This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft File: ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft (raw, json) Hash identifier: OykTc497zAPo/vkt5FaAq+bgZZpVtwWyCFtwaABIKVY= Subject key identifier: 1F:AD:CE:C1:7D:33:92:AC:CB:19:4A:16:CC:AF:C9:14:B1:A6:D7:EF Authority key identifier: 11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D Certificate issuer: /CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d Certificate serial: 019B5ABF253E6B34184F9D7B987ED7DFF170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 13:00:34 +0000 Manifest this update: Fri 26 Dec 2025 13:00:34 +0000 Manifest next update: Sat 27 Dec 2025 13:00:34 +0000 Files and hashes: 1: ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl (hash: vI5dfqNvnLNBbesuyQLofaAbvNoC2LA35TKYSeyefbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:25:3e:6b:34:18:4f:9d:7b:98:7e:d7:df:f1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11340dc7e8b8a7e8d7feaf1e08203d87916cb29d Validity Not Before: Dec 26 13:00:34 2025 GMT Not After : Dec 27 13:00:34 2025 GMT Subject: CN=1fadcec17d3392accb194a16ccafc914b1a6d7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:e1:53:4c:1d:a6:c2:68:4d:f9:03:81:38: 07:88:95:88:86:11:1f:ed:fb:ea:c4:8a:52:82:a5: a4:4a:a9:88:99:69:a5:8e:68:69:6b:a1:0b:cd:1e: ad:c4:af:b4:b5:2c:16:13:42:c1:b4:83:2e:53:34: 33:cd:db:92:33:db:f7:b8:ed:28:47:8e:1e:81:a1: 9b:ed:8a:8a:3e:fa:71:29:3e:0e:f9:4c:ca:c9:7f: 60:52:d6:19:46:0d:d5:27:12:4d:52:7b:70:24:3d: b8:3d:a3:fb:a0:77:74:91:82:25:33:dd:b1:44:48: fd:cd:0a:d3:11:8d:f3:52:ea:be:a7:83:08:32:5c: 6e:8e:99:a3:e6:93:60:46:1a:f3:e0:95:a2:2e:1a: 91:b9:7e:99:b8:0b:ac:0d:7e:ed:60:f8:e4:5b:9e: 3d:e2:53:85:5e:1f:67:79:56:74:d4:36:02:58:54: 65:b5:cb:bb:b9:03:ab:8e:30:39:bb:36:69:08:ea: 78:94:4e:8b:91:69:44:19:16:5f:4b:da:13:c9:8b: a6:36:1c:a4:00:d2:95:45:6c:b4:5e:04:28:e1:06: d2:96:ef:7a:04:95:3d:d2:10:65:55:2d:a5:81:9d: ec:39:10:5c:19:60:9a:21:66:2f:56:22:e9:88:e8: ee:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AD:CE:C1:7D:33:92:AC:CB:19:4A:16:CC:AF:C9:14:B1:A6:D7:EF X509v3 Authority Key Identifier: keyid:11:34:0D:C7:E8:B8:A7:E8:D7:FE:AF:1E:08:20:3D:87:91:6C:B2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETQNx-i4p-jX_q8eCCA9h5Fssp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b2372d-221e-475d-b67e-f08427208155/1/ETQNx-i4p-jX_q8eCCA9h5Fssp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f5:b2:12:52:f6:cf:39:16:8a:43:26:56:28:b7:59:93:ee: 