This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft File: ENSbc8raAe6FGBLsRAt6HsmGSLM.mft (raw, json) Hash identifier: o6I+l6edgZlCGN563tRL1MmNhdx33FjxeXuZKwD5oYI= Subject key identifier: 77:89:83:11:1F:D3:37:74:EA:EB:35:B9:28:6B:47:3D:32:4C:09:36 Authority key identifier: 10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3 Certificate issuer: /CN=10d49b73cada01ee851812ec440b7a1ec98648b3 Certificate serial: 019B503C1E5C069688BA746E2F08EDDBAF05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 12:01:15 +0000 Manifest this update: Wed 24 Dec 2025 12:01:15 +0000 Manifest next update: Thu 25 Dec 2025 12:01:15 +0000 Files and hashes: 1: ENSbc8raAe6FGBLsRAt6HsmGSLM.crl (hash: CPjZt916CtDRdCx6Yt5zqmB7CqM/CNHwCgVMeRA+ttk=) 2: LbvGosx0sr1hJwd78ZXVswGnqXM.roa (hash: zrhSsms7Xu5tLT+xCwRwdoOuFODUIch3dzNZbH3HeT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:1e:5c:06:96:88:ba:74:6e:2f:08:ed:db:af:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10d49b73cada01ee851812ec440b7a1ec98648b3 Validity Not Before: Dec 24 12:01:15 2025 GMT Not After : Dec 25 12:01:15 2025 GMT Subject: CN=778983111fd33774eaeb35b9286b473d324c0936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:7c:de:28:a0:e4:48:15:36:c0:b4:66:7c: 74:ef:10:0c:20:35:63:2a:a4:cc:d2:e8:49:13:2e: af:33:66:f3:ae:43:e6:86:86:5d:a5:75:58:39:75: 70:8b:91:8b:6f:de:ee:e7:ce:a8:8e:de:21:be:24: ed:92:b6:6e:ab:40:61:07:b1:26:6d:02:d3:78:75: 06:83:a4:81:50:ee:bf:a4:e3:d8:3e:9c:0f:67:0a: 1e:44:d1:cd:d9:44:db:44:4d:17:5b:60:51:08:63: 1f:8e:4f:a4:bf:63:bd:1f:26:fd:29:27:db:80:7d: 80:68:f6:01:05:39:5e:9e:35:3c:1d:4e:bb:c1:c8: 72:20:27:b8:79:0e:17:43:5c:71:36:30:52:c3:f1: 53:a6:a7:1b:ec:da:c6:d3:d5:cf:df:92:fc:29:81: 97:79:13:80:06:cb:ed:60:83:d6:ad:05:b1:ec:e6: 0a:62:de:31:c9:af:59:d7:e0:00:c9:84:70:a8:b0: 19:b5:e8:98:cb:34:e9:34:27:74:5a:10:ae:8c:0c: e4:29:93:5f:82:e6:c5:6a:5b:25:72:5d:03:db:f6: 42:7a:a9:f8:63:bf:71:82:9b:44:23:d4:2d:e6:c9: 21:7f:1c:6f:dc:60:16:9c:0d:b8:37:de:af:20:6f: 69:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:89:83:11:1F:D3:37:74:EA:EB:35:B9:28:6B:47:3D:32:4C:09:36 X509v3 Authority Key Identifier: keyid:10:D4:9B:73:CA:DA:01:EE:85:18:12:EC:44:0B:7A:1E:C9:86:48:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENSbc8raAe6FGBLsRAt6HsmGSLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/0ddca2-81b3-4b99-be02-aa03ec66290f/1/ENSbc8raAe6FGBLsRAt6HsmGSLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a5:62:f6:7b:12:d6:fa:88:d5:9d:75:26:d2:bc:16:f8:e2: 