This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft File: ER2JVJLtS2nVqm7aX3Av52Oie6A.mft (raw, json) Hash identifier: R7vC+XcVVU/yOX38501vzmOP7SOWuuUAQJCgtII4Ua0= Subject key identifier: 99:F2:4E:36:E2:B6:58:05:16:CA:55:56:6D:16:B2:D2:FA:19:52:37 Authority key identifier: 11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0 Certificate issuer: /CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0 Certificate serial: 019AF2AD53201C3D0872ED2BD08C9A682A00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:00:36 +0000 Manifest this update: Sat 06 Dec 2025 08:00:36 +0000 Manifest next update: Sun 07 Dec 2025 08:00:36 +0000 Files and hashes: 1: ER2JVJLtS2nVqm7aX3Av52Oie6A.crl (hash: twTEvrZvJLr1pj+CvMjbLXjjSGEGgbUVpCk1G5JLwF8=) 2: SoyMCY3fXGCSj-XCTAHUr0hFf_A.roa (hash: WHZNVk5rkxUgRKY5cx0WN0Gw305ahmbGMR8jfHweazo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:53:20:1c:3d:08:72:ed:2b:d0:8c:9a:68:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d895492ed4b69d5aa6eda5f702fe763a27ba0 Validity Not Before: Dec 6 08:00:36 2025 GMT Not After : Dec 7 08:00:36 2025 GMT Subject: CN=99f24e36e2b6580516ca55566d16b2d2fa195237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:08:7e:43:63:92:33:52:22:49:d8:eb:69:51: fb:73:d8:67:2e:3a:f6:80:a9:d9:1e:39:62:bc:05: 7d:04:ed:84:ec:15:7c:0d:7a:8e:32:63:5d:79:ff: 4c:eb:6e:f4:4b:58:0a:de:ac:20:78:4c:05:e4:ea: 8c:65:31:a4:81:f3:30:f3:2e:20:fe:54:78:1d:7d: b7:de:b3:15:1e:28:78:6c:c4:d7:04:f6:c1:90:0e: 1c:0e:0e:2b:c2:82:98:63:b3:c9:07:b9:74:8e:46: d6:b4:f7:fc:a9:fc:2f:75:43:ec:4b:d5:1b:c7:09: 54:c5:26:58:08:5a:a9:6b:b5:c8:93:1d:f6:44:a2: a9:32:19:16:4f:03:48:02:6b:0a:10:c3:4c:03:d0: 9e:53:f5:0f:30:f9:a6:61:10:13:75:8e:3d:b8:2d: 1a:d0:08:56:49:e6:3d:e6:35:63:67:81:e1:99:89: 35:bd:af:84:f1:53:e9:4c:be:36:49:01:5e:9a:2a: 9a:34:79:75:97:87:dd:26:e0:6b:e5:f9:40:6f:cd: 30:57:6c:71:9d:04:f7:c0:60:4f:df:e7:4a:e3:3e: ce:55:93:64:57:5e:db:60:40:c3:c5:bd:2b:f3:29: c9:32:d0:a3:1a:77:88:5a:25:ac:57:87:7d:7e:1d: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F2:4E:36:E2:B6:58:05:16:CA:55:56:6D:16:B2:D2:FA:19:52:37 X509v3 Authority Key Identifier: keyid:11:1D:89:54:92:ED:4B:69:D5:AA:6E:DA:5F:70:2F:E7:63:A2:7B:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER2JVJLtS2nVqm7aX3Av52Oie6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/80d1cc-453f-42e3-9fd4-87becf74d564/1/ER2JVJLtS2nVqm7aX3Av52Oie6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e5:35:9e:6c:e5:70:86:86:02:7a:9f:8d:e1:57:92:8a:80: 