This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json) Hash identifier: MNIFWSeOjGF3i/U6BXm3zxPh1W3qAnl9L1HuJnswgYY= Subject key identifier: A6:CD:1F:FC:8C:E0:4C:E4:5C:11:4A:30:09:00:E0:89:AB:6B:11:AF Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f Certificate serial: 019BF5756663E1E9DBE5F85158243A162E63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft Manifest number: 0687 Signing time: Sun 25 Jan 2026 14:01:10 +0000 Manifest this update: Sun 25 Jan 2026 14:01:10 +0000 Manifest next update: Mon 26 Jan 2026 14:01:10 +0000 Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: 1wBLh7YXjSZ6t4z4+B3YQqu3P2Z6puAP2b/EYM6T1xo=) 2: KaboQiocR929GCG29p5Fn_-ZE5o.roa (hash: fkHknMnvtPeBcLwuEn6gGYmWMMqGXg1zBzQziCqwcvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:66:63:e1:e9:db:e5:f8:51:58:24:3a:16:2e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f Validity Not Before: Jan 25 14:01:10 2026 GMT Not After : Jan 26 14:01:10 2026 GMT Subject: CN=a6cd1ffc8ce04ce45c114a300900e089ab6b11af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:ae:ff:8c:d1:8a:ee:29:16:bc:3e:34:43: ed:a4:40:18:e9:e5:9b:c2:09:22:ad:9d:f9:47:7a: 68:3a:38:37:5d:2f:a5:ea:e3:e9:e6:b0:14:47:e5: 21:77:63:10:ba:b5:20:40:82:a5:a5:f3:34:15:f5: 10:7d:b6:62:15:5a:c8:0d:5e:6e:21:da:4e:51:47: a7:a1:a1:0e:eb:09:c0:62:3a:53:60:02:ab:44:d1: 91:2a:30:a7:4a:0c:11:ec:60:a0:64:50:b0:e8:a9: 1a:30:ed:4b:b4:ef:dd:6a:3b:06:52:83:aa:c5:94: 3b:ed:70:6f:24:b1:82:45:7a:4f:35:43:3f:9b:4d: a0:c9:14:b9:77:8d:a3:e1:20:30:4f:8f:b3:e6:f1: fc:5d:ad:1b:d4:e0:42:27:0e:e3:2d:35:a0:47:d7: fb:e5:1b:a6:89:39:bb:29:8f:34:93:b9:cf:b1:82: 2c:05:25:5c:21:34:bc:67:52:23:1f:d5:0f:56:97: 86:82:57:bc:ce:94:b7:ec:88:e3:82:30:f4:08:7f: 74:60:af:33:0e:73:8c:8e:6c:94:8a:96:92:50:fb: 4c:01:4d:28:2d:e5:15:c4:23:4b:94:e7:ad:4f:6e: c7:e1:18:1d:6d:dc:aa:ce:5a:ac:aa:09:b4:99:90: 6f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CD:1F:FC:8C:E0:4C:E4:5C:11:4A:30:09:00:E0:89:AB:6B:11:AF X509v3 Authority Key Identifier: keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:64:c2:7c:af:1a:2d:09:56:69:1b:c6:1f:1e:c2:3d:fc:cd: ed:f9:df:b1:ec:9d:73:32:0c:9d:27:17:e5:2f:79:4d:98:5b: 8e:6c:5f:ed:ad:85:32:51:d3:43:fe:b5:d5:f9:08:6a:6d:3e: 82:dc:32:d7:11:ae:b1:9b:29:3a:af:e9:b7:bb:3e:62:27:d8: 72:d4:b8:bc:89:a3:52:8d:f2:10:0e:88:eb:a4:d3:db:b2:cd: e4:d8:df:57:43:c4:8e:87:18:54:c8:1f:2b:dd:6a:98:36:cc: 20:1a:66:59:b7:28:ef:d8:7a:ba:8f:d2:f3:5c:05:7a:1a:a2: 1a:58:13:cc:5c:a7:72:b3:ac:c0:e6:34:73:3f:46:28:06:da: 75:42:ad:46:29:65:52:c2:0c:af:6f:1d:54:61:47:2f:48:c5: d0:c6:52:da:d3:2d:28:ef:6c:b8:a4:3d:2e:44:25:e6:30:33: 76:c0:1f:8b:77:bb:8a:d0:65:07:37:eb:5e:f8:b7:00:ec:ae: 12:14:1b:60:2b:22:a3:01:0e:72:dd:55:ed:7f:a2:21:57:8f: bb:0d:1f:f8:49:b5:ed:df:c3:b2:44:56:15:cb:e4:8c:e7:72: f2:92:02:d8:b5:f6:04:5c:9d:09:1f:e7:c7:0e:5f:36:3d:9d: f9:0d:59:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dWZj4enb5fhRWCQ6Fi5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTI2MTcyYmVhNWIwZmQzNDU0MDZlYmI0YWU5NWZmOTVl M2Q1N2YwHhcNMjYwMTI1MTQwMTEwWhcNMjYwMTI2MTQwMTEwWjAzMTEwLwYDVQQD EyhhNmNkMWZmYzhjZTA0Y2U0NWMxMTRhMzAwOTAwZTA4OWFiNmIxMWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfOu/4zRiu4pFrw+NEPtpEAY6eWb wgkirZ35R3poOjg3XS+l6uPp5rAUR+Uhd2MQurUgQIKlpfM0FfUQfbZiFVrIDV5u IdpOUUenoaEO6wnAYjpTYAKrRNGRKjCnSgwR7GCgZFCw6KkaMO1LtO/dajsGUoOq xZQ77XBvJLGCRXpPNUM/m02gyRS5d42j4SAwT4+z5vH8Xa0b1OBCJw7jLTWgR9f7 5RumiTm7KY80k7nPsYIsBSVcITS8Z1IjH9UPVpeGgle8zpS37IjjgjD0CH90YK8z DnOMjmyUipaSUPtMAU0oLeUVxCNLlOetT27H4Rgdbdyqzlqsqgm0mZBvHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbNH/yM4EzkXBFKMAkA4ImraxGvMB8GA1UdIwQY MBaAFBESYXK+pbD9NFQG67Sulf+V49V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mZDdmNDgtMDBkNi00N2RmLTg3OTct OGQ5MDk0ZjNmNWExLzEvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mZDdmNDgtMDBkNi00N2RmLTg3OTctOGQ5MDk0ZjNmNWEx LzEvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWTCfK8a LQlWaRvGHx7CPfzN7fnfseydczIMnScX5S95TZhbjmxf7a2FMlHTQ/611fkIam0+ gtwy1xGusZspOq/pt7s+YifYctS4vImjUo3yEA6I66TT27LN5NjfV0PEjocYVMgf K91qmDbMIBpmWbco79h6uo/S81wFehqiGlgTzFyncrOswOY0cz9GKAbadUKtRill UsIMr28dVGFHL0jF0MZS2tMtKO9suKQ9LkQl5jAzdsAfi3e7itBlBzfrXvi3AOyu EhQbYCsiowEOct1V7X+iIVePuw0f+Em17d/DskRWFcvkjOdy8pIC2LX2BFydCR/n xw5fNj2d+Q1Z8w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:47 2026 by rpki-client