This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json) Hash identifier: /1DYBhErbqix56Q6g2vFjvFJBymaG1hYsTopSOeHGzA= Subject key identifier: 90:80:FC:49:C4:74:83:51:76:B6:4A:CD:24:37:C6:E8:66:14:48:D8 Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02 Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402 Certificate serial: 019AF12E119789FA48ED7F1A9ADC693DAA2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: hvyatsEAEcNnilnqSnNDVRmehgzWBmZ1hQRQchaxItI=) 2: SCt2QF1ZyfGumaW10dxyBcs0tjI.roa (hash: RDkYHsg9brN71rMixotxKpzbe8KGvrl7wQ7cHVhi6eA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:11:97:89:fa:48:ed:7f:1a:9a:dc:69:3d:aa:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402 Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=9080fc49c474835176b64acd2437c6e8661448d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:3d:45:e6:e5:22:46:07:38:d1:bc:84:62: 52:be:d9:03:fd:7b:eb:06:8e:67:ee:43:40:53:1a: 50:2a:81:f1:29:1b:64:f6:e5:9e:e9:73:a7:78:cf: e2:b4:69:fe:f5:ee:ba:53:ee:a9:65:fa:8b:c2:37: 2b:2b:37:47:68:dc:1f:53:bc:ff:0f:ab:a0:33:01: 63:cb:9a:ed:b0:d2:bd:8e:39:30:7c:df:5b:5b:1e: fc:d7:22:39:e6:9a:c6:24:76:58:82:89:13:a3:6e: e3:ed:15:d2:cd:59:00:9b:cc:4f:c2:40:cb:44:04: b7:bb:02:9e:67:a7:2b:3a:c4:c9:83:c4:10:3c:1f: 17:2a:80:32:47:84:e4:e9:97:ff:87:40:13:ae:42: 4b:f2:81:5c:a3:8b:c2:1b:e7:fa:5c:13:5b:f4:2d: a5:17:6a:30:56:fc:cb:ab:b6:eb:99:50:23:a3:78: f0:fe:82:1c:5b:79:bd:01:22:00:93:3d:b2:5b:33: 5f:3a:18:1e:3a:ee:1a:45:49:3e:bf:1a:04:96:01: 0c:95:66:04:41:88:89:5e:5a:b9:71:0e:ea:f3:b6: 6a:21:ef:d6:ea:80:bb:37:cb:f9:fb:74:80:db:00: 5f:ff:c9:20:73:c4:89:1f:d3:7d:b0:12:6c:aa:76: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:80:FC:49:C4:74:83:51:76:B6:4A:CD:24:37:C6:E8:66:14:48:D8 X509v3 Authority Key Identifier: keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:95:c1:c8:0e:3f:de:f0:31:cd:de:6c:5e:7d:d4:50:a8:cd: e5:ee:f7:de:8b:3b:d6:61:ae:d3:76:81:af:e7:b9:b6:76:b5: 7b:75:10:7e:e1:a4:24:c8:07:5f:ac:10:75:f7:1a:28:04:2e: d4:8d:02:52:f6:5c:ec:39:7e:90:ea:96:93:98:dd:49:d4:e5: 12:56:82:6d:86:5b:7a:71:7b:ae:8f:ac:f4:55:de:a2:c5:d7: 59:b4:37:c6:0e:5b:52:97:56:a2:fa:32:70:c8:f9:b1:9c:38: 42:d9:5d:07:2b:28:63:d6:00:ea:64:80:66:43:ba:d5:1d:ba: ff:6f:0b:57:ef:e7:89:94:72:29:b2:bd:47:1b:7c:44:31:3a: e0:e7:5e:47:c4:43:0c:24:b0:1b:65:2d:a7:8f:8d:65:37:6e: 69:57:a2:a6:d0:21:31:e8:82:b2:ae:50:63:fe:cf:c1:50:cc: 0a:25:fa:09:25:8c:e8:f8:d6:52:b8:ba:0c:f0:fd:0f:af:26: 58:29:46:d8:31:69:ce:be:d6:43:7c:16:11:e3:c3:34:9e:67: b8:ff:a2:43:a1:e7:e1:6a:9b:38:09:4d:43:f0:66:89:e4:76: df:54:19:77:8c:32:b0:f3:fe:5d:dc:15:bd:75:d2:4c:ed:03: 15:c3:94:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhGXifpI7X8amtxpPaosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExM2VhZjI1MjFkY2JmNzY0MjQyNDMxYTc4MWY2OGQwZGQ1 NTE0MDIwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD Eyg5MDgwZmM0OWM0NzQ4MzUxNzZiNjRhY2QyNDM3YzZlODY2MTQ0OGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPU9ReblIkYHONG8hGJSvtkD/Xvr Bo5n7kNAUxpQKoHxKRtk9uWe6XOneM/itGn+9e66U+6pZfqLwjcrKzdHaNwfU7z/ D6ugMwFjy5rtsNK9jjkwfN9bWx781yI55prGJHZYgokTo27j7RXSzVkAm8xPwkDL RAS3uwKeZ6crOsTJg8QQPB8XKoAyR4Tk6Zf/h0ATrkJL8oFco4vCG+f6XBNb9C2l F2owVvzLq7brmVAjo3jw/oIcW3m9ASIAkz2yWzNfOhgeOu4aRUk+vxoElgEMlWYE QYiJXlq5cQ7q87ZqIe/W6oC7N8v5+3SA2wBf/8kgc8SJH9N9sBJsqnb7lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCA/EnEdINRdrZKzSQ3xuhmFEjYMB8GA1UdIwQY MBaAFBE+ryUh3L92QkJDGngfaNDdVRQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTct MWE1ZDhmNTA1MThmLzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTctMWE1ZDhmNTA1MThm LzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5XByA4/ 3vAxzd5sXn3UUKjN5e733os71mGu03aBr+e5tna1e3UQfuGkJMgHX6wQdfcaKAQu 1I0CUvZc7Dl+kOqWk5jdSdTlElaCbYZbenF7ro+s9FXeosXXWbQ3xg5bUpdWovoy cMj5sZw4QtldBysoY9YA6mSAZkO61R26/28LV+/niZRyKbK9Rxt8RDE64OdeR8RD DCSwG2Utp4+NZTduaVeiptAhMeiCsq5QY/7PwVDMCiX6CSWM6PjWUri6DPD9D68m WClG2DFpzr7WQ3wWEePDNJ5nuP+iQ6Hn4WqbOAlNQ/BmieR231QZd4wysPP+XdwV vXXSTO0DFcOUwA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:32 2025 by rpki-client