This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft File: ErethYfzKycmXpxnphMr-bPwIPw.mft (raw, json) Hash identifier: ahhoLT0gbIOtqTx313WGzafY5wea3pP9K7ag15QpcXw= Subject key identifier: 37:B8:8E:C3:3F:AD:79:8C:5A:72:6B:C4:07:05:13:05:D8:20:D7:7C Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Certificate serial: 019B3EA315FDE23A5B8565AE59B1898DDBDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft Manifest number: 03AA Signing time: Sun 21 Dec 2025 02:00:33 +0000 Manifest this update: Sun 21 Dec 2025 02:00:33 +0000 Manifest next update: Mon 22 Dec 2025 02:00:33 +0000 Files and hashes: 1: 0842G3MJ_Mx-vuE2aWTimTA0Grw.roa (hash: K7Le/zUw2iAAOyfWrwQ4Sh89G1E5cTErCvOs0AbWaCg=) 2: ErethYfzKycmXpxnphMr-bPwIPw.crl (hash: dFE9PAs/Rl9BLglEqETo2N7oOAyqV+10oKHlUy7HCpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:15:fd:e2:3a:5b:85:65:ae:59:b1:89:8d:db:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Validity Not Before: Dec 21 02:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=37b88ec33fad798c5a726bc407051305d820d77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:40:a7:a7:cb:95:13:f5:1e:2c:0c:9f:0e: 9f:32:6c:3b:e3:e2:95:b7:87:a7:07:8e:b7:33:63: 69:d8:46:48:37:2a:4a:12:ac:6d:8c:45:c2:d7:b7: 4a:64:3f:f6:e8:0b:94:64:f8:a1:1f:28:d8:ef:a8: f3:b2:44:c6:16:e4:7b:8d:97:01:40:47:ee:5c:54: ec:1e:c5:41:ea:63:42:2d:7d:5f:fe:f0:ba:42:fc: d2:d2:a1:58:5d:d8:fc:dc:60:8c:91:25:f6:29:ef: e4:da:da:0c:90:58:5c:c9:73:33:d3:28:6b:75:9c: f5:5c:ed:27:4d:13:33:d9:96:55:6f:2e:47:8a:07: 25:59:0b:58:72:ed:b3:57:a4:7d:7a:1f:08:b4:e2: 7e:52:23:9a:e8:5c:a0:8c:27:55:67:00:16:42:d0: 1a:30:66:f0:07:2b:cd:73:ef:ab:2f:c6:b9:b1:e2: a5:00:ff:7f:01:df:68:af:94:b1:00:19:63:9c:29: 01:0d:54:01:02:55:62:af:1b:fa:66:5c:0c:a5:d4: 70:d1:ea:98:f2:3d:4e:3b:f4:da:ea:63:4f:77:94: 3b:5f:66:00:dc:5b:0c:01:2d:00:43:a8:3b:1c:f0: a1:50:c0:57:27:59:78:9b:d6:a1:c0:b8:fd:0e:97: 3f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B8:8E:C3:3F:AD:79:8C:5A:72:6B:C4:07:05:13:05:D8:20:D7:7C X509v3 Authority Key Identifier: keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:67:1a:31:ba:0f:43:a3:49:42:32:8e:b4:45:fb:9a:50:82: b1:00:b9:db:6f:21:fa:dc:bd:1d:5c:99:1f:f3:36:e5:ab:e5: 0a:f5:c2:bf:5f:00:b0:4b:f6:c6:ac:d8:4b:3a:10:86:4f:9b: 34:0e:87:4d:23:c0:66:7e:26:e5:a0:06:12:7d:97:3f:7e:cd: 85:ad:0a:db:b4:b5:68:d2:83:cd:61:a7:8c:0e:63:2f:08:02: d5:1e:01:8f:3f:06:16:28:12:61:6f:b1:79:0d:11:5a:42:41: 2d:70:a1:3d:a8:03:87:fc:cd:ae:c9:11:9a:11:7c:45:d5:e6: d4:93:05:73:55:f3:a3:5b:01:60:f5:c8:f6:6e:29:3e:1c:c4: ef:3d:d3:3c:50:06:ae:92:8d:ba:0b:aa:87:6b:bc:f0:19:24: 6b:c5:08:68:b5:28:e4:d8:59:8a:18:9c:7c:75:e7:b6:dd:e2: df:11:bd:33:92:17:76:d1:7a:73:34:c2:38:1a:45:f3:32:1e: 74:f0:64:0a:51:2d:4f:ac:43:9c:99:2f:ff:61:30:25:c7:9d: e2:c8:74:14:28:17:32:4a:99:33:f8:7e:26:ed:c5:ed:10:fb: 5c:0e:60:ec:31:da:42:ed:d3:b2:e5:16:0c:35:3a:d1:82:7d: 7b:46:d9:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oxX94jpbhWWuWbGJjdvaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm MDIwZmMwHhcNMjUxMjIxMDIwMDMzWhcNMjUxMjIyMDIwMDMzWjAzMTEwLwYDVQQD EygzN2I4OGVjMzNmYWQ3OThjNWE3MjZiYzQwNzA1MTMwNWQ4MjBkNzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1dAp6fLlRP1HiwMnw6fMmw74+KV t4enB463M2Np2EZINypKEqxtjEXC17dKZD/26AuUZPihHyjY76jzskTGFuR7jZcB QEfuXFTsHsVB6mNCLX1f/vC6QvzS0qFYXdj83GCMkSX2Ke/k2toMkFhcyXMz0yhr dZz1XO0nTRMz2ZZVby5HigclWQtYcu2zV6R9eh8ItOJ+UiOa6FygjCdVZwAWQtAa MGbwByvNc++rL8a5seKlAP9/Ad9or5SxABljnCkBDVQBAlVirxv6ZlwMpdRw0eqY 8j1OO/Ta6mNPd5Q7X2YA3FsMAS0AQ6g7HPChUMBXJ1l4m9ahwLj9Dpc/OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDe4jsM/rXmMWnJrxAcFEwXYINd8MB8GA1UdIwQY MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt MTA5MTIyNzlhMTI1LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1 LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGcaMboP Q6NJQjKOtEX7mlCCsQC5228h+ty9HVyZH/M25avlCvXCv18AsEv2xqzYSzoQhk+b NA6HTSPAZn4m5aAGEn2XP37Nha0K27S1aNKDzWGnjA5jLwgC1R4Bjz8GFigSYW+x eQ0RWkJBLXChPagDh/zNrskRmhF8RdXm1JMFc1Xzo1sBYPXI9m4pPhzE7z3TPFAG rpKNuguqh2u88Bkka8UIaLUo5NhZihicfHXntt3i3xG9M5IXdtF6czTCOBpF8zIe dPBkClEtT6xDnJkv/2EwJced4sh0FCgXMkqZM/h+Ju3F7RD7XA5g7DHaQu3TsuUW DDU60YJ9e0bZ7Q== -----END CERTIFICATE-----Generated at Sun Dec 21 12:02:00 2025 by rpki-client