This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft File: i70nOhRTYWFVEmDYSNdvomRGzUY.mft (raw, json) Hash identifier: cRBSjb8m+C2n0PSXWak4lDusefjkJyvZM8FWQUtDDJw= Subject key identifier: C1:B0:6F:4F:24:68:78:51:0E:E2:7D:5F:87:F3:61:B8:87:7E:81:0D Authority key identifier: 8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46 Certificate issuer: /CN=8bbd273a14536161551260d848d76fa26446cd46 Certificate serial: 019B59AD2364FE0BAAFC118BF57F4BE28927 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft Manifest number: 036F Signing time: Fri 26 Dec 2025 08:01:17 +0000 Manifest this update: Fri 26 Dec 2025 08:01:17 +0000 Manifest next update: Sat 27 Dec 2025 08:01:17 +0000 Files and hashes: 1: i70nOhRTYWFVEmDYSNdvomRGzUY.crl (hash: hGycBbN81Y1ulK1Zsokg01/Np33WzZ47obq/twVGq+4=) 2: iW3M8w8EnOfRKmq5UL0Jzk_nXrc.roa (hash: vQxUQ/gQ4diOyDGNSgt4mcIRpvqTprh0PY77byZ05KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:23:64:fe:0b:aa:fc:11:8b:f5:7f:4b:e2:89:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bbd273a14536161551260d848d76fa26446cd46 Validity Not Before: Dec 26 08:01:17 2025 GMT Not After : Dec 27 08:01:17 2025 GMT Subject: CN=c1b06f4f246878510ee27d5f87f361b8877e810d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:ee:d5:85:4a:b8:20:7f:e4:ae:dc:44:56: d1:59:ef:50:f2:20:59:eb:9e:c1:c3:00:2a:14:d3: 65:bc:05:4c:26:a8:03:2d:7e:eb:b5:3c:91:68:fe: 01:fa:c3:9b:52:7b:55:a2:03:de:77:4e:52:56:48: e1:f8:79:95:b6:45:96:d7:00:0a:50:6b:3c:7a:99: 74:cf:d4:d4:f5:17:6b:76:bc:27:96:85:0d:a8:64: 06:8e:00:01:36:ec:2f:b2:45:62:a2:3d:8e:bf:24: 0e:4e:93:69:70:88:6c:51:19:f5:d1:07:8a:8f:ba: f5:60:5d:e7:a1:30:8c:95:a7:bc:7f:2a:48:65:ea: be:3b:38:eb:80:76:dd:15:0a:4e:49:c1:dc:0e:9d: 1d:91:ea:ab:ee:f8:e7:bd:dc:2d:22:51:ed:61:60: 45:3d:b2:99:11:52:d3:a7:ac:2f:07:9c:d1:b9:e2: 77:1e:45:c2:89:77:7b:1d:d0:b3:a4:e1:68:7a:3f: 5c:cd:63:fb:aa:e4:14:6e:7f:b8:c6:9f:8d:b8:07: c2:d9:cb:02:ee:a8:e2:67:79:d2:d1:b6:bf:5e:7a: 16:91:5e:8b:6c:d8:6b:f3:2e:55:1a:5d:7f:a1:a4: ac:26:1e:96:da:10:b4:d3:4e:81:0c:5a:18:08:4a: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B0:6F:4F:24:68:78:51:0E:E2:7D:5F:87:F3:61:B8:87:7E:81:0D X509v3 Authority Key Identifier: keyid:8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:07:af:53:f3:f8:c5:6b:7f:34:48:e8:47:a3:fb:66:a5:95: 75:47:f9:b7:fd:8b:5b:1c:b8:de:a1:06:00:dd:91:35:df:32: 