This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json) Hash identifier: Cj8PMEYBIB1luy1D7b8ff8ANkNrWW2DQQOI+MYmANNs= Subject key identifier: D2:87:F8:69:3D:7E:EE:BC:63:07:9F:50:9F:B3:04:DE:8C:AD:CE:56 Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1 Certificate serial: 019B49275E3F330988A800F09BAC9DF75E69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft Manifest number: 0A2D Signing time: Tue 23 Dec 2025 03:01:15 +0000 Manifest this update: Tue 23 Dec 2025 03:01:15 +0000 Manifest next update: Wed 24 Dec 2025 03:01:15 +0000 Files and hashes: 1: DV4eV0bz0BV_l9ZAbntV44Eglw0.roa (hash: wnq0IXxOxpXaYEifWhivUR0CW5t4jvpNWroJwGm7DbM=) 2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: RuMvrKbnUV3E4UCETRUuAatGmvUNQ2C38J06g/Nued4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:5e:3f:33:09:88:a8:00:f0:9b:ac:9d:f7:5e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1 Validity Not Before: Dec 23 03:01:15 2025 GMT Not After : Dec 24 03:01:15 2025 GMT Subject: CN=d287f8693d7eeebc63079f509fb304de8cadce56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:bf:70:61:d1:40:2c:25:0d:5c:f8:b4:71: 21:47:ea:95:e1:36:91:d0:14:3c:df:ad:87:f0:d5: c3:fe:da:01:3c:af:43:3f:72:eb:3b:8a:9f:63:51: f6:74:d3:d7:d4:b8:2c:81:85:bd:91:9c:4b:60:2a: 53:0e:55:43:7d:43:bc:90:ac:5b:86:b2:a1:10:10: db:8a:ea:d8:8a:1e:57:99:e3:6f:a2:77:fc:59:ed: 8f:48:54:de:9b:d6:8c:0c:ea:53:e5:d9:67:16:27: c2:71:86:6d:ff:63:04:51:b1:bc:18:9f:ea:a9:5b: e6:5b:fa:e4:4e:49:de:34:ab:a9:76:08:6f:0c:d3: cd:d7:99:9e:72:ff:5b:20:9f:8a:2e:04:34:9b:47: 78:ba:29:af:43:37:c8:ac:d5:77:5d:ba:c6:c4:74: 97:0f:6c:fd:03:cd:91:3d:7d:67:3d:32:54:ff:b9: 9f:76:c8:00:0c:16:b0:57:57:44:9c:a1:78:70:fc: 66:35:8e:cc:15:8e:7f:b1:f6:0e:51:ee:bb:0a:77: 60:36:09:20:e7:93:4a:ad:d7:7a:c6:55:d6:f5:64: 03:82:97:9c:24:46:91:af:81:9c:45:71:41:55:d0: 30:5b:9e:3d:c1:04:d3:fd:f3:d0:29:28:87:46:23: e2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:87:F8:69:3D:7E:EE:BC:63:07:9F:50:9F:B3:04:DE:8C:AD:CE:56 X509v3 Authority Key Identifier: keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c3:8f:bb:14:83:3a:9a:41:ff:dc:c8:c5:8b:61:1f:67:65: 82:6f:95:15:19:25:b0:87:21:0e:4a:34:16:fc:27:25:c8:6b: ff:23:28:9b:94:c5:39:06:d9:a0:f6:7e:13:f0:60:a4:ed:f2: d4:fe:fc:7c:11:b7:56:39:7d:3f:fd:91:bb:af:b7:e6:2e:a4: ca:82:c4:f1:88:8d:37:a9:94:f5:69:02:01:64:76:9e:82:d1: 02:ae:5c:23:7a:e6:c3:78:fd:09:0c:d2:38:86:84:8f:ad:45: 3a:b7:1f:b5:ab:dc:9e:de:ef:e3:13:75:e4:e7:eb:22:e6:49: 1d:bd:a5:5e:46:44:e1:ad:55:4e:46:f3:28:db:ec:6e:ef:05: cb:f7:70:f5:97:8e:36:25:4f:7f:d3:53:7c:c8:78:e5:5c:ad: 87:95:77:c0:f1:09:db:15:52:a6:68:6b:08:53:f5:21:87:95: 7d:35:a1:eb:71:ae:47:39:7c:cd:af:a5:89:b8:b9:cb:dd:86: 5c:37:f2:62:bb:29:10:6c:3c:7e:a6:ea:34:f8:cd:c4:af:b7: 92:49:53:84:78:9a:10:88:19:68:c8:78:67:f7:9a:74:e6:7b: 7a:53:e7:d9:f4:66:90:0c:65:1b:bf:b8:63:4d:2f:12:d3:4a: 65:39:3e:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJ14/MwmIqADwm6yd915pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh MTExYjEwHhcNMjUxMjIzMDMwMTE1WhcNMjUxMjI0MDMwMTE1WjAzMTEwLwYDVQQD EyhkMjg3Zjg2OTNkN2VlZWJjNjMwNzlmNTA5ZmIzMDRkZThjYWRjZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK2/cGHRQCwlDVz4tHEhR+qV4TaR 0BQ8362H8NXD/toBPK9DP3LrO4qfY1H2dNPX1LgsgYW9kZxLYCpTDlVDfUO8kKxb hrKhEBDbiurYih5XmeNvonf8We2PSFTem9aMDOpT5dlnFifCcYZt/2MEUbG8GJ/q qVvmW/rkTkneNKupdghvDNPN15mecv9bIJ+KLgQ0m0d4uimvQzfIrNV3XbrGxHSX D2z9A82RPX1nPTJU/7mfdsgADBawV1dEnKF4cPxmNY7MFY5/sfYOUe67CndgNgkg 55NKrdd6xlXW9WQDgpecJEaRr4GcRXFBVdAwW549wQTT/fPQKSiHRiPiHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKH+Gk9fu68YwefUJ+zBN6Mrc5WMB8GA1UdIwQY MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMOPuxSD OppB/9zIxYthH2dlgm+VFRklsIchDko0FvwnJchr/yMom5TFOQbZoPZ+E/BgpO3y 1P78fBG3Vjl9P/2Ru6+35i6kyoLE8YiNN6mU9WkCAWR2noLRAq5cI3rmw3j9CQzS OIaEj61FOrcftavcnt7v4xN15OfrIuZJHb2lXkZE4a1VTkbzKNvsbu8Fy/dw9ZeO NiVPf9NTfMh45Vyth5V3wPEJ2xVSpmhrCFP1IYeVfTWh63GuRzl8za+libi5y92G XDfyYrspEGw8fqbqNPjNxK+3kklThHiaEIgZaMh4Z/eadOZ7elPn2fRmkAxlG7+4 Y00vEtNKZTk+aA== -----END CERTIFICATE-----Generated at Tue Dec 23 10:53:59 2025 by rpki-client