This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File: ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier: 0KjDdERG9SJn1qClOjEjtRLetfTUsMv8XtrlX8Fim0E=
Subject key identifier: 30:CB:15:CC:A1:CB:83:F5:AE:10:AC:DB:12:46:20:D4:AE:44:0A:05
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial: 019B277746C36C4DF6C6447D23EA01FCE7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number: 177D
Signing time: Tue 16 Dec 2025 14:01:26 +0000
Manifest this update: Tue 16 Dec 2025 14:01:26 +0000
Manifest next update: Wed 17 Dec 2025 14:01:26 +0000
Files and hashes: 1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: 8mtFJT1CgTa0gXaZsz0Tz4nMYypHMdWh15zOdWPrSLs=)
2: N6ILORbRZvbQFYCBBRtXEQJq4EE.roa (hash: mmnPcV9IaUAzNHOhWtx5CYix9aLEDcUiIi0yf9zddR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:27:77:46:c3:6c:4d:f6:c6:44:7d:23:ea:01:fc:e7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Validity
Not Before: Dec 16 14:01:26 2025 GMT
Not After : Dec 17 14:01:26 2025 GMT
Subject: CN=30cb15cca1cb83f5ae10acdb124620d4ae440a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:3a:d2:92:41:90:11:c2:9a:70:25:2c:67:
38:4a:fc:73:22:f6:db:6b:c5:6e:78:da:68:f1:57:
87:7d:f2:43:96:d5:b1:57:0b:cb:e0:42:f5:67:25:
44:fd:1e:53:7d:59:66:a6:c5:38:2d:82:97:1f:79:
c4:b1:30:53:8c:b8:1d:b7:36:dd:76:17:25:d5:fc:
c3:87:8b:47:36:a6:ed:f4:b9:40:43:7a:32:68:0a:
fd:3f:a7:d9:29:83:fc:fe:87:e0:85:18:47:64:5c:
87:74:8d:0f:7f:a3:47:c5:5d:29:fb:fd:e5:51:c2:
1e:f4:64:3d:be:55:c9:6d:00:fb:ac:a6:ec:11:1e:
a8:8e:c2:3c:11:35:44:56:40:9e:6b:96:09:37:54:
ce:5a:c4:ed:57:9d:ea:b4:c6:2e:87:18:61:b0:1a:
52:eb:6d:36:bf:38:7b:43:d5:39:86:97:d6:f3:5c:
c0:2d:77:92:b0:ef:e4:52:e8:d5:d3:f6:c0:2c:91:
53:27:b7:dd:76:f4:75:e8:90:c2:bd:c3:bb:e6:f1:
6d:d0:28:4f:2e:2b:d5:ad:a6:86:71:61:f0:8b:30:
5d:6d:a3:6f:98:5f:0c:4b:b5:43:52:7c:96:f7:2a:
ef:6b:4e:28:f1:55:40:77:16:e9:f3:ec:75:48:1d:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CB:15:CC:A1:CB:83:F5:AE:10:AC:DB:12:46:20:D4:AE:44:0A:05
X509v3 Authority Key Identifier:
keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:ce:44:00:8c:6b:3e:b0:93:6a:f7:91:cd:f6:56:8e:f3:03:
c3:3f:20:61:d1:f9:10:61:d2:9d:68:06:b2:83:65:5a:05:87:
4c:3c:a9:54:a6:88:f5:fc:19:69:eb:63:37:fa:4e:0a:f1:19:
17:16:76:7d:a0:84:bf:dc:6b:6a:46:1e:5f:03:5d:2e:ef:4d:
54:a2:55:c4:59:4f:12:53:f1:ae:d5:54:d1:4e:77:b0:c3:d5:
99:fb:05:4c:d7:78:f1:92:1f:ba:87:18:7a:81:f3:57:bd:4d:
46:d5:43:32:80:d1:e8:94:e3:d9:46:a3:bd:d7:23:51:c2:80:
eb:50:28:c0:ea:4d:fa:1c:de:69:a7:fe:79:15:f9:02:b0:55:
f7:51:e9:ea:b6:79:ea:4b:44:6c:0b:a3:b6:65:ba:5a:a3:07:
37:8d:99:bb:57:b2:e1:62:23:25:e2:7d:19:b9:d6:69:02:69:
aa:e7:8e:83:f3:d2:55:f0:fa:48:17:ff:51:63:b2:92:fc:1a:
a7:0f:c0:13:fd:6b:93:4f:d8:ba:fa:bf:94:97:a0:e2:85:37:
c3:a2:05:b4:71:36:6a:4f:23:45:0e:a5:a7:af:64:68:01:27:
5c:5c:d0:c9:ae:35:3e:65:dd:b7:40:cf:39:7e:e3:ea:83:2f:
b3:8a:e2:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsnd0bDbE32xkR9I+oB/OfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMjdiOGQ1YTUwNDAyMDliODk5M2JmMjAzMTc4OWMzYjJi
YWI3YzcwHhcNMjUxMjE2MTQwMTI2WhcNMjUxMjE3MTQwMTI2WjAzMTEwLwYDVQQD
EygzMGNiMTVjY2ExY2I4M2Y1YWUxMGFjZGIxMjQ2MjBkNGFlNDQwYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA860pJBkBHCmnAlLGc4SvxzIvbb
a8VueNpo8VeHffJDltWxVwvL4EL1ZyVE/R5TfVlmpsU4LYKXH3nEsTBTjLgdtzbd
dhcl1fzDh4tHNqbt9LlAQ3oyaAr9P6fZKYP8/ofghRhHZFyHdI0Pf6NHxV0p+/3l
UcIe9GQ9vlXJbQD7rKbsER6ojsI8ETVEVkCea5YJN1TOWsTtV53qtMYuhxhhsBpS
6202vzh7Q9U5hpfW81zALXeSsO/kUujV0/bALJFTJ7fddvR16JDCvcO75vFt0ChP
LivVraaGcWHwizBdbaNvmF8MS7VDUnyW9yrva04o8VVAdxbp8+x1SB2t+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDLFcyhy4P1rhCs2xJGINSuRAoFMB8GA1UdIwQY
MBaAFBEnuNWlBAIJuJk78gMXicOyurfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2Mt
M2ViY2FkYWJmMGQ4LzEvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2MtM2ViY2FkYWJmMGQ4
LzEvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5M5EAIxr
PrCTaveRzfZWjvMDwz8gYdH5EGHSnWgGsoNlWgWHTDypVKaI9fwZaetjN/pOCvEZ
FxZ2faCEv9xrakYeXwNdLu9NVKJVxFlPElPxrtVU0U53sMPVmfsFTNd48ZIfuocY
eoHzV71NRtVDMoDR6JTj2UajvdcjUcKA61AowOpN+hzeaaf+eRX5ArBV91Hp6rZ5
6ktEbAujtmW6WqMHN42Zu1ey4WIjJeJ9GbnWaQJpqueOg/PSVfD6SBf/UWOykvwa
pw/AE/1rk0/Yuvq/lJeg4oU3w6IFtHE2ak8jRQ6lp69kaAEnXFzQya41PmXdt0DP
OX7j6oMvs4ri6A==
-----END CERTIFICATE-----
Generated at Tue Dec 16 23:22:49 2025 by rpki-client