This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json) Hash identifier: 9XWGvYC8ZEZ9Nflmt0kf0jqkpn8pKPBTFbISTHS9s3c= Subject key identifier: C3:63:B6:5C:E6:97:DE:A1:33:05:4F:23:FD:E9:15:A7:88:6C:0B:D9 Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b Certificate serial: 019B6F58E38555AED04E5084AC42A69F1F7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft Manifest number: 1720 Signing time: Tue 30 Dec 2025 13:00:54 +0000 Manifest this update: Tue 30 Dec 2025 13:00:54 +0000 Manifest next update: Wed 31 Dec 2025 13:00:54 +0000 Files and hashes: 1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=) 2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: oRDM4YJwnQIbfAi1r9/UeHZiu9mur85ZXdrHBggmS/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:58:e3:85:55:ae:d0:4e:50:84:ac:42:a6:9f:1f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b Validity Not Before: Dec 30 13:00:54 2025 GMT Not After : Dec 31 13:00:54 2025 GMT Subject: CN=c363b65ce697dea133054f23fde915a7886c0bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:cc:a5:55:f1:8c:13:73:1c:44:3d:a9:d8: 02:2a:89:cf:e2:8e:73:4f:31:4a:c2:41:0f:9d:3d: 64:ff:94:75:2b:e7:59:c4:a9:0c:95:08:5f:c9:d2: 35:5c:73:aa:b0:a2:fd:ef:e3:97:e2:b9:cb:6e:5c: 34:f8:5d:5d:00:2a:a3:8c:54:31:f7:f6:7b:c4:0b: 3c:e1:09:ad:b7:fe:fc:f9:44:86:f5:fa:6a:d2:82: dd:6b:3b:78:0a:6a:14:0a:39:6a:2c:a3:93:43:66: a5:3f:8c:bb:d7:d4:45:14:4e:96:77:a6:53:76:0d: 1f:7b:44:d7:17:80:fb:ff:ab:4b:05:b4:e5:6b:2e: 75:c9:56:c7:fb:89:f2:9c:14:12:63:c2:bb:73:c2: 84:fa:d5:5b:a3:d5:64:5b:21:91:15:8b:d0:31:13: f1:9f:41:f8:3c:61:94:32:5a:53:e6:93:00:70:51: 43:2c:70:21:b0:69:09:20:48:0f:6a:00:8f:8c:a4: 55:f8:50:3f:9c:91:1a:68:b7:90:32:bf:bb:74:72: 22:d8:ff:ac:33:30:51:b5:a4:28:0c:a2:b4:58:f0: b7:35:60:73:40:04:dc:f4:d6:8c:cb:4a:8e:22:a8: ea:21:66:78:f6:3e:ad:04:7b:4b:18:d0:01:47:b0: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:63:B6:5C:E6:97:DE:A1:33:05:4F:23:FD:E9:15:A7:88:6C:0B:D9 X509v3 Authority Key Identifier: keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ae:93:97:75:38:04:a1:65:b6:6c:53:49:3e:d2:ff:20:7e: 13:6c:10:22:f9:ba:88:b1:df:b4:19:e1:85:32:ed:8f:5a:ce: 3d:12:57:99:03:8f:90:95:87:35:3e:9c:82:7f:da:4d:48:ac: fc:85:0e:bc:1f:50:81:0d:a3:20:f2:b2:fd:71:91:04:f3:a4: 35:b8:6f:10:5b:63:98:a8:36:79:0a:90:f9:8b:01:e3:ac:39: 6e:cf:f4:2b:d7:2d:dc:0f:7f:ad:25:ea:06:44:69:a4:92:9e: e1:9e:84:3b:3c:a6:86:c5:f9:8f:8a:e7:d5:c1:dd:ea:28:e2: 95:e4:25:6b:4b:70:23:e2:a1:61:10:b3:b4:af:c7:be:37:a1: 63:db:0e:66:e9:ae:0e:9e:f8:4d:55:5b:5b:78:99:85:a8:5c: 62:c4:7c:d2:5b:6a:56:5e:8c:b5:43:f6:cc:b4:74:57:ee:5d: 41:63:f5:6d:67:aa:b9:64:27:18:6f:02:92:11:cc:0d:cf:69: 9d:ad:1f:93:af:c7:ac:85:29:b6:c5:72:5f:bf:b3:e0:86:08: 1f:d4:27:8f:fd:1a:cf:16:17:02:9d:76:9b:f8:a0:8a:d8:b0: a1:c1:07:b6:f9:2f:ad:1f:b3:d4:9b:29:94:e2:9c:9b:40:9c: 24:fe:63:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvWOOFVa7QTlCErEKmnx9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MzRmN2VlNWQwNGEwMjYyMjNjM2FhMzE5MTJiZjYxMGQw MGRiN2IwHhcNMjUxMjMwMTMwMDU0WhcNMjUxMjMxMTMwMDU0WjAzMTEwLwYDVQQD EyhjMzYzYjY1Y2U2OTdkZWExMzMwNTRmMjNmZGU5MTVhNzg4NmMwYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5jMpVXxjBNzHEQ9qdgCKonP4o5z TzFKwkEPnT1k/5R1K+dZxKkMlQhfydI1XHOqsKL97+OX4rnLblw0+F1dACqjjFQx 9/Z7xAs84Qmtt/78+USG9fpq0oLdazt4CmoUCjlqLKOTQ2alP4y719RFFE6Wd6ZT dg0fe0TXF4D7/6tLBbTlay51yVbH+4nynBQSY8K7c8KE+tVbo9VkWyGRFYvQMRPx n0H4PGGUMlpT5pMAcFFDLHAhsGkJIEgPagCPjKRV+FA/nJEaaLeQMr+7dHIi2P+s MzBRtaQoDKK0WPC3NWBzQATc9NaMy0qOIqjqIWZ49j6tBHtLGNABR7DS6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNjtlzml96hMwVPI/3pFaeIbAvZMB8GA1UdIwQY MBaAFHk09+5dBKAmIjw6oxkSv2ENANt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYt ZjFkMzQ5ODIzNTA0LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYtZjFkMzQ5ODIzNTA0 LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXK6Tl3U4 BKFltmxTST7S/yB+E2wQIvm6iLHftBnhhTLtj1rOPRJXmQOPkJWHNT6cgn/aTUis /IUOvB9QgQ2jIPKy/XGRBPOkNbhvEFtjmKg2eQqQ+YsB46w5bs/0K9ct3A9/rSXq BkRppJKe4Z6EOzymhsX5j4rn1cHd6ijileQla0twI+KhYRCztK/HvjehY9sOZumu Dp74TVVbW3iZhahcYsR80ltqVl6MtUP2zLR0V+5dQWP1bWequWQnGG8CkhHMDc9p na0fk6/HrIUptsVyX7+z4IYIH9Qnj/0azxYXAp12m/igitiwocEHtvkvrR+z1Jsp lOKcm0CcJP5jkA== -----END CERTIFICATE-----Generated at Tue Dec 30 15:01:57 2025 by rpki-client