This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json) Hash identifier: Ogtpzzjg9h8aYRWC1dEFFZeMCZn+St9jGw3qKhBTxVM= Subject key identifier: 43:4B:46:92:44:EF:96:D0:08:4E:58:92:40:FF:2D:2D:F8:DD:BE:32 Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b Certificate serial: 019AF3C0088345F48B15DAF8B018F5C99648 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft Manifest number: 16E0 Signing time: Sat 06 Dec 2025 13:00:39 +0000 Manifest this update: Sat 06 Dec 2025 13:00:39 +0000 Manifest next update: Sun 07 Dec 2025 13:00:39 +0000 Files and hashes: 1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=) 2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: BuO2T11z1mWOeKVxbMcW0KTir5MZpbMn2Zf7B7tULuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:08:83:45:f4:8b:15:da:f8:b0:18:f5:c9:96:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b Validity Not Before: Dec 6 13:00:39 2025 GMT Not After : Dec 7 13:00:39 2025 GMT Subject: CN=434b469244ef96d0084e589240ff2d2df8ddbe32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:1a:a6:81:83:ba:99:71:f8:50:60:b4:92: 9e:16:7c:7c:12:59:7f:1b:a2:7c:80:94:8c:2c:72: ce:95:ad:5c:e6:33:93:53:d8:e6:bd:d8:09:8a:37: e4:2a:21:48:6e:c5:5c:7d:09:25:82:56:cc:cd:21: ba:55:3a:24:9d:78:ff:6e:24:a4:19:b7:af:72:f3: 62:e1:2b:a5:0e:b5:02:8f:94:0b:99:db:87:03:79: ef:a8:42:4f:42:3c:60:a8:7e:7d:ca:cb:21:b0:0a: 1b:d1:f0:88:66:45:11:14:67:45:d5:b3:a1:3d:7f: 6d:1b:33:ad:82:08:84:f5:a7:eb:71:87:ef:1d:cd: 41:43:dc:f1:c9:b2:ce:e6:dd:84:10:40:af:27:68: f1:f4:40:0c:35:40:9f:a2:7a:c1:f5:dc:2f:fc:29: e5:af:41:7c:3c:8b:cb:c5:db:18:87:58:df:3c:05: 0a:1e:29:ab:d9:bb:40:79:53:ff:6e:d9:f1:91:2e: 52:bf:67:ce:2a:f3:1a:d5:f8:dc:8c:e7:71:9f:91: cc:f0:c6:09:f2:22:6f:ff:a6:e6:de:b4:cb:e8:b0: bf:ae:99:39:3b:d3:9f:ac:dc:d0:ac:59:5b:00:f3: 4b:87:6a:10:42:c5:38:eb:bc:9b:89:50:59:97:63: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4B:46:92:44:EF:96:D0:08:4E:58:92:40:FF:2D:2D:F8:DD:BE:32 X509v3 Authority Key Identifier: keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ff:dc:dd:f9:4b:14:d8:4e:53:0d:cd:66:14:ac:88:9b:84: de:e0:25:2b:49:be:da:40:64:17:a7:f7:e2:9f:16:c1:0b:b5: 35:81:40:32:c6:22:1c:36:0a:9c:78:52:98:8f:26:1d:c0:6a: 20:34:1c:a2:d8:ac:62:ed:48:8a:75:17:8c:cf:40:01:d2:3d: b2:ee:e2:fa:f8:06:94:19:9c:4b:b1:31:65:b2:e6:20:8c:e3: 1d:cb:7f:48:11:6b:2c:e3:28:70:2b:94:40:49:5a:cd:bb:57: f2:a3:a7:ec:e5:25:f7:07:43:ce:83:e0:4a:37:e5:37:a4:21: 0a:7a:99:5c:06:75:d7:7a:f4:0f:61:2a:83:ae:39:25:9b:85: 50:47:45:82:c9:25:28:45:b4:d1:67:38:30:6c:0e:49:c0:19: 5e:a4:15:02:ac:64:a8:64:d5:02:6a:0c:a5:c3:92:44:ef:d7: f1:e5:b3:8c:17:ca:5d:b3:b0:59:b0:d2:59:fe:13:34:85:5b: ab:94:94:fc:95:14:40:9f:9b:15:19:98:8c:39:55:32:18:cb: 1e:63:e6:c8:ca:dc:f8:c0:1c:f6:de:48:fc:a2:c4:49:db:d3: f8:87:6f:c5:3d:43:62:1e:4a:d6:f2:ea:2c:58:3e:de:ab:b4: 8e:28:30:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAiDRfSLFdr4sBj1yZZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MzRmN2VlNWQwNGEwMjYyMjNjM2FhMzE5MTJiZjYxMGQw MGRiN2IwHhcNMjUxMjA2MTMwMDM5WhcNMjUxMjA3MTMwMDM5WjAzMTEwLwYDVQQD Eyg0MzRiNDY5MjQ0ZWY5NmQwMDg0ZTU4OTI0MGZmMmQyZGY4ZGRiZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqYapoGDuplx+FBgtJKeFnx8Ell/ G6J8gJSMLHLOla1c5jOTU9jmvdgJijfkKiFIbsVcfQklglbMzSG6VToknXj/biSk GbevcvNi4SulDrUCj5QLmduHA3nvqEJPQjxgqH59ysshsAob0fCIZkURFGdF1bOh PX9tGzOtggiE9afrcYfvHc1BQ9zxybLO5t2EEECvJ2jx9EAMNUCfonrB9dwv/Cnl r0F8PIvLxdsYh1jfPAUKHimr2btAeVP/btnxkS5Sv2fOKvMa1fjcjOdxn5HM8MYJ 8iJv/6bm3rTL6LC/rpk5O9OfrNzQrFlbAPNLh2oQQsU467ybiVBZl2OpoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENLRpJE75bQCE5YkkD/LS343b4yMB8GA1UdIwQY MBaAFHk09+5dBKAmIjw6oxkSv2ENANt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYt ZjFkMzQ5ODIzNTA0LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYtZjFkMzQ5ODIzNTA0 LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlv/c3flL FNhOUw3NZhSsiJuE3uAlK0m+2kBkF6f34p8WwQu1NYFAMsYiHDYKnHhSmI8mHcBq IDQcotisYu1IinUXjM9AAdI9su7i+vgGlBmcS7ExZbLmIIzjHct/SBFrLOMocCuU QElazbtX8qOn7OUl9wdDzoPgSjflN6QhCnqZXAZ113r0D2Eqg645JZuFUEdFgskl KEW00Wc4MGwOScAZXqQVAqxkqGTVAmoMpcOSRO/X8eWzjBfKXbOwWbDSWf4TNIVb q5SU/JUUQJ+bFRmYjDlVMhjLHmPmyMrc+MAc9t5I/KLESdvT+IdvxT1DYh5K1vLq LFg+3qu0jigw2w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:26:04 2025 by rpki-client