This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft File: ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json) Hash identifier: jwLDUjcr3HFZsYpF2tGVPjoebsD/fT4sqUzmTal8vuc= Subject key identifier: 34:17:70:A2:B3:64:BF:01:47:A2:D5:D3:5A:6D:AE:4E:EF:78:B9:AF Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5 Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5 Certificate serial: 019B44378C0B23BF8818DE987A11AA0CBE60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 04:00:49 +0000 Manifest this update: Mon 22 Dec 2025 04:00:49 +0000 Manifest next update: Tue 23 Dec 2025 04:00:49 +0000 Files and hashes: 1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: 6eqtF1W4Dg2Vr3awtvWeQd42mc0JGgQa+qDd6X3kLzo=) 2: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (hash: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:8c:0b:23:bf:88:18:de:98:7a:11:aa:0c:be:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5 Validity Not Before: Dec 22 04:00:49 2025 GMT Not After : Dec 23 04:00:49 2025 GMT Subject: CN=341770a2b364bf0147a2d5d35a6dae4eef78b9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:05:67:20:70:f3:9d:f3:8f:8f:75:e5:fc:dc: 55:ec:63:be:e9:eb:ca:cc:e3:d7:f8:68:ff:90:c0: 07:a0:8e:9e:ae:74:bc:77:ff:0e:ea:07:e5:11:0c: 76:21:07:7d:5a:cd:ec:6d:b8:76:c7:50:c5:94:35: b5:42:72:b5:d2:9a:0f:e5:df:8e:b3:eb:9f:ac:9f: d6:71:b2:1d:25:25:6d:dc:dc:77:53:4e:ec:63:8b: 19:8b:86:67:4e:d2:65:87:11:8a:d7:c4:0f:d5:b9: e6:83:49:b9:fd:b3:92:43:63:8a:3e:fe:55:e0:60: 5c:ba:42:50:ad:91:7d:14:37:af:f8:61:3c:3a:c6: 51:87:6e:79:fc:91:2e:6a:61:f7:3d:36:c6:a5:82: 27:34:1b:30:71:5c:f0:c4:a8:a4:84:b1:22:4b:b8: 32:7a:b1:c2:13:e6:1a:7c:31:af:ea:ba:5b:a7:35: 78:b6:bc:95:82:98:99:4a:dc:8f:51:73:c2:72:44: e1:47:41:09:5d:4c:bf:e1:28:f0:74:b0:69:6f:49: 70:d5:f9:6c:20:8a:92:4a:3b:db:40:a0:60:bb:7f: dc:8d:6f:37:77:a8:3c:f0:3d:4c:05:9b:2e:ca:bf: 3a:d9:bf:84:0b:65:81:b7:00:c3:1f:83:fd:ea:24: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:17:70:A2:B3:64:BF:01:47:A2:D5:D3:5A:6D:AE:4E:EF:78:B9:AF X509v3 Authority Key Identifier: keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:cd:0e:2e:7a:52:fe:a7:ab:11:75:99:5a:ed:2f:76:6d:51: 26:8d:8a:8e:d6:30:41:17:79:f7:8b:37:f1:82:3d:fa:9f:0c: de:c1:28:d6:cd:4c:96:02:4e:5e:14:d0:2a:53:f4:ec:81:af: f9:e8:3f:a5:9c:62:2c:d4:cc:e9:6e:1f:ce:31:64:1d:dd:fc: 47:de:ce:9e:2a:3b:93:35:e3:eb:51:18:54:5d:19:ce:10:6a: 4f:a1:a0:e4:9d:a3:cd:a4:13:29:d2:62:15:42:4e:0d:71:a1: 27:a4:c5:ac:b2:aa:bb:4d:54:98:d7:96:5f:87:d0:1b:f5:6b: 84:0c:32:69:b3:58:38:58:30:49:33:67:1d:77:13:5d:b7:ea: 9f:75:79:fb:cc:38:1b:52:01:48:07:9f:82:dd:00:04:78:e8: 5d:4a:8a:65:ad:f6:78:fd:ea:e5:ee:d8:eb:f2:b4:85:d1:8c: 03:e8:64:b0:e7:9e:44:b2:67:b2:c1:82:3e:18:02:52:7d:c8: d7:09:fb:bf:af:61:2b:43:e9:f5:f0:09:81:9e:0b:0d:b8:c2: ff:d7:00:63:55:1b:0d:17:de:a9:f6:ff:e4:de:9a:d4:bd:43: d0:41:69:f5:fa:34:28:17:76:d2:cc:db:14:7d:4d:74:34:47: 17:91:78:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN4wLI7+IGN6YehGqDL5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmQwYzRmMTZkYzg5MjIxMjlmZjYwNTBlMjM1NTYyMzE3 NTY1ZTUwHhcNMjUxMjIyMDQwMDQ5WhcNMjUxMjIzMDQwMDQ5WjAzMTEwLwYDVQQD EygzNDE3NzBhMmIzNjRiZjAxNDdhMmQ1ZDM1YTZkYWU0ZWVmNzhiOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AVnIHDznfOPj3Xl/NxV7GO+6evK zOPX+Gj/kMAHoI6ernS8d/8O6gflEQx2IQd9Ws3sbbh2x1DFlDW1QnK10poP5d+O s+ufrJ/WcbIdJSVt3Nx3U07sY4sZi4ZnTtJlhxGK18QP1bnmg0m5/bOSQ2OKPv5V 4GBcukJQrZF9FDev+GE8OsZRh255/JEuamH3PTbGpYInNBswcVzwxKikhLEiS7gy erHCE+YafDGv6rpbpzV4tryVgpiZStyPUXPCckThR0EJXUy/4SjwdLBpb0lw1fls IIqSSjvbQKBgu3/cjW83d6g88D1MBZsuyr862b+EC2WBtwDDH4P96iQ2vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQXcKKzZL8BR6LV01ptrk7veLmvMB8GA1UdIwQY MBaAFBEtDE8W3IkiEp/2BQ4jVWIxdWXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80NTgzMGMtNGE4Ni00MDJjLWExZWUt NDAwOWQ4NzliOTdlLzEvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80NTgzMGMtNGE4Ni00MDJjLWExZWUtNDAwOWQ4NzliOTdl LzEvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAns0OLnpS /qerEXWZWu0vdm1RJo2KjtYwQRd594s38YI9+p8M3sEo1s1MlgJOXhTQKlP07IGv +eg/pZxiLNTM6W4fzjFkHd38R97Onio7kzXj61EYVF0ZzhBqT6Gg5J2jzaQTKdJi FUJODXGhJ6TFrLKqu01UmNeWX4fQG/VrhAwyabNYOFgwSTNnHXcTXbfqn3V5+8w4 G1IBSAefgt0ABHjoXUqKZa32eP3q5e7Y6/K0hdGMA+hksOeeRLJnssGCPhgCUn3I 1wn7v69hK0Pp9fAJgZ4LDbjC/9cAY1UbDRfeqfb/5N6a1L1D0EFp9fo0KBd20szb FH1NdDRHF5F4mg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:53:56 2025 by rpki-client