This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json) Hash identifier: dncos2Lw86WR25LhCRhoi2IgZSwjaUpCi/OnDL6ReqQ= Subject key identifier: E0:FE:C1:6B:29:2F:E1:54:E2:48:8D:2D:95:A4:01:8E:B4:E6:EA:89 Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f Certificate serial: 019BF61997DC6AB1DC62EFD4F36DE0431A40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 17:00:30 +0000 Manifest this update: Sun 25 Jan 2026 17:00:30 +0000 Manifest next update: Mon 26 Jan 2026 17:00:30 +0000 Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: Ea1C57AunSOAELU5oGICTQoQaTwh4WEyKeyJB/FNmc0=) 2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:97:dc:6a:b1:dc:62:ef:d4:f3:6d:e0:43:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f Validity Not Before: Jan 25 17:00:30 2026 GMT Not After : Jan 26 17:00:30 2026 GMT Subject: CN=e0fec16b292fe154e2488d2d95a4018eb4e6ea89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4a:3b:0c:7a:7a:fc:b8:16:8c:53:93:b4:20: 6f:70:5d:8c:c4:15:e0:bb:62:60:83:d6:b0:ec:0d: a7:59:fe:50:9a:fe:f3:14:3a:53:8c:17:d2:45:95: e9:40:ad:dd:97:46:3e:0c:4b:0a:ea:17:c4:f6:bd: 4a:5e:c2:42:46:f2:ab:44:be:ad:8c:c2:12:33:79: de:38:26:b3:09:d8:ca:17:3a:d8:38:d6:ca:b1:72: e5:a7:b8:c2:62:38:01:e6:f9:28:99:7e:4d:e0:dc: 17:d2:65:c3:d5:48:c2:4e:b3:b5:e9:08:46:f3:25: 35:b2:f9:87:b3:c1:fd:91:4e:3f:c6:7d:5c:be:37: e6:cd:f9:34:7a:e3:4d:9b:b5:95:3d:2e:fd:e0:27: 19:2c:02:b3:07:39:40:6b:c4:6b:77:0a:91:95:e7: 4c:f0:4f:e4:39:9e:6b:0f:09:9c:e8:cf:c7:d8:ea: a6:5f:db:83:ba:ee:ae:a4:5c:82:20:36:d9:d2:27: c1:12:08:4c:a2:f7:a2:4f:7d:fa:77:8b:78:2b:4f: b7:bf:e1:31:4b:6c:db:97:2d:5c:37:31:98:6e:f1: 72:56:2f:ea:4b:26:cb:7c:14:d0:5f:c6:3d:83:5a: aa:71:08:96:7f:90:3e:14:20:2f:d7:fc:5d:a0:93: 44:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FE:C1:6B:29:2F:E1:54:E2:48:8D:2D:95:A4:01:8E:B4:E6:EA:89 X509v3 Authority Key Identifier: keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4c:46:63:75:90:98:63:e5:b5:5e:13:ae:8f:8b:a8:9d:1e: 90:95:20:c2:3d:53:01:ea:0b:ac:bc:73:57:a4:4f:2c:9c:88: 82:05:1f:97:c2:1c:3d:fb:fe:9b:a5:a5:7b:57:e0:0a:31:af: aa:c5:89:35:11:19:68:54:45:cb:20:a0:3d:50:b6:b1:8e:16: 65:9e:5d:ee:2a:55:24:53:a2:37:29:6b:ff:12:82:85:47:01: 79:45:57:7f:0b:2c:6f:63:b9:07:50:4c:fa:69:81:53:6a:ca: ad:f2:f1:70:f5:79:c9:ad:05:42:54:f0:a0:e2:51:45:dc:94: af:f3:89:00:a6:e8:03:73:c2:70:5b:89:94:99:73:c1:5f:ec: 30:4f:58:d6:69:d2:31:a5:2f:34:b8:ce:b1:03:8b:73:f0:37: 9f:30:00:33:1c:03:61:31:41:4f:50:c1:3d:54:fe:60:a6:ba: 56:3c:e9:3c:6c:f6:5a:ae:ef:a7:fa:92:13:06:cd:e9:75:c2: 34:a5:60:1e:b3:0c:40:4c:a1:ec:66:e5:a4:80:bb:2f:36:03: 07:d7:4d:1c:33:9b:1d:ea:86:15:60:f8:73:10:00:2a:8f:e5: cc:cc:8b:bb:75:78:d4:15:c7:46:66:ef:8c:48:ee:cc:9c:9c: f4:9c:12:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GZfcarHcYu/U823gQxpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzdjMjM0NTNiODhlYmE0NTVjNDIwOGM2ZGY1YjNlMWJi YzI0NWYwHhcNMjYwMTI1MTcwMDMwWhcNMjYwMTI2MTcwMDMwWjAzMTEwLwYDVQQD EyhlMGZlYzE2YjI5MmZlMTU0ZTI0ODhkMmQ5NWE0MDE4ZWI0ZTZlYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmko7DHp6/LgWjFOTtCBvcF2MxBXg u2Jgg9aw7A2nWf5Qmv7zFDpTjBfSRZXpQK3dl0Y+DEsK6hfE9r1KXsJCRvKrRL6t jMISM3neOCazCdjKFzrYONbKsXLlp7jCYjgB5vkomX5N4NwX0mXD1UjCTrO16QhG 8yU1svmHs8H9kU4/xn1cvjfmzfk0euNNm7WVPS794CcZLAKzBzlAa8RrdwqRledM 8E/kOZ5rDwmc6M/H2OqmX9uDuu6upFyCIDbZ0ifBEghMoveiT336d4t4K0+3v+Ex S2zbly1cNzGYbvFyVi/qSybLfBTQX8Y9g1qqcQiWf5A+FCAv1/xdoJNEhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD+wWspL+FU4kiNLZWkAY605uqJMB8GA1UdIwQY MBaAFBE3wjRTuI66RVxCCMbfWz4bvCRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDct NWVmZGE0NjhhMjAwLzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDctNWVmZGE0NjhhMjAw LzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekxGY3WQ mGPltV4Tro+LqJ0ekJUgwj1TAeoLrLxzV6RPLJyIggUfl8IcPfv+m6Wle1fgCjGv qsWJNREZaFRFyyCgPVC2sY4WZZ5d7ipVJFOiNylr/xKChUcBeUVXfwssb2O5B1BM +mmBU2rKrfLxcPV5ya0FQlTwoOJRRdyUr/OJAKboA3PCcFuJlJlzwV/sME9Y1mnS MaUvNLjOsQOLc/A3nzAAMxwDYTFBT1DBPVT+YKa6VjzpPGz2Wq7vp/qSEwbN6XXC NKVgHrMMQEyh7GblpIC7LzYDB9dNHDObHeqGFWD4cxAAKo/lzMyLu3V41BXHRmbv jEjuzJyc9JwSLg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:26 2026 by rpki-client