This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft File: ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json) Hash identifier: jh6tYKwetIlzulwTBh3Q84bVqYWN4X/j/PV3YtGhi2E= Subject key identifier: A9:CB:77:47:E8:D8:29:33:15:EF:92:F9:53:05:14:D3:B3:F4:C8:23 Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5 Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5 Certificate serial: 019B3A8F91FF17F10202152DBCBBC6D8A2C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:00:46 +0000 Manifest this update: Sat 20 Dec 2025 07:00:46 +0000 Manifest next update: Sun 21 Dec 2025 07:00:46 +0000 Files and hashes: 1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: NI892kZlixGA+kCPN5ZhQxdrU0SQYadWB13NGZQUxb8=) 2: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (hash: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:91:ff:17:f1:02:02:15:2d:bc:bb:c6:d8:a2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5 Validity Not Before: Dec 20 07:00:46 2025 GMT Not After : Dec 21 07:00:46 2025 GMT Subject: CN=a9cb7747e8d8293315ef92f9530514d3b3f4c823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:af:68:69:35:16:fe:fe:cb:1c:b2:dc:97: f1:43:0c:ad:91:cd:ce:98:aa:40:7a:a3:ec:07:59: f7:50:0a:fd:6a:ff:bd:93:11:02:1c:f8:9a:43:92: b5:1b:d0:89:75:a4:fe:69:7b:5a:15:a0:ba:a0:6c: b7:f2:81:9d:a0:05:d0:6e:b6:dc:87:46:45:f7:36: de:fe:b2:f6:09:4c:c8:4d:6a:dc:3c:bb:6f:c0:0a: d4:d2:df:fc:45:16:d5:77:81:e2:d9:ce:32:35:db: 1b:cd:c7:3a:9a:35:a9:c2:0d:38:f8:1b:da:b4:bb: 2a:12:6d:36:6e:53:10:2c:bc:af:40:c9:96:41:4e: 1e:c9:94:be:50:eb:39:e9:d3:2f:f0:29:a2:ec:eb: 76:8c:43:76:08:18:a0:0d:2b:d5:ab:b0:7a:4b:16: 30:63:41:c4:e5:92:6d:fc:5b:50:5a:96:1f:1c:76: 7f:b1:11:db:0d:21:d9:fd:86:08:08:c2:d5:8a:4a: ac:90:1f:ed:7e:db:e6:64:84:f1:a4:98:ae:20:8c: 04:7a:38:a7:26:ea:fc:c6:74:5e:bd:68:c2:60:5c: 2c:f6:06:7a:af:c7:dd:dc:17:78:39:2a:b6:35:cd: 13:20:62:ef:88:54:d9:59:ac:ec:d1:a7:32:e0:00: 87:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CB:77:47:E8:D8:29:33:15:EF:92:F9:53:05:14:D3:B3:F4:C8:23 X509v3 Authority Key Identifier: keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:40:df:49:3e:ca:67:74:bd:97:0b:88:1b:ba:9b:97:d8:e9: b4:6e:44:c0:cd:3e:f4:c5:20:1c:75:54:6a:70:02:61:ec:1c: 25:40:e4:05:97:2e:e6:c8:53:82:f2:4a:e9:2d:da:95:cd:3f: 0e:12:3a:4a:58:3f:2b:37:dd:f8:f6:e6:39:f3:c1:c2:94:b7: 9a:2b:81:ba:09:e5:dc:fa:76:4f:51:96:8d:17:dc:e3:cd:44: 8c:32:8c:7f:7f:e5:e9:3e:d3:7e:16:df:9e:63:d7:fd:3d:11: ff:da:30:c2:73:7c:6b:31:01:ec:2a:a7:5e:65:4f:e9:05:1a: fa:20:81:ee:db:fb:5a:fb:e7:a6:79:f1:10:bf:66:53:2e:5c: 62:53:4b:93:99:d3:b9:b8:b8:a5:47:49:e3:42:64:b3:dd:c2: ed:2a:e9:cf:15:63:f6:7c:06:3a:34:a5:e0:95:53:e0:b2:5a: cd:14:ac:b6:3e:cc:ad:a1:03:5a:72:d4:78:90:e4:e8:91:04: 96:8d:0d:6a:1f:ad:95:38:46:ce:76:be:61:f3:01:33:d2:77: fa:b5:2d:95:b0:ea:f0:86:6e:e2:ad:cc:51:58:b6:13:73:18: 8c:fd:d2:37:af:7a:ac:03:94:f6:3c:e6:ba:99:81:03:50:55: 96:81:bb:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j5H/F/ECAhUtvLvG2KLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmQwYzRmMTZkYzg5MjIxMjlmZjYwNTBlMjM1NTYyMzE3 NTY1ZTUwHhcNMjUxMjIwMDcwMDQ2WhcNMjUxMjIxMDcwMDQ2WjAzMTEwLwYDVQQD EyhhOWNiNzc0N2U4ZDgyOTMzMTVlZjkyZjk1MzA1MTRkM2IzZjRjODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVavaGk1Fv7+yxyy3JfxQwytkc3O mKpAeqPsB1n3UAr9av+9kxECHPiaQ5K1G9CJdaT+aXtaFaC6oGy38oGdoAXQbrbc h0ZF9zbe/rL2CUzITWrcPLtvwArU0t/8RRbVd4Hi2c4yNdsbzcc6mjWpwg04+Bva tLsqEm02blMQLLyvQMmWQU4eyZS+UOs56dMv8Cmi7Ot2jEN2CBigDSvVq7B6SxYw Y0HE5ZJt/FtQWpYfHHZ/sRHbDSHZ/YYICMLVikqskB/tftvmZITxpJiuIIwEejin Jur8xnRevWjCYFws9gZ6r8fd3Bd4OSq2Nc0TIGLviFTZWazs0acy4ACHGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnLd0fo2CkzFe+S+VMFFNOz9MgjMB8GA1UdIwQY MBaAFBEtDE8W3IkiEp/2BQ4jVWIxdWXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80NTgzMGMtNGE4Ni00MDJjLWExZWUt NDAwOWQ4NzliOTdlLzEvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80NTgzMGMtNGE4Ni00MDJjLWExZWUtNDAwOWQ4NzliOTdl LzEvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkDfST7K Z3S9lwuIG7qbl9jptG5EwM0+9MUgHHVUanACYewcJUDkBZcu5shTgvJK6S3alc0/ DhI6Slg/Kzfd+PbmOfPBwpS3miuBugnl3Pp2T1GWjRfc481EjDKMf3/l6T7Tfhbf nmPX/T0R/9owwnN8azEB7CqnXmVP6QUa+iCB7tv7WvvnpnnxEL9mUy5cYlNLk5nT ubi4pUdJ40Jks93C7SrpzxVj9nwGOjSl4JVT4LJazRSstj7MraEDWnLUeJDk6JEE lo0Nah+tlThGzna+YfMBM9J3+rUtlbDq8IZu4q3MUVi2E3MYjP3SN696rAOU9jzm upmBA1BVloG7IQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:22 2025 by rpki-client