This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json) Hash identifier: TR95xkAqVAWiRHDBeEMo5szNvc9+gqdo/YbfC5/HgkY= Subject key identifier: 75:3C:AD:37:DF:A3:85:E0:0D:AB:2E:4B:E8:06:50:97:12:78:E7:CD Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78 Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78 Certificate serial: 019B6AD84B159361A530385E9243821D565F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft Manifest number: 172E Signing time: Mon 29 Dec 2025 16:01:58 +0000 Manifest this update: Mon 29 Dec 2025 16:01:58 +0000 Manifest next update: Tue 30 Dec 2025 16:01:58 +0000 Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: oBGWwoG64e5IO1X+G082yYAxF/24GW+x+frXpsaFHxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:4b:15:93:61:a5:30:38:5e:92:43:82:1d:56:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78 Validity Not Before: Dec 29 16:01:58 2025 GMT Not After : Dec 30 16:01:58 2025 GMT Subject: CN=753cad37dfa385e00dab2e4be80650971278e7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:a1:c0:19:5e:0f:d8:83:07:67:80:23:5d: b7:70:4e:ab:a5:1f:15:9d:36:5b:1b:ec:7e:03:28: 60:ad:09:58:b2:d3:36:a4:23:7e:cc:72:8a:2a:23: 66:7f:b8:38:7e:9a:23:5b:ff:94:69:ce:0b:a1:12: 8d:e8:86:a5:d0:46:1f:c1:8c:0e:76:4d:46:68:75: ed:ad:d2:6f:bc:55:64:0d:59:ac:97:d8:63:d7:4f: fa:70:d1:f2:9b:32:4e:b8:5d:1a:3a:e3:85:2b:b9: 88:bf:b5:77:95:9a:b3:7c:eb:47:67:9f:3f:f7:87: f5:ce:f2:3e:14:75:69:55:93:98:f2:7d:30:b2:c3: 58:64:b6:80:24:87:3c:bf:e0:52:37:6c:74:a4:c4: 9a:3e:27:a6:df:65:8a:19:f8:1d:43:ff:7e:fa:a7: d7:b8:40:2f:44:12:6e:25:2b:ba:46:73:f9:59:5e: 14:11:c0:36:aa:80:86:a3:ac:f7:9d:db:9b:5d:de: 3a:72:20:ce:98:4c:d0:4b:ee:fc:60:ff:cf:ff:3b: ed:56:d6:22:5c:6a:90:b0:8a:f6:79:f3:c0:a4:63: 82:ea:db:0b:03:26:12:aa:16:cb:dd:98:76:25:17: 61:75:8e:1d:da:f0:f3:d7:92:81:64:a9:3b:d0:b7: 67:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3C:AD:37:DF:A3:85:E0:0D:AB:2E:4B:E8:06:50:97:12:78:E7:CD X509v3 Authority Key Identifier: keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:03:12:07:f8:a7:a3:7d:ce:7b:ec:bf:47:f8:57:33:0d:d9: 61:19:cd:ba:8e:e5:e9:96:11:35:8b:3a:f8:e4:57:10:9a:e9: fe:85:15:da:45:62:3f:46:50:84:5b:6d:4d:4d:fc:df:ec:c3: be:d6:9c:21:81:33:01:ff:68:0c:f9:42:41:9d:d9:95:dd:48: 89:30:0c:06:8e:30:e2:f6:6d:ca:b8:a5:f3:3d:4a:4f:6e:74: a4:16:b9:a7:31:98:26:3d:32:ab:72:58:28:92:e2:ab:71:c2: fc:41:83:c7:68:07:30:4c:50:82:fc:9d:59:05:02:30:20:a2: 1d:c2:af:ee:48:33:8d:bd:e7:83:00:0c:11:6d:5d:d2:cf:2d: 5f:27:c7:4a:d8:dd:d3:b1:a8:af:78:0a:85:ab:9f:a2:ef:a3: fb:17:b4:24:52:ef:da:24:71:83:0c:3c:8f:c8:f7:24:7a:e6: ab:66:65:37:56:aa:bb:25:69:9d:96:0e:19:8b:b1:0c:d3:00: 05:bf:2d:34:f5:86:ec:d2:47:a6:9d:d9:d8:87:3c:49:09:97: 62:a7:db:91:cb:61:d3:45:7c:b3:2a:a3:4a:2c:65:8e:16:ed: e7:ee:7c:d3:a8:2b:db:46:78:1d:63:1b:1e:92:9b:8a:6e:c0: 67:c2:00:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2EsVk2GlMDhekkOCHVZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MTlhNmFlZmQzY2E4ZjUwZmM4ZjM0YWIzZDE0NzkyNTZk YjlkNzgwHhcNMjUxMjI5MTYwMTU4WhcNMjUxMjMwMTYwMTU4WjAzMTEwLwYDVQQD Eyg3NTNjYWQzN2RmYTM4NWUwMGRhYjJlNGJlODA2NTA5NzEyNzhlN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzihwBleD9iDB2eAI123cE6rpR8V nTZbG+x+AyhgrQlYstM2pCN+zHKKKiNmf7g4fpojW/+Uac4LoRKN6Ial0EYfwYwO dk1GaHXtrdJvvFVkDVmsl9hj10/6cNHymzJOuF0aOuOFK7mIv7V3lZqzfOtHZ58/ 94f1zvI+FHVpVZOY8n0wssNYZLaAJIc8v+BSN2x0pMSaPiem32WKGfgdQ/9++qfX uEAvRBJuJSu6RnP5WV4UEcA2qoCGo6z3ndubXd46ciDOmEzQS+78YP/P/zvtVtYi XGqQsIr2efPApGOC6tsLAyYSqhbL3Zh2JRdhdY4d2vDz15KBZKk70LdneQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHU8rTffo4XgDasuS+gGUJcSeOfNMB8GA1UdIwQY MBaAFHkZpq79PKj1D8jzSrPRR5JW2514MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAt OTExZTgzOTA0Y2ExLzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAtOTExZTgzOTA0Y2Ex LzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwMSB/in o33Oe+y/R/hXMw3ZYRnNuo7l6ZYRNYs6+ORXEJrp/oUV2kViP0ZQhFttTU383+zD vtacIYEzAf9oDPlCQZ3Zld1IiTAMBo4w4vZtyril8z1KT250pBa5pzGYJj0yq3JY KJLiq3HC/EGDx2gHMExQgvydWQUCMCCiHcKv7kgzjb3ngwAMEW1d0s8tXyfHStjd 07Gor3gKhaufou+j+xe0JFLv2iRxgww8j8j3JHrmq2ZlN1aquyVpnZYOGYuxDNMA Bb8tNPWG7NJHpp3Z2Ic8SQmXYqfbkcth00V8syqjSixljhbt5+5806gr20Z4HWMb HpKbim7AZ8IA2A== -----END CERTIFICATE-----Generated at Tue Dec 30 01:30:22 2025 by rpki-client