This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json) Hash identifier: e8zhSNTzk4WuoMKmMMFct8PdLzIIMZaj16Saue+sA88= Subject key identifier: E9:AC:40:0F:01:3C:3F:A2:0E:A6:56:3B:F1:33:23:94:C0:63:B3:D2 Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Certificate serial: 019B40FFDFD259894B9B81CB2C6F522FB9EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft Manifest number: 080E Signing time: Sun 21 Dec 2025 13:01:09 +0000 Manifest this update: Sun 21 Dec 2025 13:01:09 +0000 Manifest next update: Mon 22 Dec 2025 13:01:09 +0000 Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: mZtg4bAZZFMCmpFNCUbDlRzI92H+oIBMJerzY30pCto=) 2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=) 3: yQhtD1qF0_eAAwH3V8QVjGAIXP4.roa (hash: 2X23/CtXXbt7Zb4gO5E2OH1n49d+KIt7zqggq5S1lo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:df:d2:59:89:4b:9b:81:cb:2c:6f:52:2f:b9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Validity Not Before: Dec 21 13:01:09 2025 GMT Not After : Dec 22 13:01:09 2025 GMT Subject: CN=e9ac400f013c3fa20ea6563bf1332394c063b3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:ee:26:b4:6b:56:71:b1:9a:c7:9f:23:92: cc:82:58:fe:22:24:16:b4:60:8e:4a:78:01:37:65: f3:16:df:24:b9:8e:d9:7a:95:98:de:92:39:49:66: f3:8d:74:cd:1d:e9:e3:2d:b6:6d:1b:62:52:3f:9d: 5f:f0:27:bc:23:bc:e9:79:52:59:8e:7f:0a:32:46: 58:78:7d:cc:bb:22:36:21:5a:8a:4d:7b:65:26:58: 68:72:83:7d:96:7f:c7:bf:32:06:bb:8a:84:b2:2e: 98:5b:12:74:81:26:83:97:cb:69:cb:bf:9c:e0:9d: 8c:2a:ac:eb:f7:1b:f6:f9:45:14:b1:28:90:3f:bc: d1:07:9e:44:64:b2:15:c0:8d:87:41:48:af:aa:e8: 9c:1e:be:44:90:e3:74:b9:50:43:85:61:79:d3:40: 02:4a:45:5f:db:14:a0:8a:e2:36:16:93:7c:db:7c: a5:e7:36:e3:d3:0d:99:d6:9d:7c:c0:a4:d0:9c:b0: d0:82:65:67:9d:2c:bc:3f:30:54:aa:b8:ee:39:59: 26:53:c8:4f:63:98:03:63:33:f2:b3:8b:52:fc:18: 38:7c:d6:e3:45:93:e8:b1:27:a5:c6:29:1a:78:91: f8:fc:ee:56:0d:1a:f6:89:95:0e:f2:9b:32:0b:98: 20:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AC:40:0F:01:3C:3F:A2:0E:A6:56:3B:F1:33:23:94:C0:63:B3:D2 X509v3 Authority Key Identifier: keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:26:6e:0f:07:39:cc:a6:46:31:7a:02:4e:2b:79:87:c8:c4: 58:f9:b6:2f:47:54:38:f6:85:ee:71:7c:7a:e4:60:e1:7e:de: 31:03:cf:f1:4f:8f:62:3a:bf:e2:72:4e:c2:4e:60:05:77:80: 60:42:01:63:5c:0b:9b:ad:1a:4c:28:4f:f8:33:31:6c:b7:b7: 6d:37:53:33:18:26:b6:b3:e6:be:85:41:b4:18:0b:7e:5b:aa: 2c:9a:e1:7b:42:dc:d6:6a:e0:7f:77:49:8c:dd:d6:73:07:a1: 6a:0b:df:66:49:ba:cd:8b:4c:11:ad:3e:25:7b:11:6c:a7:4d: ae:03:1a:bf:27:7c:fc:0f:b4:ca:de:e4:9b:8b:4f:c3:c1:be: 0d:9a:d5:ba:51:e5:77:05:00:c6:63:0b:0a:7c:35:98:f9:ed: d9:39:31:34:4f:cb:6e:4b:1f:74:62:4d:fb:86:48:96:d6:32: 6e:dc:47:fa:66:82:f7:07:1a:67:cf:2a:62:2e:13:12:5d:52: 99:19:4b:64:8b:96:cd:32:e4:12:ea:c2:b1:58:1a:f1:00:52: 0e:a1:c7:fa:a8:ba:d6:0e:cb:9e:c6:09:7e:ca:29:ec:48:ce: 93:00:75:26:84:2c:2c:90:64:dd:20:33:d0:a5:27:cb:c7:74: 9a:a0:38:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/9/SWYlLm4HLLG9SL7nrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjE2NzRiYmYwZDExOGYyNTU0ZjgwY2FmZDNlZjFiMzlk OGFlM2YwHhcNMjUxMjIxMTMwMTA5WhcNMjUxMjIyMTMwMTA5WjAzMTEwLwYDVQQD EyhlOWFjNDAwZjAxM2MzZmEyMGVhNjU2M2JmMTMzMjM5NGMwNjNiM2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW3uJrRrVnGxmsefI5LMglj+IiQW tGCOSngBN2XzFt8kuY7ZepWY3pI5SWbzjXTNHenjLbZtG2JSP51f8Ce8I7zpeVJZ jn8KMkZYeH3MuyI2IVqKTXtlJlhocoN9ln/HvzIGu4qEsi6YWxJ0gSaDl8tpy7+c 4J2MKqzr9xv2+UUUsSiQP7zRB55EZLIVwI2HQUivquicHr5EkON0uVBDhWF500AC SkVf2xSgiuI2FpN823yl5zbj0w2Z1p18wKTQnLDQgmVnnSy8PzBUqrjuOVkmU8hP Y5gDYzPys4tS/Bg4fNbjRZPosSelxikaeJH4/O5WDRr2iZUO8psyC5ggkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmsQA8BPD+iDqZWO/EzI5TAY7PSMB8GA1UdIwQY MBaAFBKxZ0u/DRGPJVT4DK/T7xs52K4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgt ZjM3MWY5OGE3NTNiLzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgtZjM3MWY5OGE3NTNi LzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCZuDwc5 zKZGMXoCTit5h8jEWPm2L0dUOPaF7nF8euRg4X7eMQPP8U+PYjq/4nJOwk5gBXeA YEIBY1wLm60aTChP+DMxbLe3bTdTMxgmtrPmvoVBtBgLfluqLJrhe0Lc1mrgf3dJ jN3WcwehagvfZkm6zYtMEa0+JXsRbKdNrgMavyd8/A+0yt7km4tPw8G+DZrVulHl dwUAxmMLCnw1mPnt2TkxNE/LbksfdGJN+4ZIltYybtxH+maC9wcaZ88qYi4TEl1S mRlLZIuWzTLkEurCsVga8QBSDqHH+qi61g7LnsYJfsop7EjOkwB1JoQsLJBk3SAz 0KUny8d0mqA4Hw== -----END CERTIFICATE-----Generated at Sun Dec 21 18:08:50 2025 by rpki-client