This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft File: eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft (raw, json) Hash identifier: jXDVa03+gWokBsiABzeXPqfa83z+syoUaZu44lXrDUU= Subject key identifier: 7B:32:81:D2:62:A1:A5:7B:AD:BD:2F:02:AA:AB:F3:9F:5A:26:9D:E9 Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419 Certificate serial: 019B3FB64675B837BEF311380DA2B909BF45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 07:01:08 +0000 Manifest this update: Sun 21 Dec 2025 07:01:08 +0000 Manifest next update: Mon 22 Dec 2025 07:01:08 +0000 Files and hashes: 1: 0qkpe_SnM9-5P0iPtFGVXJ7tvSg.roa (hash: soU0dIF3nOPZOuBIEEwgdqIC3J9GsNXPEwxCnH/uIwE=) 2: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (hash: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=) 3: 75e82Mo-UTEsH5ZQ5vF9MCNjDzI.roa (hash: KDwzZqkmUw9popunKsd98zXfFwfFd0UZsyqynkg9ogc=) 4: Uf7v8xGiP68QxA_bhgqp2cZ0rSw.roa (hash: Ma1RibDwT4dyyTclKxOE11gqn/7vb8mRV9Vk50S20ys=) 5: eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl (hash: RrsyOQ33mU5mUgshsQeKEl3dO2Uv/mv4zDEmPpIcBL0=) 6: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (hash: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=) 7: teBAk8KVmP8hT8nLOicgc8K-0Kw.roa (hash: ebNAyrbx1cG23jL3rsaSAiQnT3rKgyP7LPCV/A0Jy6Y=) 8: yOafeVKjcIl2dO0Q3xA_QyRCUtc.roa (hash: 2zPskBvoYsqvUEbYKhfIcZJn+rj2BweSrLgX+5Zpuug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:46:75:b8:37:be:f3:11:38:0d:a2:b9:09:bf:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419 Validity Not Before: Dec 21 07:01:08 2025 GMT Not After : Dec 22 07:01:08 2025 GMT Subject: CN=7b3281d262a1a57badbd2f02aaabf39f5a269de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2c:15:39:a0:81:d8:ab:57:38:99:00:97:86: 60:d5:f9:2a:ef:a1:e6:17:33:6c:a3:9a:9c:70:9e: d8:a2:25:e9:ad:6b:03:ea:1d:40:c6:5b:e1:9a:93: 6a:e7:12:74:44:5a:1a:02:95:f2:4a:98:45:20:cf: 70:cc:b9:ad:97:c2:53:52:28:cd:08:84:65:8e:20: 1e:b9:25:de:b2:a4:99:59:94:a9:4c:04:ae:c5:2f: cf:30:c8:7c:a0:52:86:ff:91:82:8d:89:8d:59:50: 22:7a:45:68:26:fc:e2:8e:a7:4d:e5:76:26:13:c6: 2b:22:15:e2:eb:77:e0:6e:02:a2:a7:b4:fe:16:dc: 67:82:1b:e7:5f:34:18:8d:ec:1b:ad:09:d0:71:1f: 3c:80:08:7e:c3:4f:21:63:6c:3f:bd:f9:7d:a5:9c: c0:f6:76:62:51:52:44:31:be:36:03:36:8b:cd:ec: 01:8d:41:ef:dd:cf:8d:0f:58:7c:90:c1:85:92:e1: 19:bf:e4:cc:b5:63:8e:c2:b6:33:6c:0f:6c:64:e3: 16:36:74:8f:9c:86:fd:2a:f6:85:63:5e:f9:c8:bd: 