This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json) Hash identifier: I1utxAmUD69nzEbHCQvNEb0cq3Vemi6SCP4/XCv6jIU= Subject key identifier: 72:5C:CD:A0:69:5B:B5:7A:A1:1F:35:F8:B6:83:27:90:0E:1F:69:96 Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb Certificate serial: 019AF12D95EA64010FE66D8B94B3A0FA58B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: zjdYjL2f3Z3AQdKmSGvfmcxLVTNeuz/yNhL0F6XgagY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:95:ea:64:01:0f:e6:6d:8b:94:b3:a0:fa:58:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=725ccda0695bb57aa11f35f8b68327900e1f6996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:70:08:26:18:1c:2a:4c:82:41:2e:b8:17: 6c:15:a0:6d:22:42:e6:34:2d:88:d1:57:1e:09:b8: 23:89:6f:84:67:48:f2:a2:94:7f:37:6d:9d:63:6b: 04:65:52:28:fa:eb:48:72:e2:7d:fd:96:63:c8:ab: ac:40:c2:be:d7:4e:ac:04:20:96:94:38:a3:41:3c: e0:6a:a0:e4:ba:92:10:bf:ec:59:66:6d:73:d4:05: 33:87:4c:69:4e:e3:77:d8:9a:cc:e0:f7:07:3c:47: ab:cd:b6:bd:d6:31:5d:4d:51:45:a9:cb:ce:7d:11: 6e:7d:ab:82:70:af:8f:50:9c:dd:9a:e0:29:21:87: 22:03:bc:a0:68:1b:a4:e5:48:49:5d:e0:09:a0:d4: 34:a1:f9:9e:2c:95:e5:c5:05:15:6b:45:db:2d:39: c0:b0:b8:d2:91:6b:99:e0:65:b8:ec:b3:ff:99:b5: 6a:aa:b1:59:5d:81:b4:a0:8a:6b:9e:7e:61:85:c3: 86:38:3c:eb:e2:86:f5:75:b2:72:db:79:62:13:60: 64:60:a6:10:6a:0e:7a:d5:a0:a3:d6:fc:c1:95:31: f5:62:45:3d:b1:98:2d:48:84:e6:b5:45:a7:fe:e5: 7b:44:f3:6f:8f:1e:be:ca:9a:d4:8f:16:c6:8e:7b: c1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5C:CD:A0:69:5B:B5:7A:A1:1F:35:F8:B6:83:27:90:0E:1F:69:96 X509v3 Authority Key Identifier: keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:9f:c2:9a:93:f4:88:94:fa:37:d8:04:81:2c:da:9a:30:8e: 05:79:85:57:a6:94:f4:6f:98:d8:99:9b:f9:e3:06:82:d1:64: c7:15:0b:0b:ea:38:83:47:a3:3a:68:1a:34:72:36:29:32:d4: 69:00:c1:ba:82:78:19:38:7e:b7:eb:c8:4b:0f:d2:bf:3c:58: 01:a6:31:da:4e:a6:f8:14:da:a6:ee:94:88:5c:34:e3:ac:47: 7e:12:17:ba:88:0b:f7:60:e7:11:c3:3e:9b:c2:da:39:5f:0e: e0:7c:c3:76:0c:52:44:66:0d:aa:97:4f:28:56:22:1b:2b:e6: 4e:81:d6:69:1b:2a:f6:73:7b:e3:63:ce:90:12:b3:2a:c8:b8: ae:d5:64:86:b4:4c:66:3f:b5:f9:e7:ef:d2:4b:a6:3a:27:f0: af:e9:fa:38:be:11:47:43:c9:fe:f0:75:dd:ca:14:e6:66:03: c6:f5:40:28:6e:e9:5e:7e:79:a1:8f:43:04:af:af:69:d9:31: 2b:9b:95:ed:9f:15:0a:fe:b0:10:35:53:12:24:09:0e:4f:e7: 69:ea:bc:47:0d:e6:c2:90:3d:a7:ec:d3:c7:8a:db:40:5f:55: 57:7c:b7:66:f5:57:66:f6:6f:3a:89:13:c7:63:5c:be:4a:f2: e2:d2:69:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZXqZAEP5m2LlLOg+li4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzcxMDlmZTlhMGRiZjVkYjg5MDc1MTQ2ZjI1ZjAyYjQ4 NThiY2IwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD Eyg3MjVjY2RhMDY5NWJiNTdhYTExZjM1ZjhiNjgzMjc5MDBlMWY2OTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoatwCCYYHCpMgkEuuBdsFaBtIkLm NC2I0VceCbgjiW+EZ0jyopR/N22dY2sEZVIo+utIcuJ9/ZZjyKusQMK+106sBCCW lDijQTzgaqDkupIQv+xZZm1z1AUzh0xpTuN32JrM4PcHPEerzba91jFdTVFFqcvO fRFufauCcK+PUJzdmuApIYciA7ygaBuk5UhJXeAJoNQ0ofmeLJXlxQUVa0XbLTnA sLjSkWuZ4GW47LP/mbVqqrFZXYG0oIprnn5hhcOGODzr4ob1dbJy23liE2BkYKYQ ag561aCj1vzBlTH1YkU9sZgtSITmtUWn/uV7RPNvjx6+yprUjxbGjnvBFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJczaBpW7V6oR81+LaDJ5AOH2mWMB8GA1UdIwQY MBaAFBE3EJ/poNv124kHUUbyXwK0hYvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQt Nzc5NTBmZDRmNjUzLzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQtNzc5NTBmZDRmNjUz LzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJ/CmpP0 iJT6N9gEgSzamjCOBXmFV6aU9G+Y2Jmb+eMGgtFkxxULC+o4g0ejOmgaNHI2KTLU aQDBuoJ4GTh+t+vISw/SvzxYAaYx2k6m+BTapu6UiFw046xHfhIXuogL92DnEcM+ m8LaOV8O4HzDdgxSRGYNqpdPKFYiGyvmToHWaRsq9nN742POkBKzKsi4rtVkhrRM Zj+1+efv0kumOifwr+n6OL4RR0PJ/vB13coU5mYDxvVAKG7pXn55oY9DBK+vadkx K5uV7Z8VCv6wEDVTEiQJDk/naeq8Rw3mwpA9p+zTx4rbQF9VV3y3ZvVXZvZvOokT x2Ncvkry4tJp1w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:21 2025 by rpki-client