This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft File: ET9u8WzirCilmQYD0folvUl1lN0.mft (raw, json) Hash identifier: FhdP0go8AV+EpW58zqjmNnWQgkFPSE9JmDT/pUalK6o= Subject key identifier: 52:C3:C4:83:9B:CE:12:6B:28:A8:AA:F4:DD:B6:DE:A3:3C:36:C9:74 Authority key identifier: 11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD Certificate issuer: /CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd Certificate serial: 019AF2091AD7C0CEAEA2CCC7BB55AD258ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft Manifest number: 0615 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: ET9u8WzirCilmQYD0folvUl1lN0.crl (hash: CCBmof9YHkoblLDi9lc4Nlamm9AYuNp0OCzt2zilNEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1a:d7:c0:ce:ae:a2:cc:c7:bb:55:ad:25:8e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=113f6ef16ce2ac28a5990603d1fa25bd497594dd Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=52c3c4839bce126b28a8aaf4ddb6dea33c36c974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a0:e6:a5:b2:2a:1e:9a:16:39:c4:33:64:ad: a8:d4:d8:e7:2d:f9:1e:be:33:6f:3c:ca:10:a1:7b: e6:3a:f3:26:79:02:b1:75:d8:83:2f:3d:6d:17:53: 64:e4:42:c7:5a:83:e0:d5:e4:7d:80:65:6f:cc:09: 58:37:92:59:7e:07:8f:6e:ad:ed:16:69:39:fc:fd: 43:12:18:cd:25:d0:3b:1b:a8:ac:6d:1d:97:6b:bd: b5:05:aa:be:b7:1b:cc:7d:d8:fa:a1:bc:47:c3:b2: d8:15:dc:d8:96:93:c1:96:04:0f:09:11:28:0f:03: d8:24:0a:9a:88:e4:9f:f0:17:8d:e3:a7:7b:e6:ca: 58:14:9b:9e:b7:5c:6c:2f:a8:88:d0:26:ce:e7:d4: cd:91:7d:47:0e:37:8b:4b:3c:1e:31:37:70:50:ae: a6:3c:73:cf:19:e0:63:50:ce:ab:12:37:c7:5a:78: 58:f6:2c:64:25:af:55:ad:55:61:c1:54:cb:25:5f: 1a:bf:56:26:86:c2:36:83:24:06:0f:a3:e2:09:9a: d8:46:7c:b4:0b:ab:b4:27:b0:c1:29:20:03:c6:b8: fa:b1:19:1e:1f:64:41:3a:89:3d:83:9e:35:ec:96: 1f:ed:a4:29:c6:8d:32:80:b3:15:b6:30:cd:31:1b: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C3:C4:83:9B:CE:12:6B:28:A8:AA:F4:DD:B6:DE:A3:3C:36:C9:74 X509v3 Authority Key Identifier: keyid:11:3F:6E:F1:6C:E2:AC:28:A5:99:06:03:D1:FA:25:BD:49:75:94:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET9u8WzirCilmQYD0folvUl1lN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3b5877-aa65-49fc-859d-905dbab8bd57/1/ET9u8WzirCilmQYD0folvUl1lN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9a:08:2f:87:df:ca:57:ed:5b:d4:fb:93:de:8b:fb:97:f4: 9e:3b:9d:61:d6:3a:c1:39:a7:e4:8a:fb:c6:7d:1e:db:80:a8: 3e:93:35:a8:d2:93:12:dc:d7:14:92:97:5e:5a:ab:df:28:d7: 95:f2:bd:94:00:d0:a9:31:4c:48:9a:db:32:4c:a9:df:91:6f: 47:1c:35:d4:c6:fe:43:94:fb:64:46:a9:3c:76:de:7f:fe:13: 72:d3:48:e0:5a:13:39:96:b3:b9:f7:1b:49:f2:7f:60:15:ad: ee:f3:e0:a0:20:06:82:0a:c7:0b:35:91:cb:40:57:9f:a7:f4: 74:d0:66:b7:36:38:10:eb:4b:48:cd:1c:03:7d:bd:26:bb:18: 6e:2a:45:19:c8:c3:32:91:fe:f4:8d:72:fc:bd:49:28:a5:c9: 08:af:8b:37:15:8c:e4:92:7c:89:60:df:89:17:e6:de:36:85: b2:a4:c3:9b:21:48:55:1a:61:d1:ec:12:ac:8d:5c:04:b4:16: 3d:4c:76:84:d6:f4:85:fc:b7:06:2c:67:88:64:80:34:e6:e2: 06:5d:f4:8b:2e:9e:9b:40:cd:40:45:d1:f8:db:67:a8:cc:42: f0:2e:2a:6a:ac:0c:07:34:e5:3e:14:ea:70:40:a8:cf:9f:c3: ff:24:21:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRrXwM6uoszHu1WtJY7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExM2Y2ZWYxNmNlMmFjMjhhNTk5MDYwM2QxZmEyNWJkNDk3 NTk0ZGQwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD Eyg1MmMzYzQ4MzliY2UxMjZiMjhhOGFhZjRkZGI2ZGVhMzNjMzZjOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aDmpbIqHpoWOcQzZK2o1NjnLfke vjNvPMoQoXvmOvMmeQKxddiDLz1tF1Nk5ELHWoPg1eR9gGVvzAlYN5JZfgePbq3t Fmk5/P1DEhjNJdA7G6isbR2Xa721Baq+txvMfdj6obxHw7LYFdzYlpPBlgQPCREo DwPYJAqaiOSf8BeN46d75spYFJuet1xsL6iI0CbO59TNkX1HDjeLSzweMTdwUK6m PHPPGeBjUM6rEjfHWnhY9ixkJa9VrVVhwVTLJV8av1YmhsI2gyQGD6PiCZrYRny0 C6u0J7DBKSADxrj6sRkeH2RBOok9g5417JYf7aQpxo0ygLMVtjDNMRtw+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLDxIObzhJrKKiq9N223qM8Nsl0MB8GA1UdIwQY MBaAFBE/bvFs4qwopZkGA9H6Jb1JdZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVQ5dThXemlyQ2lsbVFZRDBmb2x2VWwxbE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zYjU4NzctYWE2NS00OWZjLTg1OWQt OTA1ZGJhYjhiZDU3LzEvRVQ5dThXemlyQ2lsbVFZRDBmb2x2VWwxbE4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zYjU4NzctYWE2NS00OWZjLTg1OWQtOTA1ZGJhYjhiZDU3 LzEvRVQ5dThXemlyQ2lsbVFZRDBmb2x2VWwxbE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZoIL4ff ylftW9T7k96L+5f0njudYdY6wTmn5Ir7xn0e24CoPpM1qNKTEtzXFJKXXlqr3yjX lfK9lADQqTFMSJrbMkyp35FvRxw11Mb+Q5T7ZEapPHbef/4TctNI4FoTOZazufcb SfJ/YBWt7vPgoCAGggrHCzWRy0BXn6f0dNBmtzY4EOtLSM0cA329JrsYbipFGcjD MpH+9I1y/L1JKKXJCK+LNxWM5JJ8iWDfiRfm3jaFsqTDmyFIVRph0ewSrI1cBLQW PUx2hNb0hfy3BixniGSANObiBl30iy6em0DNQEXR+NtnqMxC8C4qaqwMBzTlPhTq cECoz5/D/yQhIw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:53 2025 by rpki-client