49:0c:2e:24:b1:db:13:ef:83:7a:42:93:0a:ce:31:94:3a:71: 65:9e:c2:8d:2c:81:5b:af:b0:6b:5a:b3:6c:52:60:b0:21:5a: 6f:d7:e6:14:da:d0:a0:99:22:11:ac:6b:c6:92:fc:05:c7:6b: 31:fd:e8:9c:eb:bc:5c:ab:19:9d:6b:a0:97:72:e0:51:2f:99: 02:e1:df:de:49:16:d5:c3:dc:9a:23:d9:6d:77:20:84:94:58: 00:81:a2:bc:f8:60:03:41:fe:e9:7a:ee:86:4a:e1:03:00:b9: 1d:6f:7c:99:5b:20:86:4e:d3:3e:67:3f:ef:85:13:d2:3c:19: 92:9c:6e:3b:63:16:0a:dc:70:05:39:f4:e9:04:e8:61:6f:36: 66:54:91:a8:24:dd:59:93:46:e3:e1:4d:a7:20:47:e1:fc:70: 1e:1d:58:53:c6:dd:5b:90:9b:df:a7:fc:3b:0e:93:33:07:d6: 81:91:cb:ff:27:2e:9b:26:c9:b0:1e:e1:a8:f1:ea:4e:8c:5c: 68:46:10:84:40:da:b9:9e:22:0c:a6:44:3d:94:5a:73:b8:74: 79:95:08:f8:0b:52:df:82:1b:b1:66:d2:18:44:e3:c3:3e:a9: 4f:81:ca:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVMgHD0Icu0r0IyaaCoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ4OTU0OTJlZDRiNjlkNWFhNmVkYTVmNzAyZmU3NjNh MjdiYTAwHhcNMjUxMjA2MDgwMDM2WhcNMjUxMjA3MDgwMDM2WjAzMTEwLwYDVQQD Eyg5OWYyNGUzNmUyYjY1ODA1MTZjYTU1NTY2ZDE2YjJkMmZhMTk1MjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wh+Q2OSM1IiSdjraVH7c9hnLjr2 gKnZHjlivAV9BO2E7BV8DXqOMmNdef9M6270S1gK3qwgeEwF5OqMZTGkgfMw8y4g /lR4HX233rMVHih4bMTXBPbBkA4cDg4rwoKYY7PJB7l0jkbWtPf8qfwvdUPsS9Ub xwlUxSZYCFqpa7XIkx32RKKpMhkWTwNIAmsKEMNMA9CeU/UPMPmmYRATdY49uC0a 0AhWSeY95jVjZ4HhmYk1va+E8VPpTL42SQFemiqaNHl1l4fdJuBr5flAb80wV2xx nQT3wGBP3+dK4z7OVZNkV17bYEDDxb0r8ynJMtCjGneIWiWsV4d9fh1kOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnyTjbitlgFFspVVm0WstL6GVI3MB8GA1UdIwQY MBaAFBEdiVSS7Utp1apu2l9wL+djonugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84MGQxY2MtNDUzZi00MmUzLTlmZDQt ODdiZWNmNzRkNTY0LzEvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny84MGQxY2MtNDUzZi00MmUzLTlmZDQtODdiZWNmNzRkNTY0 LzEvRVIySlZKTHRTMm5WcW03YVgzQXY1Mk9pZTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOU1nmzl cIaGAnqfjeFXkoqASQwuJLHbE++DekKTCs4xlDpxZZ7CjSyBW6+wa1qzbFJgsCFa b9fmFNrQoJkiEaxrxpL8BcdrMf3onOu8XKsZnWugl3LgUS+ZAuHf3kkW1cPcmiPZ bXcghJRYAIGivPhgA0H+6XruhkrhAwC5HW98mVsghk7TPmc/74UT0jwZkpxuO2MW CtxwBTn06QToYW82ZlSRqCTdWZNG4+FNpyBH4fxwHh1YU8bdW5Cb36f8Ow6TMwfW gZHL/ycumybJsB7hqPHqToxcaEYQhEDauZ4iDKZEPZRac7h0eZUI+AtS34IbsWbS GETjwz6pT4HK7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:51 2025 by rpki-client