This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft File: ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json) Hash identifier: JtnO58pQzwFPbwconbz1/HWlhumc+k2mHwwH3vv1mKY= Subject key identifier: 2C:48:57:B8:97:6B:B7:7F:CB:74:E1:E8:4E:05:3C:D8:07:8F:BE:BF Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a Certificate serial: 019BB05D5CA4E1A85B1E0566FBC507B5B70D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft Manifest number: 0FBA Signing time: Mon 12 Jan 2026 04:01:07 +0000 Manifest this update: Mon 12 Jan 2026 04:01:07 +0000 Manifest next update: Tue 13 Jan 2026 04:01:07 +0000 Files and hashes: 1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: BZ2EI1YzrG0ta0H7ICCMFYbrQ7Rm5F7BbLjHe+fu+RI=) 2: Ow_V3D3LkyTM_r00ewpLU-JasWM.roa (hash: n2QpzWe5qjli0Yj1OxzqDbdWwdmykVdSNeAfSZ+0exo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:5d:5c:a4:e1:a8:5b:1e:05:66:fb:c5:07:b5:b7:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a Validity Not Before: Jan 12 04:01:07 2026 GMT Not After : Jan 13 04:01:07 2026 GMT Subject: CN=2c4857b8976bb77fcb74e1e84e053cd8078fbebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:07:69:b8:d0:a3:c5:f9:5e:7b:e7:a4:3b: 41:8c:a9:24:b0:6a:9b:34:72:a7:77:ae:0f:92:17: 49:13:39:c4:3d:f0:14:96:97:b4:d9:28:1b:53:db: 14:34:9d:0a:92:da:49:fb:01:b4:5f:d7:99:e8:ef: d6:33:a0:cd:79:95:a2:b2:26:33:8a:71:8e:f3:22: 98:f6:de:15:52:a4:80:6a:1d:72:85:01:68:a7:67: b6:ae:c6:59:fb:0b:21:0a:a3:13:52:d2:07:fa:03: 7b:51:04:d6:17:ce:a2:12:ad:7d:22:69:3d:3d:7c: 15:d8:c9:e7:51:cc:f6:fb:ac:3d:d6:82:95:76:4a: 24:0e:d4:78:96:66:e6:18:c5:90:fb:74:8e:ba:3a: 10:a8:87:68:f3:f3:88:b1:41:66:5e:82:58:ca:6e: 99:8a:a9:d3:36:c4:ab:12:31:9c:da:86:68:27:3a: 6c:04:78:da:72:6f:af:b8:9f:a7:45:ac:4a:58:f1: a7:ab:b5:a2:8b:2d:e0:85:06:40:80:ee:67:28:e9: 19:12:bf:c7:e0:a0:98:99:ff:93:70:84:bc:bd:2c: 42:f5:ae:a6:d8:06:25:f6:eb:b9:97:ca:7d:6a:23: f7:4b:40:e2:58:1a:04:4a:86:23:11:6e:b1:1d:e6: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:48:57:B8:97:6B:B7:7F:CB:74:E1:E8:4E:05:3C:D8:07:8F:BE:BF X509v3 Authority Key Identifier: keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a5:8f:f8:49:7f:b0:37:2a:3b:ae:8e:77:b2:6c:cb:ee:c2: 1c:da:bc:e4:57:4c:cf:aa:ec:40:3e:91:3e:cc:0b:81:e9:95: d1:15:a6:3a:3f:15:44:a4:6e:e2:9e:d9:63:d9:10:21:59:92: 4d:82:ad:ad:44:93:80:f1:eb:1b:08:95:6d:95:f0:f1:23:4b: d0:58:7d:92:44:4f:8b:fd:f3:34:fd:fb:02:f7:b6:50:be:6b: 3c:a6:59:c5:ed:43:ec:13:c5:aa:d1:97:ed:dd:0c:7f:65:3b: 12:c6:74:ce:61:2c:36:a5:97:23:33:c4:25:2b:9c:ef:a7:c7: 2b:ab:79:85:a6:2a:0f:c3:76:81:1b:c7:cf:c8:4b:36:dd:d3: ca:23:18:b0:e6:f6:c0:da:fc:73:2a:b5:23:b9:43:d2:61:5a: 5e:7f:a9:ca:4a:c6:11:8d:19:02:72:6a:45:77:f4:94:e2:47: cb:8d:b1:dd:e1:7d:06:17:00:2d:42:9a:de:da:b2:ca:75:93: 0b:a9:29:43:15:14:29:b1:ef:01:50:41:51:5f:a7:bb:e1:7f: 32:a1:b6:d8:9e:bc:4b:b7:9b:f4:43:1d:ef:39:ed:72:e2:46: 1f:63:bb:20:1d:28:44:d6:5a:3c:e5:aa:66:54:43:44:f4:e6: 1e:70:db:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwXVyk4ahbHgVm+8UHtbcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzYyZjNjZmI5NGI5MjIzYzc4NDMzMTk3YzRlMGNhMTJk YmQ3MGEwHhcNMjYwMTEyMDQwMTA3WhcNMjYwMTEzMDQwMTA3WjAzMTEwLwYDVQQD EygyYzQ4NTdiODk3NmJiNzdmY2I3NGUxZTg0ZTA1M2NkODA3OGZiZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPgHabjQo8X5XnvnpDtBjKkksGqb NHKnd64PkhdJEznEPfAUlpe02SgbU9sUNJ0KktpJ+wG0X9eZ6O/WM6DNeZWisiYz inGO8yKY9t4VUqSAah1yhQFop2e2rsZZ+wshCqMTUtIH+gN7UQTWF86iEq19Imk9 PXwV2MnnUcz2+6w91oKVdkokDtR4lmbmGMWQ+3SOujoQqIdo8/OIsUFmXoJYym6Z iqnTNsSrEjGc2oZoJzpsBHjacm+vuJ+nRaxKWPGnq7Wiiy3ghQZAgO5nKOkZEr/H 4KCYmf+TcIS8vSxC9a6m2AYl9uu5l8p9aiP3S0DiWBoESoYjEW6xHeYpLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxIV7iXa7d/y3Th6E4FPNgHj76/MB8GA1UdIwQY MBaAFBE2Lzz7lLkiPHhDMZfE4MoS29cKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYmEyNjAtMDg1MC00NDYwLTgwNTMt OTRjYTljMTY1Nzc5LzEvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hYmEyNjAtMDg1MC00NDYwLTgwNTMtOTRjYTljMTY1Nzc5 LzEvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYaWP+El/ sDcqO66Od7Jsy+7CHNq85FdMz6rsQD6RPswLgemV0RWmOj8VRKRu4p7ZY9kQIVmS TYKtrUSTgPHrGwiVbZXw8SNL0Fh9kkRPi/3zNP37Ave2UL5rPKZZxe1D7BPFqtGX 7d0Mf2U7EsZ0zmEsNqWXIzPEJSuc76fHK6t5haYqD8N2gRvHz8hLNt3TyiMYsOb2 wNr8cyq1I7lD0mFaXn+pykrGEY0ZAnJqRXf0lOJHy42x3eF9BhcALUKa3tqyynWT C6kpQxUUKbHvAVBBUV+nu+F/MqG22J68S7eb9EMd7zntcuJGH2O7IB0oRNZaPOWq ZlRDRPTmHnDblQ== -----END CERTIFICATE-----Generated at Mon Jan 12 09:24:41 2026 by rpki-client