This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json) Hash identifier: Qv4rkWkz8QAPlOCp/b4CWxT7SpLBjyz8w5P31XfHzBE= Subject key identifier: C8:7F:BB:4E:9E:1C:A0:E8:0B:D7:71:6E:55:88:D8:35:B1:AF:5D:72 Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Certificate serial: 019AF35215B799D93F1BD5CB147F48D0FEDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft Manifest number: 0383 Signing time: Sat 06 Dec 2025 11:00:34 +0000 Manifest this update: Sat 06 Dec 2025 11:00:34 +0000 Manifest next update: Sun 07 Dec 2025 11:00:34 +0000 Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=) 2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: kLplM5lS9R3AUvhji9LwTcYtUB44JMGSOnLb4MvS7gE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:15:b7:99:d9:3f:1b:d5:cb:14:7f:48:d0:fe:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Validity Not Before: Dec 6 11:00:34 2025 GMT Not After : Dec 7 11:00:34 2025 GMT Subject: CN=c87fbb4e9e1ca0e80bd7716e5588d835b1af5d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:0f:b9:47:c4:44:53:23:0e:ee:36:90:c1: 6b:f4:1a:fd:6b:43:c2:d1:d9:41:18:b1:c6:96:55: c6:a5:13:46:a6:11:50:fc:84:ab:7b:1d:60:a9:72: 4e:8c:cb:ed:5b:9c:d5:e5:92:bc:31:cf:cc:4e:f1: e0:1f:f2:b9:2f:7c:eb:2c:f4:50:89:d1:1f:f3:64: b0:3a:8a:e2:fd:9f:66:ba:f8:5a:7e:6f:99:48:79: 2e:34:f8:97:8e:6b:19:16:21:94:61:79:54:a4:48: 97:8d:e3:b7:ee:ee:cd:a5:92:c4:63:ba:a7:6d:38: 33:f5:4e:48:d6:72:3b:66:f6:e6:a9:e1:78:1e:6c: 35:17:c6:e8:02:3d:5e:0e:c5:df:11:e4:0a:83:15: 9f:e0:6b:c0:de:64:6b:8a:23:a6:b0:71:06:3c:0c: 80:38:c5:e1:aa:5e:15:66:96:a7:d5:97:35:fc:e2: 07:78:75:ce:2c:d2:90:d1:37:73:27:f3:b2:1e:f4: 72:30:3c:1d:e0:ce:16:7b:13:d2:48:01:c2:12:81: 4b:ac:c9:92:3e:b0:2f:e8:d6:a5:79:29:65:87:b3: d1:7f:79:04:e2:5d:a1:e6:8b:4d:a1:39:0c:9d:8e: 27:12:b7:ae:5d:1d:27:e6:4a:42:b7:73:b1:56:d2: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7F:BB:4E:9E:1C:A0:E8:0B:D7:71:6E:55:88:D8:35:B1:AF:5D:72 X509v3 Authority Key Identifier: keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f3:e2:25:22:3e:2d:6a:b5:56:63:f9:2a:3f:43:9b:2c:8f: 02:c6:61:db:61:fe:03:73:4b:42:6d:62:a8:68:94:2e:98:53: a2:0c:02:6e:80:b8:57:5b:a0:01:12:24:2d:32:7c:da:58:c4: 0d:5d:7b:c4:dd:fc:8c:dc:27:50:a7:17:69:72:38:b4:e9:fa: 0d:1d:02:9f:28:5b:fb:5b:85:90:e6:58:b6:06:67:3e:39:11: 35:a5:cd:c4:e1:df:73:25:73:2f:88:4b:ca:f9:33:4d:0e:87: 19:e0:ac:74:73:a4:c3:ff:73:f2:4b:e3:bd:48:a9:fa:41:1a: cb:f0:ca:d4:39:3a:28:e0:87:ad:4e:b5:54:65:53:34:d8:30: 2f:17:74:7f:67:8f:9d:5c:9b:43:3b:19:c8:34:b6:9d:be:80: d4:b8:d6:dd:48:ad:c8:3d:9e:45:70:c3:50:c9:09:bd:66:c8: 62:a7:ee:52:26:d2:c6:9f:ca:99:8a:27:a8:10:07:43:ad:02: 8f:24:b1:46:91:50:e3:68:59:40:b6:29:10:c8:92:63:8f:4a: 0b:ba:ad:2a:f6:ce:19:88:49:3c:2c:01:1d:d7:f1:b9:a5:00: 5f:02:1b:68:0e:ea:48:d6:1d:f9:84:5a:c3:c3:ce:6d:9b:78: 1a:6a:d3:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhW3mdk/G9XLFH9I0P7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm MDIwZmMwHhcNMjUxMjA2MTEwMDM0WhcNMjUxMjA3MTEwMDM0WjAzMTEwLwYDVQQD EyhjODdmYmI0ZTllMWNhMGU4MGJkNzcxNmU1NTg4ZDgzNWIxYWY1ZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxkPuUfERFMjDu42kMFr9Br9a0PC 0dlBGLHGllXGpRNGphFQ/ISrex1gqXJOjMvtW5zV5ZK8Mc/MTvHgH/K5L3zrLPRQ idEf82SwOori/Z9muvhafm+ZSHkuNPiXjmsZFiGUYXlUpEiXjeO37u7NpZLEY7qn bTgz9U5I1nI7ZvbmqeF4Hmw1F8boAj1eDsXfEeQKgxWf4GvA3mRriiOmsHEGPAyA OMXhql4VZpan1Zc1/OIHeHXOLNKQ0TdzJ/OyHvRyMDwd4M4WexPSSAHCEoFLrMmS PrAv6NaleSllh7PRf3kE4l2h5otNoTkMnY4nEreuXR0n5kpCt3OxVtLxUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh/u06eHKDoC9dxblWI2DWxr11yMB8GA1UdIwQY MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1 LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfPiJSI+ LWq1VmP5Kj9DmyyPAsZh22H+A3NLQm1iqGiULphTogwCboC4V1ugARIkLTJ82ljE DV17xN38jNwnUKcXaXI4tOn6DR0Cnyhb+1uFkOZYtgZnPjkRNaXNxOHfcyVzL4hL yvkzTQ6HGeCsdHOkw/9z8kvjvUip+kEay/DK1Dk6KOCHrU61VGVTNNgwLxd0f2eP nVybQzsZyDS2nb6A1LjW3UityD2eRXDDUMkJvWbIYqfuUibSxp/KmYonqBAHQ60C jySxRpFQ42hZQLYpEMiSY49KC7qtKvbOGYhJPCwBHdfxuaUAXwIbaA7qSNYd+YRa w8PObZt4GmrT0A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:55 2025 by rpki-client