This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft File: etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json) Hash identifier: OwlAPFK6vV6LHRhVzHCUK1ayS61lrLmFTRLoMp6jwEM= Subject key identifier: 11:AA:15:B6:DD:AE:5D:75:F6:55:38:A6:2D:D5:00:EF:D1:DE:0C:C6 Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10 Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710 Certificate serial: 019B3A910DC506E6D4480716A0E004959DC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft Manifest number: 059B Signing time: Sat 20 Dec 2025 07:02:23 +0000 Manifest this update: Sat 20 Dec 2025 07:02:23 +0000 Manifest next update: Sun 21 Dec 2025 07:02:23 +0000 Files and hashes: 1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=) 2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: 543KrCPhN75OM3mowJ78GstUcQvOThJgTs2CKLWWkV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:0d:c5:06:e6:d4:48:07:16:a0:e0:04:95:9d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710 Validity Not Before: Dec 20 07:02:23 2025 GMT Not After : Dec 21 07:02:23 2025 GMT Subject: CN=11aa15b6ddae5d75f65538a62dd500efd1de0cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d2:2e:85:f2:9d:22:e6:4f:aa:b5:ff:16:4e: 81:d1:dc:a2:af:68:9c:be:48:53:4a:cc:25:57:a2: 8a:a0:5c:e1:99:5c:b7:38:c1:b4:f0:5a:0e:19:8d: 78:6a:eb:e6:12:1d:d3:26:31:c5:67:86:81:c4:8a: 34:68:eb:4c:a6:df:7f:8b:d9:50:ac:9a:34:f1:f5: e1:98:eb:6c:3b:50:a9:24:c6:cb:f5:5e:17:d0:a4: 1c:31:e4:1e:7b:0d:d6:06:12:cb:a5:df:68:77:bd: 34:5e:e0:e3:c6:fb:f8:b3:72:a2:f1:cb:eb:05:ef: 54:d1:28:bc:bf:3e:b6:1f:ac:60:9e:74:c5:d4:2b: fc:50:11:54:23:08:c0:04:dd:7e:c5:bc:fd:f3:4e: 93:b2:17:14:97:28:1e:18:19:34:ea:8c:96:8b:a8: 46:c4:20:f4:b6:40:af:8c:0c:a1:da:77:36:59:90: fd:ab:a4:72:03:96:82:ea:cb:28:42:47:57:78:22: f6:b5:3f:85:a9:c8:ed:8b:18:a8:6a:f3:1f:d3:ac: a9:b0:83:e8:8e:81:ba:4e:c4:31:c7:5a:d0:07:9c: ed:dd:fb:51:0c:14:63:52:75:fe:36:0c:54:d4:63: ba:92:af:e9:03:af:c4:9b:1e:d1:1c:32:1f:46:55: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AA:15:B6:DD:AE:5D:75:F6:55:38:A6:2D:D5:00:EF:D1:DE:0C:C6 X509v3 Authority Key Identifier: keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:90:a3:3b:2f:17:ca:7d:3d:fb:aa:cd:3f:2f:95:6e:9f:67: c0:40:19:59:b2:2a:29:71:00:0a:36:85:b3:8b:15:8c:3d:ff: 5e:ee:5b:14:f3:8c:c1:13:b3:b8:71:7f:a7:08:8f:19:b0:cf: c7:0c:7c:c1:a2:13:3a:02:08:f1:2b:e2:b1:b8:cf:1c:e1:73: 84:65:1a:76:22:23:5b:7c:da:d4:d8:17:75:fd:ad:ee:b2:39: 0e:b3:e8:d0:c4:fd:e1:21:31:e9:44:84:0b:72:22:f7:07:f6: 5b:dd:06:50:a1:de:d7:1f:c0:83:cb:a3:2a:9d:a3:db:9b:ae: 0e:de:70:2d:d9:5e:62:b3:56:f0:eb:86:c3:06:1a:4d:a8:88: 01:f9:c7:11:a6:0a:aa:bd:b6:20:37:33:fe:f8:ce:d2:11:74: 1a:6e:5b:2c:9b:6d:15:db:1e:e2:b8:d4:96:5b:f5:ad:65:99: 40:47:4e:13:42:8f:48:02:98:e1:9d:af:da:9a:94:4f:f9:13: 16:ea:14:11:e8:b2:cc:c0:46:7c:ee:41:a5:b8:0e:5a:79:2d: d5:13:bc:ef:1f:f1:cc:44:26:15:40:9f:86:bb:dd:00:93:ef: 97:50:70:3d:71:21:75:13:d9:3e:f1:e8:1f:ed:2c:b3:4a:fc: 7b:05:33:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kQ3FBubUSAcWoOAElZ3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZDA3Y2RlNjc4MmZkNGZjNTY4ODU3ZTg0ODQ2NTViNTAy NDg3MTAwHhcNMjUxMjIwMDcwMjIzWhcNMjUxMjIxMDcwMjIzWjAzMTEwLwYDVQQD EygxMWFhMTViNmRkYWU1ZDc1ZjY1NTM4YTYyZGQ1MDBlZmQxZGUwY2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9IuhfKdIuZPqrX/Fk6B0dyir2ic vkhTSswlV6KKoFzhmVy3OMG08FoOGY14auvmEh3TJjHFZ4aBxIo0aOtMpt9/i9lQ rJo08fXhmOtsO1CpJMbL9V4X0KQcMeQeew3WBhLLpd9od700XuDjxvv4s3Ki8cvr Be9U0Si8vz62H6xgnnTF1Cv8UBFUIwjABN1+xbz9806TshcUlygeGBk06oyWi6hG xCD0tkCvjAyh2nc2WZD9q6RyA5aC6ssoQkdXeCL2tT+FqcjtixioavMf06ypsIPo joG6TsQxx1rQB5zt3ftRDBRjUnX+NgxU1GO6kq/pA6/Emx7RHDIfRlUs6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGqFbbdrl119lU4pi3VAO/R3gzGMB8GA1UdIwQY MBaAFHrQfN5ngv1PxWiFfoSEZVtQJIcQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQt MDVhMWQ1Y2I4ZWViLzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jOTViYWYtMDFiOC00NzlmLTkwYmQtMDVhMWQ1Y2I4ZWVi LzEvZXRCODNtZUNfVV9GYUlWLWhJUmxXMUFraHhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZCjOy8X yn09+6rNPy+Vbp9nwEAZWbIqKXEACjaFs4sVjD3/Xu5bFPOMwROzuHF/pwiPGbDP xwx8waITOgII8SvisbjPHOFzhGUadiIjW3za1NgXdf2t7rI5DrPo0MT94SEx6USE C3Ii9wf2W90GUKHe1x/Ag8ujKp2j25uuDt5wLdleYrNW8OuGwwYaTaiIAfnHEaYK qr22IDcz/vjO0hF0Gm5bLJttFdse4rjUllv1rWWZQEdOE0KPSAKY4Z2v2pqUT/kT FuoUEeiyzMBGfO5BpbgOWnkt1RO87x/xzEQmFUCfhrvdAJPvl1BwPXEhdRPZPvHo H+0ss0r8ewUzKw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:58:04 2025 by rpki-client