9a:ff:bd:ff:fd:2e:be:18:a8:e5:a6:c9:78:01:29: 55:97:bd:75:65:27:34:9c:6f:77:0d:e6:f9:eb:43: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:32:81:D2:62:A1:A5:7B:AD:BD:2F:02:AA:AB:F3:9F:5A:26:9D:E9 X509v3 Authority Key Identifier: keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b7:7e:5c:e1:f6:e2:52:84:61:76:9e:3a:bc:51:10:c8:f2: 9d:5e:c4:ab:e9:fb:ce:fe:ee:88:6b:72:45:00:cf:f3:1f:cb: 69:c6:65:7c:0f:6d:22:61:25:18:0c:b2:78:a5:6e:b0:68:02: 48:10:56:cc:94:37:5e:81:86:85:c8:ca:c8:41:fd:90:f5:50: 59:96:33:da:22:ba:c9:d4:17:57:14:87:1e:8b:21:b0:b1:7a: f7:ad:e9:9d:98:dd:04:6c:f8:d7:62:1a:b5:2d:ac:63:27:95: 72:f9:a4:b8:ab:4b:7b:f7:08:5b:05:d5:e7:b7:b4:b4:99:4e: 58:28:60:4a:4a:78:4f:39:91:fb:e0:61:a8:2f:78:f8:14:f9: 6e:01:0d:8a:0e:68:6c:f7:bf:be:d7:7f:94:0b:bf:43:24:9b: 7e:fe:f9:46:a2:66:23:2c:ef:a4:32:29:f1:05:48:41:5d:8b: c2:a0:47:4f:b0:46:34:68:74:eb:27:79:e2:20:1e:d4:d0:46: 6a:7c:06:51:9e:e3:a1:82:fc:16:14:f3:f9:65:4c:c8:28:66: b0:46:d9:ae:a3:95:a2:3d:42:e9:85:f7:45:80:b9:77:e8:d3: fe:c4:bf:d5:f8:e8:69:6d:ce:01:10:0f:04:79:7d:e5:d0:2f: 63:b2:31:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tkZ1uDe+8xE4DaK5Cb9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw Yjg0MTkwHhcNMjUxMjIxMDcwMTA4WhcNMjUxMjIyMDcwMTA4WjAzMTEwLwYDVQQD Eyg3YjMyODFkMjYyYTFhNTdiYWRiZDJmMDJhYWFiZjM5ZjVhMjY5ZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjywVOaCB2KtXOJkAl4Zg1fkq76Hm FzNso5qccJ7YoiXprWsD6h1AxlvhmpNq5xJ0RFoaApXySphFIM9wzLmtl8JTUijN CIRljiAeuSXesqSZWZSpTASuxS/PMMh8oFKG/5GCjYmNWVAiekVoJvzijqdN5XYm E8YrIhXi63fgbgKip7T+FtxnghvnXzQYjewbrQnQcR88gAh+w08hY2w/vfl9pZzA 9nZiUVJEMb42AzaLzewBjUHv3c+ND1h8kMGFkuEZv+TMtWOOwrYzbA9sZOMWNnSP nIb9KvaFY175yL2a/73//S6+GKjlpsl4ASlVl711ZSc0nG93Deb560PNMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsygdJioaV7rb0vAqqr859aJp3pMB8GA1UdIwQY MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt MGNjODNiMDBmYzU4LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4 LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbd+XOH2 4lKEYXaeOrxREMjynV7Eq+n7zv7uiGtyRQDP8x/LacZlfA9tImElGAyyeKVusGgC SBBWzJQ3XoGGhcjKyEH9kPVQWZYz2iK6ydQXVxSHHoshsLF6963pnZjdBGz412Ia tS2sYyeVcvmkuKtLe/cIWwXV57e0tJlOWChgSkp4TzmR++BhqC94+BT5bgENig5o bPe/vtd/lAu/QySbfv75RqJmIyzvpDIp8QVIQV2LwqBHT7BGNGh06yd54iAe1NBG anwGUZ7joYL8FhTz+WVMyChmsEbZrqOVoj1C6YX3RYC5d+jT/sS/1fjoaW3OARAP BHl95dAvY7IxmA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:33:57 2025 by rpki-client