This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json) Hash identifier: LjOQRZjH280JdlUIRVkY77pYwhypZ3BNmnwShdwf8l0= Subject key identifier: 9F:23:C2:49:0D:C3:3C:97:94:85:D5:1A:1D:FB:64:9A:40:14:C2:CB Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb Certificate serial: 019AF38993B5226DC7A87BA5663D63E7BF67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft Manifest number: 0609 Signing time: Sat 06 Dec 2025 12:01:10 +0000 Manifest this update: Sat 06 Dec 2025 12:01:10 +0000 Manifest next update: Sun 07 Dec 2025 12:01:10 +0000 Files and hashes: 1: U1WA_e9bu6j5Y_kLVVIkz2GSbGk.roa (hash: hA3Tc0kWdN97ny1EHuTJ6/LUGMuF5PlrxnFA5mg1cTU=) 2: YDQxqLIV4eGHE5Lr0dVaaAovVAw.roa (hash: TOThRgToctB0QP5NsIL53wVfCPspvY/nNlunm9/S0iE=) 3: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: 9Ugybyr3DwZetizozLe/aIkQJ7UU+lAkIT54XAWEP9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:93:b5:22:6d:c7:a8:7b:a5:66:3d:63:e7:bf:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb Validity Not Before: Dec 6 12:01:10 2025 GMT Not After : Dec 7 12:01:10 2025 GMT Subject: CN=9f23c2490dc33c979485d51a1dfb649a4014c2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:5d:24:e4:5f:07:9c:f0:dd:9e:f5:73:b1: aa:a6:58:93:d7:b1:0e:15:53:1d:73:27:11:7a:1c: a3:d1:a6:4b:3a:21:0f:48:68:0a:bc:09:0b:a3:07: 40:0b:05:f4:58:f2:af:df:a6:10:98:5f:ed:9a:f7: 72:40:98:58:dd:b1:86:e5:58:00:ae:2c:71:bc:5e: 7d:67:30:dc:9b:85:0f:fa:7c:67:b3:5a:2d:2c:af: ff:c2:3e:4c:3c:15:fc:10:66:18:d4:6a:23:c8:7a: 07:03:c6:59:fb:7c:d5:b5:56:d2:05:bd:8e:27:fe: 77:ab:67:8d:b8:e3:c0:33:a8:60:e8:53:44:62:df: bd:66:57:ef:bc:ec:43:39:22:dd:6c:8c:dc:99:48: 7c:22:23:51:95:e3:f2:4f:93:24:eb:a5:ee:23:8a: 6d:31:56:9d:5f:93:9f:7f:5e:b4:7b:b8:b4:22:b5: 44:9c:86:5b:bb:91:62:30:27:99:f8:c4:8a:cf:f3: 2a:37:7f:8b:be:ae:7b:cd:44:82:0f:48:4c:ad:fd: e5:61:3a:da:e8:21:b1:5b:e8:61:2f:d6:56:82:55: 24:0d:7b:bb:0d:36:77:82:a0:55:a7:ce:6f:ea:6a: ed:51:ca:04:3a:1d:9f:8c:8a:30:47:2a:60:50:05: dd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:23:C2:49:0D:C3:3C:97:94:85:D5:1A:1D:FB:64:9A:40:14:C2:CB X509v3 Authority Key Identifier: keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b1:04:80:b4:dd:18:bf:b2:4c:2a:85:d4:91:59:f7:f3:3a: 3e:f2:0b:db:95:4f:75:d9:c6:34:a6:3c:aa:4e:31:89:a2:12: 07:01:65:15:b0:57:f7:f4:96:f4:bf:cd:66:68:84:8a:c1:c6: d5:34:ee:7e:52:a2:a8:40:03:9d:a8:d6:c1:c9:19:45:5d:9e: 2d:65:a5:e5:68:f2:27:6f:0f:37:7b:70:bc:36:66:79:14:8f: fc:93:9c:74:f3:29:9d:9f:a0:b1:69:43:4f:f8:4e:90:13:43: 10:b5:5d:b1:e0:7a:82:cc:f7:29:10:5e:df:c6:3b:30:3e:1a: a7:38:7d:77:4b:1b:84:77:b6:f2:0a:9c:cb:c1:06:5a:95:a5: 67:e4:f5:9d:00:88:ab:52:f5:86:2f:a5:bd:a9:8f:42:a9:d8: fc:71:3b:e0:74:1f:49:5d:65:7d:5d:62:57:69:77:73:5e:47: 78:64:96:7d:1e:d6:4f:20:f4:8b:fb:a2:8a:90:f1:ff:56:85: e5:9d:3c:9a:ea:36:ef:5f:8f:8c:b9:a8:11:38:6f:a2:54:27: 9c:17:3d:de:0a:c9:c0:bb:06:e3:72:52:a4:62:85:69:6b:c1: 89:63:96:51:a6:f7:20:d4:00:5d:11:48:3f:aa:28:d6:e9:ca: ee:03:9f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZO1Im3HqHulZj1j579nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MTNmOGMxM2JhODI5MGY2MGRhNjNiYTg5ZTkzNWIyNzU4 OTNhZGIwHhcNMjUxMjA2MTIwMTEwWhcNMjUxMjA3MTIwMTEwWjAzMTEwLwYDVQQD Eyg5ZjIzYzI0OTBkYzMzYzk3OTQ4NWQ1MWExZGZiNjQ5YTQwMTRjMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zRdJORfB5zw3Z71c7GqpliT17EO FVMdcycRehyj0aZLOiEPSGgKvAkLowdACwX0WPKv36YQmF/tmvdyQJhY3bGG5VgA rixxvF59ZzDcm4UP+nxns1otLK//wj5MPBX8EGYY1GojyHoHA8ZZ+3zVtVbSBb2O J/53q2eNuOPAM6hg6FNEYt+9ZlfvvOxDOSLdbIzcmUh8IiNRlePyT5Mk66XuI4pt MVadX5Off160e7i0IrVEnIZbu5FiMCeZ+MSKz/MqN3+Lvq57zUSCD0hMrf3lYTra 6CGxW+hhL9ZWglUkDXu7DTZ3gqBVp85v6mrtUcoEOh2fjIowRypgUAXdEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8jwkkNwzyXlIXVGh37ZJpAFMLLMB8GA1UdIwQY MBaAFHkT+ME7qCkPYNpjuonpNbJ1iTrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jZTFjOTktMGFiZS00Mjc3LWFjYTIt ZmUxY2YzMDhhMDA4LzEvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jZTFjOTktMGFiZS00Mjc3LWFjYTItZmUxY2YzMDhhMDA4 LzEvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLEEgLTd GL+yTCqF1JFZ9/M6PvIL25VPddnGNKY8qk4xiaISBwFlFbBX9/SW9L/NZmiEisHG 1TTuflKiqEADnajWwckZRV2eLWWl5WjyJ28PN3twvDZmeRSP/JOcdPMpnZ+gsWlD T/hOkBNDELVdseB6gsz3KRBe38Y7MD4apzh9d0sbhHe28gqcy8EGWpWlZ+T1nQCI q1L1hi+lvamPQqnY/HE74HQfSV1lfV1iV2l3c15HeGSWfR7WTyD0i/uiipDx/1aF 5Z08muo271+PjLmoEThvolQnnBc93grJwLsG43JSpGKFaWvBiWOWUab3INQAXRFI P6oo1unK7gOfwg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:58:55 2025 by rpki-client