This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json) Hash identifier: ExyTLuOXGvL/Kw1H8voihj9HzCk2p+BPYrqes46xnIM= Subject key identifier: 20:AC:47:D5:E6:90:B7:F1:E3:DA:75:6B:BB:4D:E5:BE:24:37:37:77 Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60 Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760 Certificate serial: 019B3C7F46BDC4F965FE17CFA9923134A889 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:02:12 +0000 Manifest this update: Sat 20 Dec 2025 16:02:12 +0000 Manifest next update: Sun 21 Dec 2025 16:02:12 +0000 Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: L4Y1+pbwSX019VZz5TFyqvWCbg7MxR/5qvud4HPY9PA=) 2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:46:bd:c4:f9:65:fe:17:cf:a9:92:31:34:a8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760 Validity Not Before: Dec 20 16:02:12 2025 GMT Not After : Dec 21 16:02:12 2025 GMT Subject: CN=20ac47d5e690b7f1e3da756bbb4de5be24373777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:4f:f8:34:f5:46:9e:a2:92:b4:db:d1:ee: 30:80:00:35:8a:f4:15:01:5e:cd:53:f6:16:d8:b3: e4:03:a0:0d:38:5c:ca:80:d6:fa:dc:55:ef:0c:88: c2:f1:59:cf:b0:0a:1b:ed:1a:29:0b:de:92:c9:80: 2b:ac:51:ce:72:70:51:1e:3e:8f:0d:bf:63:e9:25: 63:fe:26:52:10:07:a1:da:ef:24:a0:3f:03:ad:1f: 3c:37:7b:f8:d5:44:0f:01:8b:9c:21:03:e6:d4:0d: 32:44:4a:fd:c4:40:95:31:39:c9:65:de:47:36:cd: 2a:e9:d5:1c:aa:a7:31:63:ce:65:b4:c1:8c:97:24: 6a:ac:06:49:a6:ea:74:2c:d7:2c:6c:5f:e9:37:17: 69:1a:c0:27:20:0b:05:b1:46:37:1e:49:31:a2:09: 74:fa:7d:73:27:1c:4d:64:6a:5a:71:e4:68:0f:a2: bf:bf:bd:e5:e6:d3:24:e6:48:1f:a5:11:57:ab:63: 1a:6f:0d:50:55:6d:49:ed:e8:01:a1:c8:19:e0:97: 57:e7:33:a3:50:85:a1:d2:eb:b7:64:56:c4:ac:3f: 21:fe:d0:fc:78:d8:48:71:bd:4a:2a:1d:99:29:20: b8:8b:d1:12:76:89:7e:04:a2:37:ec:6f:3c:eb:67: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AC:47:D5:E6:90:B7:F1:E3:DA:75:6B:BB:4D:E5:BE:24:37:37:77 X509v3 Authority Key Identifier: keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:de:d3:51:14:5f:07:2b:55:09:41:cf:98:0c:4e:8a:a6:1b: 25:14:96:90:94:cb:cb:31:27:a7:b5:5e:73:3e:84:30:dc:2c: 67:27:f5:2b:29:a4:d6:97:ee:a3:91:ac:5c:65:a0:e2:9d:6d: 2c:82:3b:0c:75:2b:4f:0b:1b:5e:4a:ac:a5:01:44:85:f3:76: 7b:c9:75:47:3a:ef:8c:5a:dd:6b:ca:3e:77:45:08:3b:cb:de: 18:c6:bd:b9:a5:ef:f2:0f:7e:45:3b:3c:c9:b5:0f:26:e5:8a: 4a:06:91:2d:f1:48:c3:c3:d9:6c:7a:f3:a7:40:00:cc:be:c2: ea:f4:3a:ac:d8:a5:d7:45:29:ad:70:8b:5b:9e:b5:9d:f9:28: bf:62:1c:9c:24:ab:fa:01:90:97:1c:09:82:86:98:b6:d2:a7: fc:dc:33:cc:d7:34:9f:b1:de:ff:78:4f:c8:8e:1e:05:86:8f: 9b:62:18:e3:77:07:3b:24:c8:e1:12:49:03:5c:0f:54:0b:b2: 6b:8c:55:2e:d2:84:de:3b:14:b2:54:b7:c5:3b:08:6d:e9:ca: 97:77:3d:30:88:51:b9:db:9a:23:8f:f3:a8:53:68:7f:75:1e: 92:2c:11:45:9d:4c:e0:60:9f:f9:c5:76:39:96:59:9d:33:18: 01:c9:31:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f0a9xPll/hfPqZIxNKiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZDcyNzE4ZDE1NWFjMGU3ZDMyN2Y2Mzg0YTJlNGM5NTQx NmQ3NjAwHhcNMjUxMjIwMTYwMjEyWhcNMjUxMjIxMTYwMjEyWjAzMTEwLwYDVQQD EygyMGFjNDdkNWU2OTBiN2YxZTNkYTc1NmJiYjRkZTViZTI0MzczNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBdP+DT1Rp6ikrTb0e4wgAA1ivQV AV7NU/YW2LPkA6ANOFzKgNb63FXvDIjC8VnPsAob7RopC96SyYArrFHOcnBRHj6P Db9j6SVj/iZSEAeh2u8koD8DrR88N3v41UQPAYucIQPm1A0yREr9xECVMTnJZd5H Ns0q6dUcqqcxY85ltMGMlyRqrAZJpup0LNcsbF/pNxdpGsAnIAsFsUY3Hkkxogl0 +n1zJxxNZGpaceRoD6K/v73l5tMk5kgfpRFXq2Mabw1QVW1J7egBocgZ4JdX5zOj UIWh0uu3ZFbErD8h/tD8eNhIcb1KKh2ZKSC4i9ESdol+BKI37G8862fB+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCsR9XmkLfx49p1a7tN5b4kNzd3MB8GA1UdIwQY MBaAFBLXJxjRVawOfTJ/Y4Si5MlUFtdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NGY1YjItYzdlMi00YTdlLWI2YzQt NTg3NjVmMTkzZmVjLzEvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS83NGY1YjItYzdlMi00YTdlLWI2YzQtNTg3NjVmMTkzZmVj LzEvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqt7TURRf BytVCUHPmAxOiqYbJRSWkJTLyzEnp7Vecz6EMNwsZyf1Kymk1pfuo5GsXGWg4p1t LII7DHUrTwsbXkqspQFEhfN2e8l1RzrvjFrda8o+d0UIO8veGMa9uaXv8g9+RTs8 ybUPJuWKSgaRLfFIw8PZbHrzp0AAzL7C6vQ6rNil10UprXCLW561nfkov2IcnCSr +gGQlxwJgoaYttKn/NwzzNc0n7He/3hPyI4eBYaPm2IY43cHOyTI4RJJA1wPVAuy a4xVLtKE3jsUslS3xTsIbenKl3c9MIhRuduaI4/zqFNof3UekiwRRZ1M4GCf+cV2 OZZZnTMYAckxog== -----END CERTIFICATE-----Generated at Sun Dec 21 02:11:54 2025 by rpki-client