This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft File: ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json) Hash identifier: Fo1Jub4iwfA81Frzrs2+o1FvOWA1r3qXG67t9/9/UgM= Subject key identifier: 57:70:D0:6D:DF:01:F4:A4:8B:AD:C2:DA:03:5E:40:93:95:BA:8C:FF Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d Certificate serial: 019B77B78A58C6F1CE448BDE3BD8B1113DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft Manifest number: 17A5 Signing time: Thu 01 Jan 2026 04:01:15 +0000 Manifest this update: Thu 01 Jan 2026 04:01:15 +0000 Manifest next update: Fri 02 Jan 2026 04:01:15 +0000 Files and hashes: 1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: gBOI/ywURl/RVyc3r5b8pjIIUPwvwMQNdI52HivVi14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:b7:8a:58:c6:f1:ce:44:8b:de:3b:d8:b1:11:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d Validity Not Before: Jan 1 04:01:15 2026 GMT Not After : Jan 2 04:01:15 2026 GMT Subject: CN=5770d06ddf01f4a48badc2da035e409395ba8cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:9b:6a:7c:6a:bc:e1:d7:7d:98:8f:72:84: ef:fd:9c:ba:38:f6:5d:58:ec:ee:ea:d8:68:b6:ad: 61:4d:9b:5b:1a:36:44:45:d4:39:c5:a4:5b:70:6b: cf:18:f1:a1:b0:84:e4:7f:4c:14:5e:62:74:87:6e: 02:c2:14:85:06:21:41:ca:36:23:33:03:2a:96:59: ae:d4:01:55:23:4c:da:12:55:d0:b7:e8:00:f1:67: 1f:0c:27:fe:57:53:ee:c8:c6:b7:68:a6:9b:20:42: 9e:e4:a6:da:48:79:ea:96:9e:0a:16:4e:b5:c7:9c: 68:a5:8d:d5:e7:5e:46:6f:19:95:e8:ce:e3:4a:2b: 6e:04:0e:24:e4:f9:90:55:e7:a0:6c:cf:e8:ed:3e: 26:60:34:81:bb:1a:9b:df:30:90:8e:a8:40:49:20: 0d:cf:78:92:c2:0a:6f:ec:e8:41:88:3e:19:f4:ce: 24:ec:93:42:e4:3c:bd:b5:09:e2:1c:74:b6:76:f5: 14:56:f6:68:8f:33:08:9b:3f:df:5b:77:14:30:e6: 74:68:dc:b1:ee:6e:a4:d8:28:96:22:7a:c0:d3:6d: b7:c9:d2:53:0b:2b:11:98:f3:10:85:a0:f0:22:8a: c9:e8:e9:aa:25:2f:f1:2e:7c:9c:fe:6d:0e:8f:87: 8a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:70:D0:6D:DF:01:F4:A4:8B:AD:C2:DA:03:5E:40:93:95:BA:8C:FF X509v3 Authority Key Identifier: keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:cf:16:5c:cc:b6:85:66:2e:78:6c:e2:84:69:b2:f7:5d:99: 5f:37:dc:52:25:02:b6:fe:d9:cc:cf:54:ee:9e:5e:7a:bf:50: b3:0d:9a:21:75:7d:07:02:4e:23:02:9c:11:37:24:66:80:a3: 34:4f:f3:9a:29:20:75:57:ca:26:1a:f1:80:fd:28:07:81:34: 1c:8d:82:24:70:ed:f9:09:b6:94:ec:36:12:e2:85:07:d8:78: 58:c3:f9:61:06:62:42:87:b7:f1:cd:e1:fd:32:00:36:47:39: 1e:d5:12:75:68:c8:1e:54:88:c0:66:d3:bc:7e:08:c7:57:ab: 95:9a:7b:68:49:0a:85:79:7e:4b:ef:5d:c8:11:39:aa:27:ee: 04:32:23:36:f3:88:12:23:e4:4c:9f:05:d2:15:36:94:1b:b2: c5:56:27:df:28:9a:32:f6:47:fe:bf:fd:0c:59:14:c9:ea:aa: 41:5e:64:a5:6c:b8:8d:22:c5:95:de:15:a6:08:15:f8:f5:c5: 1c:62:bb:28:f5:8a:5d:d3:62:e7:ae:3c:62:dd:23:ff:7f:02: 4a:33:b9:bd:9f:34:b0:73:31:71:2f:e4:0f:c8:bb:86:35:56: a2:bc:bd:82:72:a5:82:cf:bb:74:ed:73:bc:2e:bf:d0:1f:21: 39:a3:81:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3t4pYxvHORIveO9ixET3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzQwZGM3ZThiOGE3ZThkN2ZlYWYxZTA4MjAzZDg3OTE2 Y2IyOWQwHhcNMjYwMTAxMDQwMTE1WhcNMjYwMTAyMDQwMTE1WjAzMTEwLwYDVQQD Eyg1NzcwZDA2ZGRmMDFmNGE0OGJhZGMyZGEwMzVlNDA5Mzk1YmE4Y2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/mbanxqvOHXfZiPcoTv/Zy6OPZd WOzu6thotq1hTZtbGjZERdQ5xaRbcGvPGPGhsITkf0wUXmJ0h24CwhSFBiFByjYj MwMqllmu1AFVI0zaElXQt+gA8WcfDCf+V1PuyMa3aKabIEKe5KbaSHnqlp4KFk61 x5xopY3V515GbxmV6M7jSituBA4k5PmQVeegbM/o7T4mYDSBuxqb3zCQjqhASSAN z3iSwgpv7OhBiD4Z9M4k7JNC5Dy9tQniHHS2dvUUVvZojzMImz/fW3cUMOZ0aNyx 7m6k2CiWInrA0223ydJTCysRmPMQhaDwIorJ6OmqJS/xLnyc/m0Oj4eK9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdw0G3fAfSki63C2gNeQJOVuoz/MB8GA1UdIwQY MBaAFBE0DcfouKfo1/6vHgggPYeRbLKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRRTngtaTRwLWpYX3E4ZUNDQTloNUZzc3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iMjM3MmQtMjIxZS00NzVkLWI2N2Ut ZjA4NDI3MjA4MTU1LzEvRVRRTngtaTRwLWpYX3E4ZUNDQTloNUZzc3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9iMjM3MmQtMjIxZS00NzVkLWI2N2UtZjA4NDI3MjA4MTU1 LzEvRVRRTngtaTRwLWpYX3E4ZUNDQTloNUZzc3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIs8WXMy2 hWYueGzihGmy912ZXzfcUiUCtv7ZzM9U7p5eer9Qsw2aIXV9BwJOIwKcETckZoCj NE/zmikgdVfKJhrxgP0oB4E0HI2CJHDt+Qm2lOw2EuKFB9h4WMP5YQZiQoe38c3h /TIANkc5HtUSdWjIHlSIwGbTvH4Ix1erlZp7aEkKhXl+S+9dyBE5qifuBDIjNvOI EiPkTJ8F0hU2lBuyxVYn3yiaMvZH/r/9DFkUyeqqQV5kpWy4jSLFld4VpggV+PXF HGK7KPWKXdNi5648Yt0j/38CSjO5vZ80sHMxcS/kD8i7hjVWory9gnKlgs+7dO1z vC6/0B8hOaOB1w== -----END CERTIFICATE-----Generated at Thu Jan 1 08:47:29 2026 by rpki-client