This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.mft File: ErGaZVE_ni6-3vAFe_-VQXJVz_w.mft (raw, json) Hash identifier: evYfKbGxhZcgKjLK+RiiHwQNg3aocMuOHQJBLNtW/fQ= Subject key identifier: D7:25:29:07:C9:3A:6A:42:34:CC:5F:C6:F0:59:62:5D:BD:8B:14:1C Authority key identifier: 12:B1:9A:65:51:3F:9E:2E:BE:DE:F0:05:7B:FF:95:41:72:55:CF:FC Certificate issuer: /CN=12b19a65513f9e2ebedef0057bff95417255cffc Certificate serial: 019AF2AD7E4A1E85A42AF320C786388EC448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErGaZVE_ni6-3vAFe_-VQXJVz_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.mft Manifest number: C3 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: ErGaZVE_ni6-3vAFe_-VQXJVz_w.crl (hash: LE44BJ4OMTFSBUrUi5uv/VmbFlKUKjOf8cOP4xJ0RLg=) 2: LnHLCB1Dv_bxqTA3Y68cEs31zTU.roa (hash: a35PK3Z13BkNlxOkouLz2QvnCdOqgH34Olf470rW6Gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.mft rsync://rpki.ripe.net/repository/DEFAULT/ErGaZVE_ni6-3vAFe_-VQXJVz_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7e:4a:1e:85:a4:2a:f3:20:c7:86:38:8e:c4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b19a65513f9e2ebedef0057bff95417255cffc Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=d7252907c93a6a4234cc5fc6f059625dbd8b141c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e6:ba:76:7a:45:22:be:15:66:91:d6:ec:11: 3b:87:82:6d:26:0e:1d:a5:a9:49:99:ed:02:ef:ce: 39:cb:09:44:45:e6:5b:80:a7:3e:14:6e:36:86:6f: a8:32:b9:66:9e:ff:73:44:0d:bb:b9:bc:74:83:d3: d0:bc:08:5d:cb:01:04:2e:90:b3:c6:dc:6c:5b:2e: 23:90:70:f0:c2:1b:76:c2:36:66:87:a7:f2:59:45: 44:70:1b:5c:b2:d3:2b:19:62:3d:ec:22:7b:e3:da: 68:43:0d:f3:bc:52:a2:29:c7:45:f5:b9:ee:f9:5c: 55:bb:e2:66:48:90:19:a6:49:c6:11:e6:b9:8d:a5: 6a:68:fc:f2:02:2f:ba:da:b1:5f:a5:70:63:d5:8f: c7:33:c4:53:f5:ec:08:98:bf:12:ea:b4:c1:e5:b5: 19:93:09:da:7f:d4:e6:10:5c:ac:f5:8f:9f:a2:8d: 4f:7c:56:8e:10:71:e5:06:74:63:94:7c:6b:09:a2: 5d:ef:71:0a:94:e3:b1:23:71:74:82:d3:c6:e0:4b: 45:d3:f1:12:97:eb:00:e7:40:cc:e4:e8:5a:3e:ff: a2:5f:2b:4b:28:eb:5c:59:95:83:6d:1d:fb:9e:13: 07:35:27:d4:83:d4:85:f6:c4:f2:6c:65:bc:ca:21: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:25:29:07:C9:3A:6A:42:34:CC:5F:C6:F0:59:62:5D:BD:8B:14:1C X509v3 Authority Key Identifier: keyid:12:B1:9A:65:51:3F:9E:2E:BE:DE:F0:05:7B:FF:95:41:72:55:CF:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErGaZVE_ni6-3vAFe_-VQXJVz_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5e28c6-1cb2-4c86-b3ff-e23d8bc720e9/1/ErGaZVE_ni6-3vAFe_-VQXJVz_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:51:08:b4:ae:b7:02:3d:b9:af:f8:ab:21:56:e1:25:85:89: