This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft File: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft (raw, json) Hash identifier: mzt+XtqeAsbrDJHy4MixIase2MccG5BmZGTk3tVXonY= Subject key identifier: 1A:7E:42:F3:D5:5D:1F:28:C4:2C:FA:0C:AF:7A:E3:0B:86:82:D4:9D Authority key identifier: DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E Certificate issuer: /CN=dff1113bfc892d1df49a166047cb8c2aaeca768e Certificate serial: 019AF31C18240450D797857FB024A6DD1FCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft Manifest number: 0B6E Signing time: Sat 06 Dec 2025 10:01:35 +0000 Manifest this update: Sat 06 Dec 2025 10:01:35 +0000 Manifest next update: Sun 07 Dec 2025 10:01:35 +0000 Files and hashes: 1: 3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl (hash: js15fsIYhxlC4idnO0volrGlH50FH0/tI4Siytdkvm4=) 2: b98tIeNuwYS2XlZhqO3_1p2iGyM.roa (hash: KEycjnHhvF/hQmL5nDtRKOEAJMQLEc4nzVMPySVKhnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:18:24:04:50:d7:97:85:7f:b0:24:a6:dd:1f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff1113bfc892d1df49a166047cb8c2aaeca768e Validity Not Before: Dec 6 10:01:35 2025 GMT Not After : Dec 7 10:01:35 2025 GMT Subject: CN=1a7e42f3d55d1f28c42cfa0caf7ae30b8682d49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ff:66:ba:20:7a:1f:d1:25:10:bc:6d:94:a5: ff:4f:61:01:cf:e4:d4:63:26:fb:78:30:b7:3f:44: cb:94:58:41:4f:90:1e:eb:30:20:40:c8:f6:5a:07: 16:d0:60:fb:9b:f1:b3:ad:f0:6b:29:21:e3:de:1c: 3e:ea:2e:62:09:53:0f:2a:e6:34:c2:38:86:d0:21: e3:08:3c:9a:94:39:70:27:2e:42:53:d5:71:c7:17: f3:5c:ab:da:88:10:7b:eb:e9:32:5b:2e:5a:56:f6: 65:ce:86:54:97:3e:1d:39:b7:2d:d9:bf:ce:22:ac: 16:1d:c6:3c:64:30:73:c1:ef:8e:90:3b:68:bb:64: fe:9a:7a:ff:40:59:8f:ea:83:04:6b:a3:d3:c2:82: 04:77:41:75:62:10:58:97:65:a8:25:61:6c:4c:40: 2f:ec:01:ef:ee:7f:33:84:fa:7c:05:d8:dc:27:46: 09:f7:a8:1d:09:4b:1d:6b:43:0b:a0:0f:d0:1e:0e: 70:1c:e1:fd:9f:c9:98:01:a3:c4:8b:01:95:8e:80: 59:d2:01:fd:cf:5d:ef:bf:1e:83:b0:46:96:88:f0: e6:8f:b3:71:d7:88:f0:1d:c9:ee:8e:81:5f:6d:1e: 8c:2b:d3:bb:2f:9c:92:21:3c:ae:02:a8:13:53:b8: 70:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7E:42:F3:D5:5D:1F:28:C4:2C:FA:0C:AF:7A:E3:0B:86:82:D4:9D X509v3 Authority Key Identifier: keyid:DF:F1:11:3B:FC:89:2D:1D:F4:9A:16:60:47:CB:8C:2A:AE:CA:76:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_ERO_yJLR30mhZgR8uMKq7Kdo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db7b8f-3743-4470-a9b5-5a54169c1b5e/1/3_ERO_yJLR30mhZgR8uMKq7Kdo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:11:f2:a6:f2:25:83:73:f5:bd:2b:72:f7:db:07:9a:c2:c8: 