91:ae:f0:7a:f4:15:25:c9:6f:99:6d:f3:87:a7:d5:1d:e6:4e: 23:79:55:67:5f:51:4a:fd:d1:60:17:6c:63:4c:2c:39:e4:9f: 17:e4:b7:0d:a9:b5:95:ce:1a:a1:7f:97:7f:7d:14:c3:9b:c3: d2:8c:1d:0a:b1:1c:44:97:54:f0:3a:55:58:00:05:4b:de:be: 22:39:42:fe:ae:15:41:7b:68:c4:1e:07:59:cc:80:b5:b0:e2: 58:d1:22:2f:75:66:a8:c7:97:85:1d:ef:24:f9:9f:23:2c:56: cb:24:15:71:82:bd:24:2d:4b:e5:45:8a:95:93:92:e6:58:a8: 5d:13:b3:10:bb:9f:34:cf:aa:26:fe:e5:00:51:9a:62:f9:4a: 1e:b9:6c:9f:86:b7:a0:39:2b:7a:fd:94:ab:1a:a5:3e:c2:82: 72:61:fe:30:5c:38:72:f7:8a:69:21:6c:3e:b0:71:69:b6:a6: 83:43:32:44:fe:9e:0f:b2:dc:b0:57:b2:30:13:f5:90:8d:44: 54:20:b3:59:48:3b:8b:43:a7:ab:11:d3:db:1b:c7:50:1a:e5: 9f:25:bd:0e:17:fd:72:91:b8:27:cb:b7:2d:77:e5:e8:53:8e: a0:63:41:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPB5cBpaIunRuLwjt268FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZDQ5YjczY2FkYTAxZWU4NTE4MTJlYzQ0MGI3YTFlYzk4 NjQ4YjMwHhcNMjUxMjI0MTIwMTE1WhcNMjUxMjI1MTIwMTE1WjAzMTEwLwYDVQQD Eyg3Nzg5ODMxMTFmZDMzNzc0ZWFlYjM1YjkyODZiNDczZDMyNGMwOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv983iig5EgVNsC0Znx07xAMIDVj KqTM0uhJEy6vM2bzrkPmhoZdpXVYOXVwi5GLb97u586ojt4hviTtkrZuq0BhB7Em bQLTeHUGg6SBUO6/pOPYPpwPZwoeRNHN2UTbRE0XW2BRCGMfjk+kv2O9Hyb9KSfb gH2AaPYBBTlenjU8HU67wchyICe4eQ4XQ1xxNjBSw/FTpqcb7NrG09XP35L8KYGX eROABsvtYIPWrQWx7OYKYt4xya9Z1+AAyYRwqLAZteiYyzTpNCd0WhCujAzkKZNf gubFalslcl0D2/ZCeqn4Y79xgptEI9Qt5skhfxxv3GAWnA24N96vIG9pFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeJgxEf0zd06us1uShrRz0yTAk2MB8GA1UdIwQY MBaAFBDUm3PK2gHuhRgS7EQLeh7JhkizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wZGRjYTItODFiMy00Yjk5LWJlMDIt YWEwM2VjNjYyOTBmLzEvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wZGRjYTItODFiMy00Yjk5LWJlMDItYWEwM2VjNjYyOTBm LzEvRU5TYmM4cmFBZTZGR0JMc1JBdDZIc21HU0xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6Vi9nsS 1vqI1Z11JtK8Fvjika7wevQVJclvmW3zh6fVHeZOI3lVZ19RSv3RYBdsY0wsOeSf F+S3Dam1lc4aoX+Xf30Uw5vD0owdCrEcRJdU8DpVWAAFS96+IjlC/q4VQXtoxB4H WcyAtbDiWNEiL3VmqMeXhR3vJPmfIyxWyyQVcYK9JC1L5UWKlZOS5lioXROzELuf NM+qJv7lAFGaYvlKHrlsn4a3oDkrev2UqxqlPsKCcmH+MFw4cveKaSFsPrBxabam g0MyRP6eD7LcsFeyMBP1kI1EVCCzWUg7i0OnqxHT2xvHUBrlnyW9Dhf9cpG4J8u3 LXfl6FOOoGNBjg== -----END CERTIFICATE-----Generated at Wed Dec 24 16:16:44 2025 by rpki-client