This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft File: ErmEbY911kX_YwjOAwCHopfms1k.mft (raw, json) Hash identifier: LSA0fABCCOCdRd5oBEW8gLUSGmhL5U5uMCVzEoU+WwM= Subject key identifier: 17:BD:E6:62:10:FB:88:76:26:66:66:E1:31:95:F5:25:D9:41:59:B6 Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59 Certificate issuer: /CN=12b9846d8f75d645ff6308ce030087a297e6b359 Certificate serial: 019AF19A95F361832B3476B55A64C434055E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft Manifest number: 1582 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: ErmEbY911kX_YwjOAwCHopfms1k.crl (hash: M1Y2CBzNRMQ0X8Dv3hKZVG/HnzrUsHalvsGQ2j/Md+A=) 2: Z6p3Mb3Xuxofy2Z3p3uuAgYevv0.roa (hash: SQn+3rhGu53usOi2Tvr4qfF9FQezTzxP7fAqpbwWcZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:95:f3:61:83:2b:34:76:b5:5a:64:c4:34:05:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=17bde66210fb8876266666e13195f525d94159b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:33:bd:57:db:b9:f4:6b:40:e7:67:3c:e1: b2:05:6d:24:81:79:10:9b:a9:84:2c:79:08:83:67: be:1e:fd:96:7d:2e:8f:22:cf:14:f8:74:de:bf:e3: 3d:71:bb:d3:c3:10:0b:9b:02:27:e1:b6:6c:97:a8: 09:92:e7:55:05:42:89:ff:e6:bf:64:e5:63:c4:4c: 26:a2:2a:c5:bb:77:74:5f:50:8c:43:ff:91:e3:21: 4d:82:6c:06:d8:0d:17:43:82:55:c4:a0:a8:11:fe: 43:16:30:72:58:ce:61:7c:18:c5:12:d2:b4:75:9e: 39:d4:b5:ed:82:b4:3e:d4:82:83:ff:f3:da:24:00: 21:1f:a2:84:80:a1:07:fc:1e:45:21:0c:0e:85:49: 0e:8a:ee:86:0d:f0:df:18:07:5a:36:fd:a7:50:89: 98:c7:d1:2e:9d:4d:a8:e7:9b:9a:8f:dc:88:4f:ef: e5:24:c6:2a:ca:23:75:77:90:27:a8:5b:b6:27:8a: 68:13:52:c0:9e:ef:f2:be:9b:f4:03:af:d9:1e:4e: 70:ec:98:ef:08:94:d9:04:c8:ac:81:79:2c:3b:b9: 5e:dd:2e:7e:97:c7:9b:a2:bf:d3:2d:d4:0d:4f:dd: 4a:79:97:dc:76:04:1e:6c:41:82:b5:12:4d:7a:33: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BD:E6:62:10:FB:88:76:26:66:66:E1:31:95:F5:25:D9:41:59:B6 X509v3 Authority Key Identifier: keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7e:a6:f1:e3:6d:9d:a8:c4:fc:88:03:06:4c:6a:89:6b:58: 53:dd:74:e2:c3:97:a6:07:40:11:40:7d:9e:0d:d9:9b:68:da: 49:89:a6:32:53:29:3f:be:e5:c8:65:4a:c9:e9:b6:57:d5:a9: f2:13:52:a0:5d:0d:b2:9b:d1:dc:5a:23:c5:8a:4c:44:ae:8b: 7a:37:b5:96:b9:d6:4f:be:5b:76:24:fc:d5:cb:dd:71:39:04: f5:63:4b:40:9c:b6:17:4d:32:1d:b7:19:37:7b:51:93:02:1a: d0:23:b0:d8:c1:4e:39:a4:84:b5:68:ba:5c:66:15:86:9a:d4: ac:1f:e3:59:d7:fe:7c:1a:48:50:00:d0:50:1b:c7:28:4d:60: 8b:38:75:78:d7:98:a9:8c:bc:92:db:b9:5a:0d:53:11:c9:03: b0:83:b2:8a:50:13:6e:73:d8:4d:62:84:d5:65:9c:52:7e:00: c9:ba:2f:22:35:b3:5d:49:1a:ad:ac:ed:87:9f:de:c1:41:bd: d5:4e:d8:63:c8:c8:99:cd:a6:9a:d1:fb:26:8c:4e:46:40:ae: 13:82:91:d5:e5:9d:c5:dc:16:95:33:a5:48:51:c0:31:66:0e: 95:8b:82:5c:39:35:94:3e:99:04:af:be:65:ee:35:05:d7:f0: 46:30:e6:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpXzYYMrNHa1WmTENAVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjk4NDZkOGY3NWQ2NDVmZjYzMDhjZTAzMDA4N2EyOTdl NmIzNTkwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EygxN2JkZTY2MjEwZmI4ODc2MjY2NjY2ZTEzMTk1ZjUyNWQ5NDE1OWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIQzvVfbufRrQOdnPOGyBW0kgXkQ m6mELHkIg2e+Hv2WfS6PIs8U+HTev+M9cbvTwxALmwIn4bZsl6gJkudVBUKJ/+a/ ZOVjxEwmoirFu3d0X1CMQ/+R4yFNgmwG2A0XQ4JVxKCoEf5DFjByWM5hfBjFEtK0 dZ451LXtgrQ+1IKD//PaJAAhH6KEgKEH/B5FIQwOhUkOiu6GDfDfGAdaNv2nUImY x9EunU2o55uaj9yIT+/lJMYqyiN1d5AnqFu2J4poE1LAnu/yvpv0A6/ZHk5w7Jjv CJTZBMisgXksO7le3S5+l8ebor/TLdQNT91KeZfcdgQebEGCtRJNejPKQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe95mIQ+4h2JmZm4TGV9SXZQVm2MB8GA1UdIwQY MBaAFBK5hG2PddZF/2MIzgMAh6KX5rNZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJtRWJZOTExa1hfWXdqT0F3Q0hvcGZtczFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMzhmN2QtNTliYi00ODI1LWI2YmYt Nzg4NTE5MzJiMjdmLzEvRXJtRWJZOTExa1hfWXdqT0F3Q0hvcGZtczFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMzhmN2QtNTliYi00ODI1LWI2YmYtNzg4NTE5MzJiMjdm LzEvRXJtRWJZOTExa1hfWXdqT0F3Q0hvcGZtczFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX36m8eNt najE/IgDBkxqiWtYU9104sOXpgdAEUB9ng3Zm2jaSYmmMlMpP77lyGVKyem2V9Wp 8hNSoF0NspvR3FojxYpMRK6Leje1lrnWT75bdiT81cvdcTkE9WNLQJy2F00yHbcZ N3tRkwIa0COw2MFOOaSEtWi6XGYVhprUrB/jWdf+fBpIUADQUBvHKE1gizh1eNeY qYy8ktu5Wg1TEckDsIOyilATbnPYTWKE1WWcUn4AybovIjWzXUkarazth5/ewUG9 1U7YY8jImc2mmtH7JoxORkCuE4KR1eWdxdwWlTOlSFHAMWYOlYuCXDk1lD6ZBK++ Ze41BdfwRjDmLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:42:43 2025 by rpki-client