This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft File: eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json) Hash identifier: sYTW0OXaCHvQsmscDa6ah7sU//OS2KOjxLcGhGg1eW0= Subject key identifier: 7E:B3:E1:55:DC:AA:F8:51:7F:52:44:07:F5:84:5E:C2:11:91:0C:24 Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67 Certificate issuer: /CN=792c5d8c32caa4662316858c65bebe12c861ad67 Certificate serial: 019B360E53E9696996C357CB64DBAFA595C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 10:01:07 +0000 Manifest this update: Fri 19 Dec 2025 10:01:07 +0000 Manifest next update: Sat 20 Dec 2025 10:01:07 +0000 Files and hashes: 1: 5zhQ3B9hLH2ZPYsiKLmy8Rojvg0.roa (hash: KI1hydbtzIhfdYk8QexN8+EHwEo9bPdSN9gLtHnLO94=) 2: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: ISc3OLSj0Ne3Vu+D0Sas7dn/C0qrc0RAiCFt3NAhKX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:53:e9:69:69:96:c3:57:cb:64:db:af:a5:95:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67 Validity Not Before: Dec 19 10:01:07 2025 GMT Not After : Dec 20 10:01:07 2025 GMT Subject: CN=7eb3e155dcaaf8517f524407f5845ec211910c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4e:14:90:35:6b:7d:be:95:d0:66:9d:ac:cd: 3c:83:a2:40:79:29:45:79:7d:32:60:2e:60:ed:67: 89:ec:b5:38:cb:c9:1e:e6:a8:8c:ff:a6:87:e1:02: 6a:1e:6a:a0:16:c1:3f:b8:32:b3:82:12:38:ca:ed: 1d:d6:a0:1b:ed:00:da:90:8f:79:87:dd:f4:1f:af: c1:b4:99:a9:12:69:fa:26:52:81:04:ad:cd:2e:2a: 13:4e:e9:c9:f0:9b:b4:27:35:6f:0f:2d:b0:cf:ae: b5:32:86:3b:e3:48:19:e0:93:42:d4:8f:f4:45:a3: d5:ff:5b:f0:f8:7b:8d:db:f3:90:ae:41:c3:bf:51: 47:db:5e:29:05:03:35:79:d6:56:c3:35:42:19:ec: 9b:4a:38:c6:f6:93:30:bc:35:2b:41:62:f5:30:65: cf:ce:d9:0d:97:ec:ef:bc:9f:0f:1c:71:2b:74:2b: 4e:7a:54:25:24:98:8e:4b:05:c7:96:90:72:75:b4: df:43:6b:e5:8f:0f:d8:2f:83:11:34:9a:16:ff:40: 5c:b4:91:0b:12:a9:de:37:e3:84:36:c4:00:eb:9e: 10:82:06:b3:e1:62:e7:99:89:46:a4:b0:2e:c1:89: 11:d5:7e:58:f1:9c:b4:c9:92:06:11:a2:a1:e0:db: d7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B3:E1:55:DC:AA:F8:51:7F:52:44:07:F5:84:5E:C2:11:91:0C:24 X509v3 Authority Key Identifier: keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:15:d1:50:3b:07:52:bd:93:86:22:98:8a:8d:3c:f6:6e:55: 4c:5c:99:4c:08:a1:6e:62:ee:b7:67:66:42:d4:4a:62:2f:33: 97:f8:84:d0:ea:91:ba:94:cb:a7:a1:8b:2b:60:50:d7:be:5f: 84:28:8e:1e:e9:51:86:ab:bb:01:00:87:47:c9:e7:62:9f:da: e1:b3:ca:2f:cc:70:4b:3b:df:86:f3:89:09:4c:70:ef:7e:f2: ff:d3:87:6a:a6:83:93:7f:9f:19:df:8f:a6:d3:d8:0c:dd:bc: 9e:4e:94:ec:84:c2:74:13:14:4e:6c:eb:38:06:56:b0:e4:e7: dd:76:83:c4:00:73:56:77:57:d1:98:23:4d:8e:c5:58:49:a4: 5d:dc:a2:7e:0a:cc:e6:46:37:6b:5f:aa:fc:25:e8:40:a2:5e: 6e:17:b0:09:4a:d7:f5:8e:25:77:02:e0:37:9a:8c:63:96:c6: a5:ae:d1:f8:5b:bd:dc:b9:24:33:ca:4b:72:f1:5d:a3:5c:09: db:b7:83:35:52:1c:b1:95:f7:0f:0b:68:75:a4:88:08:55:9d: 01:3b:6f:d5:65:61:b2:cb:6f:d8:7b:0f:00:59:92:74:4c:ac: f8:ed:ff:ce:9b:43:9e:c3:7a:09:ae:a8:97:f7:6c:c8:78:6f: 1c:6f:35:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DlPpaWmWw1fLZNuvpZXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MmM1ZDhjMzJjYWE0NjYyMzE2ODU4YzY1YmViZTEyYzg2 MWFkNjcwHhcNMjUxMjE5MTAwMTA3WhcNMjUxMjIwMTAwMTA3WjAzMTEwLwYDVQQD Eyg3ZWIzZTE1NWRjYWFmODUxN2Y1MjQ0MDdmNTg0NWVjMjExOTEwYzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA404UkDVrfb6V0GadrM08g6JAeSlF eX0yYC5g7WeJ7LU4y8ke5qiM/6aH4QJqHmqgFsE/uDKzghI4yu0d1qAb7QDakI95 h930H6/BtJmpEmn6JlKBBK3NLioTTunJ8Ju0JzVvDy2wz661MoY740gZ4JNC1I/0 RaPV/1vw+HuN2/OQrkHDv1FH214pBQM1edZWwzVCGeybSjjG9pMwvDUrQWL1MGXP ztkNl+zvvJ8PHHErdCtOelQlJJiOSwXHlpBydbTfQ2vljw/YL4MRNJoW/0BctJEL EqneN+OENsQA654Qggaz4WLnmYlGpLAuwYkR1X5Y8Zy0yZIGEaKh4NvXHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6z4VXcqvhRf1JEB/WEXsIRkQwkMB8GA1UdIwQY MBaAFHksXYwyyqRmIxaFjGW+vhLIYa1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wZTRmNmMtNTEyOC00NmY5LWIzZjMt OGI4MmMyMDI5M2ExLzEvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wZTRmNmMtNTEyOC00NmY5LWIzZjMtOGI4MmMyMDI5M2Ex LzEvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRXRUDsH Ur2ThiKYio089m5VTFyZTAihbmLut2dmQtRKYi8zl/iE0OqRupTLp6GLK2BQ175f hCiOHulRhqu7AQCHR8nnYp/a4bPKL8xwSzvfhvOJCUxw737y/9OHaqaDk3+fGd+P ptPYDN28nk6U7ITCdBMUTmzrOAZWsOTn3XaDxABzVndX0ZgjTY7FWEmkXdyifgrM 5kY3a1+q/CXoQKJebhewCUrX9Y4ldwLgN5qMY5bGpa7R+Fu93LkkM8pLcvFdo1wJ 27eDNVIcsZX3DwtodaSICFWdATtv1WVhsstv2HsPAFmSdEys+O3/zptDnsN6Ca6o l/dsyHhvHG81Sg== -----END CERTIFICATE-----Generated at Fri Dec 19 15:59:30 2025 by rpki-client