This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json) Hash identifier: BUY4/WtwmzGFQzWhhe+2qnRbbQiA5eBd9bU5V4QioME= Subject key identifier: 79:49:AC:5B:D9:A3:11:E2:A6:2E:E9:CF:2E:6C:63:E4:B5:E7:A2:B9 Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27 Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127 Certificate serial: 019B495DFF179E8448F603A9A61522C43E87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 04:00:55 +0000 Manifest this update: Tue 23 Dec 2025 04:00:55 +0000 Manifest next update: Wed 24 Dec 2025 04:00:55 +0000 Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: O/mcb427xKQoQaFPdufxwaTLsWFXIGqxMQhxSaVCeXI=) 2: W0KEQ42eAsjOaTiDlKrXfXSH1aw.roa (hash: MjWN2D0Y+IB6RDhAWue+MqeEjuWUWzQKaH29Oe4TfRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:ff:17:9e:84:48:f6:03:a9:a6:15:22:c4:3e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127 Validity Not Before: Dec 23 04:00:55 2025 GMT Not After : Dec 24 04:00:55 2025 GMT Subject: CN=7949ac5bd9a311e2a62ee9cf2e6c63e4b5e7a2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:18:93:81:93:13:66:2f:5c:fc:ed:80:3f: 67:28:1c:c8:c0:3e:e6:2e:ba:8d:6a:8c:20:43:ea: 92:eb:31:65:d8:44:69:48:04:4f:9c:9f:a7:5e:42: a8:0a:eb:de:3f:d3:0e:0c:87:86:a3:e9:70:a2:e0: 9b:3f:bb:16:fc:12:a4:fb:ae:e7:3f:df:ac:28:e7: db:33:1b:f3:2d:4d:07:d6:aa:a8:85:c9:6d:03:db: f1:f4:ee:b4:2d:41:a6:ed:ce:53:42:7d:2b:20:81: 31:91:10:de:a1:0b:38:99:da:ce:08:79:7c:75:de: ef:03:c0:c2:40:59:52:37:39:0b:f7:e8:dc:40:7a: 63:ca:73:54:7e:21:65:4d:fb:af:8c:0d:43:5e:31: 6c:5e:92:7d:9c:62:92:35:cc:9a:f0:d4:75:64:53: 73:f3:7a:69:76:46:dc:74:ac:76:37:a0:ea:dc:26: e8:cb:6a:80:11:08:72:81:c5:b6:53:5b:e9:ca:86: 72:18:1f:8c:14:49:96:bb:a2:fa:cb:4d:74:e4:68: 14:c4:0b:b0:20:15:e3:17:9b:94:15:ee:09:dd:24: d5:72:2f:70:42:04:6c:41:a0:96:bd:b6:12:84:54: 74:e7:be:e0:15:6c:37:22:d1:1e:35:ec:d1:c5:c9: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:49:AC:5B:D9:A3:11:E2:A6:2E:E9:CF:2E:6C:63:E4:B5:E7:A2:B9 X509v3 Authority Key Identifier: keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6f:f8:82:02:2c:ab:6a:ff:30:13:ac:49:45:a4:0e:d6:e7: c2:ec:c3:7e:d1:0b:b5:c0:51:28:b6:a4:59:fd:68:bd:ac:d0: 09:d7:10:54:16:ea:52:0a:1b:4b:51:ae:e2:d0:60:fd:2b:9f: ab:9b:85:b8:4f:08:6b:74:0d:c8:cc:92:ad:3c:0b:9f:1c:5c: 56:0f:56:23:f7:fe:0e:4d:f9:d6:44:90:17:f0:58:01:8d:30: 37:0a:64:ea:79:2e:4e:40:16:96:38:98:54:10:f8:9e:65:87: da:ef:d6:47:bd:b8:57:45:d7:26:bd:66:dd:f1:73:06:d5:82: 9d:9b:c1:60:ac:e6:d3:37:f3:71:f6:02:88:34:94:a5:80:ba: 76:0a:ed:3f:54:7d:10:89:10:74:da:d9:57:ee:24:94:4c:4d: 21:aa:3e:e4:71:68:ab:c7:78:f6:38:48:03:c3:c4:da:25:99: 62:60:d8:d5:fc:4f:a4:36:ee:1f:99:a3:dc:80:d0:38:5a:0e: 0a:e3:42:77:75:b0:43:e6:26:25:92:b6:fd:b4:d4:59:27:55: 08:86:b3:43:5f:17:55:f9:31:4b:a3:1e:29:45:bb:10:52:48: 07:f1:9f:3c:5a:93:25:49:d0:78:0d:e6:cb:ae:03:f5:b8:d8: 03:92:f1:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXf8XnoRI9gOpphUixD6HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDQwZTEzY2QyNjExMmNjYjU5NTE3NjBmY2ZiMmQ0OTE2 ZDcxMjcwHhcNMjUxMjIzMDQwMDU1WhcNMjUxMjI0MDQwMDU1WjAzMTEwLwYDVQQD Eyg3OTQ5YWM1YmQ5YTMxMWUyYTYyZWU5Y2YyZTZjNjNlNGI1ZTdhMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PcYk4GTE2YvXPztgD9nKBzIwD7m LrqNaowgQ+qS6zFl2ERpSARPnJ+nXkKoCuveP9MODIeGo+lwouCbP7sW/BKk+67n P9+sKOfbMxvzLU0H1qqohcltA9vx9O60LUGm7c5TQn0rIIExkRDeoQs4mdrOCHl8 dd7vA8DCQFlSNzkL9+jcQHpjynNUfiFlTfuvjA1DXjFsXpJ9nGKSNcya8NR1ZFNz 83ppdkbcdKx2N6Dq3Cboy2qAEQhygcW2U1vpyoZyGB+MFEmWu6L6y0105GgUxAuw IBXjF5uUFe4J3STVci9wQgRsQaCWvbYShFR0577gFWw3ItEeNezRxclStwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlJrFvZoxHipi7pzy5sY+S156K5MB8GA1UdIwQY MBaAFO9EDhPNJhEsy1lRdg/PstSRbXEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDkt N2E4MzY4MDBlOWY3LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDktN2E4MzY4MDBlOWY3 LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2/4ggIs q2r/MBOsSUWkDtbnwuzDftELtcBRKLakWf1ovazQCdcQVBbqUgobS1Gu4tBg/Suf q5uFuE8Ia3QNyMySrTwLnxxcVg9WI/f+Dk351kSQF/BYAY0wNwpk6nkuTkAWljiY VBD4nmWH2u/WR724V0XXJr1m3fFzBtWCnZvBYKzm0zfzcfYCiDSUpYC6dgrtP1R9 EIkQdNrZV+4klExNIao+5HFoq8d49jhIA8PE2iWZYmDY1fxPpDbuH5mj3IDQOFoO CuNCd3WwQ+YmJZK2/bTUWSdVCIazQ18XVfkxS6MeKUW7EFJIB/GfPFqTJUnQeA3m y64D9bjYA5LxDg== -----END CERTIFICATE-----Generated at Tue Dec 23 12:45:12 2025 by rpki-client