This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft File: erqgtAKPBzwFZKZYtPuIhsvI0-s.mft (raw, json) Hash identifier: LRbN84jzUAxS4tru/296exGcdcOzlohbjZStqXM9dNM= Subject key identifier: 69:49:EB:36:80:E1:CD:34:DE:78:C3:A1:18:74:43:87:EB:B5:81:24 Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB Certificate issuer: /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb Certificate serial: 019BAF4B984B06CEA423796EE0BAD2820F09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft Manifest number: 03A2 Signing time: Sun 11 Jan 2026 23:02:05 +0000 Manifest this update: Sun 11 Jan 2026 23:02:05 +0000 Manifest next update: Mon 12 Jan 2026 23:02:05 +0000 Files and hashes: 1: 5kkE3XtE9ZnSspR1OcwpVp0TyV8.roa (hash: n0us7CHhoP1rKb4vN6/gR6gcwVv7Il8CmXn18T2tiXo=) 2: erqgtAKPBzwFZKZYtPuIhsvI0-s.crl (hash: bZDA8EggXi+BYFRju5g/s4Sg+j4DIIM8ytEuhqQuOe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:4b:98:4b:06:ce:a4:23:79:6e:e0:ba:d2:82:0f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb Validity Not Before: Jan 11 23:02:05 2026 GMT Not After : Jan 12 23:02:05 2026 GMT Subject: CN=6949eb3680e1cd34de78c3a118744387ebb58124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:fe:f5:0e:7a:6f:8e:a2:45:76:e5:db:13: 55:6f:0d:dc:01:f2:6d:d2:14:fa:b3:cc:5c:8b:7f: d4:0f:7f:9e:d4:61:df:0c:44:2d:b6:4f:75:cc:ec: 76:2a:c0:92:8a:d1:e9:6d:65:d8:fb:14:1f:ec:a7: 65:95:a6:f7:b0:9d:3d:ec:82:55:78:83:9d:e1:08: f4:94:4f:73:fb:1d:5a:7f:0d:78:0a:82:70:92:4a: a7:83:2e:bb:ea:80:34:db:c7:a7:f5:47:ac:16:3f: af:54:98:79:1b:78:ae:29:6d:fd:d6:eb:dc:8a:90: 1b:25:23:3a:c7:30:5f:3f:09:ed:01:1b:d1:a5:25: 9a:9f:8e:12:bc:14:6d:2c:10:44:0b:35:2a:fd:98: 08:d0:21:15:28:67:53:f6:12:13:db:35:4d:75:6e: 8a:80:3d:8e:a9:19:09:ea:46:d9:e5:70:12:71:2d: fe:10:1d:f2:29:27:28:5d:23:a3:99:02:6f:02:e3: 84:d3:7a:a6:15:d7:bb:31:32:27:aa:27:5a:45:a7: d1:bd:bf:7b:ef:b2:66:ab:83:c7:b2:f8:fa:01:0a: 47:59:c4:88:2c:0d:fa:3b:64:ab:a7:35:85:f1:07: 70:c2:ff:13:2d:3d:8c:5c:0f:3a:c7:13:2a:ba:dd: ab:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:49:EB:36:80:E1:CD:34:DE:78:C3:A1:18:74:43:87:EB:B5:81:24 X509v3 Authority Key Identifier: keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:dc:22:0c:ab:04:2a:0b:59:a6:54:a3:95:8e:a3:3d:8c:d4: fa:33:d0:92:64:73:c2:3c:75:b9:83:46:0b:4c:db:f7:d2:80: ec:d1:93:a2:e4:6c:a7:d2:f4:77:1a:eb:77:ad:07:e2:24:99: d4:e1:96:03:67:fb:d0:f8:18:86:f7:05:e1:c2:ec:11:48:ef: 77:df:4b:70:b7:aa:02:9c:b6:cd:2b:5f:78:97:3e:81:0c:19: 04:aa:13:dd:e3:ee:4d:5e:73:0a:91:f7:81:9b:40:0f:b2:a6: f2:09:ed:72:ab:3a:a1:3a:af:14:44:bb:a6:91:a1:fe:6b:ee: 6d:fe:5f:80:14:65:ed:43:cf:39:f9:62:fc:f7:44:3b:52:3b: 61:34:ef:25:9b:5c:08:b9:eb:8d:3b:12:e5:44:dc:31:cc:1f: e6:40:26:8d:5d:9d:5b:00:88:36:1f:3d:98:1c:f5:ef:8d:62: 4f:b0:d2:85:b3:ba:55:01:d9:49:72:42:0d:36:ae:0d:5a:d2: 29:38:7f:e6:b8:a9:4f:8f:df:fd:5f:75:4e:34:c8:b1:a3:d9: 0f:07:81:f1:d2:dc:8f:6e:06:d4:da:cf:5f:8c:77:1f:ff:4b: 42:2f:9d:bb:fa:b8:bd:d8:97:85:ed:c4:0d:f6:c6:1a:27:e8: 0f:06:bd:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvS5hLBs6kI3lu4LrSgg8JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYmFhMGI0MDI4ZjA3M2MwNTY0YTY1OGI0ZmI4ODg2Y2Jj OGQzZWIwHhcNMjYwMTExMjMwMjA1WhcNMjYwMTEyMjMwMjA1WjAzMTEwLwYDVQQD Eyg2OTQ5ZWIzNjgwZTFjZDM0ZGU3OGMzYTExODc0NDM4N2ViYjU4MTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3X+9Q56b46iRXbl2xNVbw3cAfJt 0hT6s8xci3/UD3+e1GHfDEQttk91zOx2KsCSitHpbWXY+xQf7Kdllab3sJ097IJV eIOd4Qj0lE9z+x1afw14CoJwkkqngy676oA028en9UesFj+vVJh5G3iuKW391uvc ipAbJSM6xzBfPwntARvRpSWan44SvBRtLBBECzUq/ZgI0CEVKGdT9hIT2zVNdW6K gD2OqRkJ6kbZ5XAScS3+EB3yKScoXSOjmQJvAuOE03qmFde7MTInqidaRafRvb97 77Jmq4PHsvj6AQpHWcSILA36O2SrpzWF8Qdwwv8TLT2MXA86xxMqut2rWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlJ6zaA4c003njDoRh0Q4frtYEkMB8GA1UdIwQY MBaAFHq6oLQCjwc8BWSmWLT7iIbLyNPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZGY3ZWMtMmFmZS00NTMyLWI0MGEt YmFlZGM3OWFlN2UxLzEvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZGY3ZWMtMmFmZS00NTMyLWI0MGEtYmFlZGM3OWFlN2Ux LzEvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNwiDKsE KgtZplSjlY6jPYzU+jPQkmRzwjx1uYNGC0zb99KA7NGTouRsp9L0dxrrd60H4iSZ 1OGWA2f70PgYhvcF4cLsEUjvd99LcLeqApy2zStfeJc+gQwZBKoT3ePuTV5zCpH3 gZtAD7Km8gntcqs6oTqvFES7ppGh/mvubf5fgBRl7UPPOfli/PdEO1I7YTTvJZtc CLnrjTsS5UTcMcwf5kAmjV2dWwCINh89mBz1741iT7DShbO6VQHZSXJCDTauDVrS KTh/5ripT4/f/V91TjTIsaPZDweB8dLcj24G1NrPX4x3H/9LQi+du/q4vdiXhe3E DfbGGifoDwa9PA== -----END CERTIFICATE-----Generated at Mon Jan 12 01:23:54 2026 by rpki-client