This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json) Hash identifier: wmGNmcBTpBCMF1E0CGFJ4LDb7exqOOBiQp8+oDIvRyU= Subject key identifier: 7A:BB:82:74:AE:94:DB:2E:21:44:60:D7:FB:CE:88:2C:65:60:D5:25 Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f Certificate serial: 019AF5E5E429F6E30E778CFFFE0789D7A5E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft Manifest number: 0602 Signing time: Sat 06 Dec 2025 23:01:15 +0000 Manifest this update: Sat 06 Dec 2025 23:01:15 +0000 Manifest next update: Sun 07 Dec 2025 23:01:15 +0000 Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: dnHG7HrgmLvZNafhPmQhxM83OX4Mp2JPJeIu8nHZCqE=) 2: eY3YrLangF39TsrfFYAYI-Ypyew.roa (hash: QBh3Fp11lONob0T3yDh1yiwajHFqWNsh3PoRB1MCVgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:e4:29:f6:e3:0e:77:8c:ff:fe:07:89:d7:a5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f Validity Not Before: Dec 6 23:01:15 2025 GMT Not After : Dec 7 23:01:15 2025 GMT Subject: CN=7abb8274ae94db2e214460d7fbce882c6560d525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:04:a3:87:37:9c:d8:e1:46:2d:e3:a5:f3: e5:a3:e1:6b:52:3a:03:b4:30:b5:1a:7f:09:8d:aa: 44:36:b8:f3:d5:a8:e4:74:b9:b6:c8:72:16:23:a0: ce:7a:f2:e4:10:5c:7d:e6:84:17:cb:ae:4f:12:7f: 39:9b:d6:ff:05:1d:09:3c:01:9d:28:20:16:3e:1a: 97:df:d9:ca:33:04:a3:34:3a:f2:b1:d2:1c:ab:db: bf:1f:39:2d:32:13:25:cd:f3:e7:12:e0:d0:89:eb: 1c:3c:b0:20:7e:80:12:ec:3a:62:fc:f8:6b:4d:da: 06:e8:2a:4c:fa:4b:51:82:e2:56:b0:70:48:77:66: 91:c1:8f:1c:43:11:4c:a5:2c:79:f8:89:be:30:ab: 68:bf:f2:04:ad:39:b6:48:ca:c3:cd:43:16:64:09: 94:f1:b9:2e:c8:ea:df:e5:9b:73:eb:f3:1e:99:df: 05:13:61:d7:42:89:d2:32:09:74:86:66:76:ff:d2: bd:16:3e:66:d1:b6:4a:ea:a8:8f:4a:61:64:0f:f0: a5:bf:a9:e5:3b:78:7a:26:c0:55:8e:2e:ea:28:14: 39:c5:01:fa:37:34:a1:27:7a:17:8a:b5:e2:2a:74: 4f:47:49:c6:43:d2:12:5f:86:e6:9e:3a:f6:ce:60: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BB:82:74:AE:94:DB:2E:21:44:60:D7:FB:CE:88:2C:65:60:D5:25 X509v3 Authority Key Identifier: keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:5d:d1:28:f2:de:dd:4a:27:76:c1:c7:87:12:25:42:16:f0: 0f:cb:75:31:3a:3d:27:23:d5:4e:a8:4e:32:6a:05:42:e8:fb: 78:6b:25:2e:f1:20:09:85:b2:bb:20:be:53:47:f9:2e:f5:f3: f0:87:0f:7f:50:33:97:09:51:17:59:f6:dd:35:86:0e:98:d8: ea:b0:68:cc:52:0d:36:75:02:db:73:1f:0f:a7:31:66:77:90: 8b:af:36:39:3f:d3:fd:71:8d:6a:b1:d7:06:3f:1e:e3:8c:6e: 82:54:41:29:5e:11:28:3a:2d:24:91:53:c1:5f:da:e8:fe:92: 24:75:2e:6a:d3:74:5f:f5:18:0b:33:e8:81:7b:02:f6:d6:b0: 35:01:75:32:ee:cb:f2:24:51:dc:88:a1:5d:f4:59:c0:ff:e2: 72:f4:81:95:2c:78:f9:87:21:f3:a7:2f:fc:89:6a:74:c1:5c: 66:81:00:e4:aa:d7:1e:f4:a4:05:bd:8c:11:10:23:d9:03:ec: e2:13:fd:02:67:88:f2:3d:81:72:bd:36:aa:63:8b:96:39:27: 7f:c8:48:6e:6f:5a:4b:4a:7e:79:ed:bc:71:25:42:81:8d:3b: da:c6:20:49:2c:f3:f6:db:c5:16:53:d5:0b:f7:cd:e6:07:f0: c7:0b:84:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15eQp9uMOd4z//geJ16XmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTI2MTcyYmVhNWIwZmQzNDU0MDZlYmI0YWU5NWZmOTVl M2Q1N2YwHhcNMjUxMjA2MjMwMTE1WhcNMjUxMjA3MjMwMTE1WjAzMTEwLwYDVQQD Eyg3YWJiODI3NGFlOTRkYjJlMjE0NDYwZDdmYmNlODgyYzY1NjBkNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4EEo4c3nNjhRi3jpfPlo+FrUjoD tDC1Gn8JjapENrjz1ajkdLm2yHIWI6DOevLkEFx95oQXy65PEn85m9b/BR0JPAGd KCAWPhqX39nKMwSjNDrysdIcq9u/HzktMhMlzfPnEuDQiescPLAgfoAS7Dpi/Phr TdoG6CpM+ktRguJWsHBId2aRwY8cQxFMpSx5+Im+MKtov/IErTm2SMrDzUMWZAmU 8bkuyOrf5Ztz6/Memd8FE2HXQonSMgl0hmZ2/9K9Fj5m0bZK6qiPSmFkD/Clv6nl O3h6JsBVji7qKBQ5xQH6NzShJ3oXirXiKnRPR0nGQ9ISX4bmnjr2zmB2lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHq7gnSulNsuIURg1/vOiCxlYNUlMB8GA1UdIwQY MBaAFBESYXK+pbD9NFQG67Sulf+V49V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mZDdmNDgtMDBkNi00N2RmLTg3OTct OGQ5MDk0ZjNmNWExLzEvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mZDdmNDgtMDBkNi00N2RmLTg3OTctOGQ5MDk0ZjNmNWEx LzEvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArF3RKPLe 3UondsHHhxIlQhbwD8t1MTo9JyPVTqhOMmoFQuj7eGslLvEgCYWyuyC+U0f5LvXz 8IcPf1AzlwlRF1n23TWGDpjY6rBozFINNnUC23MfD6cxZneQi682OT/T/XGNarHX Bj8e44xuglRBKV4RKDotJJFTwV/a6P6SJHUuatN0X/UYCzPogXsC9tawNQF1Mu7L 8iRR3IihXfRZwP/icvSBlSx4+Ych86cv/IlqdMFcZoEA5KrXHvSkBb2MERAj2QPs 4hP9AmeI8j2Bcr02qmOLljknf8hIbm9aS0p+ee28cSVCgY072sYgSSzz9tvFFlPV C/fN5gfwxwuEWg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:11 2025 by rpki-client