This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json) Hash identifier: iBzpqr0P0LOqAPCuk9Nft0AP+z9mqz8Buvz0Xkdlqe4= Subject key identifier: ED:F0:D3:3F:57:2D:10:BB:DE:76:D7:B4:8B:07:4D:DB:2D:92:21:74 Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10 Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710 Certificate serial: 019AF31B4292206215628E4EF56F9447BB52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft Manifest number: 0576 Signing time: Sat 06 Dec 2025 10:00:41 +0000 Manifest this update: Sat 06 Dec 2025 10:00:41 +0000 Manifest next update: Sun 07 Dec 2025 10:00:41 +0000 Files and hashes: 1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=) 2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: 5wKviI0jAP4ZTQlu2AB0p7DpFQug2q422OOUYRZoLxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:42:92:20:62:15:62:8e:4e:f5:6f:94:47:bb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710 Validity Not Before: Dec 6 10:00:41 2025 GMT Not After : Dec 7 10:00:41 2025 GMT Subject: CN=edf0d33f572d10bbde76d7b48b074ddb2d922174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:03:e5:ae:61:f6:ba:bb:24:0b:a7:5e:b8: 4e:10:f5:07:3d:b7:b4:9a:e0:f2:33:ad:d5:79:d0: fa:8c:16:d3:1a:a3:6d:d4:ea:ef:ee:a4:5a:ed:20: 58:75:9f:8d:62:78:2a:e6:36:21:dd:d4:eb:42:12: a3:31:68:d9:30:36:1d:4f:a0:ff:95:b4:04:57:45: 7a:af:10:1e:9b:58:38:f7:c5:fe:51:a4:81:a0:d8: e3:0a:50:11:38:e8:13:f4:a8:11:eb:4f:33:2a:a6: 89:b4:de:af:07:00:fa:f8:dc:8c:83:e1:d1:5d:dd: f9:df:af:21:60:a4:5c:f0:8e:e9:c2:83:64:99:43: 42:b2:a6:d4:72:e7:0b:c4:f5:88:94:85:73:51:07: b9:7c:2a:1b:6c:93:ec:92:83:91:a3:e3:54:a5:d3: c6:80:91:3b:39:66:5b:55:41:e8:61:c0:58:f6:c8: 13:5d:0e:d0:4b:ad:91:4b:21:db:fe:ba:1c:52:9c: 08:68:99:82:ff:cf:bb:19:c6:9d:37:4a:0e:78:f3: 9f:52:ea:90:fb:cd:68:72:56:6f:3a:81:31:2a:61: b9:eb:f6:c0:96:a1:04:3f:e5:8d:06:b9:f3:4c:73: 3e:53:ac:d4:3f:76:5d:bb:a2:a8:0c:9d:d4:f3:95: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F0:D3:3F:57:2D:10:BB:DE:76:D7:B4:8B:07:4D:DB:2D:92:21:74 X509v3 Authority Key Identifier: keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:1f:79:b3:67:c1:d3:0b:22:6d:62:7c:be:5f:e8:12:d9:5b: 25:76:76:ff:fb:00:be:95:a8:a4:bf:b9:1a:40:86:e2:72:3d: d5:09:75:93:02:23:da:67:23:77:3d:4b:04:78:1a:2c:bb:a5: 9f:64:39:77:47:0d:f2:75:fd:ee:4d:b7:25:57:69:82:bb:04: a7:a6:71:89:bc:8e:f0:7a:14:3e:c8:a8:35:d9:de:96:b5:b0: 96:39:d2:57:3a:9a:ec:dd:2f:ef:c6:29:38:ff:78:14:8b:a3: 73:fd:39:ef:4a:b6:45:f7:1e:13:72:f0:b5:48:e9:5a:be:35: 2f:73:e8:8a:f4:d3:e7:1f:71:b7:3f:6d:e3:df:d6:fc:7a:b7: d5:e6:a1:91:ca:e9:c4:08:28:29:06:14:14:84:d6:cd:72:f5: b9:c5:a1:31:d9:c0:f4:a8:1f:46:a5:5c:b4:1b:1e:53:74:b7: e2:3e:60:88:7f:7c:47:02:a7:5c:1c:a5:f3:5e:cc:c7:4d:6d: a1:d9:3c:67:ff:45:52:10:7f:3c:07:07:74:c5:68:76:99:13: f7:4e:c3:16:01:22:af:e3:c6:a8:f3:c4:2d:07:56:9a:e2:7e: 98:82:10:df:22:82:03:e9:cd:95:92:aa:fd:17:76:2f:50:92: e7:ea:35:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0KSIGIVYo5O9W+UR7tSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZDA3Y2RlNjc4MmZkNGZjNTY4ODU3ZTg0ODQ2NTViNTAy NDg3MTAwHhcNMjUxMjA2MTAwMDQxWhcNMjUxMjA3MTAwMDQxWjAzMTEwLwYDVQQD EyhlZGYwZDMzZjU3MmQxMGJiZGU3NmQ3YjQ4YjA3NGRkYjJkOTIyMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZsD5a5h9rq7JAunXrhOEPUHPbe0 muDyM63VedD6jBbTGqNt1Orv7qRa7SBYdZ+NYngq5jYh3dTrQhKjMWjZMDYdT6D/ lbQEV0V6rxAem1g498X+UaSBoNjjClAROOgT9KgR608zKqaJtN6vBwD6+NyMg+HR Xd35368hYKRc8I7pwoNkmUNCsqbUcucLxPWIlIVzUQe5fCobbJPskoORo+NUpdPG gJE7OWZbVUHoYcBY9sgTXQ7QS62RSyHb/rocUpwIaJmC/8+7GcadN0oOePOfUuqQ +81oclZvOoExKmG56/bAlqEEP+WNBrnzTHM+U6zUP3Zdu6KoDJ3U85Um9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3w0z9XLRC73nbXtIsHTdstkiF0MB8GA1UdIwQY MBaAFHrQfN5ngv1PxWiFfoSEZVtQJIcQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQt MDVhMWQ1Y2I4ZWViLzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQtMDVhMWQ1Y2I4ZWVi LzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAih95s2fB 0wsibWJ8vl/oEtlbJXZ2//sAvpWopL+5GkCG4nI91Ql1kwIj2mcjdz1LBHgaLLul n2Q5d0cN8nX97k23JVdpgrsEp6ZxibyO8HoUPsioNdnelrWwljnSVzqa7N0v78Yp OP94FIujc/0570q2RfceE3LwtUjpWr41L3PoivTT5x9xtz9t49/W/Hq31eahkcrp xAgoKQYUFITWzXL1ucWhMdnA9KgfRqVctBseU3S34j5giH98RwKnXByl817Mx01t odk8Z/9FUhB/PAcHdMVodpkT907DFgEir+PGqPPELQdWmuJ+mIIQ3yKCA+nNlZKq /Rd2L1CS5+o1Sg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:00 2025 by rpki-client