28:7c:fd:3a:63:42:be:ae:d6:b1:c4:a6:74:04:1a:a4:ce:a3: f5:23:70:5c:76:73:37:7e:ea:f0:3a:de:df:b7:c7:25:7a:cc: 3b:eb:99:9e:c3:08:90:60:0f:ca:d4:b1:e4:61:03:51:78:07: c8:f7:6e:9c:d1:c5:4d:49:83:a5:d6:82:0b:cc:cf:00:c8:e3: a9:99:81:8c:05:a7:49:19:83:ce:7e:c6:37:c2:a6:ea:e7:05: 55:9a:fd:96:48:58:e0:33:9a:7a:54:c8:4b:6f:a1:12:99:64: 5e:0a:25:d5:5e:0f:49:ad:0e:08:44:1c:36:81:1b:92:b0:6e: f1:83:d8:14:81:44:af:db:39:a2:2d:53:55:a0:8f:03:aa:f9: 3e:79:61:d8:2c:70:b2:a5:fe:92:15:47:18:ce:ca:6c:55:4c: a0:96:ac:c4:1b:b8:5c:d9:ac:cb:16:74:48:ef:26:60:fe:45: 59:2b:a7:fc:8e:15:66:1c:1d:85:6a:14:c5:92:72:cd:3e:96: a2:bc:43:97:34:6b:4b:e7:a6:ef:99:62:ff:77:57:df:ca:b9: eb:6e:19:89:29:77:43:cb:e3:8d:ae:64:7a:21:3f:5e:e3:eb: ad:01:be:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavyU+azQYT517mH7X3/FwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzQwZGM3ZThiOGE3ZThkN2ZlYWYxZTA4MjAzZDg3OTE2 Y2IyOWQwHhcNMjUxMjI2MTMwMDM0WhcNMjUxMjI3MTMwMDM0WjAzMTEwLwYDVQQD EygxZmFkY2VjMTdkMzM5MmFjY2IxOTRhMTZjY2FmYzkxNGIxYTZkN2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcThU0wdpsJoTfkDgTgHiJWIhhEf 7fvqxIpSgqWkSqmImWmljmhpa6ELzR6txK+0tSwWE0LBtIMuUzQzzduSM9v3uO0o R44egaGb7YqKPvpxKT4O+UzKyX9gUtYZRg3VJxJNUntwJD24PaP7oHd0kYIlM92x REj9zQrTEY3zUuq+p4MIMlxujpmj5pNgRhrz4JWiLhqRuX6ZuAusDX7tYPjkW549 4lOFXh9neVZ01DYCWFRltcu7uQOrjjA5uzZpCOp4lE6LkWlEGRZfS9oTyYumNhyk ANKVRWy0XgQo4QbSlu96BJU90hBlVS2lgZ3sORBcGWCaIWYvViLpiOjuowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+tzsF9M5KsyxlKFsyvyRSxptfvMB8GA1UdIwQY MBaAFBE0DcfouKfo1/6vHgggPYeRbLKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRRTngtaTRwLWpYX3E4ZUNDQTloNUZzc3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iMjM3MmQtMjIxZS00NzVkLWI2N2Ut ZjA4NDI3MjA4MTU1LzEvRVRRTngtaTRwLWpYX3E4ZUNDQTloNUZzc3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9iMjM3MmQtMjIxZS00NzVkLWI2N2UtZjA4NDI3MjA4MTU1 LzEvRVRRTngtaTRwLWpYX3E4ZUNDQTloNUZzc3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfWyElL2 zzkWikMmVii3WZPuKHz9OmNCvq7WscSmdAQapM6j9SNwXHZzN37q8Dre37fHJXrM O+uZnsMIkGAPytSx5GEDUXgHyPdunNHFTUmDpdaCC8zPAMjjqZmBjAWnSRmDzn7G N8Km6ucFVZr9lkhY4DOaelTIS2+hEplkXgol1V4PSa0OCEQcNoEbkrBu8YPYFIFE r9s5oi1TVaCPA6r5Pnlh2CxwsqX+khVHGM7KbFVMoJasxBu4XNmsyxZ0SO8mYP5F WSun/I4VZhwdhWoUxZJyzT6WorxDlzRrS+em75li/3dX38q5624ZiSl3Q8vjja5k eiE/XuPrrQG+WA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:51 2025 by rpki-client