This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft File: erUEHcNxgO4qD5_dX11lzWxs3wQ.mft (raw, json) Hash identifier: 93GP9ZKUqCJRGymCumDZKwlHF7w9U/2c/BWYCoCJz6E= Subject key identifier: E8:DF:AC:BD:17:83:07:4B:39:F4:72:4A:7B:85:D1:17:40:82:96:14 Authority key identifier: 7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04 Certificate issuer: /CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04 Certificate serial: 019B3DC7A64FF21D4DBD3E8842F92D7599E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft Manifest number: 1234 Signing time: Sat 20 Dec 2025 22:00:52 +0000 Manifest this update: Sat 20 Dec 2025 22:00:52 +0000 Manifest next update: Sun 21 Dec 2025 22:00:52 +0000 Files and hashes: 1: erUEHcNxgO4qD5_dX11lzWxs3wQ.crl (hash: +o7eeYNuUhN549+fuhveLQ2n2emtT0YIngCfjYD5/68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a6:4f:f2:1d:4d:bd:3e:88:42:f9:2d:75:99:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ab5041dc37180ee2a0f9fdd5f5d65cd6c6cdf04 Validity Not Before: Dec 20 22:00:52 2025 GMT Not After : Dec 21 22:00:52 2025 GMT Subject: CN=e8dfacbd1783074b39f4724a7b85d11740829614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:8f:c7:bc:cf:54:78:fc:d0:b8:d7:d4:d5: 51:cf:70:cc:80:19:a8:a5:5f:10:b4:00:5b:2e:a8: 40:61:7d:c7:db:17:3e:28:a3:4b:5b:92:c9:83:3d: 9b:f0:99:76:db:ca:fd:73:68:f1:01:56:57:23:ae: a9:1b:a4:13:d2:c4:f0:cb:9e:b6:1d:c8:b7:c1:fb: 9a:00:3f:2b:bb:53:3b:6c:9b:47:44:64:98:d9:37: 56:70:ff:bc:a2:20:4f:b1:d8:96:bc:d0:1c:50:9b: a9:ab:85:13:d3:f4:f8:fa:2d:16:b5:c3:8a:92:01: 49:dc:e0:f3:60:e2:62:25:a4:94:27:a8:cb:12:34: ae:3e:4b:d3:3b:74:f0:6c:23:a8:59:5f:12:c9:f5: 87:56:84:cf:59:33:f5:52:d2:dd:0b:3b:3d:65:13: d9:5e:59:68:4c:5f:fd:3d:ee:36:39:8e:0c:c8:bb: 2b:b8:d9:79:77:19:28:a1:9b:97:1b:53:6a:0f:d2: e9:48:ed:de:17:86:99:d5:3c:91:35:dc:e3:70:cf: e4:73:78:0f:e6:8e:c9:c9:c7:30:38:af:e0:b9:f3: 8b:df:d5:2e:2f:8d:15:47:19:e3:cd:a3:a7:1d:35: d6:13:55:df:8b:d9:ff:f8:68:74:92:90:3f:e0:86: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DF:AC:BD:17:83:07:4B:39:F4:72:4A:7B:85:D1:17:40:82:96:14 X509v3 Authority Key Identifier: keyid:7A:B5:04:1D:C3:71:80:EE:2A:0F:9F:DD:5F:5D:65:CD:6C:6C:DF:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erUEHcNxgO4qD5_dX11lzWxs3wQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/472321-4eab-4907-b8c4-3dcffb540bbd/1/erUEHcNxgO4qD5_dX11lzWxs3wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:6b:15:33:4b:4d:e2:32:06:1e:01:60:20:01:ed:c2:4e:86: