This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json) Hash identifier: nRsYWEPiNj1UopuCpMkfFVhGMkbWafZw6fq8AU0edUM= Subject key identifier: 25:0B:5B:A9:FC:0C:AD:49:E2:27:4C:31:B7:B6:04:38:B7:C8:D2:2A Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09 Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609 Certificate serial: 019B409175F5F9E75E77B87B8707D5EF1ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft Manifest number: 12F0 Signing time: Sun 21 Dec 2025 11:00:33 +0000 Manifest this update: Sun 21 Dec 2025 11:00:33 +0000 Manifest next update: Mon 22 Dec 2025 11:00:33 +0000 Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: iaPEZ36BnLQNkJN2Z7TxM2pJGRJfY5MnnRKN4Wao0no=) 2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:75:f5:f9:e7:5e:77:b8:7b:87:07:d5:ef:1a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609 Validity Not Before: Dec 21 11:00:33 2025 GMT Not After : Dec 22 11:00:33 2025 GMT Subject: CN=250b5ba9fc0cad49e2274c31b7b60438b7c8d22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b4:26:02:5c:0c:80:66:f5:3f:df:19:dd:15: 16:d1:a2:35:5d:5c:26:b2:87:be:1b:35:86:ec:2a: c8:7d:eb:21:bf:7b:06:85:1a:0b:f6:dd:f1:c8:e0: c9:0c:b7:8f:46:b0:fa:c2:50:af:78:da:57:69:64: 45:41:7c:f4:9b:65:a1:22:e1:2d:cc:1a:bf:c3:2d: bf:b8:12:32:f9:1f:60:8f:85:f6:55:0d:fa:26:c7: dd:00:7a:d2:51:f1:28:1c:a2:5e:d7:14:29:83:fc: 89:fe:11:1e:40:92:ed:32:07:14:55:e1:18:a9:c8: b2:3a:cc:b6:27:82:a5:cc:31:b2:cf:37:a7:bb:09: f8:03:2b:37:7b:8c:c2:93:fa:65:50:c2:ef:e7:75: 2c:0b:f2:ee:a3:b7:7d:ae:8d:66:c3:a6:51:d4:4b: 85:47:6d:5d:70:e5:e6:2e:c2:07:21:c5:d3:e3:01: e6:91:6e:44:ae:8f:ec:a5:1f:7f:7a:b3:b5:90:90: 9b:4c:d0:10:c4:4d:4c:99:d8:2c:7d:72:71:d3:dc: a1:73:54:06:78:f5:e0:35:4d:a6:66:d5:76:b2:c9: 29:d1:30:04:9e:94:4c:00:4f:92:ef:53:5d:c8:57: 66:22:28:7d:d0:22:7c:e9:bc:ad:34:eb:17:22:60: a0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0B:5B:A9:FC:0C:AD:49:E2:27:4C:31:B7:B6:04:38:B7:C8:D2:2A X509v3 Authority Key Identifier: keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ac:cc:91:78:02:aa:89:de:d1:ec:8e:74:c1:a0:ee:d5:f4: 8a:73:bb:8e:85:e1:a5:e7:78:8d:39:3d:4c:4a:a7:2f:f8:14: 5e:72:82:b0:fb:19:91:40:bd:7f:cb:ad:a3:ef:96:94:78:b5: 59:dd:d3:f7:54:94:b2:2b:cf:4d:ce:eb:f4:56:93:83:bb:96: 0e:3b:77:7f:2c:a0:4d:db:eb:3d:b1:11:cd:38:61:ed:86:af: 40:eb:a8:7a:46:bf:d2:42:91:d0:ec:2c:7e:82:22:fb:43:b0: dd:34:e5:9d:82:64:c6:b5:be:0e:74:58:51:03:08:65:f8:cd: 52:f4:88:c8:02:49:e6:6b:a3:dd:7a:54:bb:ea:c6:1d:b6:4d: ae:b4:9a:25:2f:ea:73:25:78:ed:cc:8e:50:51:53:b7:66:6c: cc:88:41:1e:db:98:c5:9a:22:c1:3d:31:bf:73:bf:8e:69:cc: 0a:64:24:fe:53:ea:aa:34:b0:37:77:33:e7:8b:02:23:ca:eb: cb:be:94:ab:17:75:75:84:fe:88:47:b1:fe:96:a8:c7:42:62: 6c:0e:9b:83:78:84:a2:27:7f:8c:e8:2a:92:53:ec:12:ae:21: 59:75:5d:52:d6:8b:63:6a:79:ed:17:6a:ef:24:4a:6c:6c:2b: 5b:41:b5:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkXX1+eded7h7hwfV7xq6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzQ1YmQzOGQ0YmRjNjhlM2Q3OWRlMDI0NGRmMDZkMmVj YjY2MDkwHhcNMjUxMjIxMTEwMDMzWhcNMjUxMjIyMTEwMDMzWjAzMTEwLwYDVQQD EygyNTBiNWJhOWZjMGNhZDQ5ZTIyNzRjMzFiN2I2MDQzOGI3YzhkMjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47QmAlwMgGb1P98Z3RUW0aI1XVwm soe+GzWG7CrIfeshv3sGhRoL9t3xyODJDLePRrD6wlCveNpXaWRFQXz0m2WhIuEt zBq/wy2/uBIy+R9gj4X2VQ36JsfdAHrSUfEoHKJe1xQpg/yJ/hEeQJLtMgcUVeEY qciyOsy2J4KlzDGyzzenuwn4Ays3e4zCk/plUMLv53UsC/Luo7d9ro1mw6ZR1EuF R21dcOXmLsIHIcXT4wHmkW5Ero/spR9/erO1kJCbTNAQxE1MmdgsfXJx09yhc1QG ePXgNU2mZtV2sskp0TAEnpRMAE+S71NdyFdmIih90CJ86bytNOsXImCgpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCULW6n8DK1J4idMMbe2BDi3yNIqMB8GA1UdIwQY MBaAFBLEW9ONS9xo49ed4CRN8G0uy2YJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUt MjIwMjhhNzg2ZjYwLzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUtMjIwMjhhNzg2ZjYw LzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqzMkXgC qone0eyOdMGg7tX0inO7joXhped4jTk9TEqnL/gUXnKCsPsZkUC9f8uto++WlHi1 Wd3T91SUsivPTc7r9FaTg7uWDjt3fyygTdvrPbERzThh7YavQOuoeka/0kKR0Ows foIi+0Ow3TTlnYJkxrW+DnRYUQMIZfjNUvSIyAJJ5muj3XpUu+rGHbZNrrSaJS/q cyV47cyOUFFTt2ZszIhBHtuYxZoiwT0xv3O/jmnMCmQk/lPqqjSwN3cz54sCI8rr y76Uqxd1dYT+iEex/paox0JibA6bg3iEoid/jOgqklPsEq4hWXVdUtaLY2p57Rdq 7yRKbGwrW0G1Ew== -----END CERTIFICATE-----Generated at Sun Dec 21 13:31:17 2025 by rpki-client