53:2c:f7:92:2c:3b:97:e4:6a:a0:6c:48:eb:e8:2e:3b:ed:23: cb:1e:11:2b:1a:19:d1:38:aa:fd:59:f0:11:5e:05:03:a5:33: f6:94:0c:94:90:62:bc:ac:85:46:91:a1:1c:f4:3c:60:c4:c9: 15:5c:be:8e:bb:71:37:c8:03:8d:5c:d2:53:a6:fd:8a:29:03: 63:74:2e:d4:c5:39:59:f3:93:13:ce:6b:86:9c:7e:2b:d5:17: f4:50:f0:0d:5c:8c:75:7d:e6:f9:79:aa:30:0d:9c:cf:3c:94: 13:79:0b:89:70:4d:2b:28:3c:15:2b:19:d2:fc:13:ab:0b:35: ba:f5:bd:13:e2:56:80:a4:2a:11:3a:5c:be:09:aa:aa:32:69: ef:b8:3e:2e:cf:8d:cf:ab:56:35:ef:6c:8f:5a:1a:3d:d0:64: 8d:bf:ae:ce:f0:83:07:c6:39:0d:0b:db:3f:07:6a:05:53:30: 86:05:7f:cf:29:6d:29:fd:6c:9e:f2:09:fb:7b:3e:fc:00:db: ff:2b:94:17:c9:7f:50:70:70:be:30:b9:48:3e:76:79:9c:d3: fd:a1:c1:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrSNk/guq/BGL9X9L4oknMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYmQyNzNhMTQ1MzYxNjE1NTEyNjBkODQ4ZDc2ZmEyNjQ0 NmNkNDYwHhcNMjUxMjI2MDgwMTE3WhcNMjUxMjI3MDgwMTE3WjAzMTEwLwYDVQQD EyhjMWIwNmY0ZjI0Njg3ODUxMGVlMjdkNWY4N2YzNjFiODg3N2U4MTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJnu1YVKuCB/5K7cRFbRWe9Q8iBZ 657BwwAqFNNlvAVMJqgDLX7rtTyRaP4B+sObUntVogPed05SVkjh+HmVtkWW1wAK UGs8epl0z9TU9RdrdrwnloUNqGQGjgABNuwvskVioj2OvyQOTpNpcIhsURn10QeK j7r1YF3noTCMlae8fypIZeq+OzjrgHbdFQpOScHcDp0dkeqr7vjnvdwtIlHtYWBF PbKZEVLTp6wvB5zRueJ3HkXCiXd7HdCzpOFoej9czWP7quQUbn+4xp+NuAfC2csC 7qjiZ3nS0ba/XnoWkV6LbNhr8y5VGl1/oaSsJh6W2hC0006BDFoYCErSHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGwb08kaHhRDuJ9X4fzYbiHfoENMB8GA1UdIwQY MBaAFIu9JzoUU2FhVRJg2EjXb6JkRs1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTcwbk9oUlRZV0ZWRW1EWVNOZHZvbVJHelVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hNzMzZjYtMDlhZC00ZjFhLWEzNTct ZTE2MjIwMzI5NmJiLzEvaTcwbk9oUlRZV0ZWRW1EWVNOZHZvbVJHelVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hNzMzZjYtMDlhZC00ZjFhLWEzNTctZTE2MjIwMzI5NmJi LzEvaTcwbk9oUlRZV0ZWRW1EWVNOZHZvbVJHelVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0wevU/P4 xWt/NEjoR6P7ZqWVdUf5t/2LWxy43qEGAN2RNd8yUyz3kiw7l+RqoGxI6+guO+0j yx4RKxoZ0Tiq/VnwEV4FA6Uz9pQMlJBivKyFRpGhHPQ8YMTJFVy+jrtxN8gDjVzS U6b9iikDY3Qu1MU5WfOTE85rhpx+K9UX9FDwDVyMdX3m+XmqMA2czzyUE3kLiXBN Kyg8FSsZ0vwTqws1uvW9E+JWgKQqETpcvgmqqjJp77g+Ls+Nz6tWNe9sj1oaPdBk jb+uzvCDB8Y5DQvbPwdqBVMwhgV/zyltKf1snvIJ+3s+/ADb/yuUF8l/UHBwvjC5 SD52eZzT/aHBSw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:54 2025 by rpki-client