b3:d4:b1:99:b5:f4:db:90:6f:c8:bd:3e:49:28:02:ed:77:64: ec:00:88:fd:d9:f2:12:d8:71:46:15:10:8c:2d:f1:8f:7d:fd: a9:10:9e:8f:38:d4:2a:28:75:77:29:72:a7:dc:82:5a:4e:12: 36:22:86:1a:da:4c:fb:e6:ed:7f:14:70:25:60:15:4a:a7:aa: e2:5b:77:e1:99:f8:66:01:15:77:12:5c:60:b9:a2:93:69:f6: e2:34:55:a6:60:4a:28:1f:7f:29:df:c6:5f:75:c8:31:31:8d: 01:50:2d:d9:75:97:a2:b0:c3:b4:54:88:3b:05:57:4d:94:15: 54:15:f6:d4:9c:92:49:43:d4:24:d9:19:7b:90:02:5d:02:4f: c0:d2:1b:c8:40:0f:72:bc:e4:55:f1:4f:0b:c6:8c:b3:5b:90: 44:5a:96:b1:88:0d:4e:8f:71:65:b9:6a:c7:11:26:75:99:c7: 3b:77:a3:14:c1:8c:8b:d0:2c:d3:eb:6c:a0:0e:15:ac:69:b2: 1a:c6:1e:e8:f5:25:94:b0:d5:7a:b7:ec:eb:80:c1:57:e1:5a: 9c:94:30:84:f8:ac:83:38:71:dd:e7:44:13:ad:1f:8e:16:34: e0:a3:26:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6ZP8h1NvT6IQvktdZnpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYjUwNDFkYzM3MTgwZWUyYTBmOWZkZDVmNWQ2NWNkNmM2 Y2RmMDQwHhcNMjUxMjIwMjIwMDUyWhcNMjUxMjIxMjIwMDUyWjAzMTEwLwYDVQQD EyhlOGRmYWNiZDE3ODMwNzRiMzlmNDcyNGE3Yjg1ZDExNzQwODI5NjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYyPx7zPVHj80LjX1NVRz3DMgBmo pV8QtABbLqhAYX3H2xc+KKNLW5LJgz2b8Jl228r9c2jxAVZXI66pG6QT0sTwy562 Hci3wfuaAD8ru1M7bJtHRGSY2TdWcP+8oiBPsdiWvNAcUJupq4UT0/T4+i0WtcOK kgFJ3ODzYOJiJaSUJ6jLEjSuPkvTO3TwbCOoWV8SyfWHVoTPWTP1UtLdCzs9ZRPZ XlloTF/9Pe42OY4MyLsruNl5dxkooZuXG1NqD9LpSO3eF4aZ1TyRNdzjcM/kc3gP 5o7JyccwOK/gufOL39UuL40VRxnjzaOnHTXWE1Xfi9n/+Gh0kpA/4IY+fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjfrL0XgwdLOfRySnuF0RdAgpYUMB8GA1UdIwQY MBaAFHq1BB3DcYDuKg+f3V9dZc1sbN8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NzIzMjEtNGVhYi00OTA3LWI4YzQt M2RjZmZiNTQwYmJkLzEvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80NzIzMjEtNGVhYi00OTA3LWI4YzQtM2RjZmZiNTQwYmJk LzEvZXJVRUhjTnhnTzRxRDVfZFgxMWx6V3hzM3dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGsVM0tN 4jIGHgFgIAHtwk6Gs9SxmbX025BvyL0+SSgC7Xdk7ACI/dnyEthxRhUQjC3xj339 qRCejzjUKih1dylyp9yCWk4SNiKGGtpM++btfxRwJWAVSqeq4lt34Zn4ZgEVdxJc YLmik2n24jRVpmBKKB9/Kd/GX3XIMTGNAVAt2XWXorDDtFSIOwVXTZQVVBX21JyS SUPUJNkZe5ACXQJPwNIbyEAPcrzkVfFPC8aMs1uQRFqWsYgNTo9xZblqxxEmdZnH O3ejFMGMi9As0+tsoA4VrGmyGsYe6PUllLDVerfs64DBV+FanJQwhPisgzhx3edE E60fjhY04KMmrg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:17:14 2025 by rpki-client