This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json) Hash identifier: zapLZ+yg/G+URophnpR7F2M9PbD4NYa7I1E/OGcR3/E= Subject key identifier: 50:E3:99:E0:C2:05:61:D9:7C:8E:41:AC:92:B9:DE:99:C3:95:E6:FB Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b Certificate serial: 019B3B34E58D69D3AA045BCA08418DA4C38D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft Manifest number: 1705 Signing time: Sat 20 Dec 2025 10:01:20 +0000 Manifest this update: Sat 20 Dec 2025 10:01:20 +0000 Manifest next update: Sun 21 Dec 2025 10:01:20 +0000 Files and hashes: 1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=) 2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: zuPskrfvHKOu0Myeooh/W6ZpVl4DSRR3uyQr3I78FJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:e5:8d:69:d3:aa:04:5b:ca:08:41:8d:a4:c3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b Validity Not Before: Dec 20 10:01:20 2025 GMT Not After : Dec 21 10:01:20 2025 GMT Subject: CN=50e399e0c20561d97c8e41ac92b9de99c395e6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:83:33:4b:f8:1b:96:3c:5a:50:9a:8d:23: 14:f8:de:45:a7:4d:ea:66:37:ea:a6:00:ee:22:72: 5e:b8:f2:5b:23:1d:49:11:c1:0a:df:38:c9:37:87: 2a:02:8b:7e:6c:96:e5:7d:c7:53:76:ba:c6:22:25: 2f:57:44:31:9f:df:fc:d4:f3:85:23:b1:f4:97:5e: 92:16:49:19:5a:0a:7e:93:b4:17:b4:85:9c:d1:08: 6d:8e:01:03:51:94:62:c1:6e:11:1b:3c:7f:03:34: ba:8e:ca:f1:d2:13:fe:de:99:46:bd:ec:95:f5:45: b2:e6:3c:08:59:79:a6:81:83:4f:43:e2:75:1a:72: c3:5e:43:88:e7:6d:7f:9a:3d:7b:59:5b:76:d7:ed: 6a:a6:cc:e1:f0:6f:a2:fc:c3:c1:74:fe:10:fd:f7: 9b:1f:f8:38:61:e5:f1:30:26:e6:78:77:4e:eb:f2: b2:c1:4a:84:80:17:e7:b3:31:d9:ec:0d:75:f4:b7: f8:88:47:44:87:ab:66:01:1d:bf:8d:3e:9d:fc:45: 99:a7:eb:96:af:84:7e:a6:f1:bd:af:32:21:3a:c0: 53:37:fa:3c:58:28:03:20:ae:d3:64:ce:af:be:09: 97:8e:b1:b4:09:8b:42:5c:63:60:56:3c:dc:2e:99: f6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E3:99:E0:C2:05:61:D9:7C:8E:41:AC:92:B9:DE:99:C3:95:E6:FB X509v3 Authority Key Identifier: keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:42:32:63:b1:60:24:68:2b:6d:c3:0a:55:3b:53:97:5d:3f: de:17:15:bc:bd:ea:aa:04:e7:18:36:25:19:a2:2f:fe:74:14: ef:5a:27:2f:10:80:b1:c1:fd:5d:d3:db:6c:90:1f:41:5d:0f: 57:02:4a:e1:02:5d:af:9f:6b:e5:3d:c3:61:6d:5a:df:62:ae: d4:0f:14:63:db:d7:03:29:e0:3a:48:fd:9a:8c:23:98:c8:9a: 76:e2:ee:37:96:fa:c4:03:a3:a4:9d:f6:c9:cd:56:e6:e6:6e: af:74:79:09:ca:52:ef:af:6f:73:45:f5:4f:ed:77:79:e0:fe: 1e:a2:fb:4c:5b:0d:26:c4:be:56:b6:be:49:50:bd:c3:c4:4d: 36:fb:97:16:f1:bd:b0:ff:af:37:33:cb:bb:6d:f4:39:97:69: b4:8b:c6:13:55:1f:40:4e:d0:b9:b9:9a:33:00:79:0b:90:2d: bd:51:61:22:b6:89:aa:b7:3a:d8:55:70:10:be:7d:d8:43:98: 40:63:e8:b4:4f:79:91:97:51:d3:7b:92:17:22:04:b9:17:ef: 9f:ea:53:99:b8:ee:8d:fd:d3:be:5d:ce:8a:b0:b4:28:48:f7: 18:70:a7:07:0b:60:b4:b0:55:e2:96:ca:a1:a6:c3:ef:6f:c4: cc:91:12:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NOWNadOqBFvKCEGNpMONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MzRmN2VlNWQwNGEwMjYyMjNjM2FhMzE5MTJiZjYxMGQw MGRiN2IwHhcNMjUxMjIwMTAwMTIwWhcNMjUxMjIxMTAwMTIwWjAzMTEwLwYDVQQD Eyg1MGUzOTllMGMyMDU2MWQ5N2M4ZTQxYWM5MmI5ZGU5OWMzOTVlNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2WDM0v4G5Y8WlCajSMU+N5Fp03q ZjfqpgDuInJeuPJbIx1JEcEK3zjJN4cqAot+bJblfcdTdrrGIiUvV0Qxn9/81POF I7H0l16SFkkZWgp+k7QXtIWc0QhtjgEDUZRiwW4RGzx/AzS6jsrx0hP+3plGveyV 9UWy5jwIWXmmgYNPQ+J1GnLDXkOI521/mj17WVt21+1qpszh8G+i/MPBdP4Q/feb H/g4YeXxMCbmeHdO6/KywUqEgBfnszHZ7A119Lf4iEdEh6tmAR2/jT6d/EWZp+uW r4R+pvG9rzIhOsBTN/o8WCgDIK7TZM6vvgmXjrG0CYtCXGNgVjzcLpn2GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDjmeDCBWHZfI5BrJK53pnDleb7MB8GA1UdIwQY MBaAFHk09+5dBKAmIjw6oxkSv2ENANt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYt ZjFkMzQ5ODIzNTA0LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYtZjFkMzQ5ODIzNTA0 LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0IyY7Fg JGgrbcMKVTtTl10/3hcVvL3qqgTnGDYlGaIv/nQU71onLxCAscH9XdPbbJAfQV0P VwJK4QJdr59r5T3DYW1a32Ku1A8UY9vXAyngOkj9mowjmMiaduLuN5b6xAOjpJ32 yc1W5uZur3R5CcpS769vc0X1T+13eeD+HqL7TFsNJsS+Vra+SVC9w8RNNvuXFvG9 sP+vNzPLu230OZdptIvGE1UfQE7QubmaMwB5C5AtvVFhIraJqrc62FVwEL592EOY QGPotE95kZdR03uSFyIEuRfvn+pTmbjujf3Tvl3OirC0KEj3GHCnBwtgtLBV4pbK oabD72/EzJES8Q== -----END CERTIFICATE-----Generated at Sat Dec 20 18:27:07 2025 by rpki-client