This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json) Hash identifier: y2D17rM/8sZ8c4FH53Zt+yrSSW497OsYf1RNO42jm2U= Subject key identifier: 89:A2:4C:C1:5F:B6:58:A0:09:A2:FF:1E:60:E2:8F:65:2A:5E:89:8B Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Certificate serial: 019B4091767A34005B041BA4000ABEBAA14C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft Manifest number: 03AB Signing time: Sun 21 Dec 2025 11:00:33 +0000 Manifest this update: Sun 21 Dec 2025 11:00:33 +0000 Manifest next update: Mon 22 Dec 2025 11:00:33 +0000 Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=) 2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: PvWf272gn9cIFIZRt+ZgwR8yG1fwnMYzPUgLr8QLxrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:76:7a:34:00:5b:04:1b:a4:00:0a:be:ba:a1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Validity Not Before: Dec 21 11:00:33 2025 GMT Not After : Dec 22 11:00:33 2025 GMT Subject: CN=89a24cc15fb658a009a2ff1e60e28f652a5e898b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:d4:da:23:17:29:69:ea:29:0d:7c:c5:68: 90:59:70:4b:65:dd:a9:46:11:4f:23:e9:9e:c2:e4: 3c:97:ab:55:3f:20:16:51:45:60:a5:1d:ab:22:b9: c1:3a:ec:7b:25:55:95:5b:75:e5:b0:9e:52:81:a5: f3:6e:cf:ab:f2:e8:d0:cb:b2:b1:8f:0a:b4:0a:85: 27:6c:d2:ac:a9:3f:f7:b1:83:17:48:51:4c:04:a4: 84:8a:42:59:ab:11:ac:90:22:c1:d6:a7:a7:e6:69: 09:8f:69:81:6e:41:08:31:57:ae:0c:19:35:11:a9: 3c:69:0d:33:31:74:26:7b:29:8e:9e:03:dc:e8:ad: 52:6e:43:5b:9d:bc:7b:06:5c:50:e4:70:49:c0:5c: c4:81:d1:7e:fc:d7:41:40:ae:0e:b7:ce:0d:15:3c: 23:4c:6b:2e:22:4f:91:f8:0e:b5:fa:6b:ac:55:dc: 76:93:14:ae:78:9f:b9:a3:10:86:4a:86:ee:5e:c7: c5:45:dc:d9:cd:94:8d:fc:e0:a4:e8:1d:85:53:4c: 3d:13:5f:ba:69:05:04:da:dc:48:43:59:55:01:e8: 74:71:53:da:16:07:ca:c7:bc:16:c6:70:af:46:0a: fd:af:09:fd:54:90:97:60:a4:e4:dd:dd:f8:0a:63: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A2:4C:C1:5F:B6:58:A0:09:A2:FF:1E:60:E2:8F:65:2A:5E:89:8B X509v3 Authority Key Identifier: keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a2:f2:4d:7a:50:56:c9:88:af:98:71:27:da:9d:f2:38:db: 5c:00:a1:26:5f:85:e2:c0:f6:ea:73:bc:f8:47:29:af:8f:b2: 9a:7c:66:bf:f3:32:8c:a5:a9:4a:2c:9c:23:cc:ae:72:d9:a4: aa:ba:9f:ab:fc:eb:bb:51:30:7d:ee:ad:6e:77:70:0f:1a:1e: aa:e6:d5:83:b2:b9:c6:12:9c:fd:20:d3:ae:49:a0:11:4f:7e: 45:49:15:09:87:bb:f0:ea:e0:13:95:b2:8b:fb:d6:9a:42:07: 2d:a9:e1:f3:f2:2b:2a:8d:52:65:85:83:92:0f:c5:20:32:1e: 07:be:71:7c:08:ed:b0:d8:db:88:f3:3d:cd:32:f0:90:ac:5f: ff:34:9e:1f:69:e9:e7:f0:e0:66:64:fa:37:42:c3:2c:07:19: 88:49:c5:5f:60:85:88:95:e3:d3:da:3e:79:a4:f4:ca:60:c6: e9:15:c9:73:1a:27:d9:c2:bb:66:e0:89:ba:a7:4b:ff:5e:81: 7b:ee:74:88:0a:f4:f4:fb:52:df:81:8c:e3:99:11:2f:65:b9: 3e:0c:de:b0:7b:e6:b9:62:59:34:7c:89:17:04:49:e4:9b:3d: db:da:bd:7a:1f:c9:1a:6e:53:cf:b0:bd:76:76:10:74:2b:84: 50:61:79:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkXZ6NABbBBukAAq+uqFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm MDIwZmMwHhcNMjUxMjIxMTEwMDMzWhcNMjUxMjIyMTEwMDMzWjAzMTEwLwYDVQQD Eyg4OWEyNGNjMTVmYjY1OGEwMDlhMmZmMWU2MGUyOGY2NTJhNWU4OThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbzU2iMXKWnqKQ18xWiQWXBLZd2p RhFPI+mewuQ8l6tVPyAWUUVgpR2rIrnBOux7JVWVW3XlsJ5SgaXzbs+r8ujQy7Kx jwq0CoUnbNKsqT/3sYMXSFFMBKSEikJZqxGskCLB1qen5mkJj2mBbkEIMVeuDBk1 Eak8aQ0zMXQmeymOngPc6K1SbkNbnbx7BlxQ5HBJwFzEgdF+/NdBQK4Ot84NFTwj TGsuIk+R+A61+musVdx2kxSueJ+5oxCGSobuXsfFRdzZzZSN/OCk6B2FU0w9E1+6 aQUE2txIQ1lVAeh0cVPaFgfKx7wWxnCvRgr9rwn9VJCXYKTk3d34CmMkGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImiTMFftligCaL/HmDij2UqXomLMB8GA1UdIwQY MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1 LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6LyTXpQ VsmIr5hxJ9qd8jjbXAChJl+F4sD26nO8+Ecpr4+ymnxmv/MyjKWpSiycI8yuctmk qrqfq/zru1Ewfe6tbndwDxoequbVg7K5xhKc/SDTrkmgEU9+RUkVCYe78OrgE5Wy i/vWmkIHLanh8/IrKo1SZYWDkg/FIDIeB75xfAjtsNjbiPM9zTLwkKxf/zSeH2np 5/DgZmT6N0LDLAcZiEnFX2CFiJXj09o+eaT0ymDG6RXJcxon2cK7ZuCJuqdL/16B e+50iAr09PtS34GM45kRL2W5PgzesHvmuWJZNHyJFwRJ5Js929q9eh/JGm5Tz7C9 dnYQdCuEUGF5Fg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:48:38 2025 by rpki-client