This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft File: EsShfSBma32NKx_-GKRoevkmIY8.mft (raw, json) Hash identifier: Zu7B3NBPBFPEKgsoKmt8m+OAKRKjcGwa/3rhJfdO0Uk= Subject key identifier: 3E:B8:D0:4D:76:EC:54:D9:4F:B0:08:73:0F:A0:0B:06:53:B2:93:8D Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f Certificate serial: 019B6A696A76B2FBD0BD30B5FC6F4D8EA805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 14:00:51 +0000 Manifest this update: Mon 29 Dec 2025 14:00:51 +0000 Manifest next update: Tue 30 Dec 2025 14:00:51 +0000 Files and hashes: 1: EsShfSBma32NKx_-GKRoevkmIY8.crl (hash: YT2oweyVwvVFn3xMxZ75ma0uOo2sVAVroJ/czLopbNA=) 2: nfi8L76Q0CcXdXMuyopjIwMNN1s.roa (hash: yyBzF5vSH0UZ1Eb70mzyyMArzuUjMy9cXtif0oEgNm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:6a:76:b2:fb:d0:bd:30:b5:fc:6f:4d:8e:a8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f Validity Not Before: Dec 29 14:00:51 2025 GMT Not After : Dec 30 14:00:51 2025 GMT Subject: CN=3eb8d04d76ec54d94fb008730fa00b0653b2938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:d9:42:29:75:ef:c0:a7:db:0a:94:60:81: aa:4c:0a:2d:90:3a:79:d8:66:f3:11:b3:b7:ff:29: 83:81:71:d8:39:a2:fd:16:68:1f:2c:2e:19:bc:c8: 30:71:8f:82:c7:63:08:fa:e1:f5:78:05:ab:a5:7c: 1b:ff:74:ae:a1:39:c0:de:02:5b:c7:c3:47:41:d6: 43:9f:f2:71:b3:19:7a:03:d7:06:bc:cb:58:bc:e4: 43:4e:40:7c:89:e5:f9:80:99:12:72:4e:e6:89:58: 16:31:9a:be:c1:d7:4c:4d:6b:57:92:5d:cb:78:35: 3c:82:f8:af:75:ba:9b:d0:69:30:84:8a:24:81:ca: cd:81:5d:4d:9a:e5:ad:d6:a0:81:8a:77:e7:86:5d: 71:95:ba:ff:1f:6d:ec:e5:d7:0d:88:c0:c9:ac:eb: 81:fb:de:d6:9e:52:ab:94:f2:8d:d9:f4:bc:ee:9a: 03:2d:7a:13:a7:0a:eb:87:63:71:bc:7b:77:4f:64: 95:e8:12:6c:a1:00:01:47:5e:0c:62:b5:5f:a6:66: 4d:74:fe:5d:04:05:08:2b:09:49:f6:c7:be:4a:4a: 02:cd:41:91:12:f1:8e:6b:ef:fd:f4:c0:00:25:c7: 02:8b:fe:39:7f:46:4e:29:75:57:21:86:97:84:16: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B8:D0:4D:76:EC:54:D9:4F:B0:08:73:0F:A0:0B:06:53:B2:93:8D X509v3 Authority Key Identifier: keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:17:86:51:2d:a4:2d:41:97:56:04:62:a3:aa:ce:cc:f5:21: 52:21:0c:1c:ca:11:ba:24:37:2e:0a:62:c8:73:2e:8d:cc:86: 0a:8f:5b:98:55:43:38:69:ef:64:01:1e:c0:95:bc:61:3b:3d: 8f:02:2f:72:bd:44:dd:e8:ea:68:37:f2:80:b8:eb:cf:f7:59: 