This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft File: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft (raw, json) Hash identifier: E9vUqFHqLECP0KMjAQe5T86n2c2F1CqniSS8awBWUR4= Subject key identifier: 98:7F:F4:83:6E:66:C3:20:AF:C0:3C:B8:62:50:21:E8:52:25:03:46 Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60 Certificate issuer: /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660 Certificate serial: 019B5AF6A27A9B3D89870762D020AC72F402 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 14:01:11 +0000 Manifest this update: Fri 26 Dec 2025 14:01:11 +0000 Manifest next update: Sat 27 Dec 2025 14:01:11 +0000 Files and hashes: 1: ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl (hash: EsrvllOMViOMVLNUU1MQIS2DyzoKyX5Aa+oo+1dbVfA=) 2: JDxTNVA5sXO861LaJnEInxIC6cE.roa (hash: wDANlF+ZOT5kP2XyYHTeE88wDUM8Jf60i326vlXC21M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:a2:7a:9b:3d:89:87:07:62:d0:20:ac:72:f4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660 Validity Not Before: Dec 26 14:01:11 2025 GMT Not After : Dec 27 14:01:11 2025 GMT Subject: CN=987ff4836e66c320afc03cb8625021e852250346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ac:f1:44:f0:d4:36:3b:ca:99:32:b3:d8:4f: 81:a4:bb:a0:23:54:e6:d2:11:98:c1:df:f8:10:33: 02:6d:db:ee:22:b1:35:7a:0e:f0:74:14:0b:2c:58: 5a:9b:68:95:b3:1c:14:76:3c:35:e6:b2:aa:cf:d7: f3:69:d9:a9:0a:3f:22:19:8a:39:7e:80:fe:ae:f7: 68:2f:07:c7:8e:30:a5:bc:ba:36:29:4f:cc:e1:34: 0d:27:82:1c:04:18:57:b1:72:9c:dc:80:aa:16:c1: 6b:68:fa:c6:7f:98:fe:f5:19:f8:21:a5:1a:d4:92: 62:5c:ba:b1:60:fb:19:7c:8b:54:22:f0:45:66:88: 02:26:1d:e8:f1:1f:8e:e0:a5:25:01:f3:3f:70:c0: ed:20:5b:a5:70:46:06:53:e0:c6:38:b4:9f:69:6a: d2:50:a3:71:c9:51:ef:f3:a9:22:fa:ad:d9:4a:8d: b9:e1:62:3a:27:95:a0:c2:03:49:8f:37:39:9f:93: 78:40:1a:da:61:b2:ac:e5:70:3d:97:81:14:cf:e7: 5f:e7:e8:64:97:ce:8b:9f:ba:6c:c5:d2:fa:58:50: 7f:ad:50:30:d4:08:23:fd:1c:a0:e8:15:c2:e4:7b: 6a:8c:25:12:2b:75:ef:cb:f8:42:8e:c2:5e:f4:f4: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7F:F4:83:6E:66:C3:20:AF:C0:3C:B8:62:50:21:E8:52:25:03:46 X509v3 Authority Key Identifier: keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ed:ac:2e:ba:48:7d:cd:1c:ed:02:9f:bc:10:cc:f2:fa:3b: a5:e8:b4:d9:e5:c7:be:f0:f4:8c:8b:92:80:41:fa:a5:e1:3c: 2e:10:3d:50:e8:dc:0e:d4:15:1c:fd:6d:d9:a8:e6:5f:1a:2d: ac:70:bf:9e:18:8e:2b:96:c2:fb:8f:a1:d1:8f:f3:dc:63:df: 49:73:1b:e8:1c:08:bd:84:57:bb:e4:0d:3c:23:c5:33:c4:3f: 5f:c5:ae:32:9c:a2:2d:9b:9f:13:53:67:a6:12:27:3a:10:f3: 9a:c2:62:87:1b:a2:5b:17:a4:84:a1:9d:f4:1b:ad:ae:6e:18: 46:94:93:15:e6:e3:45:02:63:12:4b:fa:3e:84:01:46:5d:f0: d6:ec:f7:2e:6d:bd:28:ae:9e:ec:91:a4:b8:69:42:f6:84:13: 89:d3:db:bc:c8:a4:d8:92:f2:db:be:61:ad:d1:dc:5a:ce:ea: cb:de:90:b9:de:d2:57:e4:61:50:9b:41:fb:46:44:c9:c8:1f: 98:95:be:dd:d4:54:16:96:3c:2c:d8:f3:bf:11:25:74:28:92: 32:35:66:a6:4a:3f:7e:3d:58:f8:fe:50:bf:c0:6d:3f:6a:74: 14:fe:5c:c6:a6:2e:27:70:97:22:2b:09:c8:29:ba:da:49:0e: db:ba:8d:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9qJ6mz2Jhwdi0CCscvQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzBhMWQ1ZTVjMDkwMWQxOWI0YjcwN2E3M2QxN2NhZTBl M2I2NjAwHhcNMjUxMjI2MTQwMTExWhcNMjUxMjI3MTQwMTExWjAzMTEwLwYDVQQD Eyg5ODdmZjQ4MzZlNjZjMzIwYWZjMDNjYjg2MjUwMjFlODUyMjUwMzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKzxRPDUNjvKmTKz2E+BpLugI1Tm 0hGYwd/4EDMCbdvuIrE1eg7wdBQLLFham2iVsxwUdjw15rKqz9fzadmpCj8iGYo5 foD+rvdoLwfHjjClvLo2KU/M4TQNJ4IcBBhXsXKc3ICqFsFraPrGf5j+9Rn4IaUa 1JJiXLqxYPsZfItUIvBFZogCJh3o8R+O4KUlAfM/cMDtIFulcEYGU+DGOLSfaWrS UKNxyVHv86ki+q3ZSo254WI6J5WgwgNJjzc5n5N4QBraYbKs5XA9l4EUz+df5+hk l86Ln7psxdL6WFB/rVAw1Agj/Ryg6BXC5HtqjCUSK3Xvy/hCjsJe9PSrnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJh/9INuZsMgr8A8uGJQIehSJQNGMB8GA1UdIwQY MBaAFBEwodXlwJAdGbS3B6c9F8rg47ZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQt NmQ0MTliNzE3ZDBhLzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xN2ZiZjktMDlhZS00NmExLThmNjQtNmQ0MTliNzE3ZDBh LzEvRVRDaDFlWEFrQjBadExjSHB6MFh5dURqdG1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+2sLrpI fc0c7QKfvBDM8vo7pei02eXHvvD0jIuSgEH6peE8LhA9UOjcDtQVHP1t2ajmXxot rHC/nhiOK5bC+4+h0Y/z3GPfSXMb6BwIvYRXu+QNPCPFM8Q/X8WuMpyiLZufE1Nn phInOhDzmsJihxuiWxekhKGd9Butrm4YRpSTFebjRQJjEkv6PoQBRl3w1uz3Lm29 KK6e7JGkuGlC9oQTidPbvMik2JLy275hrdHcWs7qy96Qud7SV+RhUJtB+0ZEycgf mJW+3dRUFpY8LNjzvxEldCiSMjVmpko/fj1Y+P5Qv8BtP2p0FP5cxqYuJ3CXIisJ yCm62kkO27qNlA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:59 2025 by rpki-client