This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft File: ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json) Hash identifier: 4CZX5J/hKbwU50JLGsGHU4M8Plui4TXvRVOddDTMiZo= Subject key identifier: 99:5D:86:B7:5B:9A:71:05:C3:BD:6F:47:83:FF:F2:4D:BA:50:C6:2E Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a Certificate serial: 019B3C7F4FDABA45C5702ADC9E6432EA6B8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft Manifest number: 0F7D Signing time: Sat 20 Dec 2025 16:02:14 +0000 Manifest this update: Sat 20 Dec 2025 16:02:14 +0000 Manifest next update: Sun 21 Dec 2025 16:02:14 +0000 Files and hashes: 1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: 6XuT0ukmTZRfVZ0Eb2X3ujfokEfqWvuDd5dYyqel0Gg=) 2: TrL7vyhk-vrmOcVyXUhkgoFF8IM.roa (hash: Hfs6eqQDDmF2iRkKQ4LyqXry5vY1cydb2ruM4NvmGtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:4f:da:ba:45:c5:70:2a:dc:9e:64:32:ea:6b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a Validity Not Before: Dec 20 16:02:14 2025 GMT Not After : Dec 21 16:02:14 2025 GMT Subject: CN=995d86b75b9a7105c3bd6f4783fff24dba50c62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:84:fb:04:f2:24:53:d0:d6:81:c6:3f:e3:f7: 60:3f:52:45:71:30:1c:fe:ed:38:09:3d:6b:05:41: 1a:4e:2c:7c:35:6a:e1:5d:39:5d:f2:3a:26:c9:f6: bc:0f:76:04:85:bd:eb:bb:47:b3:6f:18:33:6f:c4: fd:16:4e:05:28:f8:fa:ea:e7:fc:8d:36:89:b7:21: 3d:0f:12:6e:37:4e:3d:7d:0b:ca:9a:7e:ad:24:38: 6b:b7:48:a1:4d:be:e2:34:93:e9:35:71:a4:86:44: e1:59:03:4d:db:42:d7:41:5b:24:e0:73:1d:f2:dd: 94:58:6d:81:37:82:7d:4b:c9:e5:5a:3a:c4:c5:62: 3b:72:59:fc:46:fc:8c:0e:cf:da:e0:eb:dd:2e:d6: d3:d5:ad:3e:d0:c5:49:02:43:ac:52:c9:a9:2a:ab: 2f:a1:27:34:14:0b:d2:71:ab:73:f1:0b:89:e9:9c: fa:d7:5c:ee:80:e8:67:57:ed:8e:91:cb:9f:4f:02: b9:62:be:7f:31:54:1c:5e:bf:f2:3a:88:80:ac:9a: 1e:08:46:39:57:94:ec:ba:ff:00:71:09:0b:a7:46: 63:e2:8d:e5:0d:cf:54:e3:78:92:4a:c2:84:3e:26: e9:d1:32:c4:ff:47:cb:1f:83:f4:cc:09:ba:60:15: 1f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5D:86:B7:5B:9A:71:05:C3:BD:6F:47:83:FF:F2:4D:BA:50:C6:2E X509v3 Authority Key Identifier: keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a5:8c:46:2c:a3:88:97:6e:ad:c8:b3:bd:7b:3d:e7:8d:75: b9:41:68:0a:e8:96:c5:34:82:59:cb:84:15:22:82:4d:6d:cf: 13:be:c7:bf:f1:7b:9c:81:bf:ef:f5:76:d9:f9:ef:1c:b1:de: 3f:c0:1d:cb:6b:ca:da:e1:0a:d7:59:ff:2e:95:95:4f:dd:7a: 0b:d0:d6:73:45:d3:5e:98:4f:70:da:f4:f1:1b:bf:af:11:43: 02:9a:33:fb:48:a1:fd:12:3e:70:88:e4:e1:b0:3a:e0:99:d6: 85:7c:4d:4d:30:17:05:6d:3a:e3:44:91:ab:eb:c0:82:85:29: 52:fa:a7:d0:24:30:7a:c9:a9:2c:62:13:3b:59:fc:04:72:13: 31:91:a7:ec:c3:00:f0:7e:23:17:91:f9:b9:b0:88:88:8e:72: 80:3f:e7:b3:c0:98:b7:f7:af:67:ab:1e:a4:31:81:14:fa:ec: 49:bf:23:ad:02:e1:f0:8d:e1:22:58:0f:65:73:dd:45:cc:3b: 62:67:33:fe:22:83:6e:84:76:10:90:34:e2:bf:54:80:e6:5e: 0c:e5:05:3c:d5:96:cb:42:a0:b2:21:98:92:d9:db:3c:0b:66: cc:8a:f5:aa:11:08:69:cb:ec:21:7c:9e:c8:4c:dc:da:82:3f: b7:0f:cc:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f0/aukXFcCrcnmQy6muPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzYyZjNjZmI5NGI5MjIzYzc4NDMzMTk3YzRlMGNhMTJk YmQ3MGEwHhcNMjUxMjIwMTYwMjE0WhcNMjUxMjIxMTYwMjE0WjAzMTEwLwYDVQQD Eyg5OTVkODZiNzViOWE3MTA1YzNiZDZmNDc4M2ZmZjI0ZGJhNTBjNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YT7BPIkU9DWgcY/4/dgP1JFcTAc /u04CT1rBUEaTix8NWrhXTld8jomyfa8D3YEhb3ru0ezbxgzb8T9Fk4FKPj66uf8 jTaJtyE9DxJuN049fQvKmn6tJDhrt0ihTb7iNJPpNXGkhkThWQNN20LXQVsk4HMd 8t2UWG2BN4J9S8nlWjrExWI7cln8RvyMDs/a4OvdLtbT1a0+0MVJAkOsUsmpKqsv oSc0FAvScatz8QuJ6Zz611zugOhnV+2OkcufTwK5Yr5/MVQcXr/yOoiArJoeCEY5 V5Tsuv8AcQkLp0Zj4o3lDc9U43iSSsKEPibp0TLE/0fLH4P0zAm6YBUfPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJldhrdbmnEFw71vR4P/8k26UMYuMB8GA1UdIwQY MBaAFBE2Lzz7lLkiPHhDMZfE4MoS29cKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYmEyNjAtMDg1MC00NDYwLTgwNTMt OTRjYTljMTY1Nzc5LzEvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hYmEyNjAtMDg1MC00NDYwLTgwNTMtOTRjYTljMTY1Nzc5 LzEvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKWMRiyj iJdurcizvXs95411uUFoCuiWxTSCWcuEFSKCTW3PE77Hv/F7nIG/7/V22fnvHLHe P8Ady2vK2uEK11n/LpWVT916C9DWc0XTXphPcNr08Ru/rxFDApoz+0ih/RI+cIjk 4bA64JnWhXxNTTAXBW0640SRq+vAgoUpUvqn0CQwesmpLGITO1n8BHITMZGn7MMA 8H4jF5H5ubCIiI5ygD/ns8CYt/evZ6sepDGBFPrsSb8jrQLh8I3hIlgPZXPdRcw7 Ymcz/iKDboR2EJA04r9UgOZeDOUFPNWWy0KgsiGYktnbPAtmzIr1qhEIacvsIXye yEzc2oI/tw/MVw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:30:39 2025 by rpki-client