This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json) Hash identifier: t97scHnQDVk06WQKpuTJPw/2s8DZUYcL4RUJh4P/SlQ= Subject key identifier: 7C:DA:77:8D:56:E1:4D:57:E8:C0:8B:A9:7C:8F:D1:30:2A:E3:9A:D9 Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Certificate serial: 019C2517C3848C1899466D0D36162D3024C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft Manifest number: 0422 Signing time: Tue 03 Feb 2026 20:00:40 +0000 Manifest this update: Tue 03 Feb 2026 20:00:40 +0000 Manifest next update: Wed 04 Feb 2026 20:00:40 +0000 Files and hashes: 1: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: qFu7dsimTk9YD+0vH9Rg6CINEfRr4fPxFNtEeYwHU1s=) 2: RLh9s9zTeKJ9bogTETA60TFw6lo.roa (hash: 0m+pngGOwDg6Ap17PIVB2FP6vUl0HDw150aVd4LORg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:25:17:c3:84:8c:18:99:46:6d:0d:36:16:2d:30:24:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Validity Not Before: Feb 3 20:00:40 2026 GMT Not After : Feb 4 20:00:40 2026 GMT Subject: CN=7cda778d56e14d57e8c08ba97c8fd1302ae39ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:39:44:c1:d9:01:37:13:9a:9a:f2:1a:00: 9b:ea:9c:77:0a:82:ff:d2:63:c4:77:cc:54:17:83: 3e:3c:93:64:d8:85:55:bc:95:2b:32:b5:f2:e6:8d: aa:5b:a6:f7:81:d4:df:02:97:9f:ed:fe:c4:09:f5: 03:1d:bd:ef:ef:f2:d5:3d:8f:04:02:1d:b1:b0:0f: 3b:c5:42:25:90:a4:cd:e8:e3:da:5b:6c:08:7a:78: 7a:63:46:92:82:e4:de:6e:91:8e:e9:d2:e6:38:06: 67:7e:69:e0:01:38:47:6e:b7:d0:d2:9b:3c:b9:95: 8e:00:26:32:16:74:7f:b3:d2:30:55:23:b1:87:8a: d9:29:ae:32:10:ea:9f:65:bd:f3:e5:fc:0a:8c:81: 34:e3:2f:18:0d:30:b7:d6:14:7a:4a:60:c3:cf:4f: 78:9c:84:48:75:c5:fb:33:9c:30:0e:00:63:bf:7a: 54:a2:f1:c4:5c:40:cf:dd:72:6c:93:5a:9d:6e:ab: b9:ec:6e:f4:ba:f1:5c:7c:1d:2e:94:b5:42:07:e2: 36:64:0d:71:c8:98:05:a4:8f:ee:f4:af:66:94:47: e3:99:01:c5:69:e7:d2:2c:e2:32:89:ba:f4:d4:36: 77:f3:d9:01:d1:7d:d8:9b:5b:7b:b9:f9:a0:0b:19: c1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DA:77:8D:56:E1:4D:57:E8:C0:8B:A9:7C:8F:D1:30:2A:E3:9A:D9 X509v3 Authority Key Identifier: keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:89:a9:46:ad:33:3a:c0:fb:64:9f:26:96:0c:e9:45:72:9b: c2:d5:5c:c5:2a:48:64:41:a9:b4:61:0b:cf:39:dd:f6:52:dc: a0:8d:5b:bf:5b:42:99:61:06:90:d0:3b:81:3a:dc:57:3e:f9: c4:8a:6c:2b:da:87:6d:f8:88:81:be:04:1d:d8:52:ff:8e:24: e2:f3:28:5f:56:69:ec:69:4e:81:f5:04:99:58:72:ef:fe:dd: 7c:49:96:56:61:27:05:ea:36:e3:01:a5:eb:db:6b:07:91:53: 1b:66:b9:86:f4:b4:fc:8d:20:12:75:0d:e9:42:60:5b:e3:aa: 81:35:aa:70:2b:8b:85:0e:13:46:13:0e:3b:a7:69:b8:4e:79: e6:4a:c6:a2:f2:be:ab:b7:5e:31:6e:61:0e:46:56:78:b2:fc: 68:6f:bf:30:98:2a:9a:1e:96:f6:de:49:a8:3e:f7:32:9c:fe: 4a:42:72:42:52:98:d2:aa:87:e3:54:bb:0f:e7:8d:93:80:33: 1c:fa:7e:88:ef:ba:5e:c0:a5:a3:f4:8a:34:f7:0c:da:7f:38: fb:c9:ee:2e:59:3d:f1:ec:f3:2a:53:fc:e0:8f:13:15:d1:58: f4:d7:3b:2a:f9:29:2c:7c:7b:43:de:a6:76:94:c8:c5:4f:fc: 5f:4b:2f:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwlF8OEjBiZRm0NNhYtMCTDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm MDIwZmMwHhcNMjYwMjAzMjAwMDQwWhcNMjYwMjA0MjAwMDQwWjAzMTEwLwYDVQQD Eyg3Y2RhNzc4ZDU2ZTE0ZDU3ZThjMDhiYTk3YzhmZDEzMDJhZTM5YWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcg5RMHZATcTmpryGgCb6px3CoL/ 0mPEd8xUF4M+PJNk2IVVvJUrMrXy5o2qW6b3gdTfApef7f7ECfUDHb3v7/LVPY8E Ah2xsA87xUIlkKTN6OPaW2wIenh6Y0aSguTebpGO6dLmOAZnfmngAThHbrfQ0ps8 uZWOACYyFnR/s9IwVSOxh4rZKa4yEOqfZb3z5fwKjIE04y8YDTC31hR6SmDDz094 nIRIdcX7M5wwDgBjv3pUovHEXEDP3XJsk1qdbqu57G70uvFcfB0ulLVCB+I2ZA1x yJgFpI/u9K9mlEfjmQHFaefSLOIyibr01DZ389kB0X3Ym1t7ufmgCxnBgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzad41W4U1X6MCLqXyP0TAq45rZMB8GA1UdIwQY MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1 LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAompRq0z OsD7ZJ8mlgzpRXKbwtVcxSpIZEGptGELzznd9lLcoI1bv1tCmWEGkNA7gTrcVz75 xIpsK9qHbfiIgb4EHdhS/44k4vMoX1Zp7GlOgfUEmVhy7/7dfEmWVmEnBeo24wGl 69trB5FTG2a5hvS0/I0gEnUN6UJgW+OqgTWqcCuLhQ4TRhMOO6dpuE555krGovK+ q7deMW5hDkZWeLL8aG+/MJgqmh6W9t5JqD73Mpz+SkJyQlKY0qqH41S7D+eNk4Az HPp+iO+6XsClo/SKNPcM2n84+8nuLlk98ezzKlP84I8TFdFY9Nc7KvkpLHx7Q96m dpTIxU/8X0svAA== -----END CERTIFICATE-----Generated at Wed Feb 4 04:39:48 2026 by rpki-client