This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft File: ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json) Hash identifier: aHbxV4lipJ0wv8wabUPku8wfsoJU5FdyGSxW6EXoVlE= Subject key identifier: 32:89:FD:9B:07:D8:3C:FD:31:76:E8:D5:3B:31:4C:1F:31:34:16:73 Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8 Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8 Certificate serial: 019B3D59A057E2301AD6AEA5A1E58C7BF302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 20:00:42 +0000 Manifest this update: Sat 20 Dec 2025 20:00:42 +0000 Manifest next update: Sun 21 Dec 2025 20:00:42 +0000 Files and hashes: 1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: ovIZI7Ozc+VBSdHAHf/krfn+dFzoRgdq3s2dHWdv1Bk=) 2: j8gyWsRkkHFj471M_mas3x_kK88.roa (hash: aAR1nnqqt1WZ6GuhijvLaqKLM3ebeMxKd1729kZ7axQ=) 3: pQW5R-zKKXoKoeJff8c5_2k7hqc.roa (hash: rBt7iA3N1J58taPxtPNL2j6hN1NPIb/9bqIe8PmHwc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:a0:57:e2:30:1a:d6:ae:a5:a1:e5:8c:7b:f3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8 Validity Not Before: Dec 20 20:00:42 2025 GMT Not After : Dec 21 20:00:42 2025 GMT Subject: CN=3289fd9b07d83cfd3176e8d53b314c1f31341673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:7d:85:03:0b:30:27:22:8f:e7:5b:5a:03: 81:76:53:79:14:50:de:96:d5:f0:16:c1:94:07:c1: bd:fa:94:32:2d:b6:04:c5:0c:21:78:1c:97:d0:80: 71:4e:3a:c7:08:97:90:f5:1e:32:ad:7a:5d:ad:60: c8:7a:ab:fd:ce:13:0d:86:05:6f:e4:cf:a3:e9:f2: b8:26:90:c6:47:20:bb:91:cf:df:4a:9f:a8:3c:eb: 6c:c9:76:4a:77:b0:19:07:fb:de:05:fd:fc:fb:ce: dd:38:2d:94:d2:ca:69:47:2a:26:2d:c4:84:72:4c: 10:c9:ca:2f:74:62:1d:22:2b:03:0e:38:ec:98:02: 07:91:9b:bf:ee:d3:41:98:ac:c3:6a:8a:31:9a:03: bb:74:eb:3d:ca:f5:ed:17:ef:0c:f7:a8:9b:55:bb: 95:6c:cf:47:e8:ba:ac:59:71:3a:7b:8e:2d:16:06: 88:1f:5e:6b:0e:bf:b1:18:f7:fe:bb:e8:14:f5:58: 19:00:64:1a:17:50:03:59:ea:4b:30:91:5a:5f:4a: 46:f6:89:fb:da:06:b4:d9:be:e3:c7:83:37:0b:03: 3d:46:ac:92:45:48:02:75:31:24:94:24:5a:74:46: 8e:c0:01:01:cb:c5:62:e7:ad:15:3d:55:e4:7a:d2: bd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:89:FD:9B:07:D8:3C:FD:31:76:E8:D5:3B:31:4C:1F:31:34:16:73 X509v3 Authority Key Identifier: keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:63:c7:10:98:d2:c0:46:d6:57:05:4b:43:f1:dc:a6:89:53: 0d:3b:d8:bf:91:09:e4:32:46:26:9a:62:b4:23:d4:d4:00:ed: 64:25:09:f1:77:4f:b5:8c:55:b0:15:e9:75:d9:6b:e4:c6:5f: 3c:b1:1a:af:0b:c4:60:62:e6:80:68:eb:22:d2:ab:f9:c1:3a: bd:ad:06:3e:0f:7e:1d:0d:66:d8:a4:7a:8f:26:f6:6f:1c:f7: d0:40:cb:12:3b:bb:89:5c:98:0e:bb:83:29:ca:20:65:4e:4c: a9:8d:d5:7f:19:79:5f:e4:69:1f:67:36:4a:ec:70:fc:6b:56: e8:f9:5d:85:b9:b0:be:33:45:b4:19:d4:b9:7e:15:00:c3:e8: 63:b0:6d:c0:19:3a:0e:b2:d7:08:b7:c4:75:8c:92:15:f6:34: b8:92:f9:98:ea:82:89:d5:fa:2c:25:dd:77:5a:80:94:1a:41: e7:de:0e:c9:30:f0:70:07:f5:ac:99:87:56:4f:19:20:ab:bd: 96:45:58:f1:ac:1d:a3:2e:ba:b0:12:ea:58:ed:d2:56:7a:3d: a7:c3:cc:2f:32:e8:57:05:76:44:91:b7:95:8b:0c:f7:f1:83: 04:d8:e0:99:52:2e:28:21:65:a9:2c:4a:35:81:9e:a8:17:aa: 77:5e:a3:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WaBX4jAa1q6loeWMe/MCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTAxNGNlOGFkMzhkMTUzNTAwOTZkNTQ5ZWUxYzU4MDVk MDlkYzgwHhcNMjUxMjIwMjAwMDQyWhcNMjUxMjIxMjAwMDQyWjAzMTEwLwYDVQQD EygzMjg5ZmQ5YjA3ZDgzY2ZkMzE3NmU4ZDUzYjMxNGMxZjMxMzQxNjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywB9hQMLMCcij+dbWgOBdlN5FFDe ltXwFsGUB8G9+pQyLbYExQwheByX0IBxTjrHCJeQ9R4yrXpdrWDIeqv9zhMNhgVv 5M+j6fK4JpDGRyC7kc/fSp+oPOtsyXZKd7AZB/veBf38+87dOC2U0sppRyomLcSE ckwQycovdGIdIisDDjjsmAIHkZu/7tNBmKzDaooxmgO7dOs9yvXtF+8M96ibVbuV bM9H6LqsWXE6e44tFgaIH15rDr+xGPf+u+gU9VgZAGQaF1ADWepLMJFaX0pG9on7 2ga02b7jx4M3CwM9RqySRUgCdTEklCRadEaOwAEBy8Vi560VPVXketK9CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKJ/ZsH2Dz9MXbo1TsxTB8xNBZzMB8GA1UdIwQY MBaAFBEQFM6K040VNQCW1UnuHFgF0J3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYt OTFhMzk0Njg0NjQ0LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYtOTFhMzk0Njg0NjQ0 LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2PHEJjS wEbWVwVLQ/HcpolTDTvYv5EJ5DJGJppitCPU1ADtZCUJ8XdPtYxVsBXpddlr5MZf PLEarwvEYGLmgGjrItKr+cE6va0GPg9+HQ1m2KR6jyb2bxz30EDLEju7iVyYDruD KcogZU5MqY3Vfxl5X+RpH2c2Suxw/GtW6PldhbmwvjNFtBnUuX4VAMPoY7BtwBk6 DrLXCLfEdYySFfY0uJL5mOqCidX6LCXdd1qAlBpB594OyTDwcAf1rJmHVk8ZIKu9 lkVY8awdoy66sBLqWO3SVno9p8PMLzLoVwV2RJG3lYsM9/GDBNjgmVIuKCFlqSxK NYGeqBeqd16jHw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:22:39 2025 by rpki-client