This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft File: ETcQn-mg2_XbiQdRRvJfArSFi8s.mft (raw, json) Hash identifier: d2jija9CjK19kOzJCzBcf9a0jHQJdqxGNjDdscaK3sQ= Subject key identifier: A6:57:B8:27:48:83:0A:44:A0:92:36:61:ED:33:61:9B:EF:8B:85:6F Authority key identifier: 11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB Certificate issuer: /CN=1137109fe9a0dbf5db89075146f25f02b4858bcb Certificate serial: 019B32D7B91A859E448635EF64B3957A4EFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 19:02:36 +0000 Manifest this update: Thu 18 Dec 2025 19:02:36 +0000 Manifest next update: Fri 19 Dec 2025 19:02:36 +0000 Files and hashes: 1: ETcQn-mg2_XbiQdRRvJfArSFi8s.crl (hash: D6ExymdxMYZ4uEdZE3i6G5X2WT3IATFoCMYzeJLFEeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:b9:1a:85:9e:44:86:35:ef:64:b3:95:7a:4e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1137109fe9a0dbf5db89075146f25f02b4858bcb Validity Not Before: Dec 18 19:02:36 2025 GMT Not After : Dec 19 19:02:36 2025 GMT Subject: CN=a657b82748830a44a0923661ed33619bef8b856f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:ce:93:ef:f9:5c:63:2d:b3:6a:04:90:45: cb:78:9b:2f:b4:86:cc:33:b4:46:89:e1:f1:5a:80: de:cc:94:2c:d9:14:f8:35:43:f1:62:7c:00:b4:3f: c5:ce:24:3b:ec:43:67:1b:72:96:72:3a:7e:1f:44: 62:08:16:d0:d8:db:f4:24:80:47:e9:83:61:c8:34: ed:8e:a0:19:61:3f:39:88:cf:6f:21:a2:63:bc:79: d8:00:7c:16:55:3a:dc:8d:1d:4c:6e:c3:5d:94:6e: 10:28:80:c8:a9:44:c1:8e:17:e4:19:72:de:93:13: c3:4f:ca:99:d3:ad:98:f3:ea:b6:77:5e:e5:9d:42: 85:37:e7:bd:d3:5c:6a:4f:7f:fc:de:28:f3:30:be: 50:7e:e2:9b:13:1c:ae:a2:c7:dd:f8:04:83:a6:42: 89:85:69:56:96:29:68:34:7a:15:3c:a6:2b:f6:58: 21:4d:88:96:98:ad:99:91:39:6b:50:6c:72:d6:17: 07:26:e2:85:47:80:3f:8e:1e:f8:68:05:5a:40:e0: ed:2c:4c:8b:f4:70:a5:c0:5d:50:8d:f2:df:aa:8c: c7:8d:e3:d6:4b:1f:4b:c9:17:3f:fc:ee:ab:69:8f: d1:a9:55:71:aa:7e:df:3d:db:99:13:95:d2:1f:d7: 43:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:57:B8:27:48:83:0A:44:A0:92:36:61:ED:33:61:9B:EF:8B:85:6F X509v3 Authority Key Identifier: keyid:11:37:10:9F:E9:A0:DB:F5:DB:89:07:51:46:F2:5F:02:B4:85:8B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETcQn-mg2_XbiQdRRvJfArSFi8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a408ba-478f-46d8-99bd-77950fd4f653/1/ETcQn-mg2_XbiQdRRvJfArSFi8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:8a:f3:da:ee:8d:70:81:1b:aa:45:81:5c:22:3a:d0:73:7a: