This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json) Hash identifier: Bj05kXZ7cNQiiHmE4uz7zgcEgWKYRZ2XoR9QN92euGQ= Subject key identifier: E7:5E:23:CB:CC:07:63:74:0A:C0:DC:A5:84:15:81:AA:FD:AF:27:00 Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83 Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683 Certificate serial: 019B40FFEB0C95A65AEC46CE6C7BE070CD4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 13:01:12 +0000 Manifest this update: Sun 21 Dec 2025 13:01:12 +0000 Manifest next update: Mon 22 Dec 2025 13:01:12 +0000 Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: z7QJH7GKlJ/aB3tKT+Lk+fGxN5UK9ErfP7zdCHkijo0=) 2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=) 3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:eb:0c:95:a6:5a:ec:46:ce:6c:7b:e0:70:cd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683 Validity Not Before: Dec 21 13:01:12 2025 GMT Not After : Dec 22 13:01:12 2025 GMT Subject: CN=e75e23cbcc0763740ac0dca5841581aafdaf2700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e1:06:7a:7f:91:7b:c2:22:3a:7e:67:b2:3c: a5:f9:b2:f5:3f:74:9f:bf:7c:3a:ec:9f:7f:20:2c: 6c:61:41:ec:03:17:f6:8d:ee:45:61:15:11:1f:d3: 9f:58:77:d9:f7:0e:3e:31:08:bd:bc:f3:83:70:3a: 15:c6:f0:c3:a1:2c:53:e6:ff:06:5e:1a:0a:7f:64: 86:1b:d4:99:89:09:39:05:76:19:26:24:05:0e:fd: 48:ee:23:c3:64:08:63:a9:97:6a:d0:41:a2:b9:fc: 7a:24:0c:6d:54:99:d8:8f:d8:b4:b6:ce:8a:98:52: 0c:c8:4f:b1:ec:8c:24:31:3e:e5:ab:41:2b:b7:8b: 2d:93:8d:f7:2e:5c:34:df:5c:ac:1d:27:d4:55:24: 7a:3e:c4:d6:5c:8a:2d:26:f5:41:cf:f7:e4:21:c3: dc:45:67:da:51:b0:17:ac:4b:a7:e8:10:7d:c9:37: 6c:4d:5b:a0:17:17:33:ca:47:31:c7:80:44:9e:24: 3c:c1:55:88:36:5a:83:6d:67:98:e0:32:a8:9c:40: 58:cb:4b:47:28:60:0c:35:49:ca:b8:06:91:11:b8: 84:a4:8f:8d:be:e0:12:09:b5:96:4b:3f:35:bd:cd: aa:79:7c:f3:87:0a:30:d5:ef:2b:36:83:33:bc:07: 7b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5E:23:CB:CC:07:63:74:0A:C0:DC:A5:84:15:81:AA:FD:AF:27:00 X509v3 Authority Key Identifier: keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:df:b1:90:13:ca:48:06:ed:c0:9f:a7:6c:57:cb:b4:66:35: b1:ae:f4:3b:94:8d:90:25:04:b6:0d:33:5d:e8:e7:80:41:d2: 47:f5:6d:3d:3c:92:f1:70:68:87:fc:dd:5f:2b:e7:31:43:bb: d4:e1:2b:90:df:e3:af:8f:42:23:99:b0:7d:f7:0f:1c:2d:5c: 5c:b2:18:4c:a6:86:9c:20:45:b9:d2:f0:2c:8e:60:3b:fb:5d: 0c:0a:16:33:35:4e:b3:9a:4f:56:84:5b:e0:be:e8:04:6c:b5: a9:e6:83:37:a7:c6:e6:45:f7:dc:1d:dc:56:f4:52:82:84:66: 04:a3:4b:71:eb:70:b4:71:a6:95:e5:d3:80:82:a3:e0:59:ef: 3b:40:a9:19:78:1c:a5:bb:b5:b5:8e:4a:94:31:cb:10:b1:d3: 57:77:8f:14:ad:11:44:be:aa:6e:54:ee:89:3d:ec:29:c6:a2: 11:78:e5:ed:d1:8e:ac:ab:6c:33:77:dc:c5:94:ff:52:f8:99: f7:f3:5a:1d:43:5c:f0:61:95:80:44:d7:14:bd:86:bf:51:bc: 69:14:dd:8b:d3:1e:18:55:7b:a4:5d:0d:56:4f:5c:e1:d5:f2: 3f:03:2f:22:3e:f9:32:85:f7:80:05:c8:c8:86:41:8a:7b:2b: c2:a5:14:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/+sMlaZa7EbObHvgcM1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWUwY2JiZTVkMWMwYTA5NDY1MDk1ZTQ0NGZiYzFjNzkz MmM2ODMwHhcNMjUxMjIxMTMwMTEyWhcNMjUxMjIyMTMwMTEyWjAzMTEwLwYDVQQD EyhlNzVlMjNjYmNjMDc2Mzc0MGFjMGRjYTU4NDE1ODFhYWZkYWYyNzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eEGen+Re8IiOn5nsjyl+bL1P3Sf v3w67J9/ICxsYUHsAxf2je5FYRURH9OfWHfZ9w4+MQi9vPODcDoVxvDDoSxT5v8G XhoKf2SGG9SZiQk5BXYZJiQFDv1I7iPDZAhjqZdq0EGiufx6JAxtVJnYj9i0ts6K mFIMyE+x7IwkMT7lq0Ert4stk433Llw031ysHSfUVSR6PsTWXIotJvVBz/fkIcPc RWfaUbAXrEun6BB9yTdsTVugFxczykcxx4BEniQ8wVWINlqDbWeY4DKonEBYy0tH KGAMNUnKuAaREbiEpI+NvuASCbWWSz81vc2qeXzzhwow1e8rNoMzvAd7IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdeI8vMB2N0CsDcpYQVgar9rycAMB8GA1UdIwQY MBaAFBEeDLvl0cCglGUJXkRPvBx5MsaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iNmM5OTEtMWZkNC00ODdmLTg3Nzgt ZDE1ZTUxNmRjNDVjLzEvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9iNmM5OTEtMWZkNC00ODdmLTg3NzgtZDE1ZTUxNmRjNDVj LzEvRVI0TXUtWFJ3S0NVWlFsZVJFLThISGt5eG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEN+xkBPK SAbtwJ+nbFfLtGY1sa70O5SNkCUEtg0zXejngEHSR/VtPTyS8XBoh/zdXyvnMUO7 1OErkN/jr49CI5mwffcPHC1cXLIYTKaGnCBFudLwLI5gO/tdDAoWMzVOs5pPVoRb 4L7oBGy1qeaDN6fG5kX33B3cVvRSgoRmBKNLcetwtHGmleXTgIKj4FnvO0CpGXgc pbu1tY5KlDHLELHTV3ePFK0RRL6qblTuiT3sKcaiEXjl7dGOrKtsM3fcxZT/UviZ 9/NaHUNc8GGVgETXFL2Gv1G8aRTdi9MeGFV7pF0NVk9c4dXyPwMvIj75MoX3gAXI yIZBinsrwqUULA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:29:15 2025 by rpki-client