This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json) Hash identifier: EJ+vT/QDRcuH3+ZxJw0zAkfMYQZJSNe8RsYisFHUZf8= Subject key identifier: D4:87:E3:45:29:2E:EB:FA:F0:0B:41:82:67:52:D8:79:2B:2A:2C:52 Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8 Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8 Certificate serial: 019B5C406F4BFBA651A78696FB5639D84781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 20:01:25 +0000 Manifest this update: Fri 26 Dec 2025 20:01:25 +0000 Manifest next update: Sat 27 Dec 2025 20:01:25 +0000 Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: BN+AAxIrseHc4983UPlZ3/NO/doPCF1fDaLsehZg3dI=) 2: j8gyWsRkkHFj471M_mas3x_kK88.roa (hash: aAR1nnqqt1WZ6GuhijvLaqKLM3ebeMxKd1729kZ7axQ=) 3: pQW5R-zKKXoKoeJff8c5_2k7hqc.roa (hash: rBt7iA3N1J58taPxtPNL2j6hN1NPIb/9bqIe8PmHwc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:6f:4b:fb:a6:51:a7:86:96:fb:56:39:d8:47:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8 Validity Not Before: Dec 26 20:01:25 2025 GMT Not After : Dec 27 20:01:25 2025 GMT Subject: CN=d487e345292eebfaf00b41826752d8792b2a2c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:a4:85:08:10:4b:36:3e:f6:e5:21:8e:53: 75:98:cf:7f:cf:fe:a5:78:04:7a:28:ff:25:41:91: a8:67:e8:f7:c4:af:e7:3f:30:98:86:80:1d:99:a5: ef:19:13:ca:f6:89:8e:09:2e:57:d4:2b:3c:ee:6e: b2:50:51:cb:0d:e6:71:5d:bd:e4:5b:4f:e6:3b:1f: 75:0c:63:4a:31:ca:f0:5b:40:70:92:b8:f4:25:15: 3e:f2:ad:7c:7a:8e:e0:10:50:df:df:ab:1f:7b:f8: 39:9b:44:ed:a5:7e:a2:95:f5:78:c1:84:46:88:f0: dd:7b:ac:97:ba:f9:b8:45:45:0b:40:8a:86:c0:9f: 98:48:2a:fe:1c:6a:f0:e3:3f:fa:c7:ea:fc:49:10: 54:8c:8b:31:a7:70:aa:af:dc:cb:c4:e6:11:ac:84: 03:d2:2c:d7:55:12:fe:bf:f5:97:e5:f2:23:29:57: 53:ae:b7:f6:e9:e1:39:81:52:d0:99:27:8a:5f:b9: 5d:f5:78:bd:95:24:ce:56:83:4a:fa:d8:7b:7a:69: 1a:5b:72:54:54:82:9f:81:66:1b:66:fa:5e:ef:d2: 41:27:84:21:bd:f5:74:0a:54:c0:53:24:0e:9b:13: 05:e1:1f:8d:52:e2:ff:ad:57:12:95:fa:0f:b5:0d: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:87:E3:45:29:2E:EB:FA:F0:0B:41:82:67:52:D8:79:2B:2A:2C:52 X509v3 Authority Key Identifier: keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:4c:30:24:2c:95:d9:c6:f5:70:87:26:73:30:77:8d:12:ca: b8:af:0c:6d:93:93:c4:73:33:25:5e:2d:c7:45:5f:9c:dd:f3: 81:a9:5d:67:25:62:68:4d:eb:a5:95:96:51:b0:ad:6d:f6:86: 5e:75:11:07:1d:82:84:98:90:03:ef:d3:bc:d2:9f:2f:a3:2d: c3:cd:75:dc:41:7a:e2:5c:11:ab:eb:d2:c7:2c:01:83:83:f7: c7:6b:c7:ca:3e:6f:2d:65:85:e2:74:b2:f0:94:d2:7d:24:4f: db:ea:3d:d9:92:8f:06:c8:5e:1f:1d:62:fb:0d:7b:bf:7c:af: 22:c9:8f:f3:ce:f1:4b:19:df:bf:c5:76:7a:f2:c0:e3:cc:a7: 52:3e:cc:f7:14:aa:20:0b:fb:39:7a:3c:5b:6b:76:ef:94:f3: 70:17:5b:4b:f4:d2:49:0f:56:89:69:50:cc:ee:8e:3c:34:c4: cb:a0:fe:f5:ea:ee:b9:e6:f1:18:c9:df:0b:06:11:c1:03:7f: c1:a7:12:a3:16:48:4e:ab:3b:34:6c:0b:90:94:c0:00:7a:ac: bc:c1:35:a5:46:14:ed:74:d1:06:70:d7:ad:8b:a1:17:fe:ba: ec:5e:eb:13:28:0d:33:e9:7f:1c:c8:b1:da:8c:07:62:a4:fe: 16:78:84:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQG9L+6ZRp4aW+1Y52EeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTAxNGNlOGFkMzhkMTUzNTAwOTZkNTQ5ZWUxYzU4MDVk MDlkYzgwHhcNMjUxMjI2MjAwMTI1WhcNMjUxMjI3MjAwMTI1WjAzMTEwLwYDVQQD EyhkNDg3ZTM0NTI5MmVlYmZhZjAwYjQxODI2NzUyZDg3OTJiMmEyYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrikhQgQSzY+9uUhjlN1mM9/z/6l eAR6KP8lQZGoZ+j3xK/nPzCYhoAdmaXvGRPK9omOCS5X1Cs87m6yUFHLDeZxXb3k W0/mOx91DGNKMcrwW0Bwkrj0JRU+8q18eo7gEFDf36sfe/g5m0TtpX6ilfV4wYRG iPDde6yXuvm4RUULQIqGwJ+YSCr+HGrw4z/6x+r8SRBUjIsxp3Cqr9zLxOYRrIQD 0izXVRL+v/WX5fIjKVdTrrf26eE5gVLQmSeKX7ld9Xi9lSTOVoNK+th7emkaW3JU VIKfgWYbZvpe79JBJ4QhvfV0ClTAUyQOmxMF4R+NUuL/rVcSlfoPtQ2t0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSH40UpLuv68AtBgmdS2HkrKixSMB8GA1UdIwQY MBaAFBEQFM6K040VNQCW1UnuHFgF0J3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYt OTFhMzk0Njg0NjQ0LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYtOTFhMzk0Njg0NjQ0 LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUwwJCyV 2cb1cIcmczB3jRLKuK8MbZOTxHMzJV4tx0VfnN3zgaldZyViaE3rpZWWUbCtbfaG XnURBx2ChJiQA+/TvNKfL6Mtw8113EF64lwRq+vSxywBg4P3x2vHyj5vLWWF4nSy 8JTSfSRP2+o92ZKPBsheHx1i+w17v3yvIsmP887xSxnfv8V2evLA48ynUj7M9xSq IAv7OXo8W2t275TzcBdbS/TSSQ9WiWlQzO6OPDTEy6D+9eruuebxGMnfCwYRwQN/ wacSoxZITqs7NGwLkJTAAHqsvME1pUYU7XTRBnDXrYuhF/667F7rEygNM+l/HMix 2owHYqT+FniEjA== -----END CERTIFICATE-----Generated at Sat Dec 27 03:46:59 2025 by rpki-client