This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft File: Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json) Hash identifier: /SfefE1eJ9udHqL4vFiqlI5d4RkRgRNrpRJAkQ91o4U= Subject key identifier: AE:11:95:AB:54:AD:22:A7:2B:DB:9E:1B:84:CE:D6:AF:B7:CC:4E:F7 Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51 Certificate issuer: /CN=12b87c6caf81de3625fe1ce0559f39e30505a051 Certificate serial: 019BB05D86BFCB9124684E89939FFB76023C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft Manifest number: 14B0 Signing time: Mon 12 Jan 2026 04:01:17 +0000 Manifest this update: Mon 12 Jan 2026 04:01:17 +0000 Manifest next update: Tue 13 Jan 2026 04:01:17 +0000 Files and hashes: 1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: ktTT7FwFCLeYH2o+spkLwY+DygUO/J+aZ4yyQuZXVN0=) 2: KlixQVOZPwj2P7IsU6UK6TEAtrI.roa (hash: sDFOAzJVALs9ccbx12fQTxrUvz7R6MdVGJZt6nowTYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:5d:86:bf:cb:91:24:68:4e:89:93:9f:fb:76:02:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051 Validity Not Before: Jan 12 04:01:17 2026 GMT Not After : Jan 13 04:01:17 2026 GMT Subject: CN=ae1195ab54ad22a72bdb9e1b84ced6afb7cc4ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:e2:dc:c1:1d:5a:65:c5:c2:b1:ca:25:a7: f7:3a:35:3d:66:48:c4:90:17:9c:1c:32:2e:7f:bb: 04:63:89:c8:54:6f:2c:f6:48:fb:e5:e7:06:3a:d9: b4:68:50:c8:a1:cb:97:3d:10:d5:e0:e8:65:0d:8a: 83:90:31:e9:dd:d4:78:ec:9b:60:81:cb:de:bb:36: ae:1f:1f:49:f3:21:e0:33:e6:8e:89:c5:ae:e8:dd: 1c:87:b4:8b:d3:5d:48:ce:d1:9d:b8:b9:45:38:0e: 9f:96:63:19:6d:b6:78:ff:92:d8:e7:1c:8e:0c:46: 78:ed:54:53:23:16:49:e2:31:d7:84:3f:3d:23:09: 43:c3:ff:bb:d7:6f:17:7e:bc:8a:23:e0:07:df:88: 67:50:f9:5e:f9:fa:54:00:f9:2c:72:0b:b7:cb:b4: f1:c3:3c:47:df:1e:fb:9a:28:46:93:05:ec:25:cc: 98:23:06:df:f6:e3:15:72:78:78:ec:9e:e0:f5:de: 4a:f7:da:21:91:2c:d3:de:d0:b1:34:23:98:dc:4a: 26:1f:32:82:e1:fb:1a:76:6a:cf:21:60:df:4d:a8: 9e:a8:84:7d:3c:e6:5c:17:6a:59:7c:9a:57:37:71: 1c:e8:63:9d:e6:de:ce:90:37:34:8e:ee:be:f7:1d: 13:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:11:95:AB:54:AD:22:A7:2B:DB:9E:1B:84:CE:D6:AF:B7:CC:4E:F7 X509v3 Authority Key Identifier: keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:13:25:0c:c4:08:dc:18:53:7a:6f:0c:dd:cc:86:da:c6:0e: 1c:90:8f:bd:0d:42:0e:e3:0a:12:a0:78:31:c4:43:54:e6:76: 80:4f:bb:cd:10:41:dd:f1:80:9a:4a:43:2a:b5:84:bd:7e:af: 99:db:bf:3d:71:41:88:18:28:04:24:10:28:de:25:88:6a:ee: 6d:73:30:4d:87:e0:2e:01:fe:41:b5:cc:18:c3:ff:e3:0d:e8: 84:4b:8b:b0:e1:5c:f3:c4:e1:36:c0:87:95:e7:f6:6f:d2:16: 12:60:49:cc:d5:40:dc:03:05:61:b0:43:2c:a2:d8:f0:f6:37: b1:d0:92:88:0e:da:c2:f6:e9:50:c6:40:ef:e0:a4:49:74:98: dd:c4:4b:56:8f:5d:6f:e0:f5:1c:7e:33:b9:71:a0:c1:ba:5a: bb:ed:d7:f3:50:96:b3:7e:fe:2c:96:89:d7:ee:57:02:b4:03: eb:8c:50:96:ff:37:a2:99:7f:13:5d:31:5d:be:57:38:43:e4: e8:75:88:57:2c:7d:32:5d:07:8d:2b:97:69:d6:87:dd:b6:0f: f0:1c:7b:bd:1c:71:00:90:27:01:e6:e8:ae:13:16:cf:ff:1f: 22:aa:9f:cb:fe:1d:bd:6a:52:93:67:d4:39:fe:f7:59:92:bf: 8c:58:0c:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwXYa/y5EkaE6Jk5/7dgI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjg3YzZjYWY4MWRlMzYyNWZlMWNlMDU1OWYzOWUzMDUw NWEwNTEwHhcNMjYwMTEyMDQwMTE3WhcNMjYwMTEzMDQwMTE3WjAzMTEwLwYDVQQD EyhhZTExOTVhYjU0YWQyMmE3MmJkYjllMWI4NGNlZDZhZmI3Y2M0ZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6bi3MEdWmXFwrHKJaf3OjU9ZkjE kBecHDIuf7sEY4nIVG8s9kj75ecGOtm0aFDIocuXPRDV4OhlDYqDkDHp3dR47Jtg gcveuzauHx9J8yHgM+aOicWu6N0ch7SL011IztGduLlFOA6flmMZbbZ4/5LY5xyO DEZ47VRTIxZJ4jHXhD89IwlDw/+7128XfryKI+AH34hnUPle+fpUAPkscgu3y7Tx wzxH3x77mihGkwXsJcyYIwbf9uMVcnh47J7g9d5K99ohkSzT3tCxNCOY3EomHzKC 4fsadmrPIWDfTaieqIR9POZcF2pZfJpXN3Ec6GOd5t7OkDc0ju6+9x0TEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4RlatUrSKnK9ueG4TO1q+3zE73MB8GA1UdIwQY MBaAFBK4fGyvgd42Jf4c4FWfOeMFBaBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEt NjI4MDhiYmJkZDIxLzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEtNjI4MDhiYmJkZDIx LzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhMlDMQI 3BhTem8M3cyG2sYOHJCPvQ1CDuMKEqB4McRDVOZ2gE+7zRBB3fGAmkpDKrWEvX6v mdu/PXFBiBgoBCQQKN4liGrubXMwTYfgLgH+QbXMGMP/4w3ohEuLsOFc88ThNsCH lef2b9IWEmBJzNVA3AMFYbBDLKLY8PY3sdCSiA7awvbpUMZA7+CkSXSY3cRLVo9d b+D1HH4zuXGgwbpau+3X81CWs37+LJaJ1+5XArQD64xQlv83opl/E10xXb5XOEPk 6HWIVyx9Ml0HjSuXadaH3bYP8Bx7vRxxAJAnAeborhMWz/8fIqqfy/4dvWpSk2fU Of73WZK/jFgM2Q== -----END CERTIFICATE-----Generated at Mon Jan 12 14:29:09 2026 by rpki-client