This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft File: ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft (raw, json) Hash identifier: wu4MgV3RiwxktOwdGpL0YWliZV9wKopew83s5GRQ7ag= Subject key identifier: 37:C6:12:40:21:69:CB:1A:B8:6A:23:9C:03:D4:09:82:08:B2:EA:BE Authority key identifier: 11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F Certificate issuer: /CN=1137c23453b88eba455c4208c6df5b3e1bbc245f Certificate serial: 019B78A409FBF17D1A39EF0222919CF59762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft Manifest number: 17A7 Signing time: Thu 01 Jan 2026 08:19:34 +0000 Manifest this update: Thu 01 Jan 2026 08:19:34 +0000 Manifest next update: Fri 02 Jan 2026 08:19:34 +0000 Files and hashes: 1: ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl (hash: JiujrGWkvx3whG2fm7jUdvA8EautVnc0P+MQdTsCusw=) 2: viS2S0SzjAgJ_iBbCgPzp3yhg0U.roa (hash: s3YkexgQHQKpIdGn3lF6fcpbtFZIjdVlLhgi0JVjWGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a4:09:fb:f1:7d:1a:39:ef:02:22:91:9c:f5:97:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1137c23453b88eba455c4208c6df5b3e1bbc245f Validity Not Before: Jan 1 08:19:34 2026 GMT Not After : Jan 2 08:19:34 2026 GMT Subject: CN=37c612402169cb1ab86a239c03d4098208b2eabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:35:ac:ad:4f:9f:ce:13:25:bb:15:43:3d: 1d:a6:fc:a8:f0:13:c7:50:52:b0:a3:d7:c6:37:1e: 3b:3e:d3:bc:e5:5f:e5:d9:9c:8b:9d:eb:07:3f:e5: 5d:8d:16:65:a4:6f:8d:40:b2:c5:64:1b:7b:27:a9: d8:4a:fd:a2:80:6d:6b:d6:f3:40:e7:7f:d0:0d:d8: bc:80:a1:14:b4:ad:30:57:eb:d2:59:12:d2:4a:4e: b2:59:4c:c9:4c:aa:50:0f:29:c3:47:71:58:ff:2e: bc:4f:26:c8:7b:ce:a4:1d:c5:19:65:82:0d:9d:3d: 19:07:51:c3:ff:65:12:c6:d9:d7:dc:c6:06:16:71: 38:37:d3:68:c3:2b:9b:d3:63:f7:94:1e:1f:26:5d: 85:a6:2f:58:5c:45:44:cd:7c:8c:54:3e:33:ba:82: d9:62:ca:15:4e:41:92:4e:2d:5d:c4:e8:de:3d:80: 92:ad:fc:f6:66:cf:2a:05:d8:16:e1:7e:b7:e5:02: 54:77:4a:43:57:11:af:4f:0b:98:a5:48:ef:88:76: fe:1c:87:8e:1b:be:84:47:5b:6c:a8:20:ae:b7:9a: d0:05:77:af:80:b5:15:11:2f:96:24:eb:28:c2:7f: 6b:5c:09:21:b2:f1:ab:22:4f:e4:84:6d:47:08:8a: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C6:12:40:21:69:CB:1A:B8:6A:23:9C:03:D4:09:82:08:B2:EA:BE X509v3 Authority Key Identifier: keyid:11:37:C2:34:53:B8:8E:BA:45:5C:42:08:C6:DF:5B:3E:1B:BC:24:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETfCNFO4jrpFXEIIxt9bPhu8JF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/4624fc-634f-40cd-a607-5efda468a200/1/ETfCNFO4jrpFXEIIxt9bPhu8JF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:76:56:da:22:39:17:38:38:db:0e:85:e5:8a:22:57:fd:87: 