This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft File: eruW1HY31HxxYVtg2h9pHEpvC3A.mft (raw, json) Hash identifier: CTksfP8YEtASQLbEoO73uMYKq2qclo5BB+AgkPUl/Z4= Subject key identifier: 6C:4D:96:85:58:BA:3C:A2:34:E9:38:54:12:DC:A3:55:4F:D5:41:DD Authority key identifier: 7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70 Certificate issuer: /CN=7abb96d47637d47c71615b60da1f691c4a6f0b70 Certificate serial: 019B4BF15A310D9F4C8D513DAB91882B28EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft Manifest number: 0BE0 Signing time: Tue 23 Dec 2025 16:01:06 +0000 Manifest this update: Tue 23 Dec 2025 16:01:06 +0000 Manifest next update: Wed 24 Dec 2025 16:01:06 +0000 Files and hashes: 1: eruW1HY31HxxYVtg2h9pHEpvC3A.crl (hash: Rcw3swrY6koLiRILibMXqvDXIzlAHX40MYSVWagBgpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:5a:31:0d:9f:4c:8d:51:3d:ab:91:88:2b:28:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7abb96d47637d47c71615b60da1f691c4a6f0b70 Validity Not Before: Dec 23 16:01:06 2025 GMT Not After : Dec 24 16:01:06 2025 GMT Subject: CN=6c4d968558ba3ca234e9385412dca3554fd541dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8c:f4:38:0d:46:45:a2:6b:f2:40:a6:68:ef: 2c:5e:5b:09:20:1b:e4:12:45:d6:83:3d:25:50:eb: 06:00:a7:df:af:7c:c5:e3:e3:06:7a:e7:68:a3:71: d1:b6:c5:3b:15:c7:07:10:b3:27:21:a6:02:e7:77: 1a:a2:6b:7f:e7:ac:5e:a2:cd:76:b1:d1:2e:7b:b5: fd:db:24:a1:56:3f:8b:18:87:9b:07:9c:49:4e:5b: 14:98:07:19:4a:15:7a:24:9f:3f:2a:a7:e8:a1:35: 06:c2:99:21:fd:d1:48:69:32:31:67:97:ba:56:31: 43:bc:f2:6a:bc:df:0e:c7:88:7e:0c:35:9b:cd:d1: 6e:b0:fb:16:7b:fd:9f:9d:b2:01:f0:92:cf:8b:91: be:09:86:f2:da:c4:63:df:4c:fb:22:86:91:95:c1: c3:15:4c:b0:27:9e:1b:f1:b5:1d:3d:0b:6b:84:33: 81:2d:14:a7:b7:da:43:21:61:95:7f:00:6a:be:36: d9:25:64:d8:39:8c:63:f2:d2:9a:8b:03:fd:09:6f: 60:30:28:f9:48:6c:c3:65:b9:77:23:f3:af:11:1e: fb:d3:c3:e0:83:39:bc:db:a8:01:6d:98:58:8e:5c: a6:eb:76:64:af:6b:0d:2a:5a:b9:f6:c1:dd:76:c0: be:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4D:96:85:58:BA:3C:A2:34:E9:38:54:12:DC:A3:55:4F:D5:41:DD X509v3 Authority Key Identifier: keyid:7A:BB:96:D4:76:37:D4:7C:71:61:5B:60:DA:1F:69:1C:4A:6F:0B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eruW1HY31HxxYVtg2h9pHEpvC3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36f762-1825-4e6c-b3b3-62a19a38755b/1/eruW1HY31HxxYVtg2h9pHEpvC3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:30:e0:20:c4:a2:1f:15:34:da:01:29:51:3c:d3:5e:99:1d: 