This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json) Hash identifier: rUIhcQU2q5oawPljrFdm/GGFrpjKJT3FaDMccjGWPkQ= Subject key identifier: DC:71:27:02:69:24:B2:C3:BA:E3:1F:27:8A:89:FE:2C:78:D8:D2:7A Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1 Certificate serial: 019B416D6847D53A3BDC7E55D3F3A7472DB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft Manifest number: 0A29 Signing time: Sun 21 Dec 2025 15:00:47 +0000 Manifest this update: Sun 21 Dec 2025 15:00:47 +0000 Manifest next update: Mon 22 Dec 2025 15:00:47 +0000 Files and hashes: 1: DV4eV0bz0BV_l9ZAbntV44Eglw0.roa (hash: wnq0IXxOxpXaYEifWhivUR0CW5t4jvpNWroJwGm7DbM=) 2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: KL5s/MXecz429jZJOsT7TX8QzkZ5RfvbE6c/XO/FJvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:68:47:d5:3a:3b:dc:7e:55:d3:f3:a7:47:2d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1 Validity Not Before: Dec 21 15:00:47 2025 GMT Not After : Dec 22 15:00:47 2025 GMT Subject: CN=dc7127026924b2c3bae31f278a89fe2c78d8d27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:ae:2b:d2:e6:59:a0:96:e2:08:bc:30:6f: d7:67:e5:1d:5e:e3:db:51:44:15:e6:ca:a0:7d:b7: b8:a4:c9:ff:e5:24:10:d2:42:f2:54:c2:0d:64:8e: f0:fe:63:00:cc:c3:d3:06:5d:72:78:f3:19:05:ab: ba:7c:27:46:8d:c3:24:7f:a7:73:f9:70:7d:98:a6: 1d:dc:30:9d:37:3c:b2:d3:7b:c1:c5:c8:44:ab:f0: 2e:2d:76:fc:a8:7a:4b:20:b2:41:b8:17:39:81:ef: 05:cc:a8:11:3a:1e:e0:02:d0:b5:e2:75:75:9d:64: 48:a8:1c:d2:1a:0a:7b:82:b6:28:46:14:cc:0a:f3: 62:43:d1:24:b3:ba:a2:c7:d8:e1:90:77:29:be:5f: 19:91:c9:14:16:1b:53:da:71:23:3f:74:9b:38:92: 8b:fb:3c:a5:6a:bd:ed:f2:9f:38:68:1d:36:8f:b1: 96:e8:c8:c5:9d:69:1b:7f:c4:20:b2:d5:a7:f8:40: 9f:7e:a9:f3:da:25:e5:d0:78:57:d3:2d:99:40:f1: 72:71:cf:24:4f:be:18:d6:42:99:54:9c:d3:cf:e8: 38:9c:ea:91:f2:03:75:38:12:a6:de:fe:df:85:7a: 1e:fb:37:84:59:4d:e8:88:a2:09:90:72:1f:52:46: 7d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:71:27:02:69:24:B2:C3:BA:E3:1F:27:8A:89:FE:2C:78:D8:D2:7A X509v3 Authority Key Identifier: keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f0:9d:1f:52:92:0d:eb:a3:fa:6a:70:d1:7f:d5:52:4c:3a: a6:f9:48:03:4c:9e:ca:28:8a:5e:4c:29:60:64:13:e4:ae:d2: 9e:91:18:8f:0d:30:16:1d:d9:5c:17:5b:5a:11:13:87:06:10: c9:b1:c1:37:d2:6c:eb:51:19:95:42:4f:03:6e:2e:dc:0b:7d: 3b:c2:53:43:ce:f8:e0:bc:b3:45:47:12:59:ae:16:c0:18:17: 50:34:36:df:dd:cf:61:8c:4e:90:41:5b:35:43:eb:b0:4b:cd: 81:9b:f3:23:ad:9d:fd:c1:5b:f3:23:a2:85:52:aa:89:a7:53: 0f:16:b3:d3:f5:4d:c4:65:67:c0:04:74:d5:2a:7a:fe:86:44: 2d:07:95:6e:c6:55:6e:d0:5f:63:ea:b7:74:d7:be:f2:aa:8e: 9a:f5:24:7c:65:d6:69:69:a4:7c:3c:0f:c6:ad:86:de:54:78: 90:22:f0:91:59:27:c5:96:c8:b8:42:81:70:38:24:0a:6f:d6: 7e:82:98:44:2b:f5:e7:28:45:ab:03:54:7a:d5:71:3f:a4:09: a4:eb:ae:50:95:e0:66:1f:80:da:a2:38:f4:38:81:5f:87:70: 3a:a7:c1:88:9e:d0:17:ed:4b:cc:d3:a0:92:7c:f0:f2:c2:73: 9e:d8:78:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbWhH1To73H5V0/OnRy2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh MTExYjEwHhcNMjUxMjIxMTUwMDQ3WhcNMjUxMjIyMTUwMDQ3WjAzMTEwLwYDVQQD EyhkYzcxMjcwMjY5MjRiMmMzYmFlMzFmMjc4YTg5ZmUyYzc4ZDhkMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt2uK9LmWaCW4gi8MG/XZ+UdXuPb UUQV5sqgfbe4pMn/5SQQ0kLyVMINZI7w/mMAzMPTBl1yePMZBau6fCdGjcMkf6dz +XB9mKYd3DCdNzyy03vBxchEq/AuLXb8qHpLILJBuBc5ge8FzKgROh7gAtC14nV1 nWRIqBzSGgp7grYoRhTMCvNiQ9Eks7qix9jhkHcpvl8ZkckUFhtT2nEjP3SbOJKL +zylar3t8p84aB02j7GW6MjFnWkbf8QgstWn+ECffqnz2iXl0HhX0y2ZQPFycc8k T74Y1kKZVJzTz+g4nOqR8gN1OBKm3v7fhXoe+zeEWU3oiKIJkHIfUkZ9vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxxJwJpJLLDuuMfJ4qJ/ix42NJ6MB8GA1UdIwQY MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPCdH1KS Deuj+mpw0X/VUkw6pvlIA0yeyiiKXkwpYGQT5K7SnpEYjw0wFh3ZXBdbWhEThwYQ ybHBN9Js61EZlUJPA24u3At9O8JTQ8744LyzRUcSWa4WwBgXUDQ2393PYYxOkEFb NUPrsEvNgZvzI62d/cFb8yOihVKqiadTDxaz0/VNxGVnwAR01Sp6/oZELQeVbsZV btBfY+q3dNe+8qqOmvUkfGXWaWmkfDwPxq2G3lR4kCLwkVknxZbIuEKBcDgkCm/W foKYRCv15yhFqwNUetVxP6QJpOuuUJXgZh+A2qI49DiBX4dwOqfBiJ7QF+1LzNOg knzw8sJznth4lQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:31:21 2025 by rpki-client