55:79:48:67:a4:ab:82:cf:d2:87:ea:33:79:72:1b:32:e0:5a: b5:41:7f:45:20:11:ab:9c:e3:6b:ab:d3:94:85:69:fd:96:91: b1:a7:ab:0f:99:91:ee:47:32:7a:32:78:40:7f:b7:e3:fc:bc: 6d:0f:12:e8:3b:f1:ae:3b:0f:88:1d:b6:3a:02:53:bb:df:b1: 42:b3:0e:9e:6c:9d:cf:a1:b6:e5:b1:bd:58:1b:f4:21:e8:a8: 28:df:b9:05:20:c3:81:05:11:03:eb:29:3e:e0:36:4b:0b:e8: 4f:c0:c6:fe:00:89:d9:e5:44:4a:6b:31:2e:62:bf:8d:85:60: c2:9d:4f:8b:97:5e:3c:d4:95:20:da:c3:4d:15:31:88:06:aa: 1e:9e:74:23:02:5d:6f:14:f1:9c:f8:d5:62:bd:04:89:ef:05: 15:de:b4:96:3c:f4:a9:af:ef:f1:63:55:34:fe:3e:46:14:8d: 0a:2b:ab:6d:5a:94:df:3d:76:88:98:4a:43:04:b2:55:3e:e4: f5:1e:ee:40:e4:03:5e:ea:fd:aa:eb:2f:28:4a:72:4c:d2:e8: 33:6c:d8:c7:82:3a:f3:ce:81:fe:04:43:85:df:55:7b:5d:3d: d4:d8:5b:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4pAn78X0aOe8CIpGc9ZdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzdjMjM0NTNiODhlYmE0NTVjNDIwOGM2ZGY1YjNlMWJi YzI0NWYwHhcNMjYwMTAxMDgxOTM0WhcNMjYwMTAyMDgxOTM0WjAzMTEwLwYDVQQD EygzN2M2MTI0MDIxNjljYjFhYjg2YTIzOWMwM2Q0MDk4MjA4YjJlYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLw1rK1Pn84TJbsVQz0dpvyo8BPH UFKwo9fGNx47PtO85V/l2ZyLnesHP+VdjRZlpG+NQLLFZBt7J6nYSv2igG1r1vNA 53/QDdi8gKEUtK0wV+vSWRLSSk6yWUzJTKpQDynDR3FY/y68TybIe86kHcUZZYIN nT0ZB1HD/2USxtnX3MYGFnE4N9Nowyub02P3lB4fJl2Fpi9YXEVEzXyMVD4zuoLZ YsoVTkGSTi1dxOjePYCSrfz2Zs8qBdgW4X635QJUd0pDVxGvTwuYpUjviHb+HIeO G76ER1tsqCCut5rQBXevgLUVES+WJOsown9rXAkhsvGrIk/khG1HCIptCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfGEkAhacsauGojnAPUCYIIsuq+MB8GA1UdIwQY MBaAFBE3wjRTuI66RVxCCMbfWz4bvCRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDct NWVmZGE0NjhhMjAwLzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi80NjI0ZmMtNjM0Zi00MGNkLWE2MDctNWVmZGE0NjhhMjAw LzEvRVRmQ05GTzRqcnBGWEVJSXh0OWJQaHU4SkY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHZW2iI5 Fzg42w6F5YoiV/2HVXlIZ6Srgs/Sh+ozeXIbMuBatUF/RSARq5zja6vTlIVp/ZaR saerD5mR7kcyejJ4QH+34/y8bQ8S6DvxrjsPiB22OgJTu9+xQrMOnmydz6G25bG9 WBv0IeioKN+5BSDDgQURA+spPuA2SwvoT8DG/gCJ2eVESmsxLmK/jYVgwp1Pi5de PNSVINrDTRUxiAaqHp50IwJdbxTxnPjVYr0Eie8FFd60ljz0qa/v8WNVNP4+RhSN CiurbVqU3z12iJhKQwSyVT7k9R7uQOQDXur9qusvKEpyTNLoM2zYx4I6886B/gRD hd9Ve1091NhbWw== -----END CERTIFICATE-----Generated at Thu Jan 1 18:07:26 2026 by rpki-client