This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json) Hash identifier: 0e0w++YEGJt9DEJ3CHo7gT8M1Jc2HvmIbD3X82soxCM= Subject key identifier: EF:7A:91:81:E1:E8:F1:5A:70:94:F6:89:51:31:4B:33:DE:E1:FC:22 Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51 Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051 Certificate serial: 019AF42E721457366DA43BE6E2964635E55D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft Manifest number: 144E Signing time: Sat 06 Dec 2025 15:01:15 +0000 Manifest this update: Sat 06 Dec 2025 15:01:15 +0000 Manifest next update: Sun 07 Dec 2025 15:01:15 +0000 Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: fl7fwfoJ5zOehURBidjiTQ7gdyUlc4fTyfaHuExOw3k=) 2: jekCeMTSis2kdtPn3gOGAtmVk6k.roa (hash: HG9FrtzC7hICptHJ4U91fWoODa6sn2J4Sf6JYtMqszc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:72:14:57:36:6d:a4:3b:e6:e2:96:46:35:e5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051 Validity Not Before: Dec 6 15:01:15 2025 GMT Not After : Dec 7 15:01:15 2025 GMT Subject: CN=ef7a9181e1e8f15a7094f68951314b33dee1fc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:2b:00:a2:14:12:66:0f:e0:3c:c9:25:98: 09:79:4c:c5:30:2f:84:76:a0:de:cc:5e:4a:39:ff: 8b:72:71:65:81:4c:3c:6e:71:cf:4a:cd:aa:75:c0: d6:d8:1a:49:fd:3b:a4:e9:ba:17:06:15:e0:24:d0: 4a:eb:29:f9:bf:c8:fd:35:06:44:58:48:18:ea:d3: 51:37:79:63:27:49:f7:13:49:14:0c:64:64:33:2f: fd:52:5e:e7:ea:ed:85:8b:b1:48:7e:dc:1a:7e:b3: 05:53:e5:5d:96:85:97:a9:6b:28:3a:c6:71:a8:85: b7:c8:d9:30:a2:24:2e:0e:14:73:7b:cd:a7:26:bc: 3a:3f:7d:34:43:ed:63:a4:e6:6f:4c:8f:69:b1:b3: 09:38:2e:61:22:43:19:85:64:9c:81:52:17:eb:13: 85:51:25:96:81:6e:93:f4:8b:08:57:d4:e9:58:b0: 8a:c3:a8:6f:e0:d6:48:92:4a:9c:34:a8:a1:1f:e5: 33:cc:e9:ef:b3:ba:f6:c8:f2:3f:a5:12:ed:f8:1e: 35:79:29:40:97:ce:c7:10:2a:f4:3a:38:e2:41:21: 7e:0b:7c:85:d6:47:98:c7:b2:4b:70:96:b9:cc:db: 2c:a8:1e:98:d8:93:1d:5a:5d:51:67:0c:94:1c:d3: b5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7A:91:81:E1:E8:F1:5A:70:94:F6:89:51:31:4B:33:DE:E1:FC:22 X509v3 Authority Key Identifier: keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c0:e1:12:2f:ef:b8:bd:b9:d1:8c:e7:9f:75:bf:c4:b4:68: 2f:ba:07:a2:53:c4:9b:e6:d2:5c:d0:36:69:eb:ac:6c:29:92: 9f:61:c2:3a:fe:9a:ce:41:12:59:9c:bf:ab:c8:ea:47:f4:13: b7:b0:ef:46:15:af:49:82:3e:ff:84:e8:2c:8c:bc:48:20:bd: 3f:d6:b8:57:95:8c:00:ac:bb:d4:fe:54:0d:06:ed:55:b6:ee: 64:ed:9b:e0:16:06:19:20:be:c9:38:8d:90:2d:75:50:8b:7f: 2d:d4:a6:cb:31:be:b4:51:68:b9:17:4c:11:83:51:3a:6c:56: c3:51:a7:9f:b0:ae:54:03:2d:44:2d:3d:8f:03:32:ec:85:d4: 76:ab:60:b6:85:be:c4:26:c4:ff:09:37:22:f2:62:38:02:fc: cc:cb:3f:d1:10:d7:d7:b3:fe:8c:44:4a:d9:3c:c8:51:25:94: a6:67:83:c5:59:0f:f0:c0:5f:1f:67:10:89:91:09:76:f5:d3: b3:66:5a:f4:db:2a:56:6f:9b:da:00:30:0c:75:fc:3f:58:b9: c7:c3:48:a3:4f:ee:df:7d:8f:2d:bb:75:36:ff:3b:14:4d:f9: c1:57:b7:cf:04:80:dd:40:8d:a0:19:5e:9c:f5:f6:ce:29:fb: 0a:ea:94:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LnIUVzZtpDvm4pZGNeVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjg3YzZjYWY4MWRlMzYyNWZlMWNlMDU1OWYzOWUzMDUw NWEwNTEwHhcNMjUxMjA2MTUwMTE1WhcNMjUxMjA3MTUwMTE1WjAzMTEwLwYDVQQD EyhlZjdhOTE4MWUxZThmMTVhNzA5NGY2ODk1MTMxNGIzM2RlZTFmYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEUrAKIUEmYP4DzJJZgJeUzFMC+E dqDezF5KOf+LcnFlgUw8bnHPSs2qdcDW2BpJ/Tuk6boXBhXgJNBK6yn5v8j9NQZE WEgY6tNRN3ljJ0n3E0kUDGRkMy/9Ul7n6u2Fi7FIftwafrMFU+VdloWXqWsoOsZx qIW3yNkwoiQuDhRze82nJrw6P300Q+1jpOZvTI9psbMJOC5hIkMZhWScgVIX6xOF USWWgW6T9IsIV9TpWLCKw6hv4NZIkkqcNKihH+UzzOnvs7r2yPI/pRLt+B41eSlA l87HECr0OjjiQSF+C3yF1keYx7JLcJa5zNssqB6Y2JMdWl1RZwyUHNO1awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO96kYHh6PFacJT2iVExSzPe4fwiMB8GA1UdIwQY MBaAFBK4fGyvgd42Jf4c4FWfOeMFBaBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEt NjI4MDhiYmJkZDIxLzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEtNjI4MDhiYmJkZDIx LzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8DhEi/v uL250Yznn3W/xLRoL7oHolPEm+bSXNA2aeusbCmSn2HCOv6azkESWZy/q8jqR/QT t7DvRhWvSYI+/4ToLIy8SCC9P9a4V5WMAKy71P5UDQbtVbbuZO2b4BYGGSC+yTiN kC11UIt/LdSmyzG+tFFouRdMEYNROmxWw1Gnn7CuVAMtRC09jwMy7IXUdqtgtoW+ xCbE/wk3IvJiOAL8zMs/0RDX17P+jERK2TzIUSWUpmeDxVkP8MBfH2cQiZEJdvXT s2Za9NsqVm+b2gAwDHX8P1i5x8NIo0/u332PLbt1Nv87FE35wVe3zwSA3UCNoBle nPX2zin7CuqUXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:11:56 2025 by rpki-client