This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json) Hash identifier: H5Z6Qynzv6L+RlUxv8h+waqdyeuGJZEgH8NQ8Uv8cLM= Subject key identifier: 3B:BE:36:DE:4E:02:2B:96:5F:09:EC:77:78:D7:A7:58:DE:32:03:FC Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17 Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17 Certificate serial: 019AF3F7725E856BABFB953941FEDAAAFC0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft Manifest number: 15D5 Signing time: Sat 06 Dec 2025 14:01:11 +0000 Manifest this update: Sat 06 Dec 2025 14:01:11 +0000 Manifest next update: Sun 07 Dec 2025 14:01:11 +0000 Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: 8TtqJx0PSX6sH5x+CQbeLXqjof/tEJxw8jyRJgdJ1gY=) 2: o9Mrd_Zp-119sDj-V8VZv-bH4Po.roa (hash: T/Zr25wueuSL7uIuxkLz/YPHfupfyL0OiqXaAJQQ9Uw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:72:5e:85:6b:ab:fb:95:39:41:fe:da:aa:fc:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17 Validity Not Before: Dec 6 14:01:11 2025 GMT Not After : Dec 7 14:01:11 2025 GMT Subject: CN=3bbe36de4e022b965f09ec7778d7a758de3203fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7f:5b:92:50:6b:7d:f1:c2:e9:e5:b8:6b:2b: 7e:6f:fc:18:ae:ea:a6:0b:4b:0a:5d:36:e4:c5:a6: 8b:46:58:ae:ea:06:89:4a:f3:56:1a:7d:e5:94:3f: db:b6:a5:51:40:8c:2b:0d:b6:c2:27:93:2e:41:61: 54:7c:a7:87:6b:17:9c:f6:02:d4:9b:90:5e:8b:24: e6:49:55:75:ca:d3:cf:f8:7c:c4:af:77:2c:61:10: 20:9a:8b:a4:cc:37:b0:2c:10:75:2e:47:4e:d8:0f: 85:5e:4b:b6:38:fa:a9:7d:1c:be:26:de:94:47:6a: b4:6a:dc:9a:b5:24:07:d6:2b:c4:74:55:40:78:14: ab:a8:ec:a0:44:f6:b9:86:4e:04:a2:7a:86:78:36: 30:74:21:e6:69:e0:78:b8:04:80:b9:1d:e8:cf:74: 2d:69:39:95:11:c7:c8:db:a4:eb:5d:cb:23:00:d4: 6f:30:eb:e8:25:f5:91:1d:34:c3:bb:9c:ae:cf:22: 29:97:98:a5:d3:10:62:69:87:0d:f2:09:f3:76:37: 4b:23:f4:6b:40:74:41:ba:7b:1c:37:c7:8e:3b:2e: f1:85:d0:32:e2:20:18:9b:36:4c:3e:50:e5:05:a4: 61:6a:d0:f6:ff:da:57:c1:d3:d8:26:d2:06:46:88: 9c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BE:36:DE:4E:02:2B:96:5F:09:EC:77:78:D7:A7:58:DE:32:03:FC X509v3 Authority Key Identifier: keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e6:22:0c:a4:f1:26:54:36:b0:cc:40:d7:f8:75:2a:ac:15: 5f:cc:27:6e:32:98:56:ac:70:7d:01:00:48:26:7c:c7:00:ef: b0:1f:2d:85:d6:87:1f:00:ed:eb:c0:91:e6:77:9d:37:b9:1a: eb:d1:03:4b:f3:01:a3:4d:00:00:91:b3:81:3f:a1:73:85:ed: 6e:de:17:46:f1:3c:4e:b3:2a:1c:5a:aa:b8:c5:3f:7c:98:81: 93:d5:65:75:e0:df:c1:d9:f2:2d:5e:32:60:44:c0:e4:2c:0c: 12:c2:e3:8e:2d:70:ba:da:09:17:f0:d2:62:94:db:32:0f:46: 34:c4:96:02:6a:68:1a:ee:a8:20:3e:81:c1:d8:c4:b4:d5:24: 4c:4a:b3:0e:42:1e:bc:3e:3c:5b:58:15:b1:a7:05:2f:21:85: 17:f3:0f:e8:90:26:30:72:35:83:49:93:d9:1e:12:60:87:55: 04:b0:be:db:a6:72:bd:ad:26:14:69:5d:4d:40:78:60:91:0f: bc:20:87:0a:74:35:18:c3:16:84:d4:28:80:27:ed:11:21:71: 95:51:7f:fc:00:22:93:ad:54:2e:14:75:ee:ad:eb:5d:c4:5d: 69:c0:3b:09:d5:99:de:77:40:90:67:bb:f5:c3:1b:bc:5b:08: a6:48:d6:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz93JehWur+5U5Qf7aqvwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNDQ0YjA3OWRmMDA4YTdjN2NiZTI4ZmNiYTVkYmUwNjIw ZThlMTcwHhcNMjUxMjA2MTQwMTExWhcNMjUxMjA3MTQwMTExWjAzMTEwLwYDVQQD EygzYmJlMzZkZTRlMDIyYjk2NWYwOWVjNzc3OGQ3YTc1OGRlMzIwM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk39bklBrffHC6eW4ayt+b/wYruqm C0sKXTbkxaaLRliu6gaJSvNWGn3llD/btqVRQIwrDbbCJ5MuQWFUfKeHaxec9gLU m5BeiyTmSVV1ytPP+HzEr3csYRAgmoukzDewLBB1LkdO2A+FXku2OPqpfRy+Jt6U R2q0atyatSQH1ivEdFVAeBSrqOygRPa5hk4EonqGeDYwdCHmaeB4uASAuR3oz3Qt aTmVEcfI26TrXcsjANRvMOvoJfWRHTTDu5yuzyIpl5il0xBiaYcN8gnzdjdLI/Rr QHRBunscN8eOOy7xhdAy4iAYmzZMPlDlBaRhatD2/9pXwdPYJtIGRoicVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu+Nt5OAiuWXwnsd3jXp1jeMgP8MB8GA1UdIwQY MBaAFJBESwed8Ainx8vij8ul2+BiDo4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0VSTEI1M3dDS2ZIeS1LUHk2WGI0R0lPamhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yNGVjOGUtMWNjNi00NWUzLTkwNjMt OTkxNDk4NjdkYmY3LzEva0VSTEI1M3dDS2ZIeS1LUHk2WGI0R0lPamhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yNGVjOGUtMWNjNi00NWUzLTkwNjMtOTkxNDk4NjdkYmY3 LzEva0VSTEI1M3dDS2ZIeS1LUHk2WGI0R0lPamhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+YiDKTx JlQ2sMxA1/h1KqwVX8wnbjKYVqxwfQEASCZ8xwDvsB8thdaHHwDt68CR5nedN7ka 69EDS/MBo00AAJGzgT+hc4Xtbt4XRvE8TrMqHFqquMU/fJiBk9VldeDfwdnyLV4y YETA5CwMEsLjji1wutoJF/DSYpTbMg9GNMSWAmpoGu6oID6BwdjEtNUkTEqzDkIe vD48W1gVsacFLyGFF/MP6JAmMHI1g0mT2R4SYIdVBLC+26Zyva0mFGldTUB4YJEP vCCHCnQ1GMMWhNQogCftESFxlVF//AAik61ULhR17q3rXcRdacA7CdWZ3ndAkGe7 9cMbvFsIpkjW9g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:38 2025 by rpki-client