This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft File: eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json) Hash identifier: 50RL4H7xLqLBeSbWwVeBvwVpl2XTAemrOAnq+I/znUg= Subject key identifier: 13:D7:B0:33:6E:5E:5C:2A:54:52:0D:94:FB:C1:C6:EC:60:AA:A9:C3 Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70 Certificate issuer: /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70 Certificate serial: 019AF31B687C184704EDC2BB71E20A0F4FAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft Manifest number: 0BB2 Signing time: Sat 06 Dec 2025 10:00:50 +0000 Manifest this update: Sat 06 Dec 2025 10:00:50 +0000 Manifest next update: Sun 07 Dec 2025 10:00:50 +0000 Files and hashes: 1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: NOgZug9q8XUxluoaHuIo0wPvvaF2e9L5rpbZPx/WAqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:68:7c:18:47:04:ed:c2:bb:71:e2:0a:0f:4f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70 Validity Not Before: Dec 6 10:00:50 2025 GMT Not After : Dec 7 10:00:50 2025 GMT Subject: CN=13d7b0336e5e5c2a54520d94fbc1c6ec60aaa9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ca:74:dd:e8:6a:8c:f5:d6:9e:45:57:05:d7: 19:2f:52:9a:51:17:42:73:c6:44:93:70:79:be:b2: 68:59:53:35:0a:27:ed:03:ab:af:af:cd:55:29:15: 65:f1:98:2b:cf:c0:19:25:f0:4b:b7:47:e8:ef:07: 62:2e:1a:0b:8b:9e:e9:0a:19:7f:04:74:c4:b5:6e: e9:05:cb:54:21:39:f2:85:c9:ce:04:a8:90:34:3a: 9a:7d:f0:38:bf:a5:52:e4:d4:4d:20:a5:88:d2:74: 13:a6:c9:4b:ca:18:b2:d5:cf:d9:27:4e:af:a0:fc: 00:53:15:21:ed:9b:88:69:15:ad:52:d9:b3:a1:00: da:3c:38:22:fc:80:f4:94:17:49:77:65:80:d1:7b: 1d:d4:4c:df:3e:41:5b:16:52:09:ae:34:e8:74:2d: d7:48:32:ee:07:bf:bb:34:44:2b:2e:0c:4f:a4:a4: b6:db:57:55:3a:6d:40:59:4e:70:9e:c0:35:ef:47: bb:70:c3:9b:9f:bf:5b:f2:cb:45:06:b2:d5:68:d0: 77:68:be:d8:94:c8:48:89:d2:ab:b2:3a:2b:7a:a2: 08:d3:fb:27:09:aa:b3:60:df:65:9c:01:f8:1c:39: 64:e6:c1:7c:dd:1f:18:c6:78:ef:8f:55:5b:5e:81: 94:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D7:B0:33:6E:5E:5C:2A:54:52:0D:94:FB:C1:C6:EC:60:AA:A9:C3 X509v3 Authority Key Identifier: keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:a1:30:d8:4e:8e:b5:d6:0d:c1:94:66:c0:ef:13:51:57:27: 3d:4a:23:17:45:9f:39:5d:43:ee:ff:9c:c4:2f:b6:8c:d2:39: 16:0b:32:6f:62:40:2b:16:ba:7e:c3:e4:e0:c1:cc:45:58:65: 94:ce:0e:27:02:1d:41:a5:5d:b3:d8:66:ba:91:96:7a:9d:d6: d6:63:f9:4e:dc:38:5f:72:ca:a3:34:83:c9:6b:7a:7a:0a:54: 8e:c2:dc:48:5e:41:fc:0d:83:8b:67:35:83:12:55:cb:18:d6: c8:da:c2:fc:9e:98:e6:05:68:61:30:1c:7d:cf:d1:74:18:95: ee:2f:f4:ef:73:74:35:c9:c8:90:93:e4:08:e9:00:44:c4:9b: c2:99:a7:c8:54:a5:3e:b4:df:37:a1:0c:49:4d:fd:e4:0f:c0: e4:d4:5d:d9:56:27:4e:53:a8:18:14:10:f3:8f:ce:51:d3:56: 49:98:ff:6b:f3:8a:63:51:67:7f:9f:29:7a:87:f8:ed:77:ab: 10:e4:04:85:0b:cd:35:00:19:44:a5:3a:9d:d7:af:80:d0:7c: 41:85:20:48:51:6e:64:2e:b2:10:ec:3f:dc:e9:6c:6e:9a:ed: 16:2d:78:a0:55:07:50:c3:a9:cf:f7:cb:3f:96:b3:47:07:ec: e9:d9:9b:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2h8GEcE7cK7ceIKD0+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYmI5NmQ0NzYzN2Q0N2M3MTYxNWI2MGRhMWY2OTFjNGE2 ZjBiNzAwHhcNMjUxMjA2MTAwMDUwWhcNMjUxMjA3MTAwMDUwWjAzMTEwLwYDVQQD EygxM2Q3YjAzMzZlNWU1YzJhNTQ1MjBkOTRmYmMxYzZlYzYwYWFhOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsp03ehqjPXWnkVXBdcZL1KaURdC c8ZEk3B5vrJoWVM1CiftA6uvr81VKRVl8Zgrz8AZJfBLt0fo7wdiLhoLi57pChl/ BHTEtW7pBctUITnyhcnOBKiQNDqaffA4v6VS5NRNIKWI0nQTpslLyhiy1c/ZJ06v oPwAUxUh7ZuIaRWtUtmzoQDaPDgi/ID0lBdJd2WA0Xsd1EzfPkFbFlIJrjTodC3X SDLuB7+7NEQrLgxPpKS221dVOm1AWU5wnsA170e7cMObn79b8stFBrLVaNB3aL7Y lMhIidKrsjoreqII0/snCaqzYN9lnAH4HDlk5sF83R8Yxnjvj1VbXoGUKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPXsDNuXlwqVFINlPvBxuxgqqnDMB8GA1UdIwQY MBaAFHq7ltR2N9R8cWFbYNofaRxKbwtwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXJ1VzFIWTMxSHh4WVZ0ZzJoOXBIRXB2QzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNmY3NjItMTgyNS00ZTZjLWIzYjMt NjJhMTlhMzg3NTViLzEvZXJ1VzFIWTMxSHh4WVZ0ZzJoOXBIRXB2QzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zNmY3NjItMTgyNS00ZTZjLWIzYjMtNjJhMTlhMzg3NTVi LzEvZXJ1VzFIWTMxSHh4WVZ0ZzJoOXBIRXB2QzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6Ew2E6O tdYNwZRmwO8TUVcnPUojF0WfOV1D7v+cxC+2jNI5Fgsyb2JAKxa6fsPk4MHMRVhl lM4OJwIdQaVds9hmupGWep3W1mP5Ttw4X3LKozSDyWt6egpUjsLcSF5B/A2Di2c1 gxJVyxjWyNrC/J6Y5gVoYTAcfc/RdBiV7i/073N0NcnIkJPkCOkARMSbwpmnyFSl PrTfN6EMSU395A/A5NRd2VYnTlOoGBQQ84/OUdNWSZj/a/OKY1Fnf58peof47Xer EOQEhQvNNQAZRKU6ndevgNB8QYUgSFFuZC6yEOw/3OlsbprtFi14oFUHUMOpz/fL P5azRwfs6dmbpA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:44 2025 by rpki-client