This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json) Hash identifier: ozikb+xGZmdLiZz8lngi1Lzutt5jhugww1iDVGj0f34= Subject key identifier: 13:10:67:45:A7:8B:7E:D1:76:77:01:D4:8E:71:8C:52:59:6F:B5:AD Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Certificate serial: 019B2219B2CDE9A0AC3C98CFB2BB68657D7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft Manifest number: 07FE Signing time: Mon 15 Dec 2025 13:01:07 +0000 Manifest this update: Mon 15 Dec 2025 13:01:07 +0000 Manifest next update: Tue 16 Dec 2025 13:01:07 +0000 Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: lcXCJ7lUEANPnEX+5kWgm2xVQsUMZcFU3U9Kj/MbC7Y=) 2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=) 3: yQhtD1qF0_eAAwH3V8QVjGAIXP4.roa (hash: 2X23/CtXXbt7Zb4gO5E2OH1n49d+KIt7zqggq5S1lo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:b2:cd:e9:a0:ac:3c:98:cf:b2:bb:68:65:7d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Validity Not Before: Dec 15 13:01:07 2025 GMT Not After : Dec 16 13:01:07 2025 GMT Subject: CN=13106745a78b7ed1767701d48e718c52596fb5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:00:7b:ac:87:c9:b0:38:57:70:96:d6:b7:c8: bc:5a:71:b7:18:b3:c7:94:7a:db:73:24:15:4c:99: ff:47:81:68:fa:51:94:5d:93:ca:07:c5:65:2f:cd: c1:9d:d2:71:40:69:a7:9a:af:30:6a:0e:3c:db:31: 0b:bf:cf:f4:e9:3a:78:02:51:ab:76:00:f8:3a:a7: 07:3e:7b:cf:65:ff:c2:2b:ff:0c:65:c3:db:b0:76: 11:4c:8e:82:69:91:8b:69:9d:a6:95:cb:6e:86:9e: 30:bc:44:db:29:bb:95:33:45:03:4f:5d:b3:af:da: 8a:c6:45:9b:00:29:ff:1a:3b:ce:85:6f:fd:0b:64: 3c:bf:9e:a9:15:7a:de:4e:2b:65:62:b7:0f:d1:ca: 7a:99:9e:79:54:2d:87:76:e9:c0:98:7d:dd:94:47: 7c:cb:63:b3:e4:5e:e7:73:e1:4b:6e:09:55:64:02: 12:f4:b0:57:44:c4:7b:fc:be:f2:5f:dc:f2:c8:0b: af:3d:5d:51:67:9e:35:33:f8:32:7d:32:29:f6:ab: 7a:5f:96:34:53:bc:c0:81:a6:df:3b:10:ad:e8:79: 71:9d:98:60:71:a2:11:eb:4f:2b:7c:89:1b:1e:2a: 3a:2b:b0:c1:17:73:17:a0:29:c9:48:51:cb:0c:2f: 5a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:10:67:45:A7:8B:7E:D1:76:77:01:D4:8E:71:8C:52:59:6F:B5:AD X509v3 Authority Key Identifier: keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cb:dc:a7:37:4d:91:f2:a4:88:c4:61:c1:6a:09:d1:b0:0b: f6:25:94:1c:bb:dd:9f:90:c2:32:5c:37:37:3f:b4:97:0d:74: 91:b7:52:84:fd:58:8f:25:29:13:c7:2f:0a:b6:f5:8d:bd:c7: 40:9a:cb:81:89:32:0c:e7:11:34:48:be:db:8a:4f:03:87:a5: de:b6:01:9f:52:55:b2:79:91:30:94:6d:bf:e9:cb:97:51:f9: 4d:fe:68:95:62:30:90:df:b1:f2:d5:e0:87:91:17:0a:93:73: 5b:45:60:de:7c:25:e0:eb:5b:ff:a0:8a:40:27:d3:0a:cc:f5: cc:20:cf:04:bb:03:9f:3d:4a:fc:f1:d2:24:56:33:1a:df:86: c5:0d:6d:ff:7e:10:9d:2e:77:44:40:6f:24:b6:e4:88:84:5b: 8e:ff:f4:d6:74:35:cd:e0:fc:b5:a0:04:92:81:aa:d2:e4:1a: 3a:3c:c6:ab:1f:33:ba:e0:da:71:b5:33:4c:c0:2d:b3:3c:b5: 9c:e3:1f:5b:9a:7e:ce:3b:6f:f4:c0:a4:82:bd:65:b3:8c:4f: f5:95:91:87:2c:ce:0d:6a:d3:17:b4:9e:76:96:a5:de:74:23: e9:4f:1a:53:77:59:82:e1:0c:a2:4a:a0:54:71:ed:02:77:60: 50:98:b5:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGbLN6aCsPJjPsrtoZX17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjE2NzRiYmYwZDExOGYyNTU0ZjgwY2FmZDNlZjFiMzlk OGFlM2YwHhcNMjUxMjE1MTMwMTA3WhcNMjUxMjE2MTMwMTA3WjAzMTEwLwYDVQQD EygxMzEwNjc0NWE3OGI3ZWQxNzY3NzAxZDQ4ZTcxOGM1MjU5NmZiNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwB7rIfJsDhXcJbWt8i8WnG3GLPH lHrbcyQVTJn/R4Fo+lGUXZPKB8VlL83BndJxQGmnmq8wag482zELv8/06Tp4AlGr dgD4OqcHPnvPZf/CK/8MZcPbsHYRTI6CaZGLaZ2mlctuhp4wvETbKbuVM0UDT12z r9qKxkWbACn/GjvOhW/9C2Q8v56pFXreTitlYrcP0cp6mZ55VC2HdunAmH3dlEd8 y2Oz5F7nc+FLbglVZAIS9LBXRMR7/L7yX9zyyAuvPV1RZ541M/gyfTIp9qt6X5Y0 U7zAgabfOxCt6HlxnZhgcaIR608rfIkbHio6K7DBF3MXoCnJSFHLDC9avwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMQZ0Wni37RdncB1I5xjFJZb7WtMB8GA1UdIwQY MBaAFBKxZ0u/DRGPJVT4DK/T7xs52K4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgt ZjM3MWY5OGE3NTNiLzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgtZjM3MWY5OGE3NTNi LzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsvcpzdN kfKkiMRhwWoJ0bAL9iWUHLvdn5DCMlw3Nz+0lw10kbdShP1YjyUpE8cvCrb1jb3H QJrLgYkyDOcRNEi+24pPA4el3rYBn1JVsnmRMJRtv+nLl1H5Tf5olWIwkN+x8tXg h5EXCpNzW0Vg3nwl4Otb/6CKQCfTCsz1zCDPBLsDnz1K/PHSJFYzGt+GxQ1t/34Q nS53REBvJLbkiIRbjv/01nQ1zeD8taAEkoGq0uQaOjzGqx8zuuDacbUzTMAtszy1 nOMfW5p+zjtv9MCkgr1ls4xP9ZWRhyzODWrTF7Sedpal3nQj6U8aU3dZguEMokqg VHHtAndgUJi1Pg== -----END CERTIFICATE-----Generated at Mon Dec 15 18:17:54 2025 by rpki-client