This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft File: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json) Hash identifier: u/I+OFYOz9QbCh5jKrFEW4VdQoYes03FmIXHl8O4VvE= Subject key identifier: 8A:19:88:79:E8:77:85:DB:E3:FA:FC:D8:4E:0A:43:7B:06:09:D0:2A Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02 Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402 Certificate serial: 019B5B6456247BA11C5748A70138CBB5D907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 16:01:00 +0000 Manifest this update: Fri 26 Dec 2025 16:01:00 +0000 Manifest next update: Sat 27 Dec 2025 16:01:00 +0000 Files and hashes: 1: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: GMbiLllxKPHkcr/sAgNtdjz9FPJaFDRd0WiEVXR5wBQ=) 2: SCt2QF1ZyfGumaW10dxyBcs0tjI.roa (hash: RDkYHsg9brN71rMixotxKpzbe8KGvrl7wQ7cHVhi6eA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:56:24:7b:a1:1c:57:48:a7:01:38:cb:b5:d9:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402 Validity Not Before: Dec 26 16:01:00 2025 GMT Not After : Dec 27 16:01:00 2025 GMT Subject: CN=8a198879e87785dbe3fafcd84e0a437b0609d02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a7:6a:68:68:29:61:b4:1f:0f:14:b1:14:d4: 2c:02:7d:65:bb:a6:2d:91:1b:d7:48:aa:9c:00:4d: 19:ba:0a:1b:f7:59:96:20:35:b8:0a:cc:e5:89:90: 94:fd:ee:eb:a6:08:85:a2:94:0b:3a:08:4f:3e:78: a1:87:b3:94:46:42:47:86:1b:97:1b:ab:95:c1:8b: dc:fb:95:3a:2c:9d:37:70:04:41:b2:c2:e7:71:d9: 7d:98:fa:99:29:0f:ec:72:f3:51:5f:ac:95:d3:2f: 7a:96:7e:00:0d:2b:ae:26:95:bd:a0:26:66:9e:fb: 97:72:f6:f0:d2:20:1d:5c:b3:89:a7:57:16:6e:ac: fb:2b:f3:57:b1:ca:20:9d:f9:9f:aa:4c:ff:d9:ed: 3e:97:7d:c9:4f:32:36:18:dc:00:d1:0b:8a:32:d8: 6b:ed:e7:c2:16:17:04:5b:f7:8a:d8:4e:9c:82:ee: d1:b0:bb:75:e9:bb:b5:45:5d:a8:35:d1:b3:47:35: f2:4e:af:32:d4:be:24:55:ac:ea:c9:81:bd:7b:16: 3c:94:af:54:8f:68:9b:5c:9e:c4:2a:4a:4a:74:56: a9:dc:c3:48:7d:bb:3f:fa:2c:73:bd:0e:84:7c:64: 25:b4:a9:3d:b8:9c:0a:ba:eb:6e:30:7e:43:96:df: c2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:19:88:79:E8:77:85:DB:E3:FA:FC:D8:4E:0A:43:7B:06:09:D0:2A X509v3 Authority Key Identifier: keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:eb:f2:c2:68:74:44:e2:cb:95:57:e5:85:e7:81:dc:1b:bc: 8a:ac:a0:e1:5b:1c:94:51:43:49:e6:89:7b:0a:41:f8:a5:b8: ee:48:d0:09:e8:ce:04:41:00:85:56:7e:99:61:9e:ef:97:70: a7:6d:2f:be:01:54:73:f8:8b:9a:5f:56:43:88:1b:46:b8:bf: 78:35:ed:1b:17:93:34:b6:c6:be:61:e1:a6:84:a0:11:50:b8: bd:22:93:c6:93:40:d8:f1:dd:26:44:6f:3b:50:bf:11:26:ff: fa:21:66:90:3c:54:7f:e4:12:a3:75:c8:f1:87:1e:c0:e8:9e: c8:f9:85:f8:a1:22:b8:fd:ff:28:64:63:9f:c5:c2:a1:0f:91: 7c:11:6f:22:11:56:ef:d5:fb:50:cc:a2:ee:4b:7a:28:2a:b6: 19:f5:3e:2f:d6:84:d0:4e:df:95:26:d9:fb:85:87:de:d0:59: d5:7f:e1:6f:de:d1:69:15:a8:af:24:e8:03:71:3f:53:a8:58: 64:ab:dd:36:21:38:24:ed:71:0f:6b:b1:da:73:da:34:c2:a0: dc:bf:88:92:60:d6:76:40:40:94:6c:8d:e5:34:eb:67:65:c6: 7d:57:54:4a:a9:90:67:05:06:0d:48:6e:bd:cd:eb:9d:c1:24: 88:d0:1b:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZFYke6EcV0inATjLtdkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExM2VhZjI1MjFkY2JmNzY0MjQyNDMxYTc4MWY2OGQwZGQ1 NTE0MDIwHhcNMjUxMjI2MTYwMTAwWhcNMjUxMjI3MTYwMTAwWjAzMTEwLwYDVQQD Eyg4YTE5ODg3OWU4Nzc4NWRiZTNmYWZjZDg0ZTBhNDM3YjA2MDlkMDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqdqaGgpYbQfDxSxFNQsAn1lu6Yt kRvXSKqcAE0Zugob91mWIDW4CszliZCU/e7rpgiFopQLOghPPnihh7OURkJHhhuX G6uVwYvc+5U6LJ03cARBssLncdl9mPqZKQ/scvNRX6yV0y96ln4ADSuuJpW9oCZm nvuXcvbw0iAdXLOJp1cWbqz7K/NXscognfmfqkz/2e0+l33JTzI2GNwA0QuKMthr 7efCFhcEW/eK2E6cgu7RsLt16bu1RV2oNdGzRzXyTq8y1L4kVazqyYG9exY8lK9U j2ibXJ7EKkpKdFap3MNIfbs/+ixzvQ6EfGQltKk9uJwKuutuMH5Dlt/CxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoZiHnod4Xb4/r82E4KQ3sGCdAqMB8GA1UdIwQY MBaAFBE+ryUh3L92QkJDGngfaNDdVRQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTct MWE1ZDhmNTA1MThmLzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTctMWE1ZDhmNTA1MThm LzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6Ovywmh0 ROLLlVflheeB3Bu8iqyg4VsclFFDSeaJewpB+KW47kjQCejOBEEAhVZ+mWGe75dw p20vvgFUc/iLml9WQ4gbRri/eDXtGxeTNLbGvmHhpoSgEVC4vSKTxpNA2PHdJkRv O1C/ESb/+iFmkDxUf+QSo3XI8YcewOieyPmF+KEiuP3/KGRjn8XCoQ+RfBFvIhFW 79X7UMyi7kt6KCq2GfU+L9aE0E7flSbZ+4WH3tBZ1X/hb97RaRWoryToA3E/U6hY ZKvdNiE4JO1xD2ux2nPaNMKg3L+IkmDWdkBAlGyN5TTrZ2XGfVdUSqmQZwUGDUhu vc3rncEkiNAbUw== -----END CERTIFICATE-----Generated at Fri Dec 26 23:12:31 2025 by rpki-client