This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json) Hash identifier: 1W/F2GhJ/F7hFAb+EPNui5ZygXFYzw350wdtQR5Epjk= Subject key identifier: 4A:71:72:FD:6E:04:9E:F0:25:2B:77:99:83:97:6A:F2:91:F2:5D:F2 Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60 Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760 Certificate serial: 019AF31BA2B0DD3B5216D3CE38EF1B58C787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:05 +0000 Manifest this update: Sat 06 Dec 2025 10:01:05 +0000 Manifest next update: Sun 07 Dec 2025 10:01:05 +0000 Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: 5m1YUET+Wm5tpC3eHkIjQe04InIIvsh4bjws93tKtVQ=) 2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a2:b0:dd:3b:52:16:d3:ce:38:ef:1b:58:c7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760 Validity Not Before: Dec 6 10:01:05 2025 GMT Not After : Dec 7 10:01:05 2025 GMT Subject: CN=4a7172fd6e049ef0252b779983976af291f25df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:f0:9b:88:3c:0b:81:21:5e:4e:bd:42:08: 8c:50:cd:14:3a:8c:5f:50:cf:10:6d:bc:29:43:d9: 8e:c4:47:da:f7:25:b5:14:3a:f4:f0:7b:80:04:ab: a2:99:09:8f:4a:0d:a3:d2:89:91:a1:ff:0c:7a:b7: 52:75:e1:58:b5:18:11:2f:18:ea:72:d8:97:59:0f: a6:08:21:3c:a9:02:f0:ba:1c:3b:60:9a:53:fa:b7: 66:56:ed:49:df:37:8f:62:35:6c:4b:4a:81:d1:47: a0:bc:b4:db:08:2d:93:4a:d0:73:be:21:58:77:84: a4:8f:ca:3b:90:13:23:05:13:09:9d:5b:7c:8f:1a: c1:c6:1f:43:d6:1c:19:5a:20:eb:a1:ae:4a:e8:14: b8:83:8b:0d:6f:0d:40:f8:8a:c4:cf:8c:22:b0:b4: db:16:98:09:a8:7e:d4:60:f4:44:52:7c:49:5f:b3: b7:ef:e7:c5:cb:7d:d9:22:c3:8d:0a:9e:a6:b2:5d: e7:0e:f4:0b:77:53:95:b5:5f:f3:05:6f:06:e9:ac: 50:ae:4d:b8:b2:0c:de:ea:47:c5:7e:ba:3f:f7:7c: a5:ef:4b:f3:4e:17:b8:d2:f3:06:da:20:c8:c6:c4: 25:8d:c3:a8:d6:21:ab:dc:d8:c7:98:b4:ea:e5:f6: 21:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:71:72:FD:6E:04:9E:F0:25:2B:77:99:83:97:6A:F2:91:F2:5D:F2 X509v3 Authority Key Identifier: keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:30:d8:ff:b9:52:cf:f4:d3:16:c0:7e:51:20:6e:b0:86:6e: a9:88:a2:1d:ed:09:67:33:a6:fb:3d:18:7f:ea:1c:62:7a:17: 03:1d:9a:b7:be:5b:24:41:66:92:8f:f0:45:e5:37:2a:5f:b6: f5:fc:4c:24:fb:8f:74:8b:83:b9:46:49:bf:d3:a0:e1:b0:05: 22:3e:51:92:17:6b:cc:9b:73:3b:2d:39:e5:1b:93:fa:82:58: 46:ef:d9:91:f9:66:7b:be:45:05:1f:7a:fc:fa:b6:80:81:03: d8:8b:1b:ca:d3:d2:8d:b4:b9:01:a5:b1:36:18:09:04:91:92: 50:72:c7:e0:87:80:e1:0b:ed:e4:2a:81:b2:c1:b2:72:d8:0e: f5:d2:8e:86:1d:05:05:53:78:4a:25:d5:ba:81:92:11:23:27: a7:c9:78:2a:13:53:39:3e:41:5d:4a:f8:3a:9c:e3:a4:70:25: 6d:36:1f:9d:90:79:ce:59:08:3f:26:9f:a6:28:7b:08:2b:2f: 04:33:c1:ad:63:25:a9:a5:ae:9f:c1:e8:ba:1c:21:b4:b5:e1: 63:fa:d7:01:61:f3:0f:0b:83:08:83:c8:54:2e:79:51:06:72: 42:64:6a:e2:21:1c:a8:85:b0:58:81:d2:05:e7:ae:42:f3:09: e7:f8:48:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6Kw3TtSFtPOOO8bWMeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZDcyNzE4ZDE1NWFjMGU3ZDMyN2Y2Mzg0YTJlNGM5NTQx NmQ3NjAwHhcNMjUxMjA2MTAwMTA1WhcNMjUxMjA3MTAwMTA1WjAzMTEwLwYDVQQD Eyg0YTcxNzJmZDZlMDQ5ZWYwMjUyYjc3OTk4Mzk3NmFmMjkxZjI1ZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYTwm4g8C4EhXk69QgiMUM0UOoxf UM8QbbwpQ9mOxEfa9yW1FDr08HuABKuimQmPSg2j0omRof8MerdSdeFYtRgRLxjq ctiXWQ+mCCE8qQLwuhw7YJpT+rdmVu1J3zePYjVsS0qB0UegvLTbCC2TStBzviFY d4Skj8o7kBMjBRMJnVt8jxrBxh9D1hwZWiDroa5K6BS4g4sNbw1A+IrEz4wisLTb FpgJqH7UYPREUnxJX7O37+fFy33ZIsONCp6msl3nDvQLd1OVtV/zBW8G6axQrk24 sgze6kfFfro/93yl70vzThe40vMG2iDIxsQljcOo1iGr3NjHmLTq5fYhvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpxcv1uBJ7wJSt3mYOXavKR8l3yMB8GA1UdIwQY MBaAFBLXJxjRVawOfTJ/Y4Si5MlUFtdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NGY1YjItYzdlMi00YTdlLWI2YzQt NTg3NjVmMTkzZmVjLzEvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS83NGY1YjItYzdlMi00YTdlLWI2YzQtNTg3NjVmMTkzZmVj LzEvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjDY/7lS z/TTFsB+USBusIZuqYiiHe0JZzOm+z0Yf+ocYnoXAx2at75bJEFmko/wReU3Kl+2 9fxMJPuPdIuDuUZJv9Og4bAFIj5RkhdrzJtzOy055RuT+oJYRu/Zkflme75FBR96 /Pq2gIED2IsbytPSjbS5AaWxNhgJBJGSUHLH4IeA4Qvt5CqBssGyctgO9dKOhh0F BVN4SiXVuoGSESMnp8l4KhNTOT5BXUr4OpzjpHAlbTYfnZB5zlkIPyafpih7CCsv BDPBrWMlqaWun8HouhwhtLXhY/rXAWHzDwuDCIPIVC55UQZyQmRq4iEcqIWwWIHS BeeuQvMJ5/hIFA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:32 2025 by rpki-client