This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json) Hash identifier: oxay0N/XEjuag4GyFJhMhwnJlDFN+RYM338EE6kTbVw= Subject key identifier: AE:87:04:DA:C1:72:BD:43:A5:05:E4:5B:21:57:9D:FE:B4:57:BE:4C Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae Certificate serial: 019B5C090115A65305CD13FB77E220A6E0F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft Manifest number: 172C Signing time: Fri 26 Dec 2025 19:00:52 +0000 Manifest this update: Fri 26 Dec 2025 19:00:52 +0000 Manifest next update: Sat 27 Dec 2025 19:00:52 +0000 Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=) 2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: ZejpTq7k8SbZ5z2st3aw5bOA+tyAXSMiZQyZM8pM9Io=) 3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:01:15:a6:53:05:cd:13:fb:77:e2:20:a6:e0:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae Validity Not Before: Dec 26 19:00:52 2025 GMT Not After : Dec 27 19:00:52 2025 GMT Subject: CN=ae8704dac172bd43a505e45b21579dfeb457be4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6d:8c:9e:0d:92:09:86:84:4a:f7:48:6c:92: 83:7a:ca:77:a9:3c:b4:c8:22:72:ce:95:05:4a:39: 67:2d:42:00:93:da:9a:50:d1:2d:f8:56:c7:99:29: 84:0a:1f:28:5e:4a:12:83:46:4a:f6:51:e9:e4:32: f9:ac:78:04:63:39:b9:ec:04:1f:b2:67:56:16:8d: eb:77:dd:fe:85:f2:e3:c1:3e:4e:6f:7a:54:8c:99: b8:01:09:81:34:65:6d:38:dd:83:f3:03:28:b0:28: 2b:26:98:78:50:d4:8c:d4:53:f3:ef:d7:c8:ae:66: 0b:3e:4f:0a:4a:be:65:29:57:e2:d8:91:6c:bf:d0: 1b:7e:06:81:a5:46:1b:cc:4c:c2:db:c1:a4:63:24: 49:9b:b8:9c:e1:7e:49:d9:7d:0e:96:29:52:78:98: 6c:33:f7:88:e8:2e:df:d8:fa:aa:f6:58:cd:9c:50: 5f:c8:7b:60:6c:3c:9e:6f:95:3a:65:64:00:82:7f: 39:f5:50:8e:51:a5:b5:3b:de:ed:56:e9:33:ab:65: e0:ed:3b:4a:0c:63:7c:29:36:e3:a2:ea:2e:5f:c3: 35:8a:2c:a3:20:9e:94:fa:3a:87:e7:0c:8e:a4:a7: ef:d5:7c:13:5e:b4:d7:4b:41:65:b8:0e:a4:7e:99: 1c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:87:04:DA:C1:72:BD:43:A5:05:E4:5B:21:57:9D:FE:B4:57:BE:4C X509v3 Authority Key Identifier: keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cc:7d:12:b8:95:48:11:eb:46:5a:ed:11:7d:26:47:98:aa: 8e:bc:94:3b:d2:3f:4b:88:83:a2:a3:2a:f6:a9:45:da:4b:0f: f8:2f:7a:1c:57:52:3b:f7:fa:91:d2:6e:2d:28:1c:86:84:28: f6:be:26:a9:80:23:b4:c7:66:5c:8a:5f:00:37:4d:dd:55:05: de:ff:c7:e3:9b:1b:73:a8:fe:f9:8d:fa:1f:6e:82:1d:17:34: 72:f5:79:84:4f:d1:41:36:ef:04:cd:ba:59:f2:14:19:0b:32: ac:27:59:1f:92:ec:31:77:b2:75:72:94:77:1b:f1:cc:9c:d4: 7c:4e:33:39:15:3e:fc:ff:55:bc:af:ca:74:cb:20:fc:69:99: e8:f9:55:e1:73:17:68:d4:9a:5d:df:c2:d9:1a:e2:b5:47:0f: 35:2e:aa:83:58:78:76:b7:bc:c8:2d:d6:f6:1b:6b:14:1c:5a: 49:b3:c6:30:06:56:b0:67:0f:55:89:fa:4d:ab:1f:f0:59:89: ef:da:4c:89:2d:57:69:71:cf:36:05:33:02:65:da:68:e3:9d: 3e:c9:98:15:89:a2:30:53:f3:81:f0:fa:ea:75:85:07:4c:a1: 83:69:eb:bf:22:24:95:b2:4f:00:99:91:92:30:59:06:30:83: 29:6d:dd:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCQEVplMFzRP7d+IgpuD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDc3Y2EzYjQ0OWJiYzQxMjQ3ZThjOTIxZTRjOGRhYmZj MWFmYWUwHhcNMjUxMjI2MTkwMDUyWhcNMjUxMjI3MTkwMDUyWjAzMTEwLwYDVQQD EyhhZTg3MDRkYWMxNzJiZDQzYTUwNWU0NWIyMTU3OWRmZWI0NTdiZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G2Mng2SCYaESvdIbJKDesp3qTy0 yCJyzpUFSjlnLUIAk9qaUNEt+FbHmSmECh8oXkoSg0ZK9lHp5DL5rHgEYzm57AQf smdWFo3rd93+hfLjwT5Ob3pUjJm4AQmBNGVtON2D8wMosCgrJph4UNSM1FPz79fI rmYLPk8KSr5lKVfi2JFsv9AbfgaBpUYbzEzC28GkYyRJm7ic4X5J2X0OlilSeJhs M/eI6C7f2Pqq9ljNnFBfyHtgbDyeb5U6ZWQAgn859VCOUaW1O97tVukzq2Xg7TtK DGN8KTbjououX8M1iiyjIJ6U+jqH5wyOpKfv1XwTXrTXS0FluA6kfpkcvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6HBNrBcr1DpQXkWyFXnf60V75MMB8GA1UdIwQY MBaAFO9HfKO0SbvEEkfoySHkyNq/wa+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUt NjAzYWExZjIwOWQ4LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUtNjAzYWExZjIwOWQ4 LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcx9EriV SBHrRlrtEX0mR5iqjryUO9I/S4iDoqMq9qlF2ksP+C96HFdSO/f6kdJuLSgchoQo 9r4mqYAjtMdmXIpfADdN3VUF3v/H45sbc6j++Y36H26CHRc0cvV5hE/RQTbvBM26 WfIUGQsyrCdZH5LsMXeydXKUdxvxzJzUfE4zORU+/P9VvK/KdMsg/GmZ6PlV4XMX aNSaXd/C2RritUcPNS6qg1h4dre8yC3W9htrFBxaSbPGMAZWsGcPVYn6Tasf8FmJ 79pMiS1XaXHPNgUzAmXaaOOdPsmYFYmiMFPzgfD66nWFB0yhg2nrvyIklbJPAJmR kjBZBjCDKW3dpQ== -----END CERTIFICATE-----Generated at Sat Dec 27 04:42:32 2025 by rpki-client