This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft File: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json) Hash identifier: TCyHHKYk1kb7WWDnJJQdJJlYutgEV2OgxlgJYs29gZ0= Subject key identifier: C7:60:6F:63:50:24:F5:FB:C5:5D:FA:75:19:18:22:7A:7D:7A:10:A3 Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60 Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660 Certificate serial: 019B3FECDF1910651FA0701F76232A7C15BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 08:00:46 +0000 Manifest this update: Sun 21 Dec 2025 08:00:46 +0000 Manifest next update: Mon 22 Dec 2025 08:00:46 +0000 Files and hashes: 1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: bIHWkNAPyXhbZ7nDGBrQkWaXzApxSYwfyGMP48GnwVA=) 2: JDxTNVA5sXO861LaJnEInxIC6cE.roa (hash: wDANlF+ZOT5kP2XyYHTeE88wDUM8Jf60i326vlXC21M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:df:19:10:65:1f:a0:70:1f:76:23:2a:7c:15:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660 Validity Not Before: Dec 21 08:00:46 2025 GMT Not After : Dec 22 08:00:46 2025 GMT Subject: CN=c7606f635024f5fbc55dfa751918227a7d7a10a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:9b:f7:65:f6:52:6f:80:c2:1a:7a:26:16: a1:e6:b2:b4:b3:2e:f2:2f:de:aa:e5:11:e5:e9:b0: c3:76:87:96:45:7b:83:87:2d:dd:ec:2f:44:09:59: 1d:7d:72:98:ef:ac:7f:f2:10:17:52:da:d6:af:3f: 19:c0:60:f3:89:50:a7:29:f5:51:c6:b7:26:ed:9b: b4:54:0b:ef:d5:8e:76:5a:25:c4:b2:00:60:2a:c4: 19:92:46:e6:92:66:d4:02:3d:46:f1:6d:80:bb:13: ee:33:11:d0:c6:4d:6e:f9:a6:b6:64:76:65:1b:9b: 2e:74:91:b5:67:5b:aa:59:bb:70:ad:76:29:49:d7: db:91:b3:11:e5:a9:a3:fb:2d:bd:8a:ff:2c:33:15: c2:52:10:39:b2:c5:e0:7c:93:94:de:50:77:94:28: c1:8c:31:b0:e8:fc:1d:02:9f:f0:f2:20:a2:66:63: 09:57:c4:56:93:aa:ff:a1:e8:95:17:92:6a:69:51: 61:70:a2:a5:89:5c:b1:1b:da:67:1f:98:31:2d:66: 9d:6e:10:6a:7d:08:1d:8a:84:85:c9:10:df:ae:97: c1:3f:22:28:87:ff:6d:67:e2:88:b2:c8:93:8b:76: 51:70:7c:01:df:95:d4:9e:1d:2b:9b:01:f9:7f:4b: c1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:60:6F:63:50:24:F5:FB:C5:5D:FA:75:19:18:22:7A:7D:7A:10:A3 X509v3 Authority Key Identifier: keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a2:aa:fc:55:f5:3d:ef:d3:af:5f:0f:fb:ea:59:a3:59:97: 13:9d:b9:36:70:6f:9a:84:a3:53:79:a1:7c:d4:5e:c0:07:ff: 31:8e:94:ee:22:eb:67:57:0c:76:65:3a:ab:6f:42:5d:75:44: 43:79:fc:3b:b2:f0:6d:00:a0:6c:b5:df:43:a6:b2:a0:a5:33: 62:11:66:60:89:4d:b1:2f:4b:ef:fb:07:02:40:86:cc:f5:07: 3d:7f:04:81:01:be:28:a6:be:aa:ca:e9:5a:48:3a:bb:7e:ca: 7b:5c:94:fe:3a:5f:4c:e5:53:d7:ca:f5:83:e8:32:71:79:c3: 14:46:a8:f4:04:3e:6c:4f:bc:a3:6d:71:1a:6f:5c:47:f7:c4: 6f:e3:0e:f6:74:9a:5a:4c:53:c8:d5:9f:6e:b7:5f:87:b8:3e: a1:97:ee:19:4c:43:d8:05:f8:df:30:35:89:f2:9a:e3:af:c0: 25:59:91:f5:4a:76:3f:2b:1d:4f:b4:ea:d4:2c:ea:ce:81:6e: 24:e7:92:a6:45:20:3b:64:1c:1b:9d:68:a0:9c:a2:de:89:02: b1:88:39:8e:49:ad:c9:29:c2:c7:07:a6:cd:50:ae:d6:17:6f: 0c:b3:7f:31:0b:72:8e:7c:c8:a0:b7:e7:db:44:7e:82:ce:d0: e0:90:10:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7N8ZEGUfoHAfdiMqfBW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzBhMWQ1ZTVjMDkwMWQxOWI0YjcwN2E3M2QxN2NhZTBl M2I2NjAwHhcNMjUxMjIxMDgwMDQ2WhcNMjUxMjIyMDgwMDQ2WjAzMTEwLwYDVQQD EyhjNzYwNmY2MzUwMjRmNWZiYzU1ZGZhNzUxOTE4MjI3YTdkN2ExMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMSb92X2Um+Awhp6Jhah5rK0sy7y L96q5RHl6bDDdoeWRXuDhy3d7C9ECVkdfXKY76x/8hAXUtrWrz8ZwGDziVCnKfVR xrcm7Zu0VAvv1Y52WiXEsgBgKsQZkkbmkmbUAj1G8W2AuxPuMxHQxk1u+aa2ZHZl G5sudJG1Z1uqWbtwrXYpSdfbkbMR5amj+y29iv8sMxXCUhA5ssXgfJOU3lB3lCjB jDGw6PwdAp/w8iCiZmMJV8RWk6r/oeiVF5JqaVFhcKKliVyxG9pnH5gxLWadbhBq fQgdioSFyRDfrpfBPyIoh/9tZ+KIssiTi3ZRcHwB35XUnh0rmwH5f0vB/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdgb2NQJPX7xV36dRkYInp9ehCjMB8GA1UdIwQY MBaAFBEwodXlwJAdGbS3B6c9F8rg47ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQt NmQ0MTliNzE3ZDBhLzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQtNmQ0MTliNzE3ZDBh LzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaKq/FX1 Pe/Tr18P++pZo1mXE525NnBvmoSjU3mhfNRewAf/MY6U7iLrZ1cMdmU6q29CXXVE Q3n8O7LwbQCgbLXfQ6ayoKUzYhFmYIlNsS9L7/sHAkCGzPUHPX8EgQG+KKa+qsrp Wkg6u37Ke1yU/jpfTOVT18r1g+gycXnDFEao9AQ+bE+8o21xGm9cR/fEb+MO9nSa WkxTyNWfbrdfh7g+oZfuGUxD2AX43zA1ifKa46/AJVmR9Up2PysdT7Tq1CzqzoFu JOeSpkUgO2QcG51ooJyi3okCsYg5jkmtySnCxwemzVCu1hdvDLN/MQtyjnzIoLfn 20R+gs7Q4JAQpw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:26 2025 by rpki-client