This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft File: erqgtAKPBzwFZKZYtPuIhsvI0-s.mft (raw, json) Hash identifier: 79PGhTvfq9Ad0HjdIiw3OYWXjUqB3Rt8thNEtL4KN78= Subject key identifier: 3A:EC:7F:41:11:00:75:01:77:8E:52:DC:D1:A4:E4:08:40:F3:80:26 Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB Certificate issuer: /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb Certificate serial: 019AF2099ECEAAD9119996069EFC925F0861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft Manifest number: 033F Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: Du7k0B88jmKs_S-_OxfkmUBoQvk.roa (hash: 5Kd2ifwi5TK+F7WlkGpdmlpnXuH9BzmWZvxJszORzQQ=) 2: erqgtAKPBzwFZKZYtPuIhsvI0-s.crl (hash: MQXHBkvlUUz8dK1zr39PtgmaAPTtdf87+7ms/KbtpHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9e:ce:aa:d9:11:99:96:06:9e:fc:92:5f:08:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=3aec7f4111007501778e52dcd1a4e40840f38026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:23:de:65:aa:52:e9:6a:14:5b:0d:be:6c: 9f:1e:b1:44:2c:d9:f4:94:30:62:4c:0d:7c:f7:eb: 7a:f3:24:ca:13:5a:ec:d4:6d:0d:01:11:d5:85:ac: 77:f7:95:34:27:5f:cc:71:58:b9:61:6d:90:5b:fd: 1a:eb:9f:86:0a:2a:70:b4:fb:ef:29:5f:7a:dc:ff: e5:88:6d:c2:66:7b:90:cb:60:08:2c:d3:88:6e:70: 86:a3:eb:38:66:7f:72:31:5a:05:90:bc:fd:79:45: 79:74:be:a8:4b:dc:6b:34:20:43:3b:c7:53:6b:c4: a2:47:49:1e:ba:d9:e2:43:f2:3a:fa:56:96:67:07: 15:27:de:87:d1:6f:52:7f:6a:48:e5:15:dd:da:e4: 99:ac:dd:be:f5:fd:ec:32:72:a7:e3:66:68:a9:32: 37:ec:c4:a7:d3:c4:a2:e4:67:86:fd:55:c2:54:ee: 43:34:fe:4f:4d:64:08:9a:70:9a:04:b8:66:2f:f1: 3c:45:d7:72:bf:df:64:02:3f:5f:55:d7:aa:ab:f5: ec:ab:0a:65:6e:31:df:dd:1b:c1:b9:c6:18:bc:2e: ea:a0:03:e2:96:15:b7:87:39:de:82:eb:4f:0e:b6: 7e:5f:b5:6c:59:ba:36:3e:7d:07:b6:ef:9a:28:b3: 2a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EC:7F:41:11:00:75:01:77:8E:52:DC:D1:A4:E4:08:40:F3:80:26 X509v3 Authority Key Identifier: keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:07:63:23:c8:eb:8c:f1:dc:70:25:98:58:3a:f6:61:48:41: 6a:d0:ef:d1:bd:08:28:2d:7d:1b:d4:f3:42:d3:16:86:01:28: b3:9a:7b:54:ad:57:ce:9d:a9:d2:78:41:52:06:bb:08:43:32: c3:0a:dc:cc:b1:e2:dc:cd:9a:f3:5e:51:13:5c:6c:6d:eb:3a: 7f:63:94:e6:60:d6:ac:9d:ca:91:53:7c:c2:fc:58:89:69:d6: 5d:f5:32:95:cf:26:87:a7:97:32:10:20:71:99:f0:51:dc:13: a9:61:aa:57:3c:36:6c:f3:36:6e:95:21:62:6d:fe:32:64:be: b1:0e:42:e1:62:c0:8a:27:b2:bf:7a:a2:33:e9:95:36:f2:f5: a5:01:68:87:c1:ba:e6:fc:6a:91:b1:a5:3f:c0:67:ae:5b:4f: f2:44:f7:44:53:e1:b0:5f:43:28:6f:f6:8f:70:b2:95:b2:06: d3:82:4a:76:fb:71:ee:ba:29:e3:73:f0:81:48:c5:14:28:1d: 83:28:53:83:58:6d:93:5d:60:dd:3b:80:fc:2d:33:e3:52:88: 90:9c:ad:0a:5c:18:23:ce:d8:83:71:4c:0f:3e:dd:b5:10:4f: 2e:96:be:e7:a8:4b:c8:b6:f1:48:44:b4:4b:b2:76:a6:24:ad: ff:7f:a1:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZ7OqtkRmZYGnvySXwhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYmFhMGI0MDI4ZjA3M2MwNTY0YTY1OGI0ZmI4ODg2Y2Jj OGQzZWIwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EygzYWVjN2Y0MTExMDA3NTAxNzc4ZTUyZGNkMWE0ZTQwODQwZjM4MDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpMj3mWqUulqFFsNvmyfHrFELNn0 lDBiTA189+t68yTKE1rs1G0NARHVhax395U0J1/McVi5YW2QW/0a65+GCipwtPvv KV963P/liG3CZnuQy2AILNOIbnCGo+s4Zn9yMVoFkLz9eUV5dL6oS9xrNCBDO8dT a8SiR0keutniQ/I6+laWZwcVJ96H0W9Sf2pI5RXd2uSZrN2+9f3sMnKn42ZoqTI3 7MSn08Si5GeG/VXCVO5DNP5PTWQImnCaBLhmL/E8Rddyv99kAj9fVdeqq/Xsqwpl bjHf3RvBucYYvC7qoAPilhW3hznegutPDrZ+X7VsWbo2Pn0Htu+aKLMq+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrsf0ERAHUBd45S3NGk5AhA84AmMB8GA1UdIwQY MBaAFHq6oLQCjwc8BWSmWLT7iIbLyNPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZGY3ZWMtMmFmZS00NTMyLWI0MGEt YmFlZGM3OWFlN2UxLzEvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZGY3ZWMtMmFmZS00NTMyLWI0MGEtYmFlZGM3OWFlN2Ux LzEvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQdjI8jr jPHccCWYWDr2YUhBatDv0b0IKC19G9TzQtMWhgEos5p7VK1Xzp2p0nhBUga7CEMy wwrczLHi3M2a815RE1xsbes6f2OU5mDWrJ3KkVN8wvxYiWnWXfUylc8mh6eXMhAg cZnwUdwTqWGqVzw2bPM2bpUhYm3+MmS+sQ5C4WLAiieyv3qiM+mVNvL1pQFoh8G6 5vxqkbGlP8BnrltP8kT3RFPhsF9DKG/2j3CylbIG04JKdvtx7rop43PwgUjFFCgd gyhTg1htk11g3TuA/C0z41KIkJytClwYI87Yg3FMDz7dtRBPLpa+56hLyLbxSES0 S7J2piSt/3+hkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:29:40 2025 by rpki-client