This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json) Hash identifier: S23G8u7v0VN3zv638dR7imjztf675QbjvST1mYgYcpc= Subject key identifier: 54:37:1E:CB:7F:3D:A0:36:16:B8:A5:DE:6D:2C:4E:3C:2E:41:50:BD Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1 Certificate serial: 019AF42E190500D2868302425429D0329C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft Manifest number: 0A01 Signing time: Sat 06 Dec 2025 15:00:52 +0000 Manifest this update: Sat 06 Dec 2025 15:00:52 +0000 Manifest next update: Sun 07 Dec 2025 15:00:52 +0000 Files and hashes: 1: DV4eV0bz0BV_l9ZAbntV44Eglw0.roa (hash: wnq0IXxOxpXaYEifWhivUR0CW5t4jvpNWroJwGm7DbM=) 2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: IJi3QQjtFbyC9JLhPAQ/TZaGEmYnoPeSxGJqe0fUR1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:19:05:00:d2:86:83:02:42:54:29:d0:32:9c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1 Validity Not Before: Dec 6 15:00:52 2025 GMT Not After : Dec 7 15:00:52 2025 GMT Subject: CN=54371ecb7f3da03616b8a5de6d2c4e3c2e4150bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:1c:02:3b:49:c8:6b:f6:e1:16:9d:80:4e: 89:42:0e:87:ed:80:59:1e:19:89:dc:ea:18:c2:f8: 80:c7:58:9a:47:d6:1c:47:b0:32:64:4a:04:2a:3e: 04:6a:92:d7:fd:ff:68:38:06:62:45:fa:b6:1b:57: fb:55:b4:54:a9:fd:fd:fc:04:34:6d:55:b4:8c:f9: db:97:b3:f1:fb:77:68:f7:2c:18:63:91:d4:ee:88: 48:b2:73:19:3f:07:31:1d:51:67:37:7f:35:aa:ff: 76:2d:d3:7f:f2:89:0a:15:18:31:8a:a5:39:44:32: 6f:92:9b:3f:00:ad:8a:46:b2:3f:4e:e1:77:28:85: 5b:d9:ae:c1:0a:21:ef:0f:2e:1c:fe:11:55:72:64: 48:fa:f1:ce:4a:6c:dd:ba:22:fb:3b:c2:e8:2c:59: f1:a9:2d:3d:8e:56:d3:1f:41:ea:77:51:92:cc:76: 79:0e:97:ef:77:ab:fa:60:24:27:46:26:23:8e:fe: cf:fe:05:3d:d9:3f:4f:8e:2f:01:0d:24:8e:14:51: c1:77:78:81:b1:46:dc:95:e6:19:03:ea:73:7e:89: f6:13:1f:1e:5a:97:9d:58:36:d4:cc:3d:10:3e:90: 03:50:13:d7:7b:1a:75:a4:36:db:23:d5:96:65:12: 7a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:37:1E:CB:7F:3D:A0:36:16:B8:A5:DE:6D:2C:4E:3C:2E:41:50:BD X509v3 Authority Key Identifier: keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f8:47:07:7b:da:66:de:0e:04:94:00:55:62:a9:bf:77:89: 2e:e3:f5:a7:86:ed:0f:e7:58:6c:ed:42:b3:b4:6d:04:dc:ca: 43:85:25:af:05:28:36:f9:0c:12:a1:f5:2d:9b:de:96:14:a3: 8f:68:40:03:5d:9f:a7:f5:67:1d:b6:3c:bb:92:f7:c3:f4:d9: be:2c:c8:6b:02:ba:1f:56:58:c8:a4:94:b8:9c:7b:2b:83:1b: f5:c9:d2:55:09:1b:a9:59:a8:a7:bc:53:d1:aa:aa:06:f2:a8: 34:a7:a3:a5:ce:87:24:28:b0:c0:94:b0:97:3d:cf:03:01:7a: 55:c7:32:92:35:81:2c:c3:21:c0:c4:12:15:fb:87:ee:ec:1a: 19:26:31:2b:34:7e:d2:02:5b:22:c3:81:df:c1:b1:d2:15:59: 8a:44:6b:cf:cf:46:79:4c:51:75:be:c7:0e:fa:81:0b:d5:d8: 7c:e3:3e:87:5d:1a:b8:e9:b8:b9:f3:b4:e5:ee:7f:29:20:eb: fc:15:e4:55:04:7d:52:6f:9e:d2:51:f8:36:88:09:7f:77:d9: 19:3b:3e:e1:bf:c2:ad:3a:34:b0:66:ea:cf:bf:f4:1f:17:e9: df:db:4f:8a:f0:e9:2d:8c:2a:dc:04:bd:bf:6b:7c:8e:0f:88: 7a:eb:1b:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LhkFANKGgwJCVCnQMpxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh MTExYjEwHhcNMjUxMjA2MTUwMDUyWhcNMjUxMjA3MTUwMDUyWjAzMTEwLwYDVQQD Eyg1NDM3MWVjYjdmM2RhMDM2MTZiOGE1ZGU2ZDJjNGUzYzJlNDE1MGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWgcAjtJyGv24RadgE6JQg6H7YBZ HhmJ3OoYwviAx1iaR9YcR7AyZEoEKj4EapLX/f9oOAZiRfq2G1f7VbRUqf39/AQ0 bVW0jPnbl7Px+3do9ywYY5HU7ohIsnMZPwcxHVFnN381qv92LdN/8okKFRgxiqU5 RDJvkps/AK2KRrI/TuF3KIVb2a7BCiHvDy4c/hFVcmRI+vHOSmzduiL7O8LoLFnx qS09jlbTH0Hqd1GSzHZ5Dpfvd6v6YCQnRiYjjv7P/gU92T9Pji8BDSSOFFHBd3iB sUbcleYZA+pzfon2Ex8eWpedWDbUzD0QPpADUBPXexp1pDbbI9WWZRJ6swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQ3Hst/PaA2Fril3m0sTjwuQVC9MB8GA1UdIwQY MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvhHB3va Zt4OBJQAVWKpv3eJLuP1p4btD+dYbO1Cs7RtBNzKQ4UlrwUoNvkMEqH1LZvelhSj j2hAA12fp/VnHbY8u5L3w/TZvizIawK6H1ZYyKSUuJx7K4Mb9cnSVQkbqVmop7xT 0aqqBvKoNKejpc6HJCiwwJSwlz3PAwF6VccykjWBLMMhwMQSFfuH7uwaGSYxKzR+ 0gJbIsOB38Gx0hVZikRrz89GeUxRdb7HDvqBC9XYfOM+h10auOm4ufO05e5/KSDr /BXkVQR9Um+e0lH4NogJf3fZGTs+4b/CrTo0sGbqz7/0Hxfp39tPivDpLYwq3AS9 v2t8jg+Ieusbqw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:40:05 2025 by rpki-client