This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft File: ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json) Hash identifier: m8dv0qsiufImFqC809Kl+DjAgRteA3pPt2al9vwhejw= Subject key identifier: 05:54:18:8C:D6:C5:6C:E6:57:27:86:FF:BB:F2:88:FC:91:6B:F6:1D Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9 Certificate issuer: /CN=11145fde01af810760ee61bcf354cf962ac460d9 Certificate serial: 019AF31C9CD7082E59DE374630C93B5E5D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft Manifest number: 0FC9 Signing time: Sat 06 Dec 2025 10:02:09 +0000 Manifest this update: Sat 06 Dec 2025 10:02:09 +0000 Manifest next update: Sun 07 Dec 2025 10:02:09 +0000 Files and hashes: 1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: ZhC4Ed7ld1STfE/tWdNr5PeimThLTkj8erTX3uEIXsQ=) 2: f_4bnJXdMBrWxpYtFBJpH8Bqm-U.roa (hash: 7mT2nXJRoDTq1rwwF8w2+5XwWETvVnI796Gd4d+Aoxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:9c:d7:08:2e:59:de:37:46:30:c9:3b:5e:5d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9 Validity Not Before: Dec 6 10:02:09 2025 GMT Not After : Dec 7 10:02:09 2025 GMT Subject: CN=0554188cd6c56ce6572786ffbbf288fc916bf61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:93:d3:9d:bc:7f:67:36:56:f9:73:5e:f3: 60:2e:a9:f8:94:61:0e:cc:10:13:b6:da:ca:f4:bb: 11:32:16:80:e9:ed:11:c2:71:13:49:0e:9f:87:1c: d9:ab:25:9d:66:99:8e:ce:b7:2d:ab:7b:13:97:73: ad:63:2f:d9:a4:94:de:62:25:cd:39:64:1a:d7:b6: e2:84:13:4b:7e:2b:d1:e0:3e:18:82:32:3c:b7:cf: a7:0f:bc:9f:dc:b5:a4:48:86:56:e8:37:ef:90:8e: f6:b1:62:63:08:06:d5:3f:ee:9f:59:6a:6f:0e:f0: 36:d7:4b:7c:d9:22:08:9f:b5:7c:27:81:38:c3:6a: fa:1d:16:54:fc:0b:67:28:e3:d8:6c:d1:41:57:8b: 50:83:d1:18:50:42:f8:0e:17:49:5e:46:a2:15:0b: cf:d4:93:a5:47:84:08:46:d8:40:48:83:1b:8a:d9: 46:a3:3b:10:75:8c:f9:e1:b8:7f:47:54:b6:52:f3: 04:56:44:1a:a5:a6:4a:73:4c:35:09:3f:c4:f4:b3: fe:f6:e4:5e:ce:ed:3f:1d:2d:d2:d5:22:bc:30:5a: 28:79:55:b3:76:8c:31:cb:d2:71:41:c8:bb:60:50: 8d:43:ce:a1:98:24:93:57:fa:dc:63:26:05:74:07: c8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:54:18:8C:D6:C5:6C:E6:57:27:86:FF:BB:F2:88:FC:91:6B:F6:1D X509v3 Authority Key Identifier: keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:1f:b5:7f:b2:fb:d2:b9:d6:eb:fe:0c:d7:eb:98:e6:51:32: ca:5c:e6:16:b8:51:52:2c:d2:51:8e:c7:87:83:ab:51:73:fb: df:ad:7f:bd:2c:23:da:46:46:bf:b6:94:37:c9:e8:67:a6:d9: 4a:c7:9d:27:c7:3e:a5:36:70:cd:f8:17:8c:c5:52:a3:df:ce: c4:de:83:f3:a6:45:36:26:b4:0b:14:02:02:7f:1d:9f:7b:78: fb:04:04:3a:9f:b5:68:88:5b:6c:c3:89:c4:b9:a3:e6:62:fc: 21:37:ba:11:72:32:7b:3f:73:11:88:53:c3:ed:a5:82:c1:71: fe:e4:6a:38:b9:1f:5c:2e:84:f4:9e:95:24:e5:bf:af:82:69: 1a:62:ee:90:5a:62:15:b3:8c:43:9d:cc:ed:41:ee:07:90:44: 11:8d:ac:74:5c:ca:25:04:ec:02:8e:0f:ea:9a:24:ab:cf:7f: f1:d6:51:44:4c:37:83:86:29:10:bf:6e:d8:05:d9:c4:4d:95: 9e:3c:71:c2:cd:e0:16:f2:63:32:56:ce:7e:82:d7:11:2e:ca: f1:95:77:94:99:9f:a2:c8:84:f8:2a:31:5d:2c:3a:0a:9e:5d: 5a:97:f5:f1:a4:f8:b5:cd:1b:c5:53:59:35:97:12:11:8a:c8: 97:4f:20:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJzXCC5Z3jdGMMk7Xl0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTQ1ZmRlMDFhZjgxMDc2MGVlNjFiY2YzNTRjZjk2MmFj NDYwZDkwHhcNMjUxMjA2MTAwMjA5WhcNMjUxMjA3MTAwMjA5WjAzMTEwLwYDVQQD EygwNTU0MTg4Y2Q2YzU2Y2U2NTcyNzg2ZmZiYmYyODhmYzkxNmJmNjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+CT0528f2c2VvlzXvNgLqn4lGEO zBATttrK9LsRMhaA6e0RwnETSQ6fhxzZqyWdZpmOzrctq3sTl3OtYy/ZpJTeYiXN OWQa17bihBNLfivR4D4YgjI8t8+nD7yf3LWkSIZW6DfvkI72sWJjCAbVP+6fWWpv DvA210t82SIIn7V8J4E4w2r6HRZU/AtnKOPYbNFBV4tQg9EYUEL4DhdJXkaiFQvP 1JOlR4QIRthASIMbitlGozsQdYz54bh/R1S2UvMEVkQapaZKc0w1CT/E9LP+9uRe zu0/HS3S1SK8MFooeVWzdowxy9JxQci7YFCNQ86hmCSTV/rcYyYFdAfIlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVUGIzWxWzmVyeG/7vyiPyRa/YdMB8GA1UdIwQY MBaAFBEUX94Br4EHYO5hvPNUz5YqxGDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hNDNmNzktZjcyOC00NjQ1LWE3MWUt YzMwNWM4ZDlhMzE5LzEvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9hNDNmNzktZjcyOC00NjQ1LWE3MWUtYzMwNWM4ZDlhMzE5 LzEvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJB+1f7L7 0rnW6/4M1+uY5lEyylzmFrhRUizSUY7Hh4OrUXP7361/vSwj2kZGv7aUN8noZ6bZ SsedJ8c+pTZwzfgXjMVSo9/OxN6D86ZFNia0CxQCAn8dn3t4+wQEOp+1aIhbbMOJ xLmj5mL8ITe6EXIyez9zEYhTw+2lgsFx/uRqOLkfXC6E9J6VJOW/r4JpGmLukFpi FbOMQ53M7UHuB5BEEY2sdFzKJQTsAo4P6pokq89/8dZRREw3g4YpEL9u2AXZxE2V njxxws3gFvJjMlbOfoLXES7K8ZV3lJmfosiE+CoxXSw6Cp5dWpf18aT4tc0bxVNZ NZcSEYrIl08gaw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:43 2025 by rpki-client