This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft File: e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json) Hash identifier: NvhNJpDL0elU+p5kiy9g4A3pNqLm3+ij62RS6gDOKyM= Subject key identifier: 73:E9:2B:C2:DF:B3:9E:37:95:EB:D7:B3:F3:6F:F9:8C:29:3D:2B:18 Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4 Certificate issuer: /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4 Certificate serial: 019B34FB623A29DAD09C7550CF5755F12754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft Manifest number: 057D Signing time: Fri 19 Dec 2025 05:00:48 +0000 Manifest this update: Fri 19 Dec 2025 05:00:48 +0000 Manifest next update: Sat 20 Dec 2025 05:00:48 +0000 Files and hashes: 1: 7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa (hash: W6gsf8oTn0VsRjkJRSnQZjA1UWhDIyT1LhfUV5ExzMo=) 2: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: 3bZhZnVcoAbVK6SHY10TU5zowHYDULWm1QQcoxWv+J8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:62:3a:29:da:d0:9c:75:50:cf:57:55:f1:27:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4 Validity Not Before: Dec 19 05:00:48 2025 GMT Not After : Dec 20 05:00:48 2025 GMT Subject: CN=73e92bc2dfb39e3795ebd7b3f36ff98c293d2b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:65:5e:29:6f:c7:9b:d3:6f:fa:68:7b:50: 8b:85:97:c9:63:85:bc:bd:b5:ee:5c:f9:47:dd:d6: 02:cf:9c:0c:0d:8f:f0:b7:37:28:30:24:75:d9:71: fe:c4:3a:f4:71:98:71:ea:4f:66:91:e8:42:5e:32: 38:99:01:26:74:d0:d0:67:3a:ff:17:c8:b2:7d:86: 60:87:8f:9f:2b:0e:6f:55:4a:ec:c7:ad:31:f5:15: 3c:fa:ef:9e:59:48:f0:e7:88:cd:b1:8b:02:e0:2e: ab:81:c5:d5:50:de:f3:59:e2:1e:29:5e:7b:13:a5: 67:db:1d:8e:86:73:c2:bc:6f:9a:4c:90:37:cd:db: b1:92:cc:37:24:3b:06:e1:bc:04:37:d1:41:73:b3: d7:4f:0f:c4:b9:ec:57:db:95:03:3c:8c:0b:2c:a6: 9c:14:71:fc:18:c7:48:ae:94:da:81:c2:7c:bd:d0: 4a:e2:bb:f5:36:aa:24:1e:67:5a:b6:7b:01:07:6b: 1f:c5:9a:53:b6:80:ae:42:27:37:61:3c:9d:22:4a: 2c:94:2a:a6:3f:d0:19:37:b0:af:6e:dd:bf:37:66: 96:06:32:df:ed:13:7a:14:96:8e:b4:bf:b2:30:ad: 25:24:19:f0:0b:78:d2:20:e5:81:98:6f:7c:26:af: a9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E9:2B:C2:DF:B3:9E:37:95:EB:D7:B3:F3:6F:F9:8C:29:3D:2B:18 X509v3 Authority Key Identifier: keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:a1:3f:1c:ae:32:b4:1c:b7:0b:43:b3:f2:db:9e:61:e1:07: fa:d3:da:5b:0e:5b:28:cf:20:e1:7f:61:fc:1e:0e:c8:e4:8d: b8:ce:db:8b:98:3a:fb:8b:08:dc:ef:be:4c:f7:c3:ed:5c:71: 35:1d:2b:a5:79:85:84:38:2d:57:64:89:fd:f8:8a:59:7e:fc: 35:7e:61:e8:5b:7c:1d:a9:7f:83:b0:0d:a4:0f:f9:cc:67:47: a7:2d:8c:79:18:23:78:fe:d4:84:7b:c1:b6:2a:ac:90:b7:cb: c1:a2:4e:0d:19:ac:72:ab:c5:5f:ae:aa:79:90:82:bf:4d:2f: 4e:54:fc:1a:a6:6a:76:4f:56:5c:bb:fa:4a:e1:c1:8d:d7:0d: e7:90:14:4d:4a:1f:c1:ad:a3:5d:2a:3b:8e:24:59:60:21:2a: 6c:49:2f:d0:7f:48:2c:34:b9:6b:fe:fb:1f:33:6d:39:da:cd: da:ae:d4:8e:3f:f4:58:5f:d9:da:19:dc:49:e9:4f:fe:ca:f8: ed:62:96:27:ec:3c:bf:50:0e:98:26:33:91:12:86:d6:dd:a3: 53:e6:9f:03:a8:66:73:ae:11:d2:6a:7d:3c:80:81:b0:66:95: 08:b7:bb:c1:03:47:4e:eb:fb:df:a1:2d:d2:dd:05:68:42:ed: 1c:82:97:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+2I6KdrQnHVQz1dV8SdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZjdhY2U1NTMwZTVkNTA5MDdkMmRkYjQzNWJmMjliNGRm MWQ2ZTQwHhcNMjUxMjE5MDUwMDQ4WhcNMjUxMjIwMDUwMDQ4WjAzMTEwLwYDVQQD Eyg3M2U5MmJjMmRmYjM5ZTM3OTVlYmQ3YjNmMzZmZjk4YzI5M2QyYjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBdlXilvx5vTb/poe1CLhZfJY4W8 vbXuXPlH3dYCz5wMDY/wtzcoMCR12XH+xDr0cZhx6k9mkehCXjI4mQEmdNDQZzr/ F8iyfYZgh4+fKw5vVUrsx60x9RU8+u+eWUjw54jNsYsC4C6rgcXVUN7zWeIeKV57 E6Vn2x2OhnPCvG+aTJA3zduxksw3JDsG4bwEN9FBc7PXTw/EuexX25UDPIwLLKac FHH8GMdIrpTagcJ8vdBK4rv1NqokHmdatnsBB2sfxZpTtoCuQic3YTydIkoslCqm P9AZN7Cvbt2/N2aWBjLf7RN6FJaOtL+yMK0lJBnwC3jSIOWBmG98Jq+pCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPpK8Lfs543levXs/Nv+YwpPSsYMB8GA1UdIwQY MBaAFHv3rOVTDl1QkH0t20Nb8ptN8dbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81MTcxYzctOGRmYy00ZDExLWFlMjIt YzI4YmU0ODM4NzhhLzEvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi81MTcxYzctOGRmYy00ZDExLWFlMjItYzI4YmU0ODM4Nzhh LzEvZV9lczVWTU9YVkNRZlMzYlExdnltMDN4MXVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxaE/HK4y tBy3C0Oz8tueYeEH+tPaWw5bKM8g4X9h/B4OyOSNuM7bi5g6+4sI3O++TPfD7Vxx NR0rpXmFhDgtV2SJ/fiKWX78NX5h6Ft8Hal/g7ANpA/5zGdHpy2MeRgjeP7UhHvB tiqskLfLwaJODRmscqvFX66qeZCCv00vTlT8GqZqdk9WXLv6SuHBjdcN55AUTUof wa2jXSo7jiRZYCEqbEkv0H9ILDS5a/77HzNtOdrN2q7Ujj/0WF/Z2hncSelP/sr4 7WKWJ+w8v1AOmCYzkRKG1t2jU+afA6hmc64R0mp9PICBsGaVCLe7wQNHTuv736Et 0t0FaELtHIKX6A== -----END CERTIFICATE-----Generated at Fri Dec 19 10:28:07 2025 by rpki-client