This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft File: esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json) Hash identifier: cK1AdDYfcGrR3iSxRhbtX9laY8E5kSvdW8LfTIv54fE= Subject key identifier: BF:24:AE:09:CE:E8:F6:98:DC:29:A5:29:E6:45:34:46:D3:81:A4:1B Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3 Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3 Certificate serial: 019B503BFBE268E7AFEE28F38FD1179531B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft Manifest number: 0F8F Signing time: Wed 24 Dec 2025 12:01:06 +0000 Manifest this update: Wed 24 Dec 2025 12:01:06 +0000 Manifest next update: Thu 25 Dec 2025 12:01:06 +0000 Files and hashes: 1: LCQo2NCbeYZ3q2w5uO1x82UrAS0.roa (hash: /H5HChGZH77x2xCBhcZV4r2K/3suV56lFnfxUuSNtn0=) 2: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: qdCkvZXphctvE2fSS8on8gyYPiRF75fJA2MEettFins=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:fb:e2:68:e7:af:ee:28:f3:8f:d1:17:95:31:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3 Validity Not Before: Dec 24 12:01:06 2025 GMT Not After : Dec 25 12:01:06 2025 GMT Subject: CN=bf24ae09cee8f698dc29a529e6453446d381a41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:90:4c:03:da:a6:35:80:79:1e:1f:a2:65: 97:fe:07:d0:0b:d0:1a:f1:29:7b:36:95:08:57:7e: 55:ef:6b:ff:74:ad:1b:2a:a8:72:cb:4c:50:f4:d8: b3:54:67:b0:dd:b1:56:cc:fb:d1:06:86:c6:d4:89: 47:f7:01:f5:68:cd:bf:f1:bf:fe:76:7d:42:24:d1: 0b:bc:35:40:b2:45:c0:2f:ac:a3:7d:81:f1:82:3a: 92:b3:38:eb:19:83:a6:9a:8e:21:7c:1c:04:56:20: f4:55:8d:2e:4f:04:f0:bf:19:4b:6c:10:bc:83:f0: 75:07:32:0c:30:41:ee:fb:07:86:ac:d0:3c:8b:c1: cf:76:54:ee:76:d8:c8:5e:05:32:18:ac:4e:06:62: 65:06:05:c6:e2:6d:f3:d0:69:53:3b:25:45:f9:56: 8e:4a:fc:42:3d:85:38:4b:73:70:97:3f:1f:e9:80: fd:cb:8a:24:51:b4:97:cd:78:7d:86:bd:92:07:66: 1a:a3:68:cc:bc:09:e7:d3:40:88:6f:bf:83:17:c2: b4:c7:d8:aa:0a:06:ce:24:47:0a:80:da:41:90:ae: cc:12:08:d0:0b:d5:17:fe:c7:b9:fa:5a:2c:d5:59: b3:c7:1c:dd:62:27:03:41:76:37:00:b3:ab:4b:51: a7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:24:AE:09:CE:E8:F6:98:DC:29:A5:29:E6:45:34:46:D3:81:A4:1B X509v3 Authority Key Identifier: keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:cb:29:70:b4:f7:ef:05:ab:9a:64:b7:03:23:10:4d:7e:06: f4:8e:e6:cc:59:26:78:70:75:65:c2:e8:10:2e:6a:56:c6:e1: dc:da:ab:f9:a0:94:98:62:20:c3:dc:6f:b8:3b:ed:74:60:24: 8a:61:44:a1:a1:32:97:60:1f:c3:68:f8:0b:77:23:e9:fb:f4: 22:50:9c:1a:d7:ca:d4:a2:85:fe:44:4e:ac:da:d7:48:21:e1: dc:ca:55:f2:c7:6d:47:fe:44:67:f7:df:d5:0f:73:e1:8d:ab: 57:6a:be:3f:ff:12:26:13:00:27:4a:30:bf:db:ee:93:e5:3f: 75:f7:c4:03:9b:7e:8e:96:eb:f3:ef:bf:1d:81:6a:a3:11:9d: b1:43:c7:1e:1a:5f:8c:50:b6:49:85:e5:fc:40:30:19:b8:4a: ee:79:e4:e9:6c:68:3b:22:7f:66:0e:0b:1c:bf:dc:92:7d:c1: ce:df:a6:12:4f:7f:c8:b9:7a:dd:fd:ba:95:2c:9d:0f:60:cb: d0:c5:91:02:22:2d:de:32:dc:e6:b5:b8:3a:3d:1a:d3:12:7d: 44:45:42:10:25:52:bc:6f:d3:47:23:cd:55:0d:5f:74:39:82: 2e:24:1a:d3:fa:50:55:9b:91:0a:d3:1f:07:35:af:77:d5:fe: 16:c1:21:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQO/viaOev7ijzj9EXlTG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYzYyM2VmYmZjMTI0NzEyMTYyMjQwY2JhMDJhNGRhMWQ0 ZGNlYTMwHhcNMjUxMjI0MTIwMTA2WhcNMjUxMjI1MTIwMTA2WjAzMTEwLwYDVQQD EyhiZjI0YWUwOWNlZThmNjk4ZGMyOWE1MjllNjQ1MzQ0NmQzODFhNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JGQTAPapjWAeR4fomWX/gfQC9Aa 8Sl7NpUIV35V72v/dK0bKqhyy0xQ9NizVGew3bFWzPvRBobG1IlH9wH1aM2/8b/+ dn1CJNELvDVAskXAL6yjfYHxgjqSszjrGYOmmo4hfBwEViD0VY0uTwTwvxlLbBC8 g/B1BzIMMEHu+weGrNA8i8HPdlTudtjIXgUyGKxOBmJlBgXG4m3z0GlTOyVF+VaO SvxCPYU4S3Nwlz8f6YD9y4okUbSXzXh9hr2SB2Yao2jMvAnn00CIb7+DF8K0x9iq CgbOJEcKgNpBkK7MEgjQC9UX/se5+los1VmzxxzdYicDQXY3ALOrS1GnFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8krgnO6PaY3CmlKeZFNEbTgaQbMB8GA1UdIwQY MBaAFHrGI++/wSRxIWIkDLoCpNodTc6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3Zjgt NDNhYTRjY2UzZjQ4LzEvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9jNzRhNGYtNDA1Mi00YzliLWE3ZjgtNDNhYTRjY2UzZjQ4 LzEvZXNZajc3X0JKSEVoWWlRTXVnS2syaDFOenFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxMspcLT3 7wWrmmS3AyMQTX4G9I7mzFkmeHB1ZcLoEC5qVsbh3Nqr+aCUmGIgw9xvuDvtdGAk imFEoaEyl2Afw2j4C3cj6fv0IlCcGtfK1KKF/kROrNrXSCHh3MpV8sdtR/5EZ/ff 1Q9z4Y2rV2q+P/8SJhMAJ0owv9vuk+U/dffEA5t+jpbr8++/HYFqoxGdsUPHHhpf jFC2SYXl/EAwGbhK7nnk6WxoOyJ/Zg4LHL/ckn3Bzt+mEk9/yLl63f26lSydD2DL 0MWRAiIt3jLc5rW4Oj0a0xJ9REVCECVSvG/TRyPNVQ1fdDmCLiQa0/pQVZuRCtMf BzWvd9X+FsEhFg== -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:43 2025 by rpki-client