This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json) Hash identifier: 54VkGAg20+XjxZ2LKrRX5r0oRD2ttz+9Xn+FDXKyOvY= Subject key identifier: 35:D9:57:3F:F4:A7:DD:BF:35:54:75:0D:2D:18:6A:42:E3:56:3E:32 Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Certificate serial: 019B48B952B9A2C910D464C5C5C6EDFAAC9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft Manifest number: 0812 Signing time: Tue 23 Dec 2025 01:01:03 +0000 Manifest this update: Tue 23 Dec 2025 01:01:03 +0000 Manifest next update: Wed 24 Dec 2025 01:01:03 +0000 Files and hashes: 1: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: xuCfI100UMXHdCLFT2+xjDeWvznKp3AFU2N2wCZCzJU=) 2: QyZ6YrSQShEJRCfEg7OABiPpNqo.roa (hash: /IBc404KSaAjXw58g7c+9ZuoNzXJ+jjuCZD0InA6tmA=) 3: yQhtD1qF0_eAAwH3V8QVjGAIXP4.roa (hash: 2X23/CtXXbt7Zb4gO5E2OH1n49d+KIt7zqggq5S1lo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:52:b9:a2:c9:10:d4:64:c5:c5:c6:ed:fa:ac:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Validity Not Before: Dec 23 01:01:03 2025 GMT Not After : Dec 24 01:01:03 2025 GMT Subject: CN=35d9573ff4a7ddbf3554750d2d186a42e3563e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fb:fc:ab:e8:c9:ce:44:81:48:db:b6:ae:24: cb:2e:d2:26:37:b1:0a:3f:19:25:71:ee:51:32:36: ed:59:69:82:3b:06:10:5d:b4:0d:c8:66:5e:81:ef: fd:8b:ff:58:47:f6:c6:30:39:86:20:cf:22:56:01: 64:db:53:3b:2a:02:d3:cb:5d:97:b6:90:6f:d4:c0: 2f:39:15:4c:4a:34:69:a9:cc:a3:59:2b:33:a1:29: fb:7e:41:84:cd:76:d2:67:da:a8:29:09:e9:76:f5: c7:17:91:ce:86:33:9f:72:e9:bf:9e:c1:df:8d:09: 09:dc:03:d3:d5:6c:8a:96:7a:80:12:6d:31:11:7f: 97:29:55:4b:b4:d9:e6:35:c1:f3:42:1f:54:ec:15: ec:a8:0d:a0:8c:1e:a3:46:63:32:24:49:1e:86:b8: ac:90:14:8d:1a:84:3d:13:11:f6:40:fb:0a:61:ef: d5:3c:e8:39:54:e2:b8:db:42:ef:aa:7a:e3:b4:8e: 1f:cf:94:bf:89:94:c0:41:4c:88:38:82:10:dd:b4: f8:7e:1a:1f:80:e3:72:56:20:fa:f9:91:44:3f:02: cf:c1:4c:2b:47:30:89:dc:8d:6f:a6:af:7a:9b:f4: 43:86:41:85:09:c7:c1:7e:16:95:de:7e:59:f3:4b: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D9:57:3F:F4:A7:DD:BF:35:54:75:0D:2D:18:6A:42:E3:56:3E:32 X509v3 Authority Key Identifier: keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7b:6d:83:ac:c5:1a:88:b0:5d:71:b6:f5:8e:b7:4d:bf:ab: 34:07:d8:8d:13:c0:ab:c7:a3:1d:5c:9a:4d:ff:fd:8e:49:5e: 2c:11:77:44:69:d1:2e:82:b3:61:fe:28:98:63:4a:45:81:f8: 76:6b:78:93:16:f7:8a:23:57:0b:54:bd:6b:ba:99:c6:73:ec: 2e:65:65:17:5c:bf:79:a5:ae:50:5d:6a:f3:97:e3:2c:64:5b: cb:19:e3:62:27:00:6b:34:2f:78:97:c8:41:33:5e:a6:a0:5b: 72:18:ef:f8:6c:20:46:23:55:5b:c4:ff:b6:4a:02:ea:64:39: b7:dd:89:70:2e:9e:7c:6c:f2:d8:a1:76:4e:86:73:dc:ce:0b: f1:e3:db:0f:a9:57:85:f8:10:ec:e3:b8:23:86:c1:36:8c:e8: ef:b8:57:e1:f7:a9:d6:20:bc:e8:fe:45:a8:cf:f6:8e:8e:e2: 41:c5:44:45:95:0b:61:0f:0b:8f:6d:4e:aa:a0:51:7e:c8:f2: a4:52:12:df:04:12:ea:87:8f:1d:83:0a:28:16:05:74:33:93: 2b:7c:e5:3c:23:d5:64:44:43:61:e7:82:14:db:e4:93:7a:78: 7d:b3:39:ba:fb:eb:fe:27:d5:fa:b0:7b:e0:e5:ea:80:f4:aa: c7:42:d0:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuVK5oskQ1GTFxcbt+qycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjE2NzRiYmYwZDExOGYyNTU0ZjgwY2FmZDNlZjFiMzlk OGFlM2YwHhcNMjUxMjIzMDEwMTAzWhcNMjUxMjI0MDEwMTAzWjAzMTEwLwYDVQQD EygzNWQ5NTczZmY0YTdkZGJmMzU1NDc1MGQyZDE4NmE0MmUzNTYzZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfv8q+jJzkSBSNu2riTLLtImN7EK Pxklce5RMjbtWWmCOwYQXbQNyGZege/9i/9YR/bGMDmGIM8iVgFk21M7KgLTy12X tpBv1MAvORVMSjRpqcyjWSszoSn7fkGEzXbSZ9qoKQnpdvXHF5HOhjOfcum/nsHf jQkJ3APT1WyKlnqAEm0xEX+XKVVLtNnmNcHzQh9U7BXsqA2gjB6jRmMyJEkehris kBSNGoQ9ExH2QPsKYe/VPOg5VOK420LvqnrjtI4fz5S/iZTAQUyIOIIQ3bT4fhof gONyViD6+ZFEPwLPwUwrRzCJ3I1vpq96m/RDhkGFCcfBfhaV3n5Z80sN4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXZVz/0p92/NVR1DS0YakLjVj4yMB8GA1UdIwQY MBaAFBKxZ0u/DRGPJVT4DK/T7xs52K4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgt ZjM3MWY5OGE3NTNiLzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgtZjM3MWY5OGE3NTNi LzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinttg6zF GoiwXXG29Y63Tb+rNAfYjRPAq8ejHVyaTf/9jkleLBF3RGnRLoKzYf4omGNKRYH4 dmt4kxb3iiNXC1S9a7qZxnPsLmVlF1y/eaWuUF1q85fjLGRbyxnjYicAazQveJfI QTNepqBbchjv+GwgRiNVW8T/tkoC6mQ5t92JcC6efGzy2KF2ToZz3M4L8ePbD6lX hfgQ7OO4I4bBNozo77hX4fep1iC86P5FqM/2jo7iQcVERZULYQ8Lj21OqqBRfsjy pFIS3wQS6oePHYMKKBYFdDOTK3zlPCPVZERDYeeCFNvkk3p4fbM5uvvr/ifV+rB7 4OXqgPSqx0LQcQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:59:59 2025 by rpki-client