This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json) Hash identifier: r9jO7ciXvGzXIpG87K/5zRAzIwZsfIvlrO77yOE7ZuA= Subject key identifier: D1:C7:1B:A9:FD:E5:1D:75:26:4A:64:79:21:40:65:C6:30:83:5D:F1 Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27 Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127 Certificate serial: 019B5E9C1E6414A9167D4DF2F2A8BB2D3E67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 07:00:48 +0000 Manifest this update: Sat 27 Dec 2025 07:00:48 +0000 Manifest next update: Sun 28 Dec 2025 07:00:48 +0000 Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: bYoqaNBpRTqCiz78bjJekisQf6y6lGz6L5zWjgVFS78=) 2: W0KEQ42eAsjOaTiDlKrXfXSH1aw.roa (hash: MjWN2D0Y+IB6RDhAWue+MqeEjuWUWzQKaH29Oe4TfRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:1e:64:14:a9:16:7d:4d:f2:f2:a8:bb:2d:3e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127 Validity Not Before: Dec 27 07:00:48 2025 GMT Not After : Dec 28 07:00:48 2025 GMT Subject: CN=d1c71ba9fde51d75264a6479214065c630835df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f3:dd:48:b3:9d:cb:f6:af:9a:32:2b:85:3e: 54:a9:5f:4f:f0:23:c1:bf:65:95:34:f9:6e:d4:ab: cb:4c:93:9e:c1:50:45:2d:10:4d:2c:4d:35:b8:76: 9b:c3:7e:c6:5b:ec:55:e5:55:4c:8d:88:b6:d2:37: 68:35:36:ff:e6:10:e4:94:18:08:9c:44:cb:3e:66: 05:3c:ea:6a:e3:98:dd:6b:c2:a8:ae:9c:5b:14:0b: e4:2c:fc:38:bd:1a:68:76:68:ff:15:cf:45:58:e7: 35:fe:ab:0f:eb:f9:55:a7:74:ca:d4:f3:8a:f1:02: fd:57:4c:95:0d:90:31:f9:85:c5:7c:46:8b:25:b4: 29:3d:70:da:84:72:25:96:71:37:5f:62:fa:25:72: 79:67:72:bf:6a:58:e5:00:59:b3:f9:46:34:7e:76: 54:76:55:dc:63:f6:8a:45:ea:23:45:b7:bb:5e:4f: 8e:ad:df:7d:5e:0b:3e:30:61:50:fc:82:f2:77:94: 4c:23:8a:de:6b:6f:8c:e1:6f:59:18:81:59:d2:d7: 88:34:34:23:fb:99:af:32:08:1b:f7:6f:8e:6f:06: b1:e1:39:dd:05:fb:b2:71:7f:0a:36:a8:1e:71:36: 06:3d:05:3b:3b:b1:d0:07:98:eb:c7:a8:d0:d9:9d: 6e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C7:1B:A9:FD:E5:1D:75:26:4A:64:79:21:40:65:C6:30:83:5D:F1 X509v3 Authority Key Identifier: keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:7c:de:92:c3:59:f8:d4:33:42:5b:de:20:ef:18:36:89:84: 87:27:9d:3c:1b:83:45:ce:78:2e:64:91:88:2b:21:e2:a0:4d: 56:4a:0e:49:c0:e5:e5:69:a6:e1:87:91:7b:2a:0a:4e:a1:85: 08:74:63:b9:39:0c:33:5a:31:a4:4d:17:5c:22:8e:0c:f6:81: 65:e7:7f:36:0e:3d:17:70:0e:ab:2c:5b:f5:93:49:71:ee:69: 2e:35:ec:88:b7:f4:6c:66:06:5b:44:5e:44:4d:24:ac:74:ab: d2:12:a1:97:17:f2:33:20:b3:ff:77:9d:5a:16:5e:b7:b7:dd: c2:e2:1f:f7:27:55:0a:eb:f3:41:ab:be:97:a1:a3:38:c8:3a: 99:3b:b6:49:54:cf:1e:8b:33:21:7e:a1:ae:a5:0e:6b:33:21: 4c:b8:88:f2:5f:46:6b:35:24:d8:2b:c6:d2:b0:ad:b9:7a:12: b8:71:3f:bf:e0:c4:94:ee:fc:43:55:9e:3f:9a:fe:78:8b:ae: 83:cc:ae:71:3a:b4:33:d7:5c:a1:d7:57:aa:0b:64:59:fc:1f: 16:bf:71:2b:98:90:b1:ba:c4:02:ec:a5:53:ff:03:9a:88:fb: 94:a4:73:5b:80:b1:b0:b7:48:1b:a3:bd:6c:a0:c5:c0:cf:c6: eb:3b:49:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenB5kFKkWfU3y8qi7LT5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDQwZTEzY2QyNjExMmNjYjU5NTE3NjBmY2ZiMmQ0OTE2 ZDcxMjcwHhcNMjUxMjI3MDcwMDQ4WhcNMjUxMjI4MDcwMDQ4WjAzMTEwLwYDVQQD EyhkMWM3MWJhOWZkZTUxZDc1MjY0YTY0NzkyMTQwNjVjNjMwODM1ZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/PdSLOdy/avmjIrhT5UqV9P8CPB v2WVNPlu1KvLTJOewVBFLRBNLE01uHabw37GW+xV5VVMjYi20jdoNTb/5hDklBgI nETLPmYFPOpq45jda8KorpxbFAvkLPw4vRpodmj/Fc9FWOc1/qsP6/lVp3TK1POK 8QL9V0yVDZAx+YXFfEaLJbQpPXDahHIllnE3X2L6JXJ5Z3K/aljlAFmz+UY0fnZU dlXcY/aKReojRbe7Xk+Ord99Xgs+MGFQ/ILyd5RMI4rea2+M4W9ZGIFZ0teINDQj +5mvMggb92+Obwax4TndBfuycX8KNqgecTYGPQU7O7HQB5jrx6jQ2Z1uRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHHG6n95R11JkpkeSFAZcYwg13xMB8GA1UdIwQY MBaAFO9EDhPNJhEsy1lRdg/PstSRbXEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDkt N2E4MzY4MDBlOWY3LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDktN2E4MzY4MDBlOWY3 LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXzeksNZ +NQzQlveIO8YNomEhyedPBuDRc54LmSRiCsh4qBNVkoOScDl5Wmm4YeReyoKTqGF CHRjuTkMM1oxpE0XXCKODPaBZed/Ng49F3AOqyxb9ZNJce5pLjXsiLf0bGYGW0Re RE0krHSr0hKhlxfyMyCz/3edWhZet7fdwuIf9ydVCuvzQau+l6GjOMg6mTu2SVTP HoszIX6hrqUOazMhTLiI8l9GazUk2CvG0rCtuXoSuHE/v+DElO78Q1WeP5r+eIuu g8yucTq0M9dcoddXqgtkWfwfFr9xK5iQsbrEAuylU/8Dmoj7lKRzW4CxsLdIG6O9 bKDFwM/G6ztJCw== -----END CERTIFICATE-----Generated at Sat Dec 27 15:40:58 2025 by rpki-client