This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json) Hash identifier: BmTJKIXV2FS+a5RbxjwjzX3OKOb9fa7N6/1obXHuEIM= Subject key identifier: 75:48:20:DB:DF:A8:72:70:8A:D9:1B:A0:F4:3D:48:63:59:D4:96:94 Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f Certificate serial: 019B3DC7F36DC7EF36C13F07FDDE8D162ABD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 22:01:12 +0000 Manifest this update: Sat 20 Dec 2025 22:01:12 +0000 Manifest next update: Sun 21 Dec 2025 22:01:12 +0000 Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: tNUHpGfl96UVgsfffWoQ3+9BYeRFgofS4eSCMXsnLPM=) 2: K7Dh8rSSQ0ZuRcpwx-Nw9hu6d6Q.roa (hash: MJLuNSDvw5gsLLjMvCyGbPkYHoPaPI+8SDMojGjNJzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:f3:6d:c7:ef:36:c1:3f:07:fd:de:8d:16:2a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f Validity Not Before: Dec 20 22:01:12 2025 GMT Not After : Dec 21 22:01:12 2025 GMT Subject: CN=754820dbdfa872708ad91ba0f43d486359d49694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:98:94:f4:b4:8b:ad:44:77:66:bd:f0:79: 7a:ba:c2:92:3a:e7:76:ba:89:a4:85:91:7c:06:0d: c2:08:71:46:f2:c8:0f:7b:e8:1f:fe:02:c1:dd:ba: 51:7d:94:15:a3:07:71:e6:00:a2:8b:7f:eb:25:ac: 3e:f8:4b:65:b9:15:02:ed:e2:dc:f4:42:52:37:57: d4:88:24:d9:78:14:a7:d3:72:61:cf:dc:6a:39:53: 20:0f:a6:cb:7a:9e:7b:92:d6:5f:5d:5b:5f:98:52: 14:fb:a3:30:74:42:ab:84:f6:ae:d7:e9:86:65:35: 71:e4:51:56:9f:4e:b9:c1:e6:8a:b6:7a:cd:0a:e2: 52:3c:af:91:43:18:22:59:20:d1:4b:d9:f3:c4:82: f4:17:0b:ea:36:56:cc:58:02:4e:03:c2:4c:7a:51: ca:39:b0:93:03:5d:48:b8:1e:0a:c7:ed:56:aa:10: 3d:ab:4f:27:50:f5:93:63:75:d8:ba:35:67:e0:c1: b5:8b:c3:14:88:59:f2:6b:e8:4a:3c:d3:c9:b2:fe: b3:bf:6b:cc:6a:14:6f:04:a1:10:f4:4e:29:94:2e: 38:ca:0d:20:ad:9c:a3:01:87:70:5f:ac:fb:f4:b6: c4:a2:45:42:97:5f:ce:91:c7:b5:c9:c1:a4:f4:03: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:48:20:DB:DF:A8:72:70:8A:D9:1B:A0:F4:3D:48:63:59:D4:96:94 X509v3 Authority Key Identifier: keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1b:e8:ce:0b:40:06:67:76:11:4c:40:59:04:ed:ad:c9:58: 7a:62:71:d3:e8:61:2f:28:76:6c:09:c9:af:2a:e1:4a:ef:e0: a7:f7:9c:9c:a8:9c:41:53:48:9e:ea:b8:f8:43:b0:14:a3:ac: 15:cd:81:1b:2e:72:d9:a1:31:d4:fd:71:45:7a:27:a0:dd:b5: 08:fe:92:c3:5d:16:ec:b1:ed:78:1e:92:f7:30:9a:2c:d5:3c: 0e:7d:5d:33:43:ec:d5:67:2a:d6:24:7c:f7:53:4a:e1:95:b0: 8f:3b:65:2d:4f:d8:3e:94:3d:aa:f3:8c:bd:e7:1e:66:5e:dc: 65:31:7e:1b:83:84:29:08:62:04:90:b4:ae:10:20:5a:dd:25: e3:62:c9:91:ee:7c:c2:24:9b:85:b8:58:0c:a4:88:8b:46:77: b6:20:ac:c1:5a:91:64:d7:09:5a:d5:33:b3:50:7c:43:25:8f: 1b:0b:0b:66:2c:0a:72:51:36:e6:fe:fa:c7:62:03:38:d7:d4: 69:ae:61:87:c0:8d:19:52:f2:a8:7a:17:38:52:6b:f7:4d:4c: be:80:2d:01:2a:87:58:bf:99:8c:0c:8f:cb:55:a4:86:96:f4: 04:a5:2d:5e:b9:cc:0c:46:e4:46:3b:ac:eb:82:1a:ea:42:d8: 8d:39:5c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x/Ntx+82wT8H/d6NFiq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzdjMjM0NTNiODhlYmE0NTVjNDIwOGM2ZGY1YjNlMWJi YzI0NWYwHhcNMjUxMjIwMjIwMTEyWhcNMjUxMjIxMjIwMTEyWjAzMTEwLwYDVQQD Eyg3NTQ4MjBkYmRmYTg3MjcwOGFkOTFiYTBmNDNkNDg2MzU5ZDQ5Njk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqOYlPS0i61Ed2a98Hl6usKSOud2 uomkhZF8Bg3CCHFG8sgPe+gf/gLB3bpRfZQVowdx5gCii3/rJaw++EtluRUC7eLc 9EJSN1fUiCTZeBSn03Jhz9xqOVMgD6bLep57ktZfXVtfmFIU+6MwdEKrhPau1+mG ZTVx5FFWn065weaKtnrNCuJSPK+RQxgiWSDRS9nzxIL0FwvqNlbMWAJOA8JMelHK ObCTA11IuB4Kx+1WqhA9q08nUPWTY3XYujVn4MG1i8MUiFnya+hKPNPJsv6zv2vM ahRvBKEQ9E4plC44yg0grZyjAYdwX6z79LbEokVCl1/Okce1ycGk9AP3SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVIINvfqHJwitkboPQ9SGNZ1JaUMB8GA1UdIwQY MBaAFBE3wjRTuI66RVxCCMbfWz4bvCRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDct NWVmZGE0NjhhMjAwLzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDctNWVmZGE0NjhhMjAw LzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABvozgtA Bmd2EUxAWQTtrclYemJx0+hhLyh2bAnJryrhSu/gp/ecnKicQVNInuq4+EOwFKOs Fc2BGy5y2aEx1P1xRXonoN21CP6Sw10W7LHteB6S9zCaLNU8Dn1dM0Ps1Wcq1iR8 91NK4ZWwjztlLU/YPpQ9qvOMveceZl7cZTF+G4OEKQhiBJC0rhAgWt0l42LJke58 wiSbhbhYDKSIi0Z3tiCswVqRZNcJWtUzs1B8QyWPGwsLZiwKclE25v76x2IDONfU aa5hh8CNGVLyqHoXOFJr901MvoAtASqHWL+ZjAyPy1Wkhpb0BKUtXrnMDEbkRjus 64Ia6kLYjTlcpA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:32:35 2025 by rpki-client