This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json) Hash identifier: WzZiEh9EmjaSm6VCU7xSTn8pS/623ecf7E9SacRXfOc= Subject key identifier: 2B:D0:97:39:84:42:F2:F1:F6:89:3F:BB:B9:F6:11:B3:8F:9A:B1:A9 Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25 Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725 Certificate serial: 019B3B3455A65612FB92B593AAE9205CC061 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft Manifest number: 0BB0 Signing time: Sat 20 Dec 2025 10:00:44 +0000 Manifest this update: Sat 20 Dec 2025 10:00:44 +0000 Manifest next update: Sun 21 Dec 2025 10:00:44 +0000 Files and hashes: 1: 2JA-ZwNyhJfjy4iRgBz6O7qcilU.roa (hash: CuX1HDub6jnp4XmLQgh/JslHvidglBPgi73piILRqao=) 2: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: vLK+Lgvol6BClJN2mTVxUUMrSGURCd0aZUOq0tY9edI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:55:a6:56:12:fb:92:b5:93:aa:e9:20:5c:c0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725 Validity Not Before: Dec 20 10:00:44 2025 GMT Not After : Dec 21 10:00:44 2025 GMT Subject: CN=2bd097398442f2f1f6893fbbb9f611b38f9ab1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:f2:13:f1:2e:e3:d5:5c:9e:c5:6c:75:71: 7d:a9:81:2f:50:2a:96:16:c7:8c:18:5d:fb:e2:6b: 8a:13:39:4a:69:da:81:7a:77:a4:ec:a0:41:f2:34: ba:86:04:5d:b0:b8:df:3d:5e:dd:c7:3f:41:58:b4: ea:09:d8:2a:f3:d3:e9:be:a2:85:53:c3:63:fa:6f: 9b:ed:5a:02:c3:4b:b9:c1:a8:34:cc:1f:b1:cf:f7: dc:60:0f:94:0e:7e:0a:33:1f:77:d0:e1:a4:0f:60: 51:69:e9:4a:36:f6:70:2e:69:40:e9:1d:82:70:7b: 91:b8:f2:62:0c:32:57:7e:a9:98:5c:85:c4:0a:b6: 19:f2:1c:b9:92:1c:95:5e:ca:60:2d:3a:cd:43:d4: 5d:67:ab:17:93:e8:0a:f9:5a:16:84:83:ca:fa:a2: 95:bb:d1:08:f9:d5:f9:d4:d7:6b:18:ff:09:db:a9: b6:99:99:2c:83:50:58:34:cc:0a:c4:1b:20:9e:72: 54:46:1f:ba:8b:7b:02:66:49:44:fa:16:40:5e:a9: 31:ff:f8:90:85:9b:5b:31:53:43:ea:2a:da:4d:86: fa:62:2f:1a:ea:4a:2d:45:33:12:5b:65:0b:62:94: 08:f2:f0:f4:f7:a8:24:63:24:12:e6:95:83:90:de: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D0:97:39:84:42:F2:F1:F6:89:3F:BB:B9:F6:11:B3:8F:9A:B1:A9 X509v3 Authority Key Identifier: keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:73:33:de:2c:3c:47:fe:3f:87:00:ca:c1:0a:db:7a:e4:98: ee:77:2f:36:73:74:d6:2a:51:28:a0:b1:a5:24:0c:96:9f:db: 9a:96:d1:f8:fb:75:08:75:6e:96:25:fa:4e:6d:c6:4e:1e:2f: e8:38:bc:47:dd:d9:4a:52:d1:29:9e:ca:e6:92:c8:00:cc:0f: 1a:fa:be:d5:7e:a8:3d:b7:8d:0f:92:64:31:9b:0e:26:25:af: bf:62:65:66:df:59:3a:9c:c8:0f:c8:31:08:de:9b:d0:e5:92: 50:32:24:ef:2a:f9:c7:07:98:81:fa:ff:cf:96:0e:1c:c0:2e: 6c:39:ab:2a:31:d4:b6:66:5a:70:56:c1:9e:e5:b0:21:ef:30: 31:f1:9f:7e:f0:22:04:97:3b:ec:4d:d6:9d:cd:58:c4:2a:24: c7:e1:73:6a:77:6f:d7:38:9a:5e:f7:fe:51:8d:10:2c:48:6e: 8e:f0:24:da:07:7c:f4:72:ff:1f:06:d7:52:a5:56:77:e6:84: 74:b2:1f:9d:a3:18:4e:50:7d:49:33:f0:82:d8:d9:b5:53:de: 5c:56:82:e7:c7:8d:3c:f9:36:4e:65:22:06:33:a3:41:39:31: 7b:55:ec:93:de:98:86:6e:bf:8b:17:41:3d:58:50:a4:8c:1e: dc:20:5d:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NFWmVhL7krWTqukgXMBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDljYWMxNTFkYjE1OGVkNmE4NTYzMzU4NTU1NTdmNGU3 NWY3MjUwHhcNMjUxMjIwMTAwMDQ0WhcNMjUxMjIxMTAwMDQ0WjAzMTEwLwYDVQQD EygyYmQwOTczOTg0NDJmMmYxZjY4OTNmYmJiOWY2MTFiMzhmOWFiMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6fyE/Eu49VcnsVsdXF9qYEvUCqW FseMGF374muKEzlKadqBenek7KBB8jS6hgRdsLjfPV7dxz9BWLTqCdgq89PpvqKF U8Nj+m+b7VoCw0u5wag0zB+xz/fcYA+UDn4KMx930OGkD2BRaelKNvZwLmlA6R2C cHuRuPJiDDJXfqmYXIXECrYZ8hy5khyVXspgLTrNQ9RdZ6sXk+gK+VoWhIPK+qKV u9EI+dX51NdrGP8J26m2mZksg1BYNMwKxBsgnnJURh+6i3sCZklE+hZAXqkx//iQ hZtbMVND6iraTYb6Yi8a6kotRTMSW2ULYpQI8vD096gkYyQS5pWDkN6vnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvQlzmEQvLx9ok/u7n2EbOPmrGpMB8GA1UdIwQY MBaAFO9JysFR2xWO1qhWM1hVVX9OdfclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2It ZDhhN2EyY2M4NzNiLzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2ItZDhhN2EyY2M4NzNi LzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHMz3iw8 R/4/hwDKwQrbeuSY7ncvNnN01ipRKKCxpSQMlp/bmpbR+Pt1CHVuliX6Tm3GTh4v 6Di8R93ZSlLRKZ7K5pLIAMwPGvq+1X6oPbeND5JkMZsOJiWvv2JlZt9ZOpzID8gx CN6b0OWSUDIk7yr5xweYgfr/z5YOHMAubDmrKjHUtmZacFbBnuWwIe8wMfGffvAi BJc77E3Wnc1YxCokx+Fzandv1ziaXvf+UY0QLEhujvAk2gd89HL/HwbXUqVWd+aE dLIfnaMYTlB9STPwgtjZtVPeXFaC58eNPPk2TmUiBjOjQTkxe1Xsk96Yhm6/ixdB PVhQpIwe3CBdxg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:28:01 2025 by rpki-client