This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft File: EsqtEcXYmB2YPDAehqGs8tgRqsE.mft (raw, json) Hash identifier: 4MqJnwiZTGwzoHBTF7BiLXTXBYy+1uRAizes8Dw6084= Subject key identifier: B5:6F:17:A4:A2:9B:1E:00:6E:79:63:9E:47:73:6F:6E:8F:CB:80:B7 Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1 Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1 Certificate serial: 019BB39593AAFFD57A0E1CC4874B3C9DDCFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft Manifest number: 11C2 Signing time: Mon 12 Jan 2026 19:01:22 +0000 Manifest this update: Mon 12 Jan 2026 19:01:22 +0000 Manifest next update: Tue 13 Jan 2026 19:01:22 +0000 Files and hashes: 1: EsqtEcXYmB2YPDAehqGs8tgRqsE.crl (hash: S8NfZxiu1uIREIPqKx0Q91ZzY1JK15lJLfYH6UX48PI=) 2: fWvJKSqx17IpwOZP-DnMdVD05bA.roa (hash: a2shhv3zQfZlWKQCMJwiD1YrWh6DtVIVP13FjzeqLCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:95:93:aa:ff:d5:7a:0e:1c:c4:87:4b:3c:9d:dc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1 Validity Not Before: Jan 12 19:01:22 2026 GMT Not After : Jan 13 19:01:22 2026 GMT Subject: CN=b56f17a4a29b1e006e79639e47736f6e8fcb80b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:20:4a:bc:2b:b7:d9:f6:5e:eb:7b:90:8f:9e: 3b:ed:a3:86:18:2c:3d:9a:17:95:33:01:28:35:86: 7e:d9:9e:c1:68:fd:5d:93:95:72:eb:bd:7d:4d:2b: 19:31:fd:31:81:b5:a0:49:02:7a:8c:38:c5:5a:36: 72:fb:3b:b6:81:e4:97:97:a4:c2:d9:1e:90:f9:ce: 6a:c1:4d:48:8d:01:7e:c6:ed:02:af:a9:41:99:e2: a2:66:a5:fe:4a:6c:4b:86:8c:d3:9f:ec:6e:6a:dc: 18:a8:bc:7e:7f:b2:0e:da:3a:a0:5f:19:9d:42:1f: 8f:a6:65:63:cf:4a:59:dc:fc:51:0f:1b:f7:36:02: 94:77:37:c3:aa:01:f8:7d:4a:14:00:4e:14:39:4c: b3:3e:06:c9:73:be:09:fc:d0:9f:97:d5:4b:74:60: cc:79:46:71:32:a0:22:34:24:dc:62:7c:ca:4e:56: 89:03:14:54:84:38:47:12:06:fd:fe:fa:1c:82:7b: 16:44:82:96:09:bd:94:ed:02:93:98:aa:ee:1b:5b: 52:10:c2:ec:d1:7c:ff:b8:2b:82:b9:f7:39:4e:21: 77:80:e5:e5:d4:23:5f:d2:41:5f:ef:69:8a:ed:91: 34:db:68:44:91:bf:7b:bd:57:50:ad:ad:6a:89:1f: 46:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6F:17:A4:A2:9B:1E:00:6E:79:63:9E:47:73:6F:6E:8F:CB:80:B7 X509v3 Authority Key Identifier: keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f0:9e:e9:80:0a:a2:73:24:8f:68:13:2d:0a:ae:6f:d6:4e: 77:18:99:ca:1c:0f:b6:10:ca:fc:a9:b2:16:d5:89:88:a8:d1: b6:08:fb:62:e5:a2:40:bf:b3:13:55:f5:7f:0f:84:3a:9e:fc: 69:3a:92:90:19:c8:29:2e:5d:70:62:09:50:41:f5:ba:a3:fe: 84:22:f9:64:48:c1:61:d4:28:cc:2a:30:75:f0:1d:e0:fe:c1: 1e:f6:fc:2c:98:c2:5c:ff:64:66:8f:96:cd:11:59:48:2b:69: 3b:e7:ec:5b:1f:3d:70:f6:2c:49:31:13:b8:5e:64:c2:d3:51: c6:a7:8a:01:1d:6b:db:e0:d3:47:c7:21:c9:ae:8b:13:4d:8e: 3d:79:3d:ed:59:80:37:73:28:4b:20:8e:4d:be:ee:4c:a5:a3: f6:24:92:30:6a:03:db:77:64:32:b0:00:0a:71:ee:af:88:ee: 93:c8:f6:90:05:a8:c8:a3:fb:cf:7a:72:47:b7:17:4c:13:cc: 31:d1:65:89:32:66:6c:e4:13:2f:e5:84:c9:81:24:8e:83:a4: d4:56:13:92:c5:5e:6b:c3:fb:50:5d:05:d1:2a:9a:3f:ca:ad: 09:ae:33:da:99:4b:9e:5a:62:29:17:54:fc:e8:5a:67:a6:49: 47:f9:2b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzlZOq/9V6DhzEh0s8ndz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyY2FhZDExYzVkODk4MWQ5ODNjMzAxZTg2YTFhY2YyZDgx MWFhYzEwHhcNMjYwMTEyMTkwMTIyWhcNMjYwMTEzMTkwMTIyWjAzMTEwLwYDVQQD EyhiNTZmMTdhNGEyOWIxZTAwNmU3OTYzOWU0NzczNmY2ZThmY2I4MGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SBKvCu32fZe63uQj5477aOGGCw9 mheVMwEoNYZ+2Z7BaP1dk5Vy6719TSsZMf0xgbWgSQJ6jDjFWjZy+zu2geSXl6TC 2R6Q+c5qwU1IjQF+xu0Cr6lBmeKiZqX+SmxLhozTn+xuatwYqLx+f7IO2jqgXxmd Qh+PpmVjz0pZ3PxRDxv3NgKUdzfDqgH4fUoUAE4UOUyzPgbJc74J/NCfl9VLdGDM eUZxMqAiNCTcYnzKTlaJAxRUhDhHEgb9/vocgnsWRIKWCb2U7QKTmKruG1tSEMLs 0Xz/uCuCufc5TiF3gOXl1CNf0kFf72mK7ZE022hEkb97vVdQra1qiR9GswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVvF6Simx4Abnljnkdzb26Py4C3MB8GA1UdIwQY MBaAFBLKrRHF2JgdmDwwHoahrPLYEarBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82YzNmYTEtNjNiNS00YmRjLTk0YmUt ZWI3Yjk1OTBlMzAzLzEvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82YzNmYTEtNjNiNS00YmRjLTk0YmUtZWI3Yjk1OTBlMzAz LzEvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPCe6YAK onMkj2gTLQqub9ZOdxiZyhwPthDK/KmyFtWJiKjRtgj7YuWiQL+zE1X1fw+EOp78 aTqSkBnIKS5dcGIJUEH1uqP+hCL5ZEjBYdQozCowdfAd4P7BHvb8LJjCXP9kZo+W zRFZSCtpO+fsWx89cPYsSTETuF5kwtNRxqeKAR1r2+DTR8chya6LE02OPXk97VmA N3MoSyCOTb7uTKWj9iSSMGoD23dkMrAACnHur4juk8j2kAWoyKP7z3pyR7cXTBPM MdFliTJmbOQTL+WEyYEkjoOk1FYTksVea8P7UF0F0SqaP8qtCa4z2plLnlpiKRdU /OhaZ6ZJR/kr1Q== -----END CERTIFICATE-----Generated at Mon Jan 12 22:58:53 2026 by rpki-client