This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json) Hash identifier: CVDfDhXbfafNQi1UDMsB7kQ4D4rqDEO8m3NKja7Ju9g= Subject key identifier: 16:C7:D8:C4:D3:A5:12:87:FF:C6:9F:12:22:46:03:FB:48:D3:E3:97 Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1 Certificate serial: 019B39B3E94D977753F2D0C486172686AA2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft Manifest number: 0A25 Signing time: Sat 20 Dec 2025 03:00:50 +0000 Manifest this update: Sat 20 Dec 2025 03:00:50 +0000 Manifest next update: Sun 21 Dec 2025 03:00:50 +0000 Files and hashes: 1: DV4eV0bz0BV_l9ZAbntV44Eglw0.roa (hash: wnq0IXxOxpXaYEifWhivUR0CW5t4jvpNWroJwGm7DbM=) 2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: zse9MOCCjh5qvLg/yHq1hH0baXRpw2KuVK+jcejpVBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:e9:4d:97:77:53:f2:d0:c4:86:17:26:86:aa:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1 Validity Not Before: Dec 20 03:00:50 2025 GMT Not After : Dec 21 03:00:50 2025 GMT Subject: CN=16c7d8c4d3a51287ffc69f12224603fb48d3e397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:24:9f:1f:46:10:66:e7:42:b9:ae:f3:9b:27: 74:ff:b6:01:da:a1:3c:3b:ce:82:36:65:23:bf:aa: cb:f7:33:d0:ca:a6:da:15:1c:2c:79:fb:27:06:5b: 5d:48:89:8d:7e:ce:56:6b:55:e2:51:bd:49:ff:c4: ee:b7:2a:9d:61:24:fa:c6:c7:14:0e:96:86:e4:6a: 8e:bb:6a:14:bc:db:78:bb:19:ce:90:88:fe:45:b2: 7a:b6:0f:a4:be:50:da:f5:a8:62:1f:e2:24:fc:7e: af:82:7e:4c:34:4e:4d:95:5f:64:a8:76:5c:a3:c9: 97:70:02:38:c1:13:aa:f0:45:98:f6:4e:4a:f0:b0: e2:0d:6a:8c:6d:99:55:1e:15:e2:54:79:95:9e:a8: 70:3d:b0:f7:dc:79:89:36:c9:02:d9:3c:f0:d6:52: 2a:a7:30:0a:da:ab:2f:67:0d:c3:bf:12:6f:ca:8a: d5:c1:5d:d6:a6:1b:68:05:03:d8:35:b6:86:9b:2d: 45:c8:17:68:a0:41:17:b1:e2:a1:ae:1a:a8:7f:ce: 7a:16:44:9d:c8:06:aa:6a:6d:a1:96:a4:0b:2c:29: e8:d3:10:34:b2:ed:a2:97:cf:59:e5:9a:c6:05:68: db:19:d6:91:16:af:a6:2a:42:d9:28:b9:22:52:83: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C7:D8:C4:D3:A5:12:87:FF:C6:9F:12:22:46:03:FB:48:D3:E3:97 X509v3 Authority Key Identifier: keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:96:f7:07:bf:05:ff:6e:b0:be:b7:d5:cc:46:93:3d:a5:ff: 46:d9:29:4c:7c:43:7d:5b:5c:24:f7:21:cf:65:06:9b:ff:29: d0:37:07:8b:21:d9:77:5c:06:41:e7:42:56:83:bf:bb:7a:fd: e5:5b:d2:c8:57:02:a1:3b:40:0d:b8:af:28:49:8a:ca:65:f5: ce:00:ca:dd:79:63:d2:1b:eb:50:60:72:25:45:85:ab:13:84: 29:2a:5c:47:54:b6:a1:72:d4:49:79:ec:ce:4a:24:1b:20:a8: a7:e5:a2:12:2f:30:14:5c:e3:5a:e4:0d:7c:01:47:d0:91:de: d5:03:b0:09:e0:c0:3b:f4:eb:f7:4e:20:80:cc:9a:b7:9a:0c: 21:76:98:89:49:1c:91:54:3d:76:89:34:68:ad:7e:2d:9f:12: 77:3b:b7:87:e6:ba:48:37:21:3d:c9:20:71:f5:8f:94:f6:aa: 86:ad:ea:6d:95:75:e6:f1:96:03:30:30:03:e9:bd:43:04:f0: 90:7f:fa:8b:a8:9f:f4:2f:71:80:e3:24:18:08:77:be:09:03: fe:39:0e:16:b8:3d:cd:6e:8d:23:41:ea:5b:d1:dc:2f:4a:56: 37:7c:52:15:40:3e:bc:06:14:84:92:f4:88:3d:4d:4b:6f:70: 0d:ab:de:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+lNl3dT8tDEhhcmhqovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh MTExYjEwHhcNMjUxMjIwMDMwMDUwWhcNMjUxMjIxMDMwMDUwWjAzMTEwLwYDVQQD EygxNmM3ZDhjNGQzYTUxMjg3ZmZjNjlmMTIyMjQ2MDNmYjQ4ZDNlMzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ySfH0YQZudCua7zmyd0/7YB2qE8 O86CNmUjv6rL9zPQyqbaFRwsefsnBltdSImNfs5Wa1XiUb1J/8TutyqdYST6xscU DpaG5GqOu2oUvNt4uxnOkIj+RbJ6tg+kvlDa9ahiH+Ik/H6vgn5MNE5NlV9kqHZc o8mXcAI4wROq8EWY9k5K8LDiDWqMbZlVHhXiVHmVnqhwPbD33HmJNskC2Tzw1lIq pzAK2qsvZw3DvxJvyorVwV3WphtoBQPYNbaGmy1FyBdooEEXseKhrhqof856FkSd yAaqam2hlqQLLCno0xA0su2il89Z5ZrGBWjbGdaRFq+mKkLZKLkiUoP7HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbH2MTTpRKH/8afEiJGA/tI0+OXMB8GA1UdIwQY MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5b3B78F /26wvrfVzEaTPaX/RtkpTHxDfVtcJPchz2UGm/8p0DcHiyHZd1wGQedCVoO/u3r9 5VvSyFcCoTtADbivKEmKymX1zgDK3Xlj0hvrUGByJUWFqxOEKSpcR1S2oXLUSXns zkokGyCop+WiEi8wFFzjWuQNfAFH0JHe1QOwCeDAO/Tr904ggMyat5oMIXaYiUkc kVQ9dok0aK1+LZ8Sdzu3h+a6SDchPckgcfWPlPaqhq3qbZV15vGWAzAwA+m9QwTw kH/6i6if9C9xgOMkGAh3vgkD/jkOFrg9zW6NI0HqW9HcL0pWN3xSFUA+vAYUhJL0 iD1NS29wDavebQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:16:53 2025 by rpki-client