This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json) Hash identifier: Z92vRShg6Gsy2yNSRqra/XRF/uBi+MI7T/zrud/5mfI= Subject key identifier: 66:10:0E:24:FC:79:09:AE:9B:08:32:FE:78:AE:4B:1A:B5:C5:17:82 Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78 Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78 Certificate serial: 019AF12E5EAEA6307AD75021C6753FBE66B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft Manifest number: 16EF Signing time: Sat 06 Dec 2025 01:02:19 +0000 Manifest this update: Sat 06 Dec 2025 01:02:19 +0000 Manifest next update: Sun 07 Dec 2025 01:02:19 +0000 Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: QHp0gfRrxFhQrVkicCaLm5jyYps/fbPO1dD7J4Z5cJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5e:ae:a6:30:7a:d7:50:21:c6:75:3f:be:66:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78 Validity Not Before: Dec 6 01:02:19 2025 GMT Not After : Dec 7 01:02:19 2025 GMT Subject: CN=66100e24fc7909ae9b0832fe78ae4b1ab5c51782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:85:43:86:1c:d6:3c:08:29:02:5b:4d:ac:36: 6d:5c:03:e1:34:d9:37:f9:bb:fe:d3:29:31:f1:63: 2c:59:29:22:d2:74:a1:2a:58:3f:c4:46:27:5d:5a: b2:64:e9:65:f9:d2:a2:61:0a:53:d7:64:41:13:83: 0c:20:3b:cb:45:20:d9:b0:2e:cf:fc:a5:4b:97:be: b8:18:2e:f8:4c:22:60:49:df:fb:1a:2e:90:4e:bc: b7:77:42:2c:1b:fd:0d:7a:4b:e7:3c:ce:cc:0b:b0: 4d:ff:60:91:33:40:47:b6:c6:b5:9c:52:9c:97:7f: 24:29:a4:2f:b2:23:0a:e1:6e:e6:c6:96:e7:e6:e0: 2d:30:d9:f5:8a:f9:4b:95:c2:49:57:2b:d3:40:ef: 22:6b:d7:a7:bf:23:5f:ef:a7:11:a2:7b:df:b6:91: 17:ab:16:9c:79:bb:2f:27:18:63:2a:bf:0a:3f:0e: 1e:84:ed:ba:59:79:34:a6:52:16:61:0d:be:ba:8c: 92:f1:72:c1:ac:6a:56:32:e7:92:9e:97:11:5f:62: 3d:04:cf:fe:11:af:db:36:03:da:f0:d6:72:ee:36: f0:fc:e6:87:f4:e4:4c:50:fa:d5:e9:55:a7:74:27: e4:7a:e8:6b:f8:47:01:6f:2f:0f:a7:68:b3:76:8f: 9a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:10:0E:24:FC:79:09:AE:9B:08:32:FE:78:AE:4B:1A:B5:C5:17:82 X509v3 Authority Key Identifier: keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:af:a4:b9:e7:8e:c0:c3:38:37:ac:f0:70:a8:a5:85:50:a3: 6c:be:df:14:04:c4:cf:06:7f:e2:2f:7e:4a:ec:ae:64:04:5a: e9:b7:24:50:9d:56:53:09:cc:33:93:1c:17:43:6d:c3:61:18: a4:10:64:64:6f:80:13:64:21:52:2b:4c:df:93:9c:ae:64:ff: b2:d9:98:d6:76:f7:73:e2:3a:e2:16:db:0d:36:e0:8a:42:e8: f9:01:5e:b3:32:93:d2:3b:de:4a:43:cf:4e:09:a8:ad:b7:63: 81:33:ea:3d:43:96:e1:f1:be:7b:b2:cd:4a:b1:98:12:59:8e: 8d:9d:0e:43:87:b2:cb:83:be:cc:76:9a:9f:a8:ac:50:9d:4b: 93:86:7d:05:e2:1c:3c:08:87:4c:a9:21:5a:a2:51:db:2a:26: 88:a4:27:5d:be:b5:8c:b5:a7:17:e9:40:5f:09:e2:2a:3f:ba: 9f:83:76:00:81:73:29:f6:a6:fa:a2:7c:c8:58:0e:5e:8f:e1: f9:ae:c9:12:14:2e:57:9b:03:ae:04:f9:a1:6d:b2:89:72:1c: 21:e1:b5:ad:c9:6d:c5:c3:34:bb:75:2b:5a:ab:bc:ee:8e:ac: 67:1c:eb:7f:0b:c5:60:70:02:45:52:33:e7:eb:b7:11:a4:a6: c8:a0:e7:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLl6upjB611AhxnU/vma1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MTlhNmFlZmQzY2E4ZjUwZmM4ZjM0YWIzZDE0NzkyNTZk YjlkNzgwHhcNMjUxMjA2MDEwMjE5WhcNMjUxMjA3MDEwMjE5WjAzMTEwLwYDVQQD Eyg2NjEwMGUyNGZjNzkwOWFlOWIwODMyZmU3OGFlNGIxYWI1YzUxNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YVDhhzWPAgpAltNrDZtXAPhNNk3 +bv+0ykx8WMsWSki0nShKlg/xEYnXVqyZOll+dKiYQpT12RBE4MMIDvLRSDZsC7P /KVLl764GC74TCJgSd/7Gi6QTry3d0IsG/0NekvnPM7MC7BN/2CRM0BHtsa1nFKc l38kKaQvsiMK4W7mxpbn5uAtMNn1ivlLlcJJVyvTQO8ia9envyNf76cRonvftpEX qxacebsvJxhjKr8KPw4ehO26WXk0plIWYQ2+uoyS8XLBrGpWMueSnpcRX2I9BM/+ Ea/bNgPa8NZy7jbw/OaH9ORMUPrV6VWndCfkeuhr+EcBby8Pp2izdo+a7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYQDiT8eQmumwgy/niuSxq1xReCMB8GA1UdIwQY MBaAFHkZpq79PKj1D8jzSrPRR5JW2514MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAt OTExZTgzOTA0Y2ExLzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAtOTExZTgzOTA0Y2Ex LzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAq+kueeO wMM4N6zwcKilhVCjbL7fFATEzwZ/4i9+SuyuZARa6bckUJ1WUwnMM5McF0Ntw2EY pBBkZG+AE2QhUitM35OcrmT/stmY1nb3c+I64hbbDTbgikLo+QFeszKT0jveSkPP TgmorbdjgTPqPUOW4fG+e7LNSrGYElmOjZ0OQ4eyy4O+zHaan6isUJ1Lk4Z9BeIc PAiHTKkhWqJR2yomiKQnXb61jLWnF+lAXwniKj+6n4N2AIFzKfam+qJ8yFgOXo/h +a7JEhQuV5sDrgT5oW2yiXIcIeG1rcltxcM0u3UrWqu87o6sZxzrfwvFYHACRVIz 5+u3EaSmyKDn0g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:14 2025 by rpki-client