This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json) Hash identifier: JLyMlacjxnIa8qrxxGO8i1XrVtzsNsz4tRqgpW43xuk= Subject key identifier: E4:6C:4D:3D:1D:7D:C8:BA:68:1F:B0:DE:D7:5E:D9:AD:A2:2C:92:56 Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f Certificate serial: 019AF465677636FB9203B1AD515BA2B81EC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:01:17 +0000 Manifest this update: Sat 06 Dec 2025 16:01:17 +0000 Manifest next update: Sun 07 Dec 2025 16:01:17 +0000 Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: pb7ji2lj/rMnj36pqAdyTevej4Qe4iXprjOHm+247Kc=) 2: K7Dh8rSSQ0ZuRcpwx-Nw9hu6d6Q.roa (hash: MJLuNSDvw5gsLLjMvCyGbPkYHoPaPI+8SDMojGjNJzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:67:76:36:fb:92:03:b1:ad:51:5b:a2:b8:1e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f Validity Not Before: Dec 6 16:01:17 2025 GMT Not After : Dec 7 16:01:17 2025 GMT Subject: CN=e46c4d3d1d7dc8ba681fb0ded75ed9ada22c9256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:4a:2d:2e:e9:2c:94:ca:dc:ae:a1:3d:c9: 27:70:e3:06:cf:66:87:e9:7c:ce:cc:01:a7:57:d5: 7e:b1:f8:94:4f:ca:47:75:24:76:15:3f:89:4a:b4: fc:a7:c5:8e:e5:a4:b2:e3:50:12:0b:43:d0:15:d1: 94:c3:31:06:85:45:bf:6f:fa:22:40:a7:7b:d5:eb: 46:e4:09:6a:2a:82:1f:1f:8b:27:20:d8:3f:8e:a0: 9d:93:2d:d0:61:20:c1:d0:70:35:26:5d:27:b7:d1: 7e:fb:e2:a6:21:a6:6d:12:d3:79:42:45:d2:33:66: b6:6d:06:cd:02:dc:3e:b7:c1:a4:b4:15:1b:1b:d4: 0a:2e:6d:d8:da:00:89:c4:d3:71:4c:b1:57:31:47: 13:2e:b3:72:50:62:a3:79:8d:49:f3:6a:21:cc:f4: 0f:ec:6f:73:9a:6c:3f:3c:f8:1e:42:dc:c4:bb:64: f1:3e:c8:ad:12:94:91:79:9e:03:43:d9:4f:5a:ac: 33:94:4b:26:38:b3:7b:87:cd:c0:8d:7e:ac:ab:b9: 91:08:b9:ac:85:a0:7c:cb:79:06:90:00:a3:62:51: c9:93:16:78:5a:67:4b:25:ac:73:11:2c:10:ac:25: 6b:fa:4a:64:0b:bc:5b:39:d8:23:ac:59:cc:40:f3: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6C:4D:3D:1D:7D:C8:BA:68:1F:B0:DE:D7:5E:D9:AD:A2:2C:92:56 X509v3 Authority Key Identifier: keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:08:0f:b0:a6:73:23:66:24:1b:2c:7b:ab:9d:ff:75:52:52: e7:73:48:95:5d:c6:4b:d4:cc:5b:2b:b8:5a:7b:44:1d:91:9e: 90:55:bb:93:54:86:64:26:57:c6:e7:e4:82:4a:88:62:ad:88: d6:16:12:89:ca:8a:de:35:a2:29:fa:6f:b7:c3:65:0c:0f:9a: 1d:af:d8:93:29:a5:98:ef:cd:bf:4a:60:dc:d3:f6:4b:24:bb: ef:27:52:99:4f:37:9d:39:fa:c6:b6:21:24:51:e4:17:9f:88: 8d:a7:4a:30:4d:ee:29:62:2d:af:93:cc:97:dd:b4:c1:24:05: 5d:d8:4d:92:1e:67:e3:b7:ef:3e:0a:02:92:db:af:bf:45:94: 23:3d:ed:fd:55:10:b8:36:89:be:0f:46:6c:6a:8e:6f:39:e9: cc:c6:8a:73:3b:ff:63:fa:d0:62:21:01:27:5c:96:2b:0e:52: 90:d3:41:d8:a9:e4:19:c2:be:09:a1:29:c4:bf:18:9b:e8:06: bc:db:97:69:26:bd:d6:94:1e:e1:a1:f1:25:4e:c9:fa:04:71: 88:23:68:94:9d:e8:f4:db:03:93:32:19:6a:c7:aa:a6:bc:33: 93:72:62:03:4b:1f:aa:5e:6e:2b:3c:a8:15:b9:41:99:28:6c: dc:52:aa:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWd2NvuSA7GtUVuiuB7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzdjMjM0NTNiODhlYmE0NTVjNDIwOGM2ZGY1YjNlMWJi YzI0NWYwHhcNMjUxMjA2MTYwMTE3WhcNMjUxMjA3MTYwMTE3WjAzMTEwLwYDVQQD EyhlNDZjNGQzZDFkN2RjOGJhNjgxZmIwZGVkNzVlZDlhZGEyMmM5MjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUBKLS7pLJTK3K6hPckncOMGz2aH 6XzOzAGnV9V+sfiUT8pHdSR2FT+JSrT8p8WO5aSy41ASC0PQFdGUwzEGhUW/b/oi QKd71etG5AlqKoIfH4snINg/jqCdky3QYSDB0HA1Jl0nt9F+++KmIaZtEtN5QkXS M2a2bQbNAtw+t8GktBUbG9QKLm3Y2gCJxNNxTLFXMUcTLrNyUGKjeY1J82ohzPQP 7G9zmmw/PPgeQtzEu2TxPsitEpSReZ4DQ9lPWqwzlEsmOLN7h83AjX6sq7mRCLms haB8y3kGkACjYlHJkxZ4WmdLJaxzESwQrCVr+kpkC7xbOdgjrFnMQPOMBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORsTT0dfci6aB+w3tde2a2iLJJWMB8GA1UdIwQY MBaAFBE3wjRTuI66RVxCCMbfWz4bvCRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDct NWVmZGE0NjhhMjAwLzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDctNWVmZGE0NjhhMjAw LzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQgPsKZz I2YkGyx7q53/dVJS53NIlV3GS9TMWyu4WntEHZGekFW7k1SGZCZXxufkgkqIYq2I 1hYSicqK3jWiKfpvt8NlDA+aHa/YkymlmO/Nv0pg3NP2SyS77ydSmU83nTn6xrYh JFHkF5+IjadKME3uKWItr5PMl920wSQFXdhNkh5n47fvPgoCktuvv0WUIz3t/VUQ uDaJvg9GbGqObznpzMaKczv/Y/rQYiEBJ1yWKw5SkNNB2KnkGcK+CaEpxL8Ym+gG vNuXaSa91pQe4aHxJU7J+gRxiCNolJ3o9NsDkzIZaseqprwzk3JiA0sfql5uKzyo FblBmShs3FKqBA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:37 2025 by rpki-client