This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json) Hash identifier: 1Gvr/SsdqHOuWM9i08XtImE4xi+WQ+TzJRyai8njTok= Subject key identifier: 4A:67:09:D6:18:94:F6:0E:5A:BC:AF:23:96:DB:43:F3:21:70:7B:A3 Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1 Certificate serial: 019B3BA24DD0A8DFBE39746D075BDC65E3BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft Manifest number: 0A26 Signing time: Sat 20 Dec 2025 12:00:50 +0000 Manifest this update: Sat 20 Dec 2025 12:00:50 +0000 Manifest next update: Sun 21 Dec 2025 12:00:50 +0000 Files and hashes: 1: DV4eV0bz0BV_l9ZAbntV44Eglw0.roa (hash: wnq0IXxOxpXaYEifWhivUR0CW5t4jvpNWroJwGm7DbM=) 2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: ddpe210VX7pLPN2Ya6gHAoR7m5tzNzrZo1AmC8p9MHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:4d:d0:a8:df:be:39:74:6d:07:5b:dc:65:e3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1 Validity Not Before: Dec 20 12:00:50 2025 GMT Not After : Dec 21 12:00:50 2025 GMT Subject: CN=4a6709d61894f60e5abcaf2396db43f321707ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7e:50:ee:b4:4a:e8:f6:89:3f:b3:bf:20:ce: 2a:09:84:7a:4b:35:43:f9:09:d7:58:ff:8e:c0:bb: 93:0f:9d:9c:38:ef:77:89:5c:36:7f:ac:68:7a:c3: 04:91:e4:1c:c3:62:78:90:83:db:6d:56:c9:c6:8f: eb:04:a6:0c:66:25:1e:79:30:0d:17:30:7f:cb:46: d6:4e:e4:b9:bb:49:2e:7f:db:73:44:d6:ec:f1:55: 75:e0:b4:e1:a1:95:94:6c:d7:ae:63:1d:d5:59:15: 88:fa:95:36:76:55:69:9b:24:fb:64:2f:a6:f3:b7: cb:3d:a5:f6:d3:b1:b4:cc:6c:6f:60:fd:a4:7e:a4: 88:fd:8d:82:0b:a6:7e:6b:0f:7d:32:eb:aa:33:10: 53:1d:83:82:cc:68:20:d8:d9:fc:12:2f:96:cf:ec: 43:1a:45:02:9c:b7:79:06:d1:c8:c1:ae:75:59:1a: ef:bd:a2:51:11:2f:83:8e:a7:e4:56:17:b3:37:4e: a9:43:f5:0a:32:f1:cd:86:57:2f:b7:4e:4f:80:02: 1b:f6:b3:46:3d:ee:22:0c:fe:5b:2b:5e:a7:20:dc: 48:3c:ed:de:0f:4c:9c:2f:13:e9:5a:12:80:e3:e0: 73:e5:e1:92:e6:0b:9e:b6:da:f5:94:8f:0a:04:e8: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:67:09:D6:18:94:F6:0E:5A:BC:AF:23:96:DB:43:F3:21:70:7B:A3 X509v3 Authority Key Identifier: keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:bd:d2:88:43:f7:fa:b0:ce:de:8c:79:9a:df:29:85:1b:dd: 1a:6f:2f:32:5c:c9:a2:61:21:f2:29:11:28:d9:b7:d4:a6:5e: 2b:0e:fb:69:01:51:db:34:68:aa:2d:e6:f8:04:d7:96:ea:71: 61:5a:50:1d:f8:4a:20:ef:a6:f4:e4:26:50:69:6a:02:2f:15: 2a:f8:bc:85:bc:3f:a4:19:d5:4a:c3:bc:bf:d8:8e:4f:c1:44: 59:be:4d:53:98:d0:8f:00:ee:e5:8c:2e:c1:c6:da:b1:c7:45: 30:39:4c:95:49:61:48:f7:2e:f2:61:5b:e7:5c:ae:7f:aa:89: ac:d9:ea:d7:4d:90:8f:b8:fb:77:81:1c:71:db:17:ce:4f:8c: 85:74:d6:5c:5c:45:c8:f4:89:25:3a:e3:62:ec:fe:fb:a9:a8: 5b:d4:7b:ee:54:9d:51:12:22:e4:6d:43:ad:57:c1:01:af:bf: 71:ba:05:5b:6a:57:f2:51:c5:22:02:34:0e:49:4a:81:e6:10: 13:26:4c:7f:9d:ee:ca:a4:13:cc:cb:ab:1d:e2:18:20:ad:04: 2e:81:fe:e8:73:8c:57:3c:7a:d0:68:a5:95:74:6f:27:12:3d: 40:58:7b:7d:bc:39:a1:28:12:85:72:59:8e:93:49:94:6a:a6: 80:44:c0:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ok3QqN++OXRtB1vcZeO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh MTExYjEwHhcNMjUxMjIwMTIwMDUwWhcNMjUxMjIxMTIwMDUwWjAzMTEwLwYDVQQD Eyg0YTY3MDlkNjE4OTRmNjBlNWFiY2FmMjM5NmRiNDNmMzIxNzA3YmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX5Q7rRK6PaJP7O/IM4qCYR6SzVD +QnXWP+OwLuTD52cOO93iVw2f6xoesMEkeQcw2J4kIPbbVbJxo/rBKYMZiUeeTAN FzB/y0bWTuS5u0kuf9tzRNbs8VV14LThoZWUbNeuYx3VWRWI+pU2dlVpmyT7ZC+m 87fLPaX207G0zGxvYP2kfqSI/Y2CC6Z+aw99MuuqMxBTHYOCzGgg2Nn8Ei+Wz+xD GkUCnLd5BtHIwa51WRrvvaJRES+DjqfkVhezN06pQ/UKMvHNhlcvt05PgAIb9rNG Pe4iDP5bK16nINxIPO3eD0ycLxPpWhKA4+Bz5eGS5guettr1lI8KBOj5yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpnCdYYlPYOWryvI5bbQ/MhcHujMB8GA1UdIwQY MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqL3SiEP3 +rDO3ox5mt8phRvdGm8vMlzJomEh8ikRKNm31KZeKw77aQFR2zRoqi3m+ATXlupx YVpQHfhKIO+m9OQmUGlqAi8VKvi8hbw/pBnVSsO8v9iOT8FEWb5NU5jQjwDu5Ywu wcbascdFMDlMlUlhSPcu8mFb51yuf6qJrNnq102Qj7j7d4EccdsXzk+MhXTWXFxF yPSJJTrjYuz++6moW9R77lSdURIi5G1DrVfBAa+/cboFW2pX8lHFIgI0DklKgeYQ EyZMf53uyqQTzMurHeIYIK0ELoH+6HOMVzx60GillXRvJxI9QFh7fbw5oSgShXJZ jpNJlGqmgETA+w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:53:04 2025 by rpki-client