af:34:1e:10:9b:60:4f:29:b2:2b:c9:25:5e:98:7b:4b:0b:ec: ca:4e:33:78:83:d0:57:d3:d6:30:07:30:b6:10:74:84:e8:9a: af:1b:df:1a:7d:11:5b:77:eb:23:7d:eb:4a:bc:de:70:39:04: 21:2b:a3:f0:22:33:de:89:10:c2:36:fb:35:48:c3:b3:dc:45: 76:b3:d3:83:5b:cf:e5:ab:84:98:ae:4b:23:9e:80:5a:09:bb: 91:17:45:e6:76:2f:5c:23:66:a0:ca:26:a9:1b:3f:aa:b5:fd: be:66:2b:c5:5a:70:64:30:3e:94:ba:2b:0b:95:42:c7:b3:fa: fd:17:d2:f5:ce:3c:bd:7a:2f:10:18:d4:f9:57:04:6b:10:07: a1:d3:12:28:aa:e4:87:5d:43:f3:20:6c:c6:f1:ce:c4:03:4b: 72:a5:96:ac:db:a6:4c:77:5b:33:c6:0f:ea:c7:8d:59:d9:b6: 04:6b:4d:27:1a:67:1c:97:aa:5a:55:68:f3:05:0a:6c:15:b6: a7:66:dd:01:ba:f1:ff:93:c6:52:c4:96:6f:a2:77:56:61:9f: 6a:db:4e:3f:8b:f4:d0:b2:59:1c:5d:b4:28:73:1d:eb:4b:ff: 90:6c:f0:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy17kahZ5EhjXvZLOVek77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzcxMDlmZTlhMGRiZjVkYjg5MDc1MTQ2ZjI1ZjAyYjQ4 NThiY2IwHhcNMjUxMjE4MTkwMjM2WhcNMjUxMjE5MTkwMjM2WjAzMTEwLwYDVQQD EyhhNjU3YjgyNzQ4ODMwYTQ0YTA5MjM2NjFlZDMzNjE5YmVmOGI4NTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUXOk+/5XGMts2oEkEXLeJsvtIbM M7RGieHxWoDezJQs2RT4NUPxYnwAtD/FziQ77ENnG3KWcjp+H0RiCBbQ2Nv0JIBH 6YNhyDTtjqAZYT85iM9vIaJjvHnYAHwWVTrcjR1MbsNdlG4QKIDIqUTBjhfkGXLe kxPDT8qZ062Y8+q2d17lnUKFN+e901xqT3/83ijzML5QfuKbExyuosfd+ASDpkKJ hWlWliloNHoVPKYr9lghTYiWmK2ZkTlrUGxy1hcHJuKFR4A/jh74aAVaQODtLEyL 9HClwF1QjfLfqozHjePWSx9LyRc//O6raY/RqVVxqn7fPduZE5XSH9dDNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZXuCdIgwpEoJI2Ye0zYZvvi4VvMB8GA1UdIwQY MBaAFBE3EJ/poNv124kHUUbyXwK0hYvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQt Nzc5NTBmZDRmNjUzLzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hNDA4YmEtNDc4Zi00NmQ4LTk5YmQtNzc5NTBmZDRmNjUz LzEvRVRjUW4tbWcyX1hiaVFkUlJ2SmZBclNGaThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwIrz2u6N cIEbqkWBXCI60HN6rzQeEJtgTymyK8klXph7Swvsyk4zeIPQV9PWMAcwthB0hOia rxvfGn0RW3frI33rSrzecDkEISuj8CIz3okQwjb7NUjDs9xFdrPTg1vP5auEmK5L I56AWgm7kRdF5nYvXCNmoMomqRs/qrX9vmYrxVpwZDA+lLorC5VCx7P6/RfS9c48 vXovEBjU+VcEaxAHodMSKKrkh11D8yBsxvHOxANLcqWWrNumTHdbM8YP6seNWdm2 BGtNJxpnHJeqWlVo8wUKbBW2p2bdAbrx/5PGUsSWb6J3VmGfattOP4v00LJZHF20 KHMd60v/kGzw0Q== -----END CERTIFICATE-----Generated at Fri Dec 19 03:45:50 2025 by rpki-client