16:f6:f6:ae:f4:1c:3b:34:74:32:b3:e6:9c:2b:a2:50:62:82: 8f:47:77:b3:09:24:e0:03:1f:25:38:01:6b:91:28:00:8c:22: 9e:1c:21:41:b6:5d:5c:69:ac:94:5b:b7:ba:56:80:36:3a:13: cd:99:93:2d:8f:bf:cb:0c:f9:a2:d2:97:c3:0e:75:44:d2:07: e7:75:d4:02:8a:75:55:ab:96:97:6b:ea:da:6b:76:ae:ef:e9: 52:d1:e8:51:f9:22:80:06:eb:b4:23:c9:15:1e:3e:2b:80:a7: 5e:64:2f:6c:8a:a9:f7:84:c6:f1:5a:2a:b8:e4:43:15:fc:da: 95:22:77:71:39:20:64:c7:b9:41:2d:41:47:14:e4:c7:ba:f0: a2:7b:1d:0a:78:ae:af:c7:f3:a0:92:04:68:db:1d:c0:df:f7: 75:81:cb:1f:9b:49:c9:da:a3:e3:4c:36:f1:47:0c:21:a8:10: c4:2a:b7:ef:aa:35:53:ee:1f:dc:f4:91:c9:9d:98:a6:4f:3c: 81:91:c5:0f:ca:52:32:89:4f:d9:f2:78:04:9b:7f:fa:aa:7a: 6b:56:15:09:7c:aa:07:f9:e2:fa:ce:56:5c:e9:ea:77:df:bd: c4:30:bd:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBgkBFDXl4V/sCSm3R/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjExMTNiZmM4OTJkMWRmNDlhMTY2MDQ3Y2I4YzJhYWVj YTc2OGUwHhcNMjUxMjA2MTAwMTM1WhcNMjUxMjA3MTAwMTM1WjAzMTEwLwYDVQQD EygxYTdlNDJmM2Q1NWQxZjI4YzQyY2ZhMGNhZjdhZTMwYjg2ODJkNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8v9muiB6H9ElELxtlKX/T2EBz+TU Yyb7eDC3P0TLlFhBT5Ae6zAgQMj2WgcW0GD7m/GzrfBrKSHj3hw+6i5iCVMPKuY0 wjiG0CHjCDyalDlwJy5CU9VxxxfzXKvaiBB76+kyWy5aVvZlzoZUlz4dObct2b/O IqwWHcY8ZDBzwe+OkDtou2T+mnr/QFmP6oMEa6PTwoIEd0F1YhBYl2WoJWFsTEAv 7AHv7n8zhPp8BdjcJ0YJ96gdCUsda0MLoA/QHg5wHOH9n8mYAaPEiwGVjoBZ0gH9 z13vvx6DsEaWiPDmj7Nx14jwHcnujoFfbR6MK9O7L5ySITyuAqgTU7hwywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBp+QvPVXR8oxCz6DK964wuGgtSdMB8GA1UdIwQY MBaAFN/xETv8iS0d9JoWYEfLjCquynaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19FUk9feUpMUjMwbWhaZ1I4dU1LcTdLZG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYjdiOGYtMzc0My00NDcwLWE5YjUt NWE1NDE2OWMxYjVlLzEvM19FUk9feUpMUjMwbWhaZ1I4dU1LcTdLZG80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kYjdiOGYtMzc0My00NDcwLWE5YjUtNWE1NDE2OWMxYjVl LzEvM19FUk9feUpMUjMwbWhaZ1I4dU1LcTdLZG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRHypvIl g3P1vSty99sHmsLIFvb2rvQcOzR0MrPmnCuiUGKCj0d3swkk4AMfJTgBa5EoAIwi nhwhQbZdXGmslFu3ulaANjoTzZmTLY+/ywz5otKXww51RNIH53XUAop1VauWl2vq 2mt2ru/pUtHoUfkigAbrtCPJFR4+K4CnXmQvbIqp94TG8VoquORDFfzalSJ3cTkg ZMe5QS1BRxTkx7rwonsdCniur8fzoJIEaNsdwN/3dYHLH5tJydqj40w28UcMIagQ xCq376o1U+4f3PSRyZ2Ypk88gZHFD8pSMolP2fJ4BJt/+qp6a1YVCXyqB/ni+s5W XOnqd9+9xDC9IA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:39 2025 by rpki-client