This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft File: ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json) Hash identifier: Kh+m0vX658tKB2H4/HhQr1pygPNMM8lR3l4Zge04qiM= Subject key identifier: 76:40:85:1E:22:30:4C:1A:3B:DC:52:0E:E5:F6:BB:69:3B:E1:C8:EA Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a Certificate serial: 019B10151984D3295ECD9B4BFCB84AEBCE8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft Manifest number: 0F66 Signing time: Fri 12 Dec 2025 01:02:56 +0000 Manifest this update: Fri 12 Dec 2025 01:02:56 +0000 Manifest next update: Sat 13 Dec 2025 01:02:56 +0000 Files and hashes: 1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: 5nkvklfCUOyljmGFJ/PnDZywzmw22l2jKWwRhd3Kq0s=) 2: TrL7vyhk-vrmOcVyXUhkgoFF8IM.roa (hash: Hfs6eqQDDmF2iRkKQ4LyqXry5vY1cydb2ruM4NvmGtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:15:19:84:d3:29:5e:cd:9b:4b:fc:b8:4a:eb:ce:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a Validity Not Before: Dec 12 01:02:56 2025 GMT Not After : Dec 13 01:02:56 2025 GMT Subject: CN=7640851e22304c1a3bdc520ee5f6bb693be1c8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:87:33:ee:54:26:bf:68:22:ae:3a:2d:ce:ca: 6c:4c:50:88:14:65:b7:e6:7d:85:a1:da:09:ba:ea: dd:23:97:90:92:b1:fb:a5:1e:51:ad:62:53:30:2c: 36:ed:7d:ba:63:4b:f3:f9:95:f6:3f:36:86:22:0f: 0a:04:2c:8f:80:33:67:05:41:de:e5:eb:a6:ae:61: f4:01:76:84:dd:48:f9:60:cf:72:70:8d:3c:2d:a7: 93:08:0e:b2:88:b7:fa:60:82:7d:8b:0e:6c:9a:d7: 06:df:60:a0:c4:8a:84:8c:3e:21:59:9d:e1:9e:47: fd:86:c7:61:50:13:cc:a4:91:70:fd:df:7a:7d:fc: a6:52:c2:a8:4a:99:e8:6f:1f:95:98:3c:1f:6e:ce: 5c:3f:5c:10:0c:a8:f8:ef:96:c9:c6:b8:d6:4d:4d: 58:85:e7:43:50:26:ec:e4:e7:f7:f5:9b:10:14:fd: 7a:89:83:a6:0a:23:8d:c4:b5:83:44:d6:cd:c6:95: c2:22:16:03:92:9d:53:c0:db:50:99:25:04:24:da: 6e:2b:62:e0:46:f6:2d:e0:b4:8d:24:80:c1:ce:03: 48:0f:01:bc:bb:08:a4:f8:1a:1c:d4:79:fe:00:fd: 19:d0:4d:fb:f5:76:9b:8d:29:1d:5e:97:b6:a1:1e: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:40:85:1E:22:30:4C:1A:3B:DC:52:0E:E5:F6:BB:69:3B:E1:C8:EA X509v3 Authority Key Identifier: keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:61:82:12:82:9b:5e:3a:bb:01:03:ac:09:45:db:cd:2e:00: c6:91:c6:b5:da:90:e7:11:8b:d7:23:89:17:67:6b:fa:14:86: d2:15:ed:08:82:0b:09:c2:bb:04:fb:35:05:8a:ff:6d:41:91: 0a:8b:e8:9f:a1:52:12:f5:66:9a:d1:40:7a:5c:19:ab:c2:43: 2f:a2:72:7c:63:4b:f0:ac:a7:d0:00:67:17:3e:1b:b5:57:96: 15:6e:23:08:2c:71:e1:d8:a2:1a:ff:37:6b:95:ee:88:9d:87: c2:f4:e4:66:be:5b:64:46:33:ed:63:6c:84:f8:29:18:e3:70: 1d:4d:da:08:e1:3e:76:13:f9:60:b6:19:15:b9:75:d4:ca:1f: a4:29:b7:b3:b6:de:28:74:3e:fb:90:f7:42:be:0e:28:a2:7d: a8:43:5f:db:e7:67:14:95:d8:e4:d3:06:3d:76:16:1f:ab:0a: 49:04:28:5f:84:85:ed:45:2c:8b:a2:36:ad:bc:38:16:c6:db: b4:e7:16:21:af:ee:e5:48:7e:87:96:3c:5d:a6:b9:72:c8:84: ff:8b:57:91:cb:60:81:ec:c9:69:30:19:75:14:a0:b2:4f:51: 4d:9a:94:0f:5d:c6:4c:c3:fc:99:bd:c2:6c:8e:2c:2b:4d:92: ab:0e:56:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFRmE0ylezZtL/LhK686MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzYyZjNjZmI5NGI5MjIzYzc4NDMzMTk3YzRlMGNhMTJk YmQ3MGEwHhcNMjUxMjEyMDEwMjU2WhcNMjUxMjEzMDEwMjU2WjAzMTEwLwYDVQQD Eyg3NjQwODUxZTIyMzA0YzFhM2JkYzUyMGVlNWY2YmI2OTNiZTFjOGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYcz7lQmv2girjotzspsTFCIFGW3 5n2FodoJuurdI5eQkrH7pR5RrWJTMCw27X26Y0vz+ZX2PzaGIg8KBCyPgDNnBUHe 5eumrmH0AXaE3Uj5YM9ycI08LaeTCA6yiLf6YIJ9iw5smtcG32CgxIqEjD4hWZ3h nkf9hsdhUBPMpJFw/d96ffymUsKoSpnobx+VmDwfbs5cP1wQDKj475bJxrjWTU1Y hedDUCbs5Of39ZsQFP16iYOmCiONxLWDRNbNxpXCIhYDkp1TwNtQmSUEJNpuK2Lg RvYt4LSNJIDBzgNIDwG8uwik+Boc1Hn+AP0Z0E379XabjSkdXpe2oR7O0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZAhR4iMEwaO9xSDuX2u2k74cjqMB8GA1UdIwQY MBaAFBE2Lzz7lLkiPHhDMZfE4MoS29cKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYmEyNjAtMDg1MC00NDYwLTgwNTMt OTRjYTljMTY1Nzc5LzEvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hYmEyNjAtMDg1MC00NDYwLTgwNTMtOTRjYTljMTY1Nzc5 LzEvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGGCEoKb Xjq7AQOsCUXbzS4AxpHGtdqQ5xGL1yOJF2dr+hSG0hXtCIILCcK7BPs1BYr/bUGR Covon6FSEvVmmtFAelwZq8JDL6JyfGNL8Kyn0ABnFz4btVeWFW4jCCxx4diiGv83 a5XuiJ2HwvTkZr5bZEYz7WNshPgpGONwHU3aCOE+dhP5YLYZFbl11MofpCm3s7be KHQ++5D3Qr4OKKJ9qENf2+dnFJXY5NMGPXYWH6sKSQQoX4SF7UUsi6I2rbw4Fsbb tOcWIa/u5Uh+h5Y8Xaa5csiE/4tXkctggezJaTAZdRSgsk9RTZqUD13GTMP8mb3C bI4sK02Sqw5WRg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:34:28 2025 by rpki-client