This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft File: ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json) Hash identifier: wy3dL1k0ViPNdpwZM/zFOrDg5I37pcoJpVzdUjX507Q= Subject key identifier: DE:46:86:BA:9B:AF:AA:34:80:B5:BB:39:B8:08:A5:F0:09:50:7E:22 Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F Certificate issuer: /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f Certificate serial: 019BFD2E9B4791D9EAE76E41DFF937EBE9E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft Manifest number: 068B Signing time: Tue 27 Jan 2026 02:00:48 +0000 Manifest this update: Tue 27 Jan 2026 02:00:48 +0000 Manifest next update: Wed 28 Jan 2026 02:00:48 +0000 Files and hashes: 1: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: IL4fNHB9PeMj0bCGl+FyN2j26aYOlkVwZ6XZBGgfETs=) 2: KaboQiocR929GCG29p5Fn_-ZE5o.roa (hash: fkHknMnvtPeBcLwuEn6gGYmWMMqGXg1zBzQziCqwcvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:9b:47:91:d9:ea:e7:6e:41:df:f9:37:eb:e9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f Validity Not Before: Jan 27 02:00:48 2026 GMT Not After : Jan 28 02:00:48 2026 GMT Subject: CN=de4686ba9bafaa3480b5bb39b808a5f009507e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8a:96:df:31:5e:8d:1f:7a:42:d6:2b:5b:80: df:c8:cc:51:aa:46:d7:1e:a6:2d:88:cc:04:48:84: 26:5e:ca:e5:ad:54:40:3e:49:09:42:8d:d1:ad:f2: d6:3b:f6:db:ab:77:6f:de:78:3a:e3:7f:d4:b8:4b: 84:6e:b3:6c:37:44:af:8d:59:f0:77:7f:e8:79:62: ea:84:b5:4b:4e:8b:71:11:02:3d:d2:08:66:15:ab: 6d:52:1b:fa:5c:e3:fa:f7:fd:8b:3c:23:db:60:45: d3:1c:38:b8:f2:30:e4:f1:40:20:2c:a6:a8:96:cc: 6c:95:85:65:f8:c7:a4:b2:63:00:f0:84:fc:1d:90: 54:25:35:fa:3e:fd:d8:74:48:c6:55:a7:d0:82:26: 10:c3:73:b7:fa:d2:fb:ab:31:77:84:d0:b4:f2:08: d0:08:89:4a:02:66:a9:a8:a2:41:0a:3a:64:cd:0b: 77:59:af:f0:0b:98:67:61:a4:54:5b:64:c9:35:54: c6:d9:48:7a:dd:e2:43:69:4c:eb:34:94:eb:81:26: 9e:94:ca:65:e6:f9:cf:72:44:85:bb:91:1c:51:fb: 19:df:1f:fe:2d:41:52:53:56:b9:03:16:08:e1:ca: 64:31:4e:17:b9:1a:6a:bf:b7:d4:17:a0:7f:63:94: ea:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:46:86:BA:9B:AF:AA:34:80:B5:BB:39:B8:08:A5:F0:09:50:7E:22 X509v3 Authority Key Identifier: keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:2c:fc:37:b2:61:b3:f6:d1:b2:dc:34:64:85:24:a2:cc:9b: 23:7e:57:7c:ad:d5:fe:63:23:6e:a0:5a:78:9b:07:e6:91:5a: 58:81:77:31:f6:da:a6:ac:95:ca:52:24:40:5c:35:bd:fc:72: 42:cf:c1:bc:25:ce:1b:8c:9d:df:90:04:a5:ef:a7:9f:d1:a8: bd:be:5e:f3:8b:03:bf:22:cf:ea:c5:dc:04:46:e8:ea:b7:9e: 8e:ac:a8:92:21:71:c1:6d:d3:b6:4f:a1:0e:92:8f:13:fa:48: e3:31:3d:80:d0:49:59:2a:e3:4c:dc:e9:2c:a7:fe:c9:52:8f: 08:a9:b3:31:15:b7:2f:9e:8e:e3:1d:8b:54:c2:45:ae:02:f0: 9e:91:f4:98:16:09:fe:c0:21:d4:c0:72:d1:72:19:eb:ad:32: 7f:0c:ba:63:2c:2c:fe:f0:d8:eb:b3:bb:8c:1a:58:a1:62:3a: 03:e2:bd:f0:6f:15:a5:c3:6d:0f:70:71:c1:a6:f6:1f:af:1f: c2:28:69:55:00:6c:f3:0c:58:8c:e9:27:2a:8e:2a:49:21:fe: 4c:8c:73:4c:b7:53:bc:bf:5e:ad:c5:8d:c8:46:d0:3a:79:14: b0:58:fd:c9:54:39:55:ec:df:b0:64:5d:f4:b6:df:0f:89:0e: ba:94:0b:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LptHkdnq525B3/k36+npMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTI2MTcyYmVhNWIwZmQzNDU0MDZlYmI0YWU5NWZmOTVl M2Q1N2YwHhcNMjYwMTI3MDIwMDQ4WhcNMjYwMTI4MDIwMDQ4WjAzMTEwLwYDVQQD EyhkZTQ2ODZiYTliYWZhYTM0ODBiNWJiMzliODA4YTVmMDA5NTA3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoqW3zFejR96QtYrW4DfyMxRqkbX HqYtiMwESIQmXsrlrVRAPkkJQo3RrfLWO/bbq3dv3ng643/UuEuEbrNsN0SvjVnw d3/oeWLqhLVLTotxEQI90ghmFattUhv6XOP69/2LPCPbYEXTHDi48jDk8UAgLKao lsxslYVl+MeksmMA8IT8HZBUJTX6Pv3YdEjGVafQgiYQw3O3+tL7qzF3hNC08gjQ CIlKAmapqKJBCjpkzQt3Wa/wC5hnYaRUW2TJNVTG2Uh63eJDaUzrNJTrgSaelMpl 5vnPckSFu5EcUfsZ3x/+LUFSU1a5AxYI4cpkMU4XuRpqv7fUF6B/Y5Tq/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5Ghrqbr6o0gLW7ObgIpfAJUH4iMB8GA1UdIwQY MBaAFBESYXK+pbD9NFQG67Sulf+V49V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mZDdmNDgtMDBkNi00N2RmLTg3OTct OGQ5MDk0ZjNmNWExLzEvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mZDdmNDgtMDBkNi00N2RmLTg3OTctOGQ5MDk0ZjNmNWEx LzEvRVJKaGNyNmxzUDAwVkFicnRLNlZfNVhqMVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCz8N7Jh s/bRstw0ZIUkosybI35XfK3V/mMjbqBaeJsH5pFaWIF3MfbapqyVylIkQFw1vfxy Qs/BvCXOG4yd35AEpe+nn9Govb5e84sDvyLP6sXcBEbo6reejqyokiFxwW3Ttk+h DpKPE/pI4zE9gNBJWSrjTNzpLKf+yVKPCKmzMRW3L56O4x2LVMJFrgLwnpH0mBYJ /sAh1MBy0XIZ660yfwy6Yyws/vDY67O7jBpYoWI6A+K98G8VpcNtD3Bxwab2H68f wihpVQBs8wxYjOknKo4qSSH+TIxzTLdTvL9ercWNyEbQOnkUsFj9yVQ5VezfsGRd 9LbfD4kOupQL6w== -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:29 2026 by rpki-client