This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json) Hash identifier: k9x0pSDL+n6a5SfrZXcxXKq6gC+vOT+kCx6ParfCJJI= Subject key identifier: 31:74:F8:43:6C:E2:9E:BE:46:72:97:60:F5:08:BF:21:17:D0:F0:0A Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Certificate serial: 019BF4D003090C90A1718F3F7A15DF724A75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft Manifest number: 0409 Signing time: Sun 25 Jan 2026 11:00:31 +0000 Manifest this update: Sun 25 Jan 2026 11:00:31 +0000 Manifest next update: Mon 26 Jan 2026 11:00:31 +0000 Files and hashes: 1: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: mlxf6ZUjk/FDvR/9kK5cumwuryFAseZw77F/Q4PTz30=) 2: RLh9s9zTeKJ9bogTETA60TFw6lo.roa (hash: 0m+pngGOwDg6Ap17PIVB2FP6vUl0HDw150aVd4LORg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:03:09:0c:90:a1:71:8f:3f:7a:15:df:72:4a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Validity Not Before: Jan 25 11:00:31 2026 GMT Not After : Jan 26 11:00:31 2026 GMT Subject: CN=3174f8436ce29ebe46729760f508bf2117d0f00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:2e:27:51:d2:ec:a4:e4:6b:77:5a:c1:6e: 78:64:db:90:47:2f:ef:84:42:84:ed:5e:0d:c2:bf: 11:ba:1a:fc:84:6b:ee:8b:88:1d:d3:0d:ef:83:79: 75:46:21:e5:a9:f6:37:fc:ca:18:35:d3:d5:4d:88: 6e:1c:79:79:27:fa:37:a3:ce:da:27:af:dc:40:3d: dc:8e:8e:b7:c6:a1:88:b0:e4:51:91:c0:e1:5e:0c: 6f:e8:8d:64:06:69:9c:33:96:37:69:d4:4e:bb:19: 42:55:52:f4:b5:c7:00:06:7b:53:29:c5:c3:39:9c: 35:b4:34:6c:13:e7:88:39:6d:f4:51:a9:dd:11:92: 44:d0:b1:6e:97:73:da:07:23:1e:96:d8:5f:6d:97: d5:3a:96:ff:64:62:82:13:44:9e:50:20:11:fc:e4: df:a9:34:57:22:56:da:a8:41:c2:43:5d:29:dc:f4: 65:77:fd:a1:ac:ac:09:b5:7f:68:98:b4:88:a8:d9: eb:96:af:33:93:1e:e8:cb:09:62:17:7f:fd:64:c5: 10:69:e3:a0:b9:c8:a5:13:fe:ce:c4:f4:1a:8c:6e: f3:00:1a:9f:49:25:e8:b2:93:a9:2e:df:3b:33:a2: cc:9a:11:39:e1:23:3c:63:70:61:81:0d:99:da:57: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:74:F8:43:6C:E2:9E:BE:46:72:97:60:F5:08:BF:21:17:D0:F0:0A X509v3 Authority Key Identifier: keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a6:dc:ec:fd:d3:b1:69:5b:b0:1a:f3:93:ce:42:e2:98:d7: 15:c8:6e:9e:5b:6a:e5:68:f6:41:b1:4d:f9:72:7e:d0:95:c2: c3:9f:ab:b8:89:3c:47:0a:c0:83:18:19:53:33:3f:86:49:54: 2b:01:50:85:4b:e5:e7:19:a6:9e:b0:d4:06:ab:bd:58:14:e0: 8b:1d:50:9f:21:2a:58:7d:7a:76:cf:89:34:2a:ba:4c:c4:33: 80:a3:9b:7f:af:16:2b:69:98:8a:97:f7:8e:c3:f0:d6:ff:ec: 08:b8:27:6b:05:6b:e2:76:bf:10:c3:a1:32:23:bd:77:01:bc: 81:4b:38:59:11:01:aa:4e:6e:7e:ea:b7:8f:4a:73:0b:84:71: 62:00:62:fd:41:91:06:5a:af:5b:ed:41:58:80:f9:c7:3c:72: 08:e6:c9:55:dc:f1:0a:b6:ee:97:9a:f3:bd:3b:a4:eb:95:13: 7f:03:11:f2:98:c5:01:7f:cf:e1:23:73:f7:41:d3:86:72:d2: 2c:73:24:98:e5:3e:07:3a:3d:d8:33:85:68:ff:e2:9c:fd:20: 2a:30:9a:8a:e0:be:71:b3:71:12:e5:e4:e4:f4:2b:fc:d2:23: 7e:f8:6a:42:c1:d5:c4:0e:56:7d:83:c4:6c:ae:4a:d2:17:2b: da:ba:14:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00AMJDJChcY8/ehXfckp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm MDIwZmMwHhcNMjYwMTI1MTEwMDMxWhcNMjYwMTI2MTEwMDMxWjAzMTEwLwYDVQQD EygzMTc0Zjg0MzZjZTI5ZWJlNDY3Mjk3NjBmNTA4YmYyMTE3ZDBmMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3MuJ1HS7KTka3dawW54ZNuQRy/v hEKE7V4Nwr8Ruhr8hGvui4gd0w3vg3l1RiHlqfY3/MoYNdPVTYhuHHl5J/o3o87a J6/cQD3cjo63xqGIsORRkcDhXgxv6I1kBmmcM5Y3adROuxlCVVL0tccABntTKcXD OZw1tDRsE+eIOW30UandEZJE0LFul3PaByMelthfbZfVOpb/ZGKCE0SeUCAR/OTf qTRXIlbaqEHCQ10p3PRld/2hrKwJtX9omLSIqNnrlq8zkx7oywliF3/9ZMUQaeOg ucilE/7OxPQajG7zABqfSSXospOpLt87M6LMmhE54SM8Y3BhgQ2Z2ldozQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF0+ENs4p6+RnKXYPUIvyEX0PAKMB8GA1UdIwQY MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1 LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfabc7P3T sWlbsBrzk85C4pjXFchunltq5Wj2QbFN+XJ+0JXCw5+ruIk8RwrAgxgZUzM/hklU KwFQhUvl5xmmnrDUBqu9WBTgix1QnyEqWH16ds+JNCq6TMQzgKObf68WK2mYipf3 jsPw1v/sCLgnawVr4na/EMOhMiO9dwG8gUs4WREBqk5ufuq3j0pzC4RxYgBi/UGR BlqvW+1BWID5xzxyCObJVdzxCrbul5rzvTuk65UTfwMR8pjFAX/P4SNz90HThnLS LHMkmOU+Bzo92DOFaP/inP0gKjCaiuC+cbNxEuXk5PQr/NIjfvhqQsHVxA5WfYPE bK5K0hcr2roUog== -----END CERTIFICATE-----Generated at Sun Jan 25 14:45:12 2026 by rpki-client