This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json) Hash identifier: yGlZ407i0LxXsRR8t0cqHVe0Cgxzgy7emFBjUNNBxaU= Subject key identifier: 94:7A:BD:F4:D7:3F:0A:9C:90:C0:DE:48:38:CD:82:6C:EC:EA:D0:78 Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f Certificate serial: 019B390F1D9FBB61732834082C4FCE95500F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 00:00:50 +0000 Manifest this update: Sat 20 Dec 2025 00:00:50 +0000 Manifest next update: Sun 21 Dec 2025 00:00:50 +0000 Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: ZLKoMZ95GmHaFxdZdb818H2tXI6cI+VVTihvw6xLRmU=) 2: W4XahjIUcn2mEvtXXAsHwpbRivY.roa (hash: 2OOpdjz9UpDKv+dUsZMaEoPO0IiMCjqOpoDoPFdecug=) 3: z46k-i-bjDUO4Ol48wcdFv3fJS8.roa (hash: sn1w3xRnzI7Jkm3KXN6s7I0s9xcKRoJb9fQHsE63d9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:1d:9f:bb:61:73:28:34:08:2c:4f:ce:95:50:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f Validity Not Before: Dec 20 00:00:50 2025 GMT Not After : Dec 21 00:00:50 2025 GMT Subject: CN=947abdf4d73f0a9c90c0de4838cd826cecead078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:26:d6:a2:3c:f9:04:ae:03:5e:e4:e9:54:6d: 2b:35:97:6d:73:bd:b5:58:7f:11:85:d0:96:6f:ec: 43:83:69:b6:b5:ed:47:ed:cd:18:fd:1d:a5:97:86: 82:38:fb:d3:f2:58:09:57:a3:bc:e6:75:d7:9d:bf: 8e:83:5e:d3:4a:7f:de:85:a5:48:72:6a:16:f4:63: 45:1a:d8:09:a0:4e:92:84:72:67:ce:0e:6f:ec:d8: 01:cc:81:56:49:50:19:02:08:a2:5a:c7:9e:db:b3: 7e:b2:8c:01:fc:83:b7:a0:b1:de:ff:2e:8e:15:fb: d6:69:ae:4d:7f:43:94:c4:2c:9c:03:20:45:a7:59: 4b:7b:e9:d1:0e:89:76:e0:be:81:c6:bc:f3:6a:b2: f4:5d:d4:f4:05:08:c4:95:d2:c6:84:12:e4:5e:e6: cc:cf:55:87:c6:ae:62:46:f9:9d:f2:86:fe:d5:1a: f6:39:bd:c9:ba:39:43:91:e1:03:cd:f2:62:ac:7a: 19:eb:3f:fa:8a:68:0d:7b:53:ff:d9:23:06:cf:05: 15:11:ec:cc:d7:ce:26:a0:3a:37:f2:b3:e7:0a:6a: 01:e4:c6:8a:43:12:b1:ab:5d:8f:77:73:b1:30:4f: 8e:91:93:3c:64:10:be:45:14:e6:2d:b0:95:65:f2: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7A:BD:F4:D7:3F:0A:9C:90:C0:DE:48:38:CD:82:6C:EC:EA:D0:78 X509v3 Authority Key Identifier: keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:4f:04:0a:0c:c4:b4:61:91:1a:4f:f2:9a:15:75:f9:4a:10: 61:e7:e9:48:00:94:16:80:36:d2:87:c4:9e:b3:5f:1b:02:63: 9a:4e:b5:7c:9c:d1:cb:58:3c:ec:4f:ce:00:11:83:cc:6c:58: 85:c7:71:25:f9:6f:41:37:74:73:8f:48:a8:a6:c4:5d:46:9d: 02:1a:d6:22:e2:27:2a:dc:b3:40:15:7b:80:c5:d6:0b:b4:d5: b2:6d:34:bf:60:51:fa:5f:b9:ff:15:65:d6:91:5f:f6:e4:98: 3f:9b:ae:ba:5c:20:e5:9e:a7:5a:d1:35:a1:08:b0:91:6d:c9: ef:00:8a:01:98:04:21:ea:d4:f1:0d:3b:27:fe:d9:82:24:91: 7d:f7:65:65:6b:5c:d4:f8:6b:c4:e2:49:76:77:e4:25:e8:c1: a5:4f:0a:cd:3b:d3:ed:1b:af:63:20:ce:04:5f:0f:35:5b:bf: cb:4d:59:02:c2:1e:4a:45:07:47:ee:9f:d8:99:a7:4d:91:86: 17:6b:0c:17:89:d6:0e:4d:84:04:bb:d8:5e:8c:6e:9a:d4:17: 79:c7:2a:8b:4e:aa:4a:be:7f:0c:61:de:01:91:15:a5:74:61: 6e:e5:61:e3:1c:eb:f9:55:4f:95:f3:74:ba:68:8f:a5:7a:be: 66:bd:3d:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dx2fu2FzKDQILE/OlVAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTg0ZmI2NTAzYTc2MDY1N2Y5MDI3MGUyNzZhM2ZjYjUw YjhlOGYwHhcNMjUxMjIwMDAwMDUwWhcNMjUxMjIxMDAwMDUwWjAzMTEwLwYDVQQD Eyg5NDdhYmRmNGQ3M2YwYTljOTBjMGRlNDgzOGNkODI2Y2VjZWFkMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtybWojz5BK4DXuTpVG0rNZdtc721 WH8RhdCWb+xDg2m2te1H7c0Y/R2ll4aCOPvT8lgJV6O85nXXnb+Og17TSn/ehaVI cmoW9GNFGtgJoE6ShHJnzg5v7NgBzIFWSVAZAgiiWsee27N+sowB/IO3oLHe/y6O FfvWaa5Nf0OUxCycAyBFp1lLe+nRDol24L6BxrzzarL0XdT0BQjEldLGhBLkXubM z1WHxq5iRvmd8ob+1Rr2Ob3JujlDkeEDzfJirHoZ6z/6imgNe1P/2SMGzwUVEezM 184moDo38rPnCmoB5MaKQxKxq12Pd3OxME+OkZM8ZBC+RRTmLbCVZfIEeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJR6vfTXPwqckMDeSDjNgmzs6tB4MB8GA1UdIwQY MBaAFBEYT7ZQOnYGV/kCcOJ2o/y1C46PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUt MTk2ZDY2NmQyYjJiLzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUtMTk2ZDY2NmQyYjJi LzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzk8ECgzE tGGRGk/ymhV1+UoQYefpSACUFoA20ofEnrNfGwJjmk61fJzRy1g87E/OABGDzGxY hcdxJflvQTd0c49IqKbEXUadAhrWIuInKtyzQBV7gMXWC7TVsm00v2BR+l+5/xVl 1pFf9uSYP5uuulwg5Z6nWtE1oQiwkW3J7wCKAZgEIerU8Q07J/7ZgiSRffdlZWtc 1PhrxOJJdnfkJejBpU8KzTvT7RuvYyDOBF8PNVu/y01ZAsIeSkUHR+6f2JmnTZGG F2sMF4nWDk2EBLvYXoxumtQXeccqi06qSr5/DGHeAZEVpXRhbuVh4xzr+VVPlfN0 umiPpXq+Zr096g== -----END CERTIFICATE-----Generated at Sat Dec 20 09:38:03 2025 by rpki-client