This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json) Hash identifier: DlNxqfYSEfAdIfcuZDOufnbIC8nONLn/Ffl+I/m8/TM= Subject key identifier: BB:19:75:CA:CB:8C:B6:06:E9:43:34:E5:1F:9A:6F:1C:A3:8D:05:4B Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Certificate serial: 019B2399B8410ACF2FA56592FB1CAA844CA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft Manifest number: 039C Signing time: Mon 15 Dec 2025 20:00:35 +0000 Manifest this update: Mon 15 Dec 2025 20:00:35 +0000 Manifest next update: Tue 16 Dec 2025 20:00:35 +0000 Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=) 2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: JR+skOVoAJocU5LPjLevy5avAQC18a3iAs4koNRorGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:b8:41:0a:cf:2f:a5:65:92:fb:1c:aa:84:4c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Validity Not Before: Dec 15 20:00:35 2025 GMT Not After : Dec 16 20:00:35 2025 GMT Subject: CN=bb1975cacb8cb606e94334e51f9a6f1ca38d054b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:01:93:5b:a9:53:b8:81:4f:25:5d:85:bb:d1: 55:fe:c4:29:de:5b:ff:bc:b7:29:ae:55:4f:dc:8c: a6:8b:46:cf:73:ec:3f:11:90:a3:8c:33:3f:06:49: 1c:64:21:5c:dc:06:30:28:94:d2:22:eb:08:4d:ff: e9:b8:76:53:d8:e0:7c:ab:a6:98:3b:8a:b8:62:10: 89:5d:53:e3:5f:8a:5d:fe:0b:05:ca:ba:d6:86:6a: 2c:b3:97:d2:7d:c1:19:02:11:9b:22:0a:6f:f0:95: 23:ba:1d:82:fc:8b:f2:8c:d1:fa:b6:61:8e:27:32: 6e:53:d4:3a:24:23:71:df:16:2d:e4:a5:8a:db:ce: b9:4a:a0:c0:fa:63:aa:0b:4d:81:e7:ab:fd:df:cd: c3:c1:bc:9e:a0:3c:8a:3b:dd:f3:20:e9:c7:78:b6: 48:45:00:d8:a5:f3:69:08:18:9d:0c:dc:63:4d:c0: ff:20:b4:bf:7b:87:c8:fb:ad:7c:f7:2e:be:8c:4d: 7f:49:7c:2a:a3:5b:83:17:94:b0:ed:e2:84:f6:fe: 1c:a2:46:1c:ec:e0:4d:f9:7e:aa:79:a4:50:5f:62: 74:e9:37:a2:a4:35:52:b7:78:78:11:84:3d:d8:34: eb:77:60:32:e1:77:15:60:1f:8b:ca:86:2d:63:ab: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:19:75:CA:CB:8C:B6:06:E9:43:34:E5:1F:9A:6F:1C:A3:8D:05:4B X509v3 Authority Key Identifier: keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e8:92:5b:39:42:b2:53:e4:58:c1:cf:69:54:cf:32:90:80: 8f:e6:ae:59:02:16:60:90:d5:a6:63:0b:ac:10:e1:83:37:f3: db:93:5d:a1:a2:41:7f:a5:f7:10:1a:99:82:8c:ed:34:0f:35: 17:be:7d:ec:10:ca:e2:25:a1:7b:df:27:4e:70:ca:f2:07:0b: 56:5d:d0:d4:c4:ae:98:8d:9c:0e:8d:8d:e7:e5:94:b8:06:ad: c2:da:4b:d2:8d:8c:ae:71:24:80:86:08:13:b7:72:32:93:ee: dd:99:51:0e:fa:37:dc:77:22:f6:12:62:10:ff:6a:8a:a4:c7: cf:f0:ac:77:9a:bc:6e:77:ec:c2:bb:59:fe:06:ee:d8:32:9b: 6b:39:e8:50:5c:ff:66:32:6f:a2:ce:d7:19:70:10:1c:e1:01: ed:ce:e3:00:ab:d2:8f:2f:4d:89:9f:2d:77:70:99:41:2d:12: 31:3e:ba:80:9e:32:26:60:92:55:15:15:b0:35:65:a6:9c:24: c3:9f:f6:0c:61:35:00:8d:88:38:a2:2d:c4:07:07:b7:ec:62: 98:39:76:e9:3f:66:e7:92:91:ae:1d:0c:7c:04:10:43:23:8b: c1:32:bb:ba:40:ee:13:8b:88:71:99:81:5b:90:1d:ec:b2:7e: 38:d9:15:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmbhBCs8vpWWS+xyqhEyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm MDIwZmMwHhcNMjUxMjE1MjAwMDM1WhcNMjUxMjE2MjAwMDM1WjAzMTEwLwYDVQQD EyhiYjE5NzVjYWNiOGNiNjA2ZTk0MzM0ZTUxZjlhNmYxY2EzOGQwNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QGTW6lTuIFPJV2Fu9FV/sQp3lv/ vLcprlVP3Iymi0bPc+w/EZCjjDM/BkkcZCFc3AYwKJTSIusITf/puHZT2OB8q6aY O4q4YhCJXVPjX4pd/gsFyrrWhmoss5fSfcEZAhGbIgpv8JUjuh2C/IvyjNH6tmGO JzJuU9Q6JCNx3xYt5KWK2865SqDA+mOqC02B56v9383DwbyeoDyKO93zIOnHeLZI RQDYpfNpCBidDNxjTcD/ILS/e4fI+6189y6+jE1/SXwqo1uDF5Sw7eKE9v4cokYc 7OBN+X6qeaRQX2J06TeipDVSt3h4EYQ92DTrd2Ay4XcVYB+LyoYtY6tkVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsZdcrLjLYG6UM05R+abxyjjQVLMB8GA1UdIwQY MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1 LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOiSWzlC slPkWMHPaVTPMpCAj+auWQIWYJDVpmMLrBDhgzfz25NdoaJBf6X3EBqZgoztNA81 F7597BDK4iWhe98nTnDK8gcLVl3Q1MSumI2cDo2N5+WUuAatwtpL0o2MrnEkgIYI E7dyMpPu3ZlRDvo33Hci9hJiEP9qiqTHz/Csd5q8bnfswrtZ/gbu2DKbaznoUFz/ ZjJvos7XGXAQHOEB7c7jAKvSjy9NiZ8td3CZQS0SMT66gJ4yJmCSVRUVsDVlppwk w5/2DGE1AI2IOKItxAcHt+ximDl26T9m55KRrh0MfAQQQyOLwTK7ukDuE4uIcZmB W5Ad7LJ+ONkVPA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:24:01 2025 by rpki-client