This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json) Hash identifier: vePgIGc2oQVkFqSeNkaGE+SVHYCXcRiTmJR5wMDxHMY= Subject key identifier: 6B:EC:AB:10:3A:1F:60:1C:51:D1:48:0E:0C:4E:9F:5D:AE:7E:31:D1 Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Certificate serial: 019AF1D1F14D6739CF9AE57475E97A0318C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft Manifest number: 07E5 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: +9lnqYx8K6R900WJJmz0j5OkeKRfbA2JyLvAIrnz9cs=) 2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=) 3: yQhtD1qF0_eAAwH3V8QVjGAIXP4.roa (hash: 2X23/CtXXbt7Zb4gO5E2OH1n49d+KIt7zqggq5S1lo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f1:4d:67:39:cf:9a:e5:74:75:e9:7a:03:18:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=6becab103a1f601c51d1480e0c4e9f5dae7e31d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:d6:fc:ed:e9:12:1d:5c:fd:69:68:e5:37: 15:e0:66:05:c6:ba:25:1f:ef:f7:0e:86:06:8e:09: 5d:47:44:45:20:7c:1f:2c:e6:3e:7b:10:7b:5b:27: 85:02:2e:9d:39:eb:1e:85:9b:bb:28:55:19:cc:e8: 04:8c:bd:53:2e:2d:c0:12:a1:6a:68:b8:2c:67:be: 26:f1:c9:03:d6:4b:25:3f:2e:23:5a:df:d0:6f:7e: 0f:43:86:cb:58:3f:95:f7:29:8b:8b:55:06:82:9c: b7:ea:3a:99:48:27:fd:8f:76:c9:a2:2c:c7:bd:d9: 69:1a:db:76:8f:88:89:5c:07:9d:ae:5d:5c:d2:5f: df:6d:52:e2:0d:4f:d3:3f:4a:e0:60:00:7a:ab:cd: ab:bb:25:75:3f:73:7f:fe:c8:98:6d:d5:c4:31:cc: 9f:ac:9a:ef:60:04:1c:87:f2:07:ae:93:3c:97:0b: 09:b4:15:6e:63:db:8f:fd:da:99:32:27:df:56:04: a1:1c:c6:a5:4b:2e:5d:33:ad:06:20:4f:16:d0:a2: 57:52:13:ec:51:e1:65:f5:69:b8:ec:0f:2d:bb:4f: 8e:db:71:cf:ff:3c:10:2d:0e:81:1b:b5:34:36:65: e7:fe:0f:68:8c:7c:90:d4:34:52:74:14:ad:c8:41: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EC:AB:10:3A:1F:60:1C:51:D1:48:0E:0C:4E:9F:5D:AE:7E:31:D1 X509v3 Authority Key Identifier: keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:72:c8:a1:23:72:53:b2:1f:26:d5:ab:84:f3:c9:ce:4c:f5: da:50:50:4d:99:92:72:35:01:4b:0c:fc:a9:c2:95:96:ff:48: 73:33:aa:d6:4c:17:d2:40:89:e3:27:0d:38:e3:50:13:1f:aa: 66:6f:48:46:51:09:ea:a0:7d:61:8e:02:76:7d:ee:ee:22:72: 93:44:76:dc:bb:49:d3:ce:83:f7:62:f0:30:b7:61:f7:b7:d5: 71:79:a2:b5:74:bc:cf:f4:8a:9e:dd:96:d9:4b:ff:21:d0:e1: 1d:76:61:ed:70:27:09:eb:a9:f3:23:1b:13:e0:26:af:7f:3f: 43:2f:43:a6:ce:8b:a3:ad:e1:54:8d:52:87:c8:5b:df:b5:a0: 48:04:77:66:a6:b9:bf:0b:26:8f:dd:dc:52:c2:39:41:8e:c4: c4:4d:2a:59:c8:97:2e:24:59:32:40:f3:0a:ef:c9:53:bf:39: 41:4e:ab:27:40:80:06:da:ff:89:c2:42:e6:77:e5:bf:d2:0a: 63:0f:b8:8a:c4:cc:6a:ea:76:e7:11:62:f7:5c:db:8e:85:8c: 75:1f:99:62:28:4c:27:b2:e7:ab:13:08:c1:6a:89:27:63:a3: ae:8c:0b:2f:b2:a3:f0:de:a2:56:3a:79:6d:38:08:2f:03:94: ce:9b:b1:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fFNZznPmuV0del6AxjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjE2NzRiYmYwZDExOGYyNTU0ZjgwY2FmZDNlZjFiMzlk OGFlM2YwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD Eyg2YmVjYWIxMDNhMWY2MDFjNTFkMTQ4MGUwYzRlOWY1ZGFlN2UzMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6LW/O3pEh1c/Wlo5TcV4GYFxrol H+/3DoYGjgldR0RFIHwfLOY+exB7WyeFAi6dOesehZu7KFUZzOgEjL1TLi3AEqFq aLgsZ74m8ckD1kslPy4jWt/Qb34PQ4bLWD+V9ymLi1UGgpy36jqZSCf9j3bJoizH vdlpGtt2j4iJXAedrl1c0l/fbVLiDU/TP0rgYAB6q82ruyV1P3N//siYbdXEMcyf rJrvYAQch/IHrpM8lwsJtBVuY9uP/dqZMiffVgShHMalSy5dM60GIE8W0KJXUhPs UeFl9Wm47A8tu0+O23HP/zwQLQ6BG7U0NmXn/g9ojHyQ1DRSdBStyEH6YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvsqxA6H2AcUdFIDgxOn12ufjHRMB8GA1UdIwQY MBaAFBKxZ0u/DRGPJVT4DK/T7xs52K4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgt ZjM3MWY5OGE3NTNiLzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgtZjM3MWY5OGE3NTNi LzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInLIoSNy U7IfJtWrhPPJzkz12lBQTZmScjUBSwz8qcKVlv9IczOq1kwX0kCJ4ycNOONQEx+q Zm9IRlEJ6qB9YY4Cdn3u7iJyk0R23LtJ086D92LwMLdh97fVcXmitXS8z/SKnt2W 2Uv/IdDhHXZh7XAnCeup8yMbE+Amr38/Qy9Dps6Lo63hVI1Sh8hb37WgSAR3Zqa5 vwsmj93cUsI5QY7ExE0qWciXLiRZMkDzCu/JU785QU6rJ0CABtr/icJC5nflv9IK Yw+4isTMaup25xFi91zbjoWMdR+ZYihMJ7LnqxMIwWqJJ2OjrowLL7Kj8N6iVjp5 bTgILwOUzpuxcg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:58 2025 by rpki-client