This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft File: er4RhD2-gDQLJGD8Fg7GubiPIio.mft (raw, json) Hash identifier: dX8T47s+uggrpQL16Y4mnKVQsUIEdbwXDGM9WwgTQT8= Subject key identifier: 80:9F:AA:F3:05:BE:D0:B8:31:F8:8B:7C:51:6C:1F:06:58:BE:5B:44 Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a Certificate serial: 019B42EEAA0C6D7C9E8AF68962EADB6D1C87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft Manifest number: 0B1B Signing time: Sun 21 Dec 2025 22:01:35 +0000 Manifest this update: Sun 21 Dec 2025 22:01:35 +0000 Manifest next update: Mon 22 Dec 2025 22:01:35 +0000 Files and hashes: 1: 2eW0jHQdI0PX8UwWvlZQ4skR9I8.roa (hash: +WLJjWRtmXlHhquy3CtPGHVAGrkpSztXcIg8okyclX8=) 2: er4RhD2-gDQLJGD8Fg7GubiPIio.crl (hash: dnIB+RPqrylJWhFK1VGKOukVHWlu+wfHxOG9i9Iz+Hc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:aa:0c:6d:7c:9e:8a:f6:89:62:ea:db:6d:1c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a Validity Not Before: Dec 21 22:01:35 2025 GMT Not After : Dec 22 22:01:35 2025 GMT Subject: CN=809faaf305bed0b831f88b7c516c1f0658be5b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:61:8d:ad:10:da:b2:14:88:10:b0:75:60: db:e1:a7:fb:32:04:79:ed:b2:a4:44:a7:44:cc:89: 51:44:e2:4c:80:13:eb:c7:74:e7:89:44:79:9a:8c: d3:b4:76:dd:59:85:e4:99:e4:21:bc:c5:7a:26:28: 7c:ac:01:b1:89:fd:e6:5a:e1:59:53:63:6d:55:8b: 07:55:25:9d:b5:4d:ae:46:29:09:17:15:d6:d1:c1: 09:91:6d:a9:65:72:c2:b5:ef:70:ea:1f:2e:9e:7d: 1e:87:e9:ce:87:77:b4:80:05:e2:92:50:f4:e0:59: 99:09:0e:42:03:dd:ee:38:81:e7:2d:ce:23:5d:28: 31:e5:e7:41:fa:88:5f:93:7c:20:28:be:37:e6:e5: 72:07:ec:e1:ca:e6:50:69:c2:5b:8a:02:85:e7:fe: 94:45:80:84:36:e1:c6:4d:ca:59:8f:7b:57:23:52: ba:f3:dd:06:25:87:0f:cf:9f:03:de:78:6d:18:78: 61:48:cc:e7:0d:93:96:54:c8:c2:68:3a:fe:13:80: 06:69:48:71:73:14:47:96:0e:76:aa:52:76:8e:b6: 26:46:e0:d3:8e:64:52:21:0a:eb:f3:8d:10:87:76: cf:99:5f:2d:e0:c9:96:ee:1d:c9:de:2b:63:29:60: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9F:AA:F3:05:BE:D0:B8:31:F8:8B:7C:51:6C:1F:06:58:BE:5B:44 X509v3 Authority Key Identifier: keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:0c:59:f9:b6:ca:0c:cf:cf:68:a9:fe:2c:57:3e:bc:7e:c0: 17:d5:c0:a8:69:e5:ec:85:e1:3a:2c:e1:80:49:72:e5:46:f6: fd:fb:22:5f:a5:56:18:8b:0e:c1:94:07:ba:7a:d4:bf:57:d1: f3:32:da:01:8c:eb:38:24:ef:30:58:02:13:b9:5b:14:67:39: d9:b2:bd:dd:75:20:ab:70:2d:5b:49:72:3e:ce:2f:ca:53:9a: 68:d4:5a:6d:38:c3:d4:96:d8:7a:35:b0:e5:3a:2d:d7:81:4b: de:fd:69:4b:e6:26:61:5d:57:03:7b:e4:06:b9:67:5b:91:0e: a0:12:32:21:41:7d:97:64:f0:50:e2:1a:72:76:f9:33:a4:98: 0d:66:9b:b9:3e:07:ab:62:56:d7:b5:e6:c6:14:5b:9e:0e:21: 87:57:5c:fa:c2:05:d9:02:a8:42:97:87:dc:6e:7f:ab:8e:30: 37:a0:db:49:16:b9:04:5e:de:6a:21:cf:bb:c3:b0:c7:3f:64: 8f:68:d5:44:b5:aa:1a:44:0c:65:bb:e4:5c:a1:ae:14:a5:99: 7c:cc:8c:04:a3:12:49:19:84:f4:52:68:c3:63:4a:c0:97:97: 4b:9b:ec:81:4d:bd:df:95:05:a7:00:ab:d3:91:c3:0b:d2:68: fd:62:22:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7qoMbXyeivaJYurbbRyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYmUxMTg0M2RiZTgwMzQwYjI0NjBmYzE2MGVjNmI5Yjg4 ZjIyMmEwHhcNMjUxMjIxMjIwMTM1WhcNMjUxMjIyMjIwMTM1WjAzMTEwLwYDVQQD Eyg4MDlmYWFmMzA1YmVkMGI4MzFmODhiN2M1MTZjMWYwNjU4YmU1YjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVBhja0Q2rIUiBCwdWDb4af7MgR5 7bKkRKdEzIlRROJMgBPrx3TniUR5mozTtHbdWYXkmeQhvMV6Jih8rAGxif3mWuFZ U2NtVYsHVSWdtU2uRikJFxXW0cEJkW2pZXLCte9w6h8unn0eh+nOh3e0gAXiklD0 4FmZCQ5CA93uOIHnLc4jXSgx5edB+ohfk3wgKL435uVyB+zhyuZQacJbigKF5/6U RYCENuHGTcpZj3tXI1K6890GJYcPz58D3nhtGHhhSMznDZOWVMjCaDr+E4AGaUhx cxRHlg52qlJ2jrYmRuDTjmRSIQrr840Qh3bPmV8t4MmW7h3J3itjKWDZqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICfqvMFvtC4MfiLfFFsHwZYvltEMB8GA1UdIwQY MBaAFHq+EYQ9voA0CyRg/BYOxrm4jyIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUt MzQxMWM2ZmI0ZmNhLzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82MjM1NjEtMDcxNS00Mjc3LWEwYmUtMzQxMWM2ZmI0ZmNh LzEvZXI0UmhEMi1nRFFMSkdEOEZnN0d1YmlQSWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgxZ+bbK DM/PaKn+LFc+vH7AF9XAqGnl7IXhOizhgEly5Ub2/fsiX6VWGIsOwZQHunrUv1fR 8zLaAYzrOCTvMFgCE7lbFGc52bK93XUgq3AtW0lyPs4vylOaaNRabTjD1JbYejWw 5Tot14FL3v1pS+YmYV1XA3vkBrlnW5EOoBIyIUF9l2TwUOIacnb5M6SYDWabuT4H q2JW17XmxhRbng4hh1dc+sIF2QKoQpeH3G5/q44wN6DbSRa5BF7eaiHPu8Owxz9k j2jVRLWqGkQMZbvkXKGuFKWZfMyMBKMSSRmE9FJow2NKwJeXS5vsgU2935UFpwCr 05HDC9Jo/WIiJg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:54:31 2025 by rpki-client