69:e9:93:a4:85:91:c4:f4:59:5d:35:6a:24:fa:5c:56:a4:58: d9:50:4a:f1:d8:01:fa:4c:b3:70:d0:a4:b6:42:2c:56:a3:44: c5:27:78:5e:4d:2e:7e:e5:4a:01:d0:1c:b0:63:e9:9c:37:2f: bd:bc:27:e0:b4:e9:57:22:35:c7:e8:3d:25:79:87:9a:14:e4: d4:ce:03:3d:f5:99:75:3d:98:07:af:cc:e8:1a:8e:93:77:d5: e9:1e:d5:2e:dd:3c:f9:a2:80:89:73:12:42:cc:24:31:28:2f: 07:e8:fd:8f:a7:38:5d:10:a1:70:a0:71:02:80:2d:86:65:55: 2e:92:97:c8:e7:71:9d:51:d5:2c:74:44:6d:e4:ea:a7:ea:92: 81:bb:4d:b2:2c:f8:7a:c8:a5:31:92:4c:67:30:4e:29:b1:0e: 38:12:f2:1a:17:1f:72:49:05:fc:c4:a4:7b:d2:a5:d7:0d:c4: 5e:34:a1:d4:e5:3f:8d:e8:68:90:d7:7a:c1:95:4c:67:7b:1c: 54:d4:42:0d:3f:95:5b:65:ff:40:85:71:1e:63:73:a4:30:00: 72:1f:04:11:bd:be:05:d9:22:60:c4:0c:4b:5f:9c:98:8e:4c: df:76:e9:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8VoxDZ9MjVE9q5GIKyjrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYmI5NmQ0NzYzN2Q0N2M3MTYxNWI2MGRhMWY2OTFjNGE2 ZjBiNzAwHhcNMjUxMjIzMTYwMTA2WhcNMjUxMjI0MTYwMTA2WjAzMTEwLwYDVQQD Eyg2YzRkOTY4NTU4YmEzY2EyMzRlOTM4NTQxMmRjYTM1NTRmZDU0MWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIz0OA1GRaJr8kCmaO8sXlsJIBvk EkXWgz0lUOsGAKffr3zF4+MGeudoo3HRtsU7FccHELMnIaYC53caomt/56xeos12 sdEue7X92yShVj+LGIebB5xJTlsUmAcZShV6JJ8/KqfooTUGwpkh/dFIaTIxZ5e6 VjFDvPJqvN8Ox4h+DDWbzdFusPsWe/2fnbIB8JLPi5G+CYby2sRj30z7IoaRlcHD FUywJ54b8bUdPQtrhDOBLRSnt9pDIWGVfwBqvjbZJWTYOYxj8tKaiwP9CW9gMCj5 SGzDZbl3I/OvER7708Pggzm826gBbZhYjlym63Zkr2sNKlq59sHddsC+BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxNloVYujyiNOk4VBLco1VP1UHdMB8GA1UdIwQY MBaAFHq7ltR2N9R8cWFbYNofaRxKbwtwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXJ1VzFIWTMxSHh4WVZ0ZzJoOXBIRXB2QzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zNmY3NjItMTgyNS00ZTZjLWIzYjMt NjJhMTlhMzg3NTViLzEvZXJ1VzFIWTMxSHh4WVZ0ZzJoOXBIRXB2QzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zNmY3NjItMTgyNS00ZTZjLWIzYjMtNjJhMTlhMzg3NTVi LzEvZXJ1VzFIWTMxSHh4WVZ0ZzJoOXBIRXB2QzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTDgIMSi HxU02gEpUTzTXpkdaemTpIWRxPRZXTVqJPpcVqRY2VBK8dgB+kyzcNCktkIsVqNE xSd4Xk0ufuVKAdAcsGPpnDcvvbwn4LTpVyI1x+g9JXmHmhTk1M4DPfWZdT2YB6/M 6BqOk3fV6R7VLt08+aKAiXMSQswkMSgvB+j9j6c4XRChcKBxAoAthmVVLpKXyOdx nVHVLHREbeTqp+qSgbtNsiz4esilMZJMZzBOKbEOOBLyGhcfckkF/MSke9Kl1w3E XjSh1OU/jehokNd6wZVMZ3scVNRCDT+VW2X/QIVxHmNzpDAAch8EEb2+BdkiYMQM S1+cmI5M33bpEA== -----END CERTIFICATE-----Generated at Tue Dec 23 18:04:35 2025 by rpki-client