This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json) Hash identifier: HbkyMgwBIu6fYHJeeQBApGU9v+QtCy36DcT7vPXgy9Y= Subject key identifier: 47:3A:4D:68:D1:93:AA:CF:77:38:BD:FF:98:7A:9B:BD:DB:EC:07:11 Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb Certificate serial: 019B2D0BBCC866799573DDB845FEAA67B335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 16:01:42 +0000 Manifest this update: Wed 17 Dec 2025 16:01:42 +0000 Manifest next update: Thu 18 Dec 2025 16:01:42 +0000 Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: JHlkxtR/XCOiF30SXqNGTSYYBE87o8D5yct9FQ2S+qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:bc:c8:66:79:95:73:dd:b8:45:fe:aa:67:b3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb Validity Not Before: Dec 17 16:01:42 2025 GMT Not After : Dec 18 16:01:42 2025 GMT Subject: CN=473a4d68d193aacf7738bdff987a9bbddbec0711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:00:7a:5d:c0:9f:0b:fc:3b:ea:9e:5a:d7: 45:d9:54:39:75:da:3d:c7:4f:1e:66:b3:4e:db:88: 97:ab:88:17:35:7a:ff:8a:af:71:7a:52:7a:eb:eb: cd:30:e0:b6:02:14:c4:ae:f6:0f:39:a1:86:e7:6d: 1d:43:63:e5:39:6e:e6:6d:48:cf:5c:f4:8f:7e:4d: c2:52:f2:d2:83:bd:fe:81:bd:f8:89:9f:46:78:1e: 1a:73:ad:f0:9c:e9:ca:2b:19:cd:41:b4:d1:df:4d: ca:c6:21:62:44:7c:a1:3d:f8:14:c3:ba:3a:5a:c6: a9:2c:82:50:ef:a1:41:e3:7a:ab:37:2b:d9:fd:61: b2:2a:58:08:ff:d3:b0:ae:5b:e0:7a:cb:10:12:9d: d4:8c:ca:67:de:d0:7b:26:7c:fb:ba:e4:0f:ca:16: fc:3e:f5:72:b3:e7:49:df:71:d9:3c:d4:3e:e0:84: 55:9c:73:35:e9:48:3d:f7:c4:0b:a5:c7:f0:66:0d: ee:c7:b8:d7:26:6c:9f:ed:3b:75:5b:1c:aa:c3:71: 25:73:56:98:f7:d2:1f:33:d7:ff:f1:a6:ed:6e:9e: 6c:64:5a:5d:e5:69:c7:cf:2f:58:1b:b1:04:2a:c9: d3:83:78:b6:f4:d1:57:ed:19:ae:b9:72:10:23:1b: b6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3A:4D:68:D1:93:AA:CF:77:38:BD:FF:98:7A:9B:BD:DB:EC:07:11 X509v3 Authority Key Identifier: keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f8:b5:10:9e:a3:96:cb:27:62:8a:71:94:0b:72:f9:af:33: db:e7:58:45:2e:28:18:42:de:49:b9:1d:3d:6b:8a:6a:09:f5: 7b:3a:b1:6a:44:dd:d7:73:b6:cb:4d:f4:4a:e0:02:bc:15:54: b6:bb:42:24:4b:c5:83:ab:57:07:7d:15:97:6d:cb:bb:e5:fb: 6a:82:6f:88:fa:0f:2c:39:53:de:3e:18:1e:87:ce:e7:e2:14: e8:d2:68:e4:fd:a9:a9:2a:0c:6a:73:0e:8b:ea:3f:d9:c2:1a: 14:c8:8b:f9:e7:31:c0:5b:43:16:1f:dd:99:82:90:ac:ef:77: 8f:12:f5:c3:c7:3a:2a:0b:f0:a3:dc:bd:31:f1:bf:51:d8:d2: 38:a1:61:10:3a:4e:58:0f:cf:40:e1:04:fc:66:b2:1e:4c:84: a3:68:31:5a:d6:7f:e7:3a:e6:d3:ca:a1:5c:7b:e3:a1:bb:3c: 07:e2:1e:4c:c6:22:f3:e9:e9:c2:dd:dd:bd:12:60:97:d8:06: a5:a8:f7:f4:b8:7a:c6:bf:06:37:43:9e:63:5a:4d:c4:9b:da: 14:c0:d5:70:f8:ca:e6:1e:69:53:ac:d3:2e:5a:6b:36:cc:8c: c7:fd:20:50:c4:ea:05:d1:d0:8a:7e:ef:98:c6:50:ad:af:aa: d2:ed:08:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC7zIZnmVc924Rf6qZ7M1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzcxMDlmZTlhMGRiZjVkYjg5MDc1MTQ2ZjI1ZjAyYjQ4 NThiY2IwHhcNMjUxMjE3MTYwMTQyWhcNMjUxMjE4MTYwMTQyWjAzMTEwLwYDVQQD Eyg0NzNhNGQ2OGQxOTNhYWNmNzczOGJkZmY5ODdhOWJiZGRiZWMwNzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7sAel3Anwv8O+qeWtdF2VQ5ddo9 x08eZrNO24iXq4gXNXr/iq9xelJ66+vNMOC2AhTErvYPOaGG520dQ2PlOW7mbUjP XPSPfk3CUvLSg73+gb34iZ9GeB4ac63wnOnKKxnNQbTR303KxiFiRHyhPfgUw7o6 WsapLIJQ76FB43qrNyvZ/WGyKlgI/9OwrlvgessQEp3UjMpn3tB7Jnz7uuQPyhb8 PvVys+dJ33HZPNQ+4IRVnHM16Ug998QLpcfwZg3ux7jXJmyf7Tt1Wxyqw3Elc1aY 99IfM9f/8abtbp5sZFpd5WnHzy9YG7EEKsnTg3i29NFX7RmuuXIQIxu2wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc6TWjRk6rPdzi9/5h6m73b7AcRMB8GA1UdIwQY MBaAFBE3EJ/poNv124kHUUbyXwK0hYvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQt Nzc5NTBmZDRmNjUzLzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQtNzc5NTBmZDRmNjUz LzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfi1EJ6j lssnYopxlAty+a8z2+dYRS4oGELeSbkdPWuKagn1ezqxakTd13O2y030SuACvBVU trtCJEvFg6tXB30Vl23Lu+X7aoJviPoPLDlT3j4YHofO5+IU6NJo5P2pqSoManMO i+o/2cIaFMiL+ecxwFtDFh/dmYKQrO93jxL1w8c6Kgvwo9y9MfG/UdjSOKFhEDpO WA/PQOEE/GayHkyEo2gxWtZ/5zrm08qhXHvjobs8B+IeTMYi8+npwt3dvRJgl9gG paj39Lh6xr8GN0OeY1pNxJvaFMDVcPjK5h5pU6zTLlprNsyMx/0gUMTqBdHQin7v mMZQra+q0u0IIQ== -----END CERTIFICATE-----Generated at Wed Dec 17 22:51:45 2025 by rpki-client