87:b5:ec:f1:20:2d:70:8f:01:91:5a:91:be:47:de:71:1a:b3: 19:67:90:7c:87:20:ff:06:2e:e9:69:26:4a:9e:1d:e7:de:64: 4b:e0:5a:5e:fd:1d:d1:3e:9c:c6:74:2c:55:61:46:4f:e8:67: 1d:8d:8b:7c:9d:d9:43:c8:49:21:b5:5c:0b:2c:1e:80:b8:9b: 17:f1:20:2e:0d:89:aa:e3:cd:26:ea:64:d4:24:07:f7:7e:16: 72:f3:02:6f:33:78:1e:7f:25:e9:72:ab:92:b6:91:b7:87:59: f2:12:00:bb:00:7b:9f:5e:bc:1e:c6:7b:53:4c:29:3b:f3:6c: 2c:b1:56:b9:17:d7:7a:5a:39:30:ed:55:80:e8:8e:0c:90:cc: 0a:e4:a7:01:41:23:58:8a:ce:39:8a:40:2e:2d:aa:79:fc:e7: d2:17:2d:98:00:66:5d:7e:1d:af:e6:a1:6a:5c:e2:66:68:8d: a3:94:83:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaWp2svvQvTC1/G9NjqgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzRhMTdkMjA2NjZiN2Q4ZDJiMWZmZTE4YTQ2ODdhZjky NjIxOGYwHhcNMjUxMjI5MTQwMDUxWhcNMjUxMjMwMTQwMDUxWjAzMTEwLwYDVQQD EygzZWI4ZDA0ZDc2ZWM1NGQ5NGZiMDA4NzMwZmEwMGIwNjUzYjI5MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx77ZQil178Cn2wqUYIGqTAotkDp5 2GbzEbO3/ymDgXHYOaL9FmgfLC4ZvMgwcY+Cx2MI+uH1eAWrpXwb/3SuoTnA3gJb x8NHQdZDn/Jxsxl6A9cGvMtYvORDTkB8ieX5gJkSck7miVgWMZq+wddMTWtXkl3L eDU8gvivdbqb0GkwhIokgcrNgV1NmuWt1qCBinfnhl1xlbr/H23s5dcNiMDJrOuB +97WnlKrlPKN2fS87poDLXoTpwrrh2NxvHt3T2SV6BJsoQABR14MYrVfpmZNdP5d BAUIKwlJ9se+SkoCzUGREvGOa+/99MAAJccCi/45f0ZOKXVXIYaXhBZogwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD640E127FTZT7AIcw+gCwZTspONMB8GA1UdIwQY MBaAFBLEoX0gZmt9jSsf/hikaHr5JiGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNTaGZTQm1hMzJOS3hfLUdLUm9ldmttSVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MzExODEtYjBiMy00YjJlLTg4ZGMt NDlhOTZhODIyMTRlLzEvRXNTaGZTQm1hMzJOS3hfLUdLUm9ldmttSVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84MzExODEtYjBiMy00YjJlLTg4ZGMtNDlhOTZhODIyMTRl LzEvRXNTaGZTQm1hMzJOS3hfLUdLUm9ldmttSVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfheGUS2k LUGXVgRio6rOzPUhUiEMHMoRuiQ3LgpiyHMujcyGCo9bmFVDOGnvZAEewJW8YTs9 jwIvcr1E3ejqaDfygLjrz/dZh7Xs8SAtcI8BkVqRvkfecRqzGWeQfIcg/wYu6Wkm Sp4d595kS+BaXv0d0T6cxnQsVWFGT+hnHY2LfJ3ZQ8hJIbVcCywegLibF/EgLg2J quPNJupk1CQH934WcvMCbzN4Hn8l6XKrkraRt4dZ8hIAuwB7n168HsZ7U0wpO/Ns LLFWuRfXelo5MO1VgOiODJDMCuSnAUEjWIrOOYpALi2qefzn0hctmABmXX4dr+ah alziZmiNo5SDrA== -----END CERTIFICATE-----Generated at Mon Dec 29 22:40:18 2025 by rpki-client