This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json) Hash identifier: kJE6HcrzHCMeEazafapT1CVpAERRRuFY7jPWpB5Kyqc= Subject key identifier: 02:46:06:2B:13:3F:D8:74:34:67:51:F2:92:B4:8D:23:12:24:5A:B1 Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e Certificate serial: 019AF2ADC4B7B882057FD93E884AF01661B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft Manifest number: 0BC8 Signing time: Sat 06 Dec 2025 08:01:05 +0000 Manifest this update: Sat 06 Dec 2025 08:01:05 +0000 Manifest next update: Sun 07 Dec 2025 08:01:05 +0000 Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: rR400WVkf2K0zCM3W4WFO4rdlaJx3xQyVMdYwS7zA7I=) 2: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (hash: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c4:b7:b8:82:05:7f:d9:3e:88:4a:f0:16:61:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e Validity Not Before: Dec 6 08:01:05 2025 GMT Not After : Dec 7 08:01:05 2025 GMT Subject: CN=0246062b133fd874346751f292b48d2312245ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4c:0d:9b:58:7e:35:98:fd:e7:c1:ff:60:50: df:1a:e5:de:dc:01:82:b9:ad:bd:65:e9:fa:b7:00: 92:85:a7:f7:a1:52:1b:26:81:d8:5f:98:99:76:54: a0:34:67:8b:e1:b2:c5:76:0e:80:53:8e:28:4e:22: 56:b3:63:30:92:0f:5f:6c:2c:d5:9d:c1:0e:e1:32: 09:58:03:ee:74:a2:de:d2:2d:f5:7e:32:98:0b:39: 18:86:6a:6a:14:c0:78:47:40:02:bd:35:b9:c1:3b: 80:70:0d:b2:ee:c9:c5:37:ad:28:9b:0b:fe:90:7d: ed:99:5c:85:0c:06:b4:f8:a6:9d:e3:e7:e3:bd:21: 76:48:ac:69:a3:d3:f8:2f:9f:e0:58:08:4a:ba:60: f8:fb:d6:00:b3:45:04:70:e3:4d:71:fe:8f:47:b5: 02:f1:98:0b:dd:3d:b6:2d:13:15:06:97:de:4a:0a: 9a:93:75:ed:cb:e2:66:1c:39:a7:e2:ea:7a:fb:86: 3a:b0:fa:cf:2a:30:05:e8:52:b4:d3:ce:ac:36:de: 25:27:8d:c9:a4:e4:f4:b1:17:d4:03:ee:b4:93:c2: 20:9e:ef:40:08:3e:df:29:3f:d0:d8:28:f3:18:c4: 95:34:b5:5e:37:32:47:6a:a8:c0:3d:82:89:61:56: c0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:46:06:2B:13:3F:D8:74:34:67:51:F2:92:B4:8D:23:12:24:5A:B1 X509v3 Authority Key Identifier: keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:51:36:14:3c:24:9a:c6:d8:bb:78:d1:8a:97:6f:68:0d:63: f8:e2:c3:f1:01:5d:d1:87:10:50:d1:bf:3d:d4:6a:c6:40:cc: 90:90:0a:69:a9:d8:cc:2f:4a:94:ae:e9:d6:ec:ec:47:af:73: 74:34:14:fc:0b:10:76:ba:af:c1:2d:fe:ce:c2:94:35:9d:37: e5:28:ec:26:87:30:6d:be:30:57:c9:32:9a:09:dd:83:f9:79: 3c:a0:58:f2:a3:b2:86:d1:b8:44:c4:bc:0c:2c:68:6f:65:f4: 50:e3:a3:66:16:a5:6d:a1:c0:e9:55:b4:4c:21:87:cb:1c:db: 26:a4:bc:f0:d8:b8:06:aa:d9:5c:9d:f2:b7:e0:9c:e9:c6:06: 6a:e1:40:58:b2:b5:3c:ad:e1:31:c9:65:a0:89:90:87:68:27: 39:18:9c:37:6b:27:93:7f:0c:78:a5:45:ab:bb:82:9b:f9:30: 81:eb:59:20:24:b4:f5:25:86:1b:cf:6f:60:47:16:05:93:9c: f1:6b:b8:57:e9:cf:64:bb:5a:6c:57:bf:14:ce:2d:98:70:7f: b5:b4:76:e3:15:07:b3:0f:8b:4c:95:02:ca:a8:18:56:cf:5b: de:df:2a:88:f6:ae:9c:81:f1:26:68:6f:d2:42:30:55:84:29: 54:40:b2:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcS3uIIFf9k+iErwFmGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTkzZjhlODk4ZWI2ZmJkMTJjNTNkZjdkYWQwMjE1NDNl ZWZjNmUwHhcNMjUxMjA2MDgwMTA1WhcNMjUxMjA3MDgwMTA1WjAzMTEwLwYDVQQD EygwMjQ2MDYyYjEzM2ZkODc0MzQ2NzUxZjI5MmI0OGQyMzEyMjQ1YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UwNm1h+NZj958H/YFDfGuXe3AGC ua29Zen6twCShaf3oVIbJoHYX5iZdlSgNGeL4bLFdg6AU44oTiJWs2Mwkg9fbCzV ncEO4TIJWAPudKLe0i31fjKYCzkYhmpqFMB4R0ACvTW5wTuAcA2y7snFN60omwv+ kH3tmVyFDAa0+Kad4+fjvSF2SKxpo9P4L5/gWAhKumD4+9YAs0UEcONNcf6PR7UC 8ZgL3T22LRMVBpfeSgqak3Xty+JmHDmn4up6+4Y6sPrPKjAF6FK0086sNt4lJ43J pOT0sRfUA+60k8Ignu9ACD7fKT/Q2CjzGMSVNLVeNzJHaqjAPYKJYVbA9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJGBisTP9h0NGdR8pK0jSMSJFqxMB8GA1UdIwQY MBaAFBEZP46Jjrb70SxT332tAhVD7vxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iNGUzZTQtMTE4OS00MDM2LThmMWEt MDQyZjdkYWMyNGQ1LzEvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iNGUzZTQtMTE4OS00MDM2LThmMWEtMDQyZjdkYWMyNGQ1 LzEvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlE2FDwk msbYu3jRipdvaA1j+OLD8QFd0YcQUNG/PdRqxkDMkJAKaanYzC9KlK7p1uzsR69z dDQU/AsQdrqvwS3+zsKUNZ035SjsJocwbb4wV8kymgndg/l5PKBY8qOyhtG4RMS8 DCxob2X0UOOjZhalbaHA6VW0TCGHyxzbJqS88Ni4BqrZXJ3yt+Cc6cYGauFAWLK1 PK3hMclloImQh2gnORicN2snk38MeKVFq7uCm/kwgetZICS09SWGG89vYEcWBZOc 8Wu4V+nPZLtabFe/FM4tmHB/tbR24xUHsw+LTJUCyqgYVs9b3t8qiPaunIHxJmhv 0kIwVYQpVECy0g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:56 2025 by rpki-client