This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json) Hash identifier: Y8LDVUQ6arULH8Uv96IG8Nmy7yBNEbxfoWafbpPiZic= Subject key identifier: 74:1F:AB:1F:03:3C:A4:2E:7D:94:EC:12:79:8A:FF:99:C7:EC:EA:C6 Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04 Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04 Certificate serial: 019AF2772FA76C3D158A3ED5C8ECDCA8B273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft Manifest number: 120D Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: S5BCmTxFhLBV6kgyy1lUukIs5E+EEO/lgNYCy3Am0ZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2f:a7:6c:3d:15:8a:3e:d5:c8:ec:dc:a8:b2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=741fab1f033ca42e7d94ec12798aff99c7eceac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:ab:ed:67:1b:b8:eb:e7:8f:98:59:c9:02: 3a:7b:f4:ac:b9:3c:d4:8c:f4:ff:7a:e2:29:47:4a: be:88:e2:b0:19:07:ac:b4:9f:65:04:68:e8:66:f8: 9e:c0:06:0e:80:60:c9:63:70:a5:2c:c8:cc:c3:81: e4:99:e9:7c:72:64:af:e4:03:53:ab:52:17:aa:3f: da:53:ba:29:d3:d9:88:f1:71:28:c3:68:88:a3:85: 3a:10:d7:df:c8:e8:00:5c:29:20:72:1c:b4:a0:10: 87:86:bd:45:82:bc:ef:2e:54:8d:33:51:fe:b3:e6: b4:a7:95:be:cc:ae:e0:30:96:b6:06:4c:d3:f7:d5: 99:f5:31:63:bb:1f:6f:df:e5:33:0f:6b:74:7a:68: e4:18:74:ea:0b:30:17:93:6c:f0:02:28:bd:18:86: 45:b8:95:d2:dd:27:d0:74:ac:42:4f:06:21:ab:90: e4:64:d1:8f:cd:4c:8c:ff:a4:82:01:b3:8e:c1:c5: dc:96:78:65:77:5c:50:3d:f6:7c:41:c7:a2:43:99: 9e:7d:ec:49:1e:2d:28:60:30:a4:2f:6d:5f:15:09: a9:c5:15:8b:e0:3a:48:0e:d9:2f:5c:cc:c8:4b:67: 44:e9:84:16:51:3c:eb:9e:38:45:a7:a0:d8:70:c4: 2d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1F:AB:1F:03:3C:A4:2E:7D:94:EC:12:79:8A:FF:99:C7:EC:EA:C6 X509v3 Authority Key Identifier: keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a2:15:b3:89:4e:d4:98:93:c1:e5:ba:2e:c8:a8:4a:c0:19: c3:43:d1:29:01:2b:12:b5:21:a5:eb:e0:74:ff:59:b5:f4:18: c5:8d:c2:b6:86:88:c7:2f:85:98:cd:1c:95:62:f8:56:ee:9a: c1:80:04:5a:93:1f:e7:c5:46:a3:53:ff:49:ca:6a:93:53:dd: 15:0d:b8:53:72:1d:11:6a:9d:f0:cd:cd:6b:61:d7:cc:48:fb: 49:d4:38:f4:06:f2:a6:f7:39:c5:9d:aa:72:ef:51:31:57:3b: f5:68:06:03:70:05:a4:60:05:d7:c0:df:c7:a4:2f:7f:ec:5c: 4b:0b:0e:11:eb:e1:cb:39:6e:7c:c2:cc:ff:ad:11:5d:4f:cd: 5a:f1:b3:3e:e5:ec:e4:68:75:36:57:81:72:be:bc:4e:55:67: c5:37:e5:1a:34:b2:7a:9c:c8:3e:23:6e:9d:01:c3:bc:37:0d: 52:00:24:c1:3b:4a:03:0c:07:bb:99:cc:09:99:e7:a0:12:66: d1:8e:81:f4:49:17:cc:56:9c:a4:8d:38:f5:5f:19:b4:64:0d: 20:54:ef:0c:2c:2e:ef:ed:a5:2d:b9:fd:26:5b:20:70:f0:9b: ac:5b:c5:82:a2:70:9b:f8:25:38:53:87:74:20:79:89:0e:78: e9:e6:13:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydy+nbD0Vij7VyOzcqLJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYjUwNDFkYzM3MTgwZWUyYTBmOWZkZDVmNWQ2NWNkNmM2 Y2RmMDQwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD Eyg3NDFmYWIxZjAzM2NhNDJlN2Q5NGVjMTI3OThhZmY5OWM3ZWNlYWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNur7WcbuOvnj5hZyQI6e/SsuTzU jPT/euIpR0q+iOKwGQestJ9lBGjoZviewAYOgGDJY3ClLMjMw4Hkmel8cmSv5ANT q1IXqj/aU7op09mI8XEow2iIo4U6ENffyOgAXCkgchy0oBCHhr1FgrzvLlSNM1H+ s+a0p5W+zK7gMJa2BkzT99WZ9TFjux9v3+UzD2t0emjkGHTqCzAXk2zwAii9GIZF uJXS3SfQdKxCTwYhq5DkZNGPzUyM/6SCAbOOwcXclnhld1xQPfZ8QceiQ5mefexJ Hi0oYDCkL21fFQmpxRWL4DpIDtkvXMzIS2dE6YQWUTzrnjhFp6DYcMQtDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQfqx8DPKQufZTsEnmK/5nH7OrGMB8GA1UdIwQY MBaAFHq1BB3DcYDuKg+f3V9dZc1sbN8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NzIzMjEtNGVhYi00OTA3LWI4YzQt M2RjZmZiNTQwYmJkLzEvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80NzIzMjEtNGVhYi00OTA3LWI4YzQtM2RjZmZiNTQwYmJk LzEvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaIVs4lO 1JiTweW6LsioSsAZw0PRKQErErUhpevgdP9ZtfQYxY3CtoaIxy+FmM0clWL4Vu6a wYAEWpMf58VGo1P/Scpqk1PdFQ24U3IdEWqd8M3Na2HXzEj7SdQ49Abypvc5xZ2q cu9RMVc79WgGA3AFpGAF18Dfx6Qvf+xcSwsOEevhyzlufMLM/60RXU/NWvGzPuXs 5Gh1NleBcr68TlVnxTflGjSyepzIPiNunQHDvDcNUgAkwTtKAwwHu5nMCZnnoBJm 0Y6B9EkXzFacpI049V8ZtGQNIFTvDCwu7+2lLbn9JlsgcPCbrFvFgqJwm/glOFOH dCB5iQ546eYTOg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:06 2025 by rpki-client