This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft File: aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json) Hash identifier: Xjhs5l1IZHzBR6KfVmY2TIyNMdQqdh3emxPQtQmW11g= Subject key identifier: FC:81:32:78:24:30:9C:02:2E:9C:23:C2:E3:6A:02:0C:98:2C:02:49 Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35 Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35 Certificate serial: 019B194D1B959385519C6EAEBAA38E48AF28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft Manifest number: 1424 Signing time: Sat 13 Dec 2025 20:00:42 +0000 Manifest this update: Sat 13 Dec 2025 20:00:42 +0000 Manifest next update: Sun 14 Dec 2025 20:00:42 +0000 Files and hashes: 1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: dvaX2dwauoxGaAQQAaHvwZOuuo/82wZhtV+yX/KIfLc=) 2: eEP1VypyuqVxmlLrgaA9LlVwYK4.roa (hash: 5dvQLaqP0vbYafUJXNT7sKTWbRstUgrMUzxGvHU5Rgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:1b:95:93:85:51:9c:6e:ae:ba:a3:8e:48:af:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35 Validity Not Before: Dec 13 20:00:42 2025 GMT Not After : Dec 14 20:00:42 2025 GMT Subject: CN=fc81327824309c022e9c23c2e36a020c982c0249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f6:e7:8e:56:b9:e1:e3:3d:fb:3c:e9:25:57: 18:3f:b6:d2:14:2a:c6:c5:8b:2a:76:b1:fe:fd:87: a6:a2:be:bb:f6:ba:b2:6c:53:f8:ca:ef:59:64:e7: 1b:b5:bf:7a:19:d6:f0:5b:3f:92:33:6d:68:50:91: 0f:a6:2e:ff:b2:86:8c:17:7d:a9:f5:b0:ad:03:79: 14:0b:ed:77:ed:65:c9:e7:2b:bf:e9:87:61:e4:ff: a3:71:98:77:61:9d:f2:a8:ec:a0:7f:68:95:eb:7c: ef:21:39:c8:f3:37:8d:c7:58:6c:f9:49:fc:ae:49: 92:a9:df:d9:8d:89:18:ca:02:49:e4:fc:b4:59:9b: 0a:66:01:b9:b4:12:96:9d:ce:1d:b2:62:95:fb:7b: 39:13:f2:bf:99:6c:9c:f2:57:ec:8b:28:7d:fa:b1: dd:b4:14:11:ce:bf:17:32:6c:1b:f4:eb:d4:cb:97: e6:b9:83:68:08:ed:41:0a:85:3b:46:f5:5a:27:96: 61:81:35:92:da:cb:93:d6:de:25:6e:0c:9a:c4:01: c1:a8:a1:8d:3d:f5:9f:20:bb:d8:18:72:cd:2c:3b: 91:c2:97:57:e8:1a:22:b7:47:3d:67:6d:b7:05:a0: 49:d9:d5:b0:13:b4:19:66:dc:9e:26:47:f9:23:43: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:81:32:78:24:30:9C:02:2E:9C:23:C2:E3:6A:02:0C:98:2C:02:49 X509v3 Authority Key Identifier: keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c8:8d:e2:b0:95:f6:88:7d:af:87:25:92:5e:3b:75:4b:7d: d0:37:80:c9:85:3a:c5:2c:cb:e7:a7:51:22:d3:2e:86:cb:51: 18:f4:8d:76:22:53:e8:3e:f8:53:10:86:4b:f9:32:b6:80:b5: d4:20:2e:3c:fd:2b:19:d1:15:9b:40:b5:b1:8c:99:e8:d3:68: 9e:c6:d1:99:b0:81:0e:7f:de:df:5a:fd:94:02:ac:11:f6:5f: d0:85:30:10:73:09:e2:51:09:ec:f2:d7:68:b8:0a:d6:f4:98: 9b:cb:af:9a:0b:09:41:40:d4:e4:dc:8c:4c:7e:d7:fa:0c:42: d8:58:82:80:89:83:3d:f7:2a:7f:05:0b:de:d5:b1:a5:d1:e4: d8:1a:df:01:76:b1:ef:05:50:19:5d:39:a1:10:33:35:7d:84: 5f:e9:ef:e8:bf:8f:fd:a0:f3:8e:be:97:b6:b8:50:0e:70:0e: 81:f1:d8:b0:76:d5:24:a8:21:5c:bf:ff:4e:19:60:59:94:4d: 3e:6e:df:aa:3d:89:d1:50:e9:43:a4:c3:97:9d:40:2e:16:26: 5c:73:8c:a0:7f:ab:dc:9b:f4:4d:22:d5:be:7f:5e:e3:9a:70: b1:13:9f:33:7f:40:f6:e0:9f:34:e5:19:50:b6:5c:3f:d0:20: 98:eb:94:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTRuVk4VRnG6uuqOOSK8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NGFjOGEwMjEyNzA2ODI3NjVkMjNlZjAzMzhmMzVjNzg2 ZGRiMzUwHhcNMjUxMjEzMjAwMDQyWhcNMjUxMjE0MjAwMDQyWjAzMTEwLwYDVQQD EyhmYzgxMzI3ODI0MzA5YzAyMmU5YzIzYzJlMzZhMDIwYzk4MmMwMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/bnjla54eM9+zzpJVcYP7bSFCrG xYsqdrH+/Yemor679rqybFP4yu9ZZOcbtb96GdbwWz+SM21oUJEPpi7/soaMF32p 9bCtA3kUC+137WXJ5yu/6Ydh5P+jcZh3YZ3yqOygf2iV63zvITnI8zeNx1hs+Un8 rkmSqd/ZjYkYygJJ5Py0WZsKZgG5tBKWnc4dsmKV+3s5E/K/mWyc8lfsiyh9+rHd tBQRzr8XMmwb9OvUy5fmuYNoCO1BCoU7RvVaJ5ZhgTWS2suT1t4lbgyaxAHBqKGN PfWfILvYGHLNLDuRwpdX6Boit0c9Z223BaBJ2dWwE7QZZtyeJkf5I0OHqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyBMngkMJwCLpwjwuNqAgyYLAJJMB8GA1UdIwQY MBaAFGhKyKAhJwaCdl0j7wM481x4bds1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVySW9DRW5Cb0oyWFNQdkF6anpYSGh0MnpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kMzBiNWQtN2YzYi00YTVhLTk4OTct MGMwMTFjOWM5MjdkLzEvYUVySW9DRW5Cb0oyWFNQdkF6anpYSGh0MnpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kMzBiNWQtN2YzYi00YTVhLTk4OTctMGMwMTFjOWM5Mjdk LzEvYUVySW9DRW5Cb0oyWFNQdkF6anpYSGh0MnpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8iN4rCV 9oh9r4clkl47dUt90DeAyYU6xSzL56dRItMuhstRGPSNdiJT6D74UxCGS/kytoC1 1CAuPP0rGdEVm0C1sYyZ6NNonsbRmbCBDn/e31r9lAKsEfZf0IUwEHMJ4lEJ7PLX aLgK1vSYm8uvmgsJQUDU5NyMTH7X+gxC2FiCgImDPfcqfwUL3tWxpdHk2BrfAXax 7wVQGV05oRAzNX2EX+nv6L+P/aDzjr6XtrhQDnAOgfHYsHbVJKghXL//ThlgWZRN Pm7fqj2J0VDpQ6TDl51ALhYmXHOMoH+r3Jv0TSLVvn9e45pwsROfM39A9uCfNOUZ ULZcP9AgmOuUag== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:36 2025 by rpki-client