This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json) Hash identifier: RCSNi+bnhEtjZVOzK2P+Ykm5E59J3XgDyuWN2gur0TQ= Subject key identifier: 3D:99:78:30:D0:F4:5A:38:41:F0:E3:98:64:35:02:2D:6C:03:65:98 Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b Certificate serial: 019B41000B6248B0D684AE91F7FB1822D296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft Manifest number: 1708 Signing time: Sun 21 Dec 2025 13:01:20 +0000 Manifest this update: Sun 21 Dec 2025 13:01:20 +0000 Manifest next update: Mon 22 Dec 2025 13:01:20 +0000 Files and hashes: 1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=) 2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: /bbRerC8iNKeekUFGOaYZKB1RlvVBc11ubZBzqjoCfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:0b:62:48:b0:d6:84:ae:91:f7:fb:18:22:d2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b Validity Not Before: Dec 21 13:01:20 2025 GMT Not After : Dec 22 13:01:20 2025 GMT Subject: CN=3d997830d0f45a3841f0e3986435022d6c036598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c0:04:82:32:0e:f9:74:3c:a5:18:34:b4:fc: 21:b6:66:55:b3:1b:a9:78:d5:6b:73:b7:4d:f0:39: 4d:bd:ae:ee:ef:4a:09:d0:16:9c:0f:3b:86:05:b7: 26:46:9f:09:2a:6c:31:ca:76:17:ef:2b:b6:a8:0f: 39:a4:08:5f:05:33:88:25:29:4c:2b:09:16:92:da: c6:57:bd:35:ce:46:af:2e:98:58:ca:35:9e:97:50: a8:10:14:c7:00:81:40:84:43:20:c9:c3:84:3e:2d: 70:4d:cc:60:4f:3e:c1:dd:af:a9:49:6a:21:58:59: 64:92:aa:de:f1:c0:e6:38:4f:6d:aa:c9:7c:06:eb: 6a:00:6d:dc:69:bb:ca:4a:f8:ce:86:b5:4f:1d:7d: 70:4a:61:ca:9e:ac:10:34:8c:88:16:b6:4c:37:de: 8b:b4:5a:d7:58:31:cb:13:39:35:67:cd:e1:eb:1d: 0d:bb:e0:63:db:30:65:a9:34:bd:4b:35:1e:72:c7: 20:46:78:7e:6c:89:9d:1f:ce:35:d4:53:ac:c3:2c: 79:13:9b:0a:4a:75:02:89:75:3b:b2:f8:b9:35:ba: 8e:a8:41:fb:bd:e5:66:e8:b2:01:c1:0a:fb:f6:75: d2:48:a1:64:f3:96:d0:50:ad:ec:f0:a4:39:30:ed: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:99:78:30:D0:F4:5A:38:41:F0:E3:98:64:35:02:2D:6C:03:65:98 X509v3 Authority Key Identifier: keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:34:ad:ef:3f:e9:1e:4d:b6:a7:f7:8e:c7:c6:6f:1f:15:47: 1d:9b:97:c0:88:ff:1f:b4:96:3c:1c:60:a8:2e:3e:aa:99:f2: d4:16:7d:03:5e:a0:c9:42:18:a1:e7:71:a6:e1:dc:9c:bf:e1: 48:8d:dd:ea:ae:8c:17:08:88:2b:19:96:3b:e2:85:21:b1:8b: d8:b0:5f:08:84:bc:5c:35:6a:f7:01:84:32:92:72:7b:46:49: 99:ed:34:0e:d1:1e:7e:da:c6:2f:26:e0:b8:62:e1:1c:f0:f7: 27:2f:f2:3c:cd:03:91:e6:2b:9f:c1:fa:c0:79:af:a2:99:43: 78:47:98:1a:1a:0c:9d:ed:d8:cf:d3:4c:5a:bb:78:59:f2:4d: 14:40:39:59:3e:86:83:68:bb:40:04:55:78:19:bc:c1:85:5a: bb:7a:01:ff:5e:7a:c9:79:ef:98:15:31:2a:97:9c:79:3c:fc: 0c:89:0b:4a:a1:08:14:19:87:cf:91:20:03:97:6f:b0:32:41: d4:0e:89:c2:34:1d:c7:45:ec:ba:92:2c:b6:e0:04:3a:ad:7a: 3c:b4:41:98:9a:31:20:ff:b9:94:e3:b2:d6:b5:73:f9:02:c0: 76:8b:8e:fb:da:10:de:33:83:ec:0a:b6:1e:d8:79:7d:7f:f8: 0c:94:aa:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAAtiSLDWhK6R9/sYItKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MzRmN2VlNWQwNGEwMjYyMjNjM2FhMzE5MTJiZjYxMGQw MGRiN2IwHhcNMjUxMjIxMTMwMTIwWhcNMjUxMjIyMTMwMTIwWjAzMTEwLwYDVQQD EygzZDk5NzgzMGQwZjQ1YTM4NDFmMGUzOTg2NDM1MDIyZDZjMDM2NTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28AEgjIO+XQ8pRg0tPwhtmZVsxup eNVrc7dN8DlNva7u70oJ0BacDzuGBbcmRp8JKmwxynYX7yu2qA85pAhfBTOIJSlM KwkWktrGV701zkavLphYyjWel1CoEBTHAIFAhEMgycOEPi1wTcxgTz7B3a+pSWoh WFlkkqre8cDmOE9tqsl8ButqAG3cabvKSvjOhrVPHX1wSmHKnqwQNIyIFrZMN96L tFrXWDHLEzk1Z83h6x0Nu+Bj2zBlqTS9SzUecscgRnh+bImdH8411FOswyx5E5sK SnUCiXU7svi5NbqOqEH7veVm6LIBwQr79nXSSKFk85bQUK3s8KQ5MO2e3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2ZeDDQ9Fo4QfDjmGQ1Ai1sA2WYMB8GA1UdIwQY MBaAFHk09+5dBKAmIjw6oxkSv2ENANt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYt ZjFkMzQ5ODIzNTA0LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYtZjFkMzQ5ODIzNTA0 LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzSt7z/p Hk22p/eOx8ZvHxVHHZuXwIj/H7SWPBxgqC4+qpny1BZ9A16gyUIYoedxpuHcnL/h SI3d6q6MFwiIKxmWO+KFIbGL2LBfCIS8XDVq9wGEMpJye0ZJme00DtEeftrGLybg uGLhHPD3Jy/yPM0DkeYrn8H6wHmvoplDeEeYGhoMne3Yz9NMWrt4WfJNFEA5WT6G g2i7QARVeBm8wYVau3oB/156yXnvmBUxKpeceTz8DIkLSqEIFBmHz5EgA5dvsDJB 1A6JwjQdx0XsupIstuAEOq16PLRBmJoxIP+5lOOy1rVz+QLAdouO+9oQ3jOD7Aq2 Hth5fX/4DJSqoQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:15:41 2025 by rpki-client