This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json) Hash identifier: OfRnaIIUBiubZBAlo0gULsnuNaoz+nE202WkWQk2B9s= Subject key identifier: 72:AE:36:17:D3:50:5F:D8:5A:26:99:3A:1B:C5:6D:0A:D6:A3:36:AC Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35 Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235 Certificate serial: 019B24083C51B3C5823AB83407ABC81269F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft Manifest number: 16C5 Signing time: Mon 15 Dec 2025 22:01:17 +0000 Manifest this update: Mon 15 Dec 2025 22:01:17 +0000 Manifest next update: Tue 16 Dec 2025 22:01:17 +0000 Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=) 2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: V4demP9URQVgXRTCCsJ01VuYap8ykouZHd3jDVRoPm4=) 3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:3c:51:b3:c5:82:3a:b8:34:07:ab:c8:12:69:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235 Validity Not Before: Dec 15 22:01:17 2025 GMT Not After : Dec 16 22:01:17 2025 GMT Subject: CN=72ae3617d3505fd85a26993a1bc56d0ad6a336ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:80:45:e1:13:5d:c8:2c:6b:3d:c4:51:32: 94:68:3b:2e:f6:c0:f8:2c:ec:51:9a:90:71:be:92: 22:9a:fd:dd:5c:5c:89:7f:3f:92:fb:4e:2d:02:bb: be:cc:5c:39:e2:80:fc:44:26:d9:e3:70:72:74:9f: 38:2d:3d:05:49:a6:60:51:50:a0:7b:32:9a:9b:c1: 1e:78:8b:46:69:f1:c2:2d:11:da:85:c7:b9:11:8d: 46:0b:e3:63:44:1d:47:e1:ca:33:4e:f4:04:72:a0: fd:aa:1d:e6:e0:60:9c:36:77:48:5f:64:2c:1e:c4: 77:89:8c:f1:e5:0c:f6:5d:25:4d:77:f4:89:dc:5a: e0:a0:0a:74:db:ad:26:14:89:a8:db:23:88:18:b8: 36:a5:18:26:7b:78:d9:15:66:1c:a3:9e:1e:5e:86: ee:f3:16:3a:8d:66:5c:f7:1f:7c:b0:34:87:83:8a: 34:db:75:67:f1:82:fa:1e:34:fd:92:79:15:e2:f8: 8a:fb:15:ea:bc:16:82:e6:7e:e0:9d:d5:f4:b7:c5: d6:9d:65:dd:8d:31:a6:f9:8c:8e:5d:b1:97:a9:ed: dc:e9:35:38:49:be:f4:a1:b7:85:e8:7f:8f:d8:a7: 43:94:63:ff:dc:c0:5b:ed:58:61:d8:c1:02:f1:a0: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AE:36:17:D3:50:5F:D8:5A:26:99:3A:1B:C5:6D:0A:D6:A3:36:AC X509v3 Authority Key Identifier: keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8b:6d:a4:ed:22:c3:29:25:d3:6d:77:54:79:45:06:9b:e1: 70:b7:fd:b6:81:17:fb:49:b3:f1:10:92:e5:d1:d8:41:ce:70: 5f:a3:52:11:77:4e:9f:4e:d7:bc:47:9d:0e:e2:03:48:ff:4b: 94:dd:96:a4:6b:2d:40:af:2a:e5:04:cf:a9:1d:2b:7c:9c:e3: ed:75:e3:c5:cd:c2:51:fd:1d:92:60:9c:2b:6f:fe:5a:21:59: 7a:21:9f:d7:5c:8c:9d:8a:28:11:d2:b5:ba:86:a5:6c:3b:1d: 41:f9:51:e9:d0:26:2e:ec:ec:bf:6f:66:7f:cb:37:75:42:a0: 26:a8:72:b5:ce:04:6d:e6:0f:cb:15:65:1c:14:94:be:44:ee: ec:2a:fb:0c:f0:77:5f:bb:92:c9:65:eb:41:65:d8:2f:9b:43: d9:3b:56:2a:21:01:0f:0e:b6:ae:05:f3:3e:1e:7d:8f:02:07: bd:da:af:53:1e:ce:30:5a:a4:14:52:32:2d:c7:a1:74:db:9f: 6d:67:77:fd:cf:0b:b3:38:9d:b9:95:7b:6e:96:21:b5:31:81: cb:d6:f2:58:a4:33:24:db:1d:19:cb:4c:19:a7:1d:24:0c:5b: 00:83:ba:92:4f:c1:56:0a:e8:11:52:ab:60:5d:c8:a0:ce:a3: a2:bc:89:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCDxRs8WCOrg0B6vIEmn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhY2VmNDVmYmIwZjI2OTMwYWViODMzY2Y3OWZjNDFlMjJj YTkyMzUwHhcNMjUxMjE1MjIwMTE3WhcNMjUxMjE2MjIwMTE3WjAzMTEwLwYDVQQD Eyg3MmFlMzYxN2QzNTA1ZmQ4NWEyNjk5M2ExYmM1NmQwYWQ2YTMzNmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU2AReETXcgsaz3EUTKUaDsu9sD4 LOxRmpBxvpIimv3dXFyJfz+S+04tAru+zFw54oD8RCbZ43BydJ84LT0FSaZgUVCg ezKam8EeeItGafHCLRHahce5EY1GC+NjRB1H4cozTvQEcqD9qh3m4GCcNndIX2Qs HsR3iYzx5Qz2XSVNd/SJ3FrgoAp0260mFImo2yOIGLg2pRgme3jZFWYco54eXobu 8xY6jWZc9x98sDSHg4o023Vn8YL6HjT9knkV4viK+xXqvBaC5n7gndX0t8XWnWXd jTGm+YyOXbGXqe3c6TU4Sb70obeF6H+P2KdDlGP/3MBb7Vhh2MEC8aBXJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKuNhfTUF/YWiaZOhvFbQrWozasMB8GA1UdIwQY MBaAFErO9F+7DyaTCuuDPPefxB4iypI1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85N2ZiMzYtZWE5Yi00M2Y0LWFhZDUt MDZmNzI5MGRjNDRhLzEvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85N2ZiMzYtZWE5Yi00M2Y0LWFhZDUtMDZmNzI5MGRjNDRh LzEvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqottpO0i wykl0213VHlFBpvhcLf9toEX+0mz8RCS5dHYQc5wX6NSEXdOn07XvEedDuIDSP9L lN2WpGstQK8q5QTPqR0rfJzj7XXjxc3CUf0dkmCcK2/+WiFZeiGf11yMnYooEdK1 uoalbDsdQflR6dAmLuzsv29mf8s3dUKgJqhytc4EbeYPyxVlHBSUvkTu7Cr7DPB3 X7uSyWXrQWXYL5tD2TtWKiEBDw62rgXzPh59jwIHvdqvUx7OMFqkFFIyLcehdNuf bWd3/c8LsziduZV7bpYhtTGBy9byWKQzJNsdGctMGacdJAxbAIO6kk/BVgroEVKr YF3IoM6joryJOQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:42:59 2025 by rpki-client