cd:07:e4:aa:bd:57:ec:71:46:d5:a4:8b:71:c7:10:09:e5:b7: db:0e:c2:51:25:63:fd:0c:6f:e8:0f:19:1b:19:31:39:10:5d: 79:7e:51:5c:d3:0b:16:c6:45:0a:17:e2:0b:f1:9c:b4:1c:6d: 19:d4:96:eb:98:51:3b:54:1a:88:08:63:86:74:4d:da:08:1e: a7:de:70:da:e6:08:16:0e:2e:0d:e3:f8:48:44:3c:6d:6d:35: c7:60:b7:b5:18:9b:58:57:e9:af:37:b5:ef:d7:92:71:d6:19: 4e:00:2a:bd:43:7e:33:54:e3:c7:09:0e:34:bf:90:56:7f:08: 78:e7:93:47:05:54:ed:3d:a5:c2:e5:d5:12:db:68:0f:4a:55: eb:e0:cb:c6:9c:30:59:03:bc:45:04:03:e3:f8:75:50:51:7f: 6e:2f:1a:be:b5:1a:e9:e4:6e:30:04:77:b1:b2:d1:75:0c:7f: 41:60:9c:d4:a0:c1:d9:3d:21:8f:8c:35:cc:dc:c2:36:8f:24: da:e8:c8:33:9a:4a:0b:8e:88:a2:e3:8f:95:0c:b9:c5:21:60: 07:cb:e9:4d:3d:bb:c0:9d:47:8c:29:97:23:40:31:ea:50:58: 00:27:48:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX5KHoWkKvMgx4Y4jsRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjE5YTY1NTEzZjllMmViZWRlZjAwNTdiZmY5NTQxNzI1 NWNmZmMwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EyhkNzI1MjkwN2M5M2E2YTQyMzRjYzVmYzZmMDU5NjI1ZGJkOGIxNDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ea6dnpFIr4VZpHW7BE7h4JtJg4d palJme0C7845ywlEReZbgKc+FG42hm+oMrlmnv9zRA27ubx0g9PQvAhdywEELpCz xtxsWy4jkHDwwht2wjZmh6fyWUVEcBtcstMrGWI97CJ749poQw3zvFKiKcdF9bnu +VxVu+JmSJAZpknGEea5jaVqaPzyAi+62rFfpXBj1Y/HM8RT9ewImL8S6rTB5bUZ kwnaf9TmEFys9Y+foo1PfFaOEHHlBnRjlHxrCaJd73EKlOOxI3F0gtPG4EtF0/ES l+sA50DM5OhaPv+iXytLKOtcWZWDbR37nhMHNSfUg9SF9sTybGW8yiGFCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNclKQfJOmpCNMxfxvBZYl29ixQcMB8GA1UdIwQY MBaAFBKxmmVRP54uvt7wBXv/lUFyVc/8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJHYVpWRV9uaTYtM3ZBRmVfLVZRWEpWel93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81ZTI4YzYtMWNiMi00Yzg2LWIzZmYt ZTIzZDhiYzcyMGU5LzEvRXJHYVpWRV9uaTYtM3ZBRmVfLVZRWEpWel93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81ZTI4YzYtMWNiMi00Yzg2LWIzZmYtZTIzZDhiYzcyMGU5 LzEvRXJHYVpWRV9uaTYtM3ZBRmVfLVZRWEpWel93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFEItK63 Aj25r/irIVbhJYWJzQfkqr1X7HFG1aSLcccQCeW32w7CUSVj/Qxv6A8ZGxkxORBd eX5RXNMLFsZFChfiC/GctBxtGdSW65hRO1QaiAhjhnRN2ggep95w2uYIFg4uDeP4 SEQ8bW01x2C3tRibWFfprze179eScdYZTgAqvUN+M1TjxwkONL+QVn8IeOeTRwVU 7T2lwuXVEttoD0pV6+DLxpwwWQO8RQQD4/h1UFF/bi8avrUa6eRuMAR3sbLRdQx/ QWCc1KDB2T0hj4w1zNzCNo8k2ujIM5pKC46IouOPlQy5xSFgB8vpTT27wJ1HjCmX I0Ax6lBYACdIDg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:09 2025 by rpki-client