqtWpizpLl lFrSpsTyhdYoaJumT4prnW6AmcRW1i9VQxyPedsBYBKXEmAnMfqR/GHJKTcbS2xk a5Aw+m554iAnUNubjEzPbXdcmVe2tRXgJIFcISbXGl9Q/T9vdj03bYCAURxNzrvH i71jaOPSbHjiA+sir2erU2AGoImAqghEcBbcgX9w6V58MFSBEOWlId0/6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJe/w2Mxks0p3Rh+zUWaaWdtPuNMB8GA1UdIwQY MBaAFBEgoM4BPi1Spv81SicIlLuZjkVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUt MzFhZjNlMjk0NjcxLzEvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUtMzFhZjNlMjk0Njcx LzEvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu4istT2e W241YxUmzgKXnHSxPzEBoWeZKiBbKQs2htBObTc3Q+4dmztDYP4wTEtQ79gT/dvK UF8RAz4wYE195BNdi0EaABLpMRVq0NlSOBVmo+Qbftp4a8yQI4iEkvL5b4vpzcGM 6skHGE8R1DxeLuknjbafXSKE1nF/wHj2nI9uk6WXvZoEc/Jh4I0aA+Jfa+V54Bhe WI756jAyfWYCxs9MFecR6429Z49sRSMDnbl4/e1Qc3AbxdzpwFD+7PQMXpQELxzg 4u9ZI36D0kyhHSk7r9x5p0RNyyOu5ZDxvBsjMu5jo3jfzoGtuPA4lshBFvdTy+il 0FaA0cmxiKdMfQ== -----END CERTIFICATE-----Generated at Mon Jan 5 01:49:25 2026 by rpki-client