This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft File: ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json) Hash identifier: luUVZCy+BSoDbVHAGRhP4h3STGN5yjAz332wNIrghz0= Subject key identifier: 9D:76:26:C0:A9:25:67:DD:D6:17:D5:9F:F5:8E:43:7F:C3:23:43:EC Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE Certificate issuer: /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe Certificate serial: 019B5975FA8A05E9D6AF3CF3B75A66C46CDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft Manifest number: 1726 Signing time: Fri 26 Dec 2025 07:01:02 +0000 Manifest this update: Fri 26 Dec 2025 07:01:02 +0000 Manifest next update: Sat 27 Dec 2025 07:01:02 +0000 Files and hashes: 1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: DvKKDmz8huE/KZdgBwej1N13IhNUPvOeeZOPDMe3XMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:fa:8a:05:e9:d6:af:3c:f3:b7:5a:66:c4:6c:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe Validity Not Before: Dec 26 07:01:02 2025 GMT Not After : Dec 27 07:01:02 2025 GMT Subject: CN=9d7626c0a92567ddd617d59ff58e437fc32343ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:f8:54:ee:3e:ca:63:31:16:2d:a2:34:13: 8c:64:9b:4b:b4:be:c6:c7:06:37:cf:4d:f4:d9:61: ec:43:62:64:af:11:ad:ba:43:ec:8c:a4:4e:69:cb: 9c:6b:a8:68:e1:bd:5a:78:3a:ab:f9:4e:30:91:2c: 6f:c5:d6:60:05:b5:8b:52:38:98:b8:9e:1a:4c:37: 2a:06:e0:51:d9:25:01:95:46:87:6c:63:d7:c7:e1: 7e:55:da:fa:9e:c4:d2:a7:cb:46:e7:38:27:4a:64: 14:7a:c4:22:b9:cf:a4:42:e5:41:c0:39:e9:43:b3: fb:68:64:4d:16:43:00:73:07:3b:d3:06:30:df:e7: 2e:b5:a3:b1:63:6d:74:36:a8:91:b5:9d:11:43:12: 1f:b5:6f:f9:94:92:f4:98:00:47:05:19:48:ef:48: 56:d8:92:92:1d:ab:4f:ee:c5:12:c3:ef:f4:af:b4: 0e:9c:31:3f:ed:2d:ba:da:1a:54:b2:90:ba:97:76: e0:eb:18:b5:9d:27:a0:eb:79:00:22:ec:bc:d1:6c: e6:6f:7b:e2:fe:cd:27:a4:91:ce:46:a3:d5:15:0a: 97:f8:4a:bd:8f:c4:f6:c7:24:8a:eb:d8:3a:68:9d: ac:e1:c9:00:4b:7e:d8:84:de:4a:e1:84:e8:d5:0b: 9f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:76:26:C0:A9:25:67:DD:D6:17:D5:9F:F5:8E:43:7F:C3:23:43:EC X509v3 Authority Key Identifier: keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:c1:fa:a9:1d:df:f9:1f:2c:d5:b4:4a:76:34:0c:92:cf:b2: 41:28:35:19:35:63:8b:da:35:c8:85:80:ea:d4:bb:95:76:3e: 76:fc:58:dd:74:c6:57:b0:a8:b3:f7:21:ee:aa:cb:70:7f:38: 72:2a:90:30:39:8c:2c:e2:43:86:e0:00:55:b8:76:d2:ad:b5: a3:2a:cc:80:8c:0f:25:62:0f:e8:e2:13:a6:b9:be:bc:7c:ab: d8:6f:2f:08:8e:ec:a5:a3:0c:9a:a8:ae:b5:23:9b:16:e6:aa: 79:76:bc:5a:0a:0d:dd:fe:c6:dc:dd:88:96:51:c5:be:b0:c5: 1e:8c:03:27:7e:d3:5e:71:7d:69:82:b8:dd:a8:38:44:7b:3b: 47:e0:f7:e2:a3:6c:a7:20:02:56:fd:66:00:ae:95:18:4b:9b: a7:f6:14:d0:89:8b:47:93:2f:c5:8e:d3:19:ae:23:3e:82:ea: 36:8c:66:c1:67:22:48:5d:01:5f:52:98:67:fb:0d:de:aa:e9: 52:7e:2a:c3:ef:90:3b:a7:31:55:cd:51:71:f7:29:40:cf:c5: d9:e9:29:1a:db:d4:03:62:6e:5b:75:1b:2c:c0:f0:62:b5:e0: a3:d2:b9:ac:ff:ee:d5:8b:d9:02:20:8e:34:39:37:49:52:47: 5d:ca:e2:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdfqKBenWrzzzt1pmxGzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzRlMWQ3ZDdmOTU5MDZjM2E4M2U5MzBkOTc0ODcxY2M3 NDRjYmUwHhcNMjUxMjI2MDcwMTAyWhcNMjUxMjI3MDcwMTAyWjAzMTEwLwYDVQQD Eyg5ZDc2MjZjMGE5MjU2N2RkZDYxN2Q1OWZmNThlNDM3ZmMzMjM0M2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvb4VO4+ymMxFi2iNBOMZJtLtL7G xwY3z0302WHsQ2JkrxGtukPsjKROacuca6ho4b1aeDqr+U4wkSxvxdZgBbWLUjiY uJ4aTDcqBuBR2SUBlUaHbGPXx+F+Vdr6nsTSp8tG5zgnSmQUesQiuc+kQuVBwDnp Q7P7aGRNFkMAcwc70wYw3+cutaOxY210NqiRtZ0RQxIftW/5lJL0mABHBRlI70hW 2JKSHatP7sUSw+/0r7QOnDE/7S262hpUspC6l3bg6xi1nSeg63kAIuy80Wzmb3vi /s0npJHORqPVFQqX+Eq9j8T2xySK69g6aJ2s4ckAS37YhN5K4YTo1QuffwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ12JsCpJWfd1hfVn/WOQ3/DI0PsMB8GA1UdIwQY MBaAFBE04dfX+VkGw6g+kw2XSHHMdEy+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRUaDE5ZjVXUWJEcUQ2VERaZEljY3gwVEw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzVhMTEtZmQxYi00OTMwLTk4ZDMt OWI1Zjg2Y2YzNTNmLzEvRVRUaDE5ZjVXUWJEcUQ2VERaZEljY3gwVEw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80MzVhMTEtZmQxYi00OTMwLTk4ZDMtOWI1Zjg2Y2YzNTNm LzEvRVRUaDE5ZjVXUWJEcUQ2VERaZEljY3gwVEw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvsH6qR3f +R8s1bRKdjQMks+yQSg1GTVji9o1yIWA6tS7lXY+dvxY3XTGV7Cos/ch7qrLcH84 ciqQMDmMLOJDhuAAVbh20q21oyrMgIwPJWIP6OITprm+vHyr2G8vCI7spaMMmqiu tSObFuaqeXa8WgoN3f7G3N2IllHFvrDFHowDJ37TXnF9aYK43ag4RHs7R+D34qNs pyACVv1mAK6VGEubp/YU0ImLR5MvxY7TGa4jPoLqNoxmwWciSF0BX1KYZ/sN3qrp Un4qw++QO6cxVc1RcfcpQM/F2ekpGtvUA2JuW3UbLMDwYrXgo9K5rP/u1YvZAiCO NDk3SVJHXcri1g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:49 2025 by rpki-client