This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft File: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json) Hash identifier: w/zom2/8AIAyms+fr9AyWLJU78sMQYkdTtxehtctLjA= Subject key identifier: 5E:17:A8:71:74:86:53:CD:8C:69:AA:49:75:5A:BC:ED:90:0B:CF:59 Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60 Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660 Certificate serial: 019AF2AD6CD0E820CB3C1880D5D8F70E29FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: SdSz3JQETFdiS+QjXqo8lHrqSXnGto3veGg6AyC8bDQ=) 2: JDxTNVA5sXO861LaJnEInxIC6cE.roa (hash: wDANlF+ZOT5kP2XyYHTeE88wDUM8Jf60i326vlXC21M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6c:d0:e8:20:cb:3c:18:80:d5:d8:f7:0e:29:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660 Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=5e17a871748653cd8c69aa49755abced900bcf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:22:88:13:8e:d2:2b:c6:87:f0:af:93:89: 0b:ef:13:5b:8c:05:d3:26:50:e6:0d:5e:e8:c6:06: ba:ff:4f:8d:39:df:46:05:bf:fe:6b:b5:7f:46:5a: e2:23:db:e7:64:2b:9f:a6:53:43:db:d9:9d:c2:43: ce:89:e5:d2:de:ae:c5:ac:21:05:0f:94:ad:92:d2: 36:19:f7:95:82:fb:75:bf:60:06:24:1c:97:49:d4: 02:24:8a:2b:fc:9a:cf:32:84:a6:6b:95:ae:a4:d8: f9:8f:f5:aa:9a:1a:17:cc:e3:6f:7d:9f:b9:70:98: 80:f8:35:5d:04:bd:36:e8:28:67:ea:ed:1b:61:5d: 33:00:17:55:df:ce:35:fe:3b:8d:59:2d:70:67:25: b2:a1:96:06:b0:12:3e:bd:9f:30:ec:6e:ed:d8:76: b9:22:4f:f7:f5:96:d1:43:f2:d8:74:14:13:d2:08: 05:f5:6b:fc:54:0a:53:1f:fb:64:e8:83:83:28:69: 4e:8a:e8:d9:ba:8c:7a:36:41:0f:16:33:d2:9b:39: 1f:00:1d:35:9c:48:fc:9f:2c:f9:16:2b:df:e1:a3: 2f:df:93:d3:3e:02:24:f3:05:55:c1:0c:fa:00:e4: 73:db:c9:0c:27:d3:47:2d:da:0d:f0:02:cd:1b:1a: d2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:17:A8:71:74:86:53:CD:8C:69:AA:49:75:5A:BC:ED:90:0B:CF:59 X509v3 Authority Key Identifier: keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:65:07:41:f5:86:37:5a:7f:34:06:4d:f6:17:28:90:70:d6: 22:e3:fb:63:b2:89:fb:c3:b4:6c:98:55:68:ca:08:a3:9a:af: 10:39:5e:b8:2b:72:ab:45:2c:1c:67:7f:05:dd:07:1c:fd:95: f2:b4:a2:63:49:d7:c0:64:64:0d:75:0d:1c:7a:db:93:f1:7b: 15:1f:9b:09:92:15:cc:ce:aa:46:61:d4:44:d0:f9:3a:f3:6f: 08:14:c8:95:f6:8e:6d:cc:f7:5e:0a:3b:7a:7b:7e:de:cc:d3: 9f:8e:69:57:ec:00:7e:87:64:b2:ec:73:14:65:79:da:59:49: cd:3e:47:1b:17:08:58:0c:39:77:2d:51:9f:7a:57:a7:f5:fd: 86:f6:6f:f0:c5:18:30:e8:53:87:5a:30:e9:a8:8f:57:54:75: 30:23:aa:be:cb:44:bf:5a:31:c9:69:ba:b4:30:33:03:bd:84: 90:51:8e:ee:02:51:09:80:05:b5:28:a4:f7:ce:ec:ab:26:60: 2d:21:7d:fd:7a:2a:7e:16:d0:1b:8e:c1:fa:78:46:8b:41:10: 5e:24:4d:3a:fb:9e:ca:ec:8f:0a:ea:d2:5f:f0:a0:9f:e3:39: dd:7f:82:56:f6:bd:f4:d8:13:c2:78:89:3b:bf:f4:70:7d:65: 69:9c:26:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWzQ6CDLPBiA1dj3Din8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzBhMWQ1ZTVjMDkwMWQxOWI0YjcwN2E3M2QxN2NhZTBl M2I2NjAwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD Eyg1ZTE3YTg3MTc0ODY1M2NkOGM2OWFhNDk3NTVhYmNlZDkwMGJjZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGkiiBOO0ivGh/Cvk4kL7xNbjAXT JlDmDV7oxga6/0+NOd9GBb/+a7V/RlriI9vnZCufplND29mdwkPOieXS3q7FrCEF D5StktI2GfeVgvt1v2AGJByXSdQCJIor/JrPMoSma5WupNj5j/WqmhoXzONvfZ+5 cJiA+DVdBL026Chn6u0bYV0zABdV3841/juNWS1wZyWyoZYGsBI+vZ8w7G7t2Ha5 Ik/39ZbRQ/LYdBQT0ggF9Wv8VApTH/tk6IODKGlOiujZuox6NkEPFjPSmzkfAB01 nEj8nyz5Fivf4aMv35PTPgIk8wVVwQz6AORz28kMJ9NHLdoN8ALNGxrSgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4XqHF0hlPNjGmqSXVavO2QC89ZMB8GA1UdIwQY MBaAFBEwodXlwJAdGbS3B6c9F8rg47ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQt NmQ0MTliNzE3ZDBhLzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQtNmQ0MTliNzE3ZDBh LzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2UHQfWG N1p/NAZN9hcokHDWIuP7Y7KJ+8O0bJhVaMoIo5qvEDleuCtyq0UsHGd/Bd0HHP2V 8rSiY0nXwGRkDXUNHHrbk/F7FR+bCZIVzM6qRmHURND5OvNvCBTIlfaObcz3Xgo7 ent+3szTn45pV+wAfodksuxzFGV52llJzT5HGxcIWAw5dy1Rn3pXp/X9hvZv8MUY MOhTh1ow6aiPV1R1MCOqvstEv1oxyWm6tDAzA72EkFGO7gJRCYAFtSik987sqyZg LSF9/XoqfhbQG47B+nhGi0EQXiRNOvueyuyPCurSX/Cgn+M53X+CVva99NgTwniJ O7/0cH1laZwmvg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:08:35 2025 by rpki-client