This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft File: eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json) Hash identifier: p6oFLbIWxVfBsOJAiEYsc4wzbj1GTgzChhNEUCUdLn4= Subject key identifier: FA:40:97:2C:33:C4:F8:AD:4D:A5:A1:3A:16:08:AD:6C:AD:C4:7F:DD Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B Certificate issuer: /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b Certificate serial: 019B1C4E87380BEB89D515809B1FDF7BE7B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft Manifest number: 16F5 Signing time: Sun 14 Dec 2025 10:01:06 +0000 Manifest this update: Sun 14 Dec 2025 10:01:06 +0000 Manifest next update: Mon 15 Dec 2025 10:01:06 +0000 Files and hashes: 1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=) 2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: S5fAAaGbk4usTn6u6KRDYn10x5Eg9GSeg2AmUTVuAjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:87:38:0b:eb:89:d5:15:80:9b:1f:df:7b:e7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b Validity Not Before: Dec 14 10:01:06 2025 GMT Not After : Dec 15 10:01:06 2025 GMT Subject: CN=fa40972c33c4f8ad4da5a13a1608ad6cadc47fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e3:6a:68:18:83:be:33:43:4c:42:5b:59:54: de:b4:cc:a6:f6:51:a1:5e:6e:f9:2f:5c:87:77:01: ae:0a:f2:cd:4e:cc:c5:4e:45:f4:94:59:2d:de:8e: 50:90:4e:8d:e5:74:e3:e5:0c:93:9a:10:53:6b:13: 0b:1f:f1:37:bf:8b:27:8d:81:0d:e0:eb:3b:6e:d6: 81:5b:16:3e:6b:a5:e2:9a:21:f0:b4:92:e5:e5:ce: 0a:3d:a4:38:a4:49:b1:4a:20:4b:ed:8c:5e:5a:27: 32:1d:5b:7c:c5:78:38:e7:5b:71:37:a8:91:a3:7e: d7:67:7a:c2:3d:61:5d:49:14:aa:ec:6a:09:66:ba: 7a:bc:f7:cb:d9:9e:25:da:11:1d:6f:dd:d2:83:4d: 1b:4b:71:70:00:62:d3:f6:1b:cd:f9:eb:1f:59:b9: 73:11:db:a5:ea:70:f2:39:44:34:af:ba:54:eb:18: bd:ad:80:5d:e8:f1:c9:8e:78:ea:80:fe:f7:b2:15: 4f:e1:00:33:d2:d1:54:74:47:ca:6c:8c:cc:76:70: df:51:04:62:61:df:e1:56:64:16:fd:bb:95:cf:97: de:65:d9:f2:3a:8f:46:92:dd:9e:c3:a9:af:5a:c8: 81:42:f7:44:54:0d:2c:82:d8:63:bf:28:0d:b0:94: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:40:97:2C:33:C4:F8:AD:4D:A5:A1:3A:16:08:AD:6C:AD:C4:7F:DD X509v3 Authority Key Identifier: keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:13:95:97:6a:b0:5c:32:f8:e3:87:ec:4a:6a:b4:fb:aa:ae: 74:92:af:8a:17:1c:61:12:68:80:ef:37:14:83:1e:7f:90:66: 37:6b:e2:c2:bc:63:dd:fe:64:18:cc:4a:52:e8:92:81:60:f3: 74:d3:ff:09:3d:c3:42:0c:fc:20:c6:6a:c5:b6:f4:0a:e1:30: 15:8d:00:3c:1b:e5:bb:70:6a:d9:dc:2d:49:64:37:81:a3:50: ce:60:08:25:d2:37:ca:b1:ff:77:0e:76:b6:46:9e:49:22:b6: f2:c7:08:b6:66:6d:ae:88:a4:21:fe:b0:d3:44:e6:02:4b:b6: 50:7a:4d:7e:e3:4d:83:47:72:ad:d7:d7:6c:2b:ce:38:ba:63: d8:76:59:f6:24:9f:fc:25:41:81:04:8e:6c:be:fc:23:c7:a1: d6:cc:62:39:8d:78:91:c8:77:d1:32:d2:56:0a:ea:1c:18:a0: 45:ca:b3:4a:b5:45:78:d9:5b:4c:66:35:2b:cc:f7:3e:a8:ee: fd:4f:5b:66:99:b3:d8:e2:fa:1a:d4:27:5b:6a:c0:6d:19:e8: 3c:8c:5d:26:f3:d8:09:34:b4:1f:a1:30:f9:9b:59:79:8c:f2: 5c:92:59:17:71:0f:dc:1d:b5:eb:9c:ad:cf:0a:30:07:2a:aa: ab:dc:0e:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscToc4C+uJ1RWAmx/fe+ewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MzRmN2VlNWQwNGEwMjYyMjNjM2FhMzE5MTJiZjYxMGQw MGRiN2IwHhcNMjUxMjE0MTAwMTA2WhcNMjUxMjE1MTAwMTA2WjAzMTEwLwYDVQQD EyhmYTQwOTcyYzMzYzRmOGFkNGRhNWExM2ExNjA4YWQ2Y2FkYzQ3ZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhONqaBiDvjNDTEJbWVTetMym9lGh Xm75L1yHdwGuCvLNTszFTkX0lFkt3o5QkE6N5XTj5QyTmhBTaxMLH/E3v4snjYEN 4Os7btaBWxY+a6XimiHwtJLl5c4KPaQ4pEmxSiBL7YxeWicyHVt8xXg451txN6iR o37XZ3rCPWFdSRSq7GoJZrp6vPfL2Z4l2hEdb93Sg00bS3FwAGLT9hvN+esfWblz Edul6nDyOUQ0r7pU6xi9rYBd6PHJjnjqgP73shVP4QAz0tFUdEfKbIzMdnDfUQRi Yd/hVmQW/buVz5feZdnyOo9Gkt2ew6mvWsiBQvdEVA0sgthjvygNsJRSbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpAlywzxPitTaWhOhYIrWytxH/dMB8GA1UdIwQY MBaAFHk09+5dBKAmIjw6oxkSv2ENANt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYt ZjFkMzQ5ODIzNTA0LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jNjU1ODctZjNlYy00M2NlLWFiNzYtZjFkMzQ5ODIzNTA0 LzEvZVRUMzdsMEVvQ1lpUERxakdSS19ZUTBBMjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBOVl2qw XDL444fsSmq0+6qudJKvihccYRJogO83FIMef5BmN2viwrxj3f5kGMxKUuiSgWDz dNP/CT3DQgz8IMZqxbb0CuEwFY0APBvlu3Bq2dwtSWQ3gaNQzmAIJdI3yrH/dw52 tkaeSSK28scItmZtroikIf6w00TmAku2UHpNfuNNg0dyrdfXbCvOOLpj2HZZ9iSf /CVBgQSObL78I8eh1sxiOY14kch30TLSVgrqHBigRcqzSrVFeNlbTGY1K8z3Pqju /U9bZpmz2OL6GtQnW2rAbRnoPIxdJvPYCTS0H6Ew+ZtZeYzyXJJZF3EP3B2165yt zwowByqqq9wO7w== -----END CERTIFICATE-----Generated at Sun Dec 14 19:18:41 2025 by rpki-client