This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json) Hash identifier: OBLpZdEnRBDdO1MxC5tbO7uSlUFkPkwa2YAR43wUljA= Subject key identifier: 2A:4A:44:E3:C8:25:BD:D1:9A:42:86:7D:82:40:17:E7:90:EB:29:3B Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60 Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760 Certificate serial: 019B3E6DA3AE3494B3E4956FEB6D9F4B4705 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 01:02:11 +0000 Manifest this update: Sun 21 Dec 2025 01:02:11 +0000 Manifest next update: Mon 22 Dec 2025 01:02:11 +0000 Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: aw+K7cQlOqRTDIwX9IlH06wGQdC0wCZg0X5Ul5F8khY=) 2: YKFTV_Osz3tEHBL-tBtNNKG_uGY.roa (hash: ofAuwRpYik4IXKEsnZ8uX3EkPuXFlEDgyGW2JXk71VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:a3:ae:34:94:b3:e4:95:6f:eb:6d:9f:4b:47:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760 Validity Not Before: Dec 21 01:02:11 2025 GMT Not After : Dec 22 01:02:11 2025 GMT Subject: CN=2a4a44e3c825bdd19a42867d824017e790eb293b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:61:78:12:f3:2c:41:3d:5d:a6:61:b8:e7: a2:42:05:4f:cb:ae:aa:89:aa:43:dd:a1:4e:00:97: 72:e0:2b:10:d5:b0:d4:8f:72:c2:cb:df:29:65:95: f0:87:44:45:3b:e9:8f:c5:a9:5c:95:17:a5:23:d7: b3:91:96:8c:bd:74:0f:ee:ff:4e:b2:9f:41:bb:b7: 67:ea:b9:6e:96:83:c5:42:26:09:4b:6b:7f:38:cc: b2:48:c7:03:59:43:7b:c4:1a:1f:36:a7:bf:63:47: dd:22:97:90:a2:04:f6:64:28:dc:6b:87:6a:31:78: 80:8c:c0:f5:5c:be:ea:fe:b0:7c:ef:57:4b:bf:db: 87:b7:6f:89:70:38:06:76:73:85:e2:91:fc:40:c8: 04:80:b5:06:d9:8d:48:fe:66:19:47:d7:bd:c0:3d: 24:13:63:cc:8f:3c:76:b0:fd:62:02:b9:31:70:ee: a9:cd:d5:68:30:29:64:9a:3e:84:00:82:a5:6a:26: 0d:f1:f2:f4:73:f9:c3:25:2c:ae:f8:c0:6e:3f:0c: 3c:79:85:f0:46:51:2a:73:3c:a9:73:0d:33:f9:de: 4c:93:4f:49:db:bd:8e:ad:19:ab:82:46:cb:d1:6f: 17:7d:76:ac:fb:5a:70:0e:f0:04:18:b8:c0:ed:95: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4A:44:E3:C8:25:BD:D1:9A:42:86:7D:82:40:17:E7:90:EB:29:3B X509v3 Authority Key Identifier: keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b3:16:a9:bd:eb:d1:5d:fb:09:ee:c5:ec:70:09:f7:cd:79: bb:56:4a:20:75:75:8b:ca:99:88:3c:c3:35:3d:14:af:dd:23: 1a:b5:94:1f:2d:c1:c4:7d:be:dc:c4:95:f5:6f:1a:35:5c:b6: 6d:83:50:b7:80:42:82:1f:e3:4a:f8:a7:87:14:3f:a3:74:93: 8e:23:56:7e:d6:46:5d:82:cf:42:b6:c2:ab:f1:fc:d0:63:15: 78:0a:3c:3d:56:5b:d0:1e:d6:c1:98:e6:12:d5:93:21:f2:c9: 9b:45:d4:b5:92:1f:a3:9c:7b:76:50:f0:0f:3c:9b:c6:b9:33: d8:04:46:e6:fb:51:31:0c:30:55:4b:31:bd:e6:73:a0:11:4d: ac:96:9d:ac:1e:30:cf:25:1d:3f:66:4a:44:07:9e:a2:95:ef: bd:3b:43:83:11:10:95:db:a9:da:73:fd:2d:c5:be:f0:e2:a6: 49:91:a0:e0:f4:93:11:e0:66:32:2b:ef:4a:5f:bd:1d:c0:79: 51:ce:79:bf:66:30:7f:c3:d6:46:4c:65:15:cb:f8:ca:21:b4: a4:41:9b:a3:bc:18:89:24:e4:66:2c:cf:2d:ac:c1:e3:12:78: e1:e5:a0:f3:5d:71:ed:f7:d4:50:8b:97:b4:ed:75:cb:b7:f3: 4d:1b:d7:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+baOuNJSz5JVv622fS0cFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZDcyNzE4ZDE1NWFjMGU3ZDMyN2Y2Mzg0YTJlNGM5NTQx NmQ3NjAwHhcNMjUxMjIxMDEwMjExWhcNMjUxMjIyMDEwMjExWjAzMTEwLwYDVQQD EygyYTRhNDRlM2M4MjViZGQxOWE0Mjg2N2Q4MjQwMTdlNzkwZWIyOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaNheBLzLEE9XaZhuOeiQgVPy66q iapD3aFOAJdy4CsQ1bDUj3LCy98pZZXwh0RFO+mPxalclRelI9ezkZaMvXQP7v9O sp9Bu7dn6rluloPFQiYJS2t/OMyySMcDWUN7xBofNqe/Y0fdIpeQogT2ZCjca4dq MXiAjMD1XL7q/rB871dLv9uHt2+JcDgGdnOF4pH8QMgEgLUG2Y1I/mYZR9e9wD0k E2PMjzx2sP1iArkxcO6pzdVoMClkmj6EAIKlaiYN8fL0c/nDJSyu+MBuPww8eYXw RlEqczypcw0z+d5Mk09J272OrRmrgkbL0W8XfXas+1pwDvAEGLjA7ZUQXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpKROPIJb3RmkKGfYJAF+eQ6yk7MB8GA1UdIwQY MBaAFBLXJxjRVawOfTJ/Y4Si5MlUFtdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NGY1YjItYzdlMi00YTdlLWI2YzQt NTg3NjVmMTkzZmVjLzEvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS83NGY1YjItYzdlMi00YTdlLWI2YzQtNTg3NjVmMTkzZmVj LzEvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbMWqb3r 0V37Ce7F7HAJ9815u1ZKIHV1i8qZiDzDNT0Ur90jGrWUHy3BxH2+3MSV9W8aNVy2 bYNQt4BCgh/jSvinhxQ/o3STjiNWftZGXYLPQrbCq/H80GMVeAo8PVZb0B7WwZjm EtWTIfLJm0XUtZIfo5x7dlDwDzybxrkz2ARG5vtRMQwwVUsxveZzoBFNrJadrB4w zyUdP2ZKRAeeopXvvTtDgxEQldup2nP9LcW+8OKmSZGg4PSTEeBmMivvSl+9HcB5 Uc55v2Ywf8PWRkxlFcv4yiG0pEGbo7wYiSTkZizPLazB4xJ44eWg811x7ffUUIuX tO11y7fzTRvXqg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:03:58 2025 by rpki-client