This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft File: 70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json) Hash identifier: Dqdni7U0DJ+YCdHATp89FUhvaAzGfV8kRSSEsN1NT5w= Subject key identifier: C4:30:7B:B1:84:DB:54:C1:7C:51:83:A0:F8:B9:17:F6:E9:7E:3C:1F Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc Certificate serial: 019B3C7E95F511936801D4347A15B6602CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 16:01:27 +0000 Manifest this update: Sat 20 Dec 2025 16:01:27 +0000 Manifest next update: Sun 21 Dec 2025 16:01:27 +0000 Files and hashes: 1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: YaiPFl9ju8Up/HlpHX/S9jbVXBqlfkqOc2OvsCbIZLk=) 2: uPPSCEPI-zYe8c4juKISlbYTsmI.roa (hash: ItdA3QN2L+hecSiCaaiQJ/fE6U5Bp5eLGhZQrMhDtVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:95:f5:11:93:68:01:d4:34:7a:15:b6:60:2c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc Validity Not Before: Dec 20 16:01:27 2025 GMT Not After : Dec 21 16:01:27 2025 GMT Subject: CN=c4307bb184db54c17c5183a0f8b917f6e97e3c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:de:b7:8e:98:c2:d1:e4:e7:2c:0a:c9:eb:b5: b5:b2:08:2f:8c:e0:d1:ea:d3:f8:59:a7:56:c1:9d: dd:57:39:30:5a:96:e8:e8:6f:a1:8f:80:c4:dd:4d: 68:d2:e3:00:d2:7c:4c:03:a6:6e:97:07:e5:a6:69: 09:c0:9c:ee:aa:86:c7:2b:f2:17:3a:8a:0e:5d:33: 79:57:5f:aa:2f:9d:82:82:68:66:04:ff:4f:2d:3f: af:89:f6:a9:61:8f:5a:87:20:09:ba:f9:9b:6c:af: f2:f3:87:e3:d0:2e:fe:bd:8a:88:c3:99:96:5d:0a: 7b:d0:bd:fa:4c:0d:af:88:e0:c8:2d:9f:4a:b0:3d: 05:6a:88:8a:3e:64:e2:4a:07:30:7c:92:a3:ad:70: b6:28:c7:21:34:1f:a6:20:6e:fe:ff:b5:66:cb:94: 75:4c:90:07:f9:fd:84:7e:dd:2a:73:66:bc:68:b0: ff:15:74:0d:a2:e1:e8:98:56:47:33:0a:6d:05:84: 88:ca:11:6e:a0:f8:74:cf:30:da:ed:d4:37:07:c9: 2f:d3:bd:44:79:cc:92:8e:77:86:29:e2:81:fa:78: 50:43:8f:21:20:17:d6:48:08:11:aa:b2:60:7d:e7: 6a:52:9a:b3:6c:bd:ba:04:b5:12:d9:84:78:09:a0: 23:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:30:7B:B1:84:DB:54:C1:7C:51:83:A0:F8:B9:17:F6:E9:7E:3C:1F X509v3 Authority Key Identifier: keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5b:22:43:c3:a4:4c:c0:dc:55:8b:0d:ea:4f:ca:06:7e:e0: c2:fb:36:9b:9c:30:ab:84:94:09:59:b4:52:52:63:e9:e7:f5: 96:c9:81:d2:47:fc:f7:a8:87:9b:e4:89:a3:62:c5:0d:6a:55: 32:4f:8d:e1:eb:32:b8:13:d6:94:43:67:69:da:df:71:5c:66: ec:8a:0e:9d:f8:69:56:e0:ce:6b:d7:aa:a1:9b:f5:90:c2:7e: b1:41:37:3d:56:05:10:38:57:c0:91:da:1a:5c:6a:b8:0b:85: b6:8c:57:0f:b2:e5:4e:00:73:84:21:09:b7:96:11:70:af:1c: 0d:99:d0:a5:6b:4f:d2:6e:3a:45:64:23:a5:90:44:67:9f:97: 4b:a0:30:b9:94:d0:bb:02:b1:a3:94:a8:87:28:2e:9f:2c:c7: 74:e4:8f:60:b1:73:2c:ab:3f:e4:93:7d:49:55:a3:98:e3:28: bc:44:6a:82:0d:23:da:57:42:84:36:6c:07:00:05:24:78:34: 3d:e3:05:ef:4d:65:a0:24:50:92:3a:d1:d5:3e:77:5b:c8:81: d9:70:d6:71:27:b9:47:b6:01:6f:09:63:2a:f6:74:8d:4e:13: c9:ca:98:e8:bb:09:97:f0:44:53:11:3e:83:8d:15:ea:ac:79: 44:ae:87:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fpX1EZNoAdQ0ehW2YCzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDc4MDIxZjcyYTIxYjc3MTQyYTQ0ZDgxNWRkZTllZjI2 ODRjYmMwHhcNMjUxMjIwMTYwMTI3WhcNMjUxMjIxMTYwMTI3WjAzMTEwLwYDVQQD EyhjNDMwN2JiMTg0ZGI1NGMxN2M1MTgzYTBmOGI5MTdmNmU5N2UzYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm963jpjC0eTnLArJ67W1sggvjODR 6tP4WadWwZ3dVzkwWpbo6G+hj4DE3U1o0uMA0nxMA6ZulwflpmkJwJzuqobHK/IX OooOXTN5V1+qL52CgmhmBP9PLT+vifapYY9ahyAJuvmbbK/y84fj0C7+vYqIw5mW XQp70L36TA2viODILZ9KsD0FaoiKPmTiSgcwfJKjrXC2KMchNB+mIG7+/7Vmy5R1 TJAH+f2Eft0qc2a8aLD/FXQNouHomFZHMwptBYSIyhFuoPh0zzDa7dQ3B8kv071E ecySjneGKeKB+nhQQ48hIBfWSAgRqrJgfedqUpqzbL26BLUS2YR4CaAj/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQwe7GE21TBfFGDoPi5F/bpfjwfMB8GA1UdIwQY MBaAFO9HgCH3KiG3cUKkTYFd3p7yaEy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEt MzQ0MzQ2NGI5MjA5LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEtMzQ0MzQ2NGI5MjA5 LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1siQ8Ok TMDcVYsN6k/KBn7gwvs2m5wwq4SUCVm0UlJj6ef1lsmB0kf896iHm+SJo2LFDWpV Mk+N4esyuBPWlENnadrfcVxm7IoOnfhpVuDOa9eqoZv1kMJ+sUE3PVYFEDhXwJHa GlxquAuFtoxXD7LlTgBzhCEJt5YRcK8cDZnQpWtP0m46RWQjpZBEZ5+XS6AwuZTQ uwKxo5SohygunyzHdOSPYLFzLKs/5JN9SVWjmOMovERqgg0j2ldChDZsBwAFJHg0 PeMF701loCRQkjrR1T53W8iB2XDWcSe5R7YBbwljKvZ0jU4TycqY6LsJl/BEUxE+ g40V6qx5RK6HVQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:17 2025 by rpki-client