This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json) Hash identifier: kmYI4zOBKyXpwCvK7NepEKvKI1vX/ktGj/j5/0aHLyI= Subject key identifier: E0:2E:4F:CB:BD:41:83:7D:AF:AE:4B:FF:1D:52:28:7C:B4:E4:DA:6B Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e Certificate serial: 019B41DB99D7E68D8A1EEF8910029DC1128A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft Manifest number: 0BF1 Signing time: Sun 21 Dec 2025 17:01:09 +0000 Manifest this update: Sun 21 Dec 2025 17:01:09 +0000 Manifest next update: Mon 22 Dec 2025 17:01:09 +0000 Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: e+RI2eJ1MIu12+3DXSLAfoZ2tAHxdrO6z71bwoxHZiU=) 2: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (hash: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:99:d7:e6:8d:8a:1e:ef:89:10:02:9d:c1:12:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e Validity Not Before: Dec 21 17:01:09 2025 GMT Not After : Dec 22 17:01:09 2025 GMT Subject: CN=e02e4fcbbd41837dafae4bff1d52287cb4e4da6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:bd:d1:1a:a8:f8:e3:ef:5c:9d:67:35:13: af:61:51:cb:0c:c0:e4:b2:dd:98:ec:ca:bc:34:ac: a2:55:57:0a:2c:90:6f:10:91:d8:0d:a6:20:56:f8: 86:9d:f7:fe:f1:1c:55:af:d8:5d:49:29:92:39:d7: ee:d7:80:0a:a1:52:f3:98:e3:04:eb:34:c2:63:4e: 7c:83:51:9b:83:85:37:63:dc:ac:5e:f7:f1:56:6a: 23:2f:f2:63:91:cc:1f:25:ec:64:1d:f4:72:82:c8: 92:36:d2:ff:d5:4a:e9:39:cb:72:c3:91:89:1c:17: d0:1d:5c:aa:8d:d3:85:d5:ca:6f:ed:07:69:d0:d5: 2e:bd:97:87:dd:f9:93:e2:6a:ec:07:4f:f7:43:f1: 9c:89:04:8b:ca:e8:85:0a:7a:fb:f5:f7:0a:e0:ea: 1e:f5:18:ae:9c:19:23:ba:a9:dc:88:cb:65:9e:ce: 35:33:a7:40:d7:27:b1:ad:97:50:9b:cf:7a:d8:98: 13:ff:4c:9c:9f:13:a6:b5:b3:cd:2a:bf:54:3f:2f: 27:f9:97:32:17:3b:41:d8:bf:3d:78:f4:6a:a7:66: 5c:18:b9:94:90:ad:f2:64:4b:e7:88:ea:26:e5:5c: 5c:d0:4d:20:b4:c7:25:4e:9e:98:a5:f0:96:fa:6b: ac:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2E:4F:CB:BD:41:83:7D:AF:AE:4B:FF:1D:52:28:7C:B4:E4:DA:6B X509v3 Authority Key Identifier: keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6d:b8:8d:af:b8:53:dd:c1:61:3a:37:e3:eb:0a:c5:de:63: 5e:c9:64:df:25:15:6b:ea:24:d5:12:da:34:8c:49:09:67:5b: 34:e4:31:61:57:21:7a:0b:4d:c6:56:32:c4:ef:ca:d2:74:c7: 85:e8:db:66:45:c7:7f:29:4e:4e:3e:08:08:6f:b8:a5:c7:ca: db:1e:25:72:fe:38:f9:4d:c1:f2:92:8a:7f:fe:68:59:a9:5e: dd:71:04:18:4c:d6:41:ee:3a:aa:e2:13:6e:9c:0f:27:18:61: b0:3a:e7:86:05:a8:5a:70:af:8a:ab:53:fc:4e:d8:8e:1c:45: 25:8b:75:fc:df:64:d1:e2:f4:93:b5:64:1c:d0:bb:b3:a4:ff: 15:26:dc:7f:9f:d2:e7:70:a8:e1:07:36:2c:00:33:cf:ad:d4: 51:09:6b:e8:a8:aa:5e:20:ea:d7:5a:48:08:bf:3a:ff:ad:f4: 35:5e:a1:d0:cd:1f:6b:42:80:ec:52:36:fe:72:44:30:a2:49: ec:3d:f4:b9:37:7a:bd:66:de:22:ed:1c:03:d6:57:c3:10:5d: 77:91:a5:9c:f4:8e:48:99:c0:f1:5c:f5:d8:3c:6b:ec:d0:1a: 3f:bc:7c:79:ba:e1:33:55:b6:7a:62:ad:34:37:78:ab:2d:b1: 60:d3:f7:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB25nX5o2KHu+JEAKdwRKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTkzZjhlODk4ZWI2ZmJkMTJjNTNkZjdkYWQwMjE1NDNl ZWZjNmUwHhcNMjUxMjIxMTcwMTA5WhcNMjUxMjIyMTcwMTA5WjAzMTEwLwYDVQQD EyhlMDJlNGZjYmJkNDE4MzdkYWZhZTRiZmYxZDUyMjg3Y2I0ZTRkYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVO90Rqo+OPvXJ1nNROvYVHLDMDk st2Y7Mq8NKyiVVcKLJBvEJHYDaYgVviGnff+8RxVr9hdSSmSOdfu14AKoVLzmOME 6zTCY058g1Gbg4U3Y9ysXvfxVmojL/JjkcwfJexkHfRygsiSNtL/1UrpOctyw5GJ HBfQHVyqjdOF1cpv7Qdp0NUuvZeH3fmT4mrsB0/3Q/GciQSLyuiFCnr79fcK4Ooe 9RiunBkjuqnciMtlns41M6dA1yexrZdQm8962JgT/0ycnxOmtbPNKr9UPy8n+Zcy FztB2L89ePRqp2ZcGLmUkK3yZEvniOom5Vxc0E0gtMclTp6YpfCW+musawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAuT8u9QYN9r65L/x1SKHy05NprMB8GA1UdIwQY MBaAFBEZP46Jjrb70SxT332tAhVD7vxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iNGUzZTQtMTE4OS00MDM2LThmMWEt MDQyZjdkYWMyNGQ1LzEvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9iNGUzZTQtMTE4OS00MDM2LThmMWEtMDQyZjdkYWMyNGQ1 LzEvRVJrX2pvbU90dnZSTEZQZmZhMENGVVB1X0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMm24ja+4 U93BYTo34+sKxd5jXslk3yUVa+ok1RLaNIxJCWdbNOQxYVchegtNxlYyxO/K0nTH hejbZkXHfylOTj4ICG+4pcfK2x4lcv44+U3B8pKKf/5oWale3XEEGEzWQe46quIT bpwPJxhhsDrnhgWoWnCviqtT/E7YjhxFJYt1/N9k0eL0k7VkHNC7s6T/FSbcf5/S 53Co4Qc2LAAzz63UUQlr6KiqXiDq11pICL86/630NV6h0M0fa0KA7FI2/nJEMKJJ 7D30uTd6vWbeIu0cA9ZXwxBdd5GlnPSOSJnA8Vz12Dxr7NAaP7x8ebrhM1W2emKt NDd4qy2xYNP3kw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:09:44 2025 by rpki-client