This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json) Hash identifier: iWjnwwKF930CUbXNJUmlRtIXOaoVCqxpQV0EAydww70= Subject key identifier: 9C:81:C7:4F:DF:6E:78:BF:24:83:8E:82:84:9D:21:19:BB:D5:70:33 Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df Certificate serial: 019B51BC0A3C256B3929F6156BFAFDE21043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft Manifest number: 0F2E Signing time: Wed 24 Dec 2025 19:00:36 +0000 Manifest this update: Wed 24 Dec 2025 19:00:36 +0000 Manifest next update: Thu 25 Dec 2025 19:00:36 +0000 Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=) 2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: 5pODDqp6Zi1kKojATkumvgZBxBmg1fC4/UPCxOFrbzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:0a:3c:25:6b:39:29:f6:15:6b:fa:fd:e2:10:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df Validity Not Before: Dec 24 19:00:36 2025 GMT Not After : Dec 25 19:00:36 2025 GMT Subject: CN=9c81c74fdf6e78bf24838e82849d2119bbd57033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:23:f3:de:48:d3:db:fe:c1:26:93:00:60: 73:f0:fc:dd:8c:ae:6f:a1:12:12:60:38:f0:ec:9c: db:f9:80:8f:29:e7:10:a8:ab:49:1d:d6:99:af:37: c6:80:7b:69:5e:b5:7b:9d:07:dd:4b:f1:05:4d:d3: 4e:04:24:cb:1c:42:16:db:8b:58:da:73:85:3f:6e: 7f:48:dc:eb:b4:6d:55:1a:5c:0e:7e:62:11:7e:dc: c4:e0:8c:4c:37:57:48:6a:58:7f:a4:77:90:ef:60: 1e:f6:6c:73:40:e4:ed:e9:2e:d2:ff:ac:4f:70:43: 2c:bd:d2:a4:d4:30:b0:b9:2b:07:3b:b9:6e:ad:59: bf:6a:54:83:1e:41:a8:92:10:c0:f4:d5:f3:c5:e4: 71:f9:c2:b6:e1:de:96:86:49:9f:ba:d8:48:6a:4e: 3e:57:8a:73:60:d1:16:03:1d:30:10:72:27:5e:60: ec:a2:df:51:0d:cc:f9:11:1e:e3:40:8a:67:7f:2e: 2f:38:f7:94:9a:05:7d:3d:97:21:f8:79:3b:8c:7d: 28:22:c1:ab:d1:03:f4:48:78:19:67:36:6e:41:19: 3f:9b:6c:f6:1a:0b:5b:a8:37:ff:f1:bf:92:39:87: 24:3b:f9:72:7e:ee:21:07:6d:91:5f:ea:13:8a:3d: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:81:C7:4F:DF:6E:78:BF:24:83:8E:82:84:9D:21:19:BB:D5:70:33 X509v3 Authority Key Identifier: keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f1:21:25:24:0a:e7:dc:d9:20:10:d1:f3:c9:ac:c6:aa:40: 55:22:d8:e2:83:b2:c3:6f:93:8b:55:6a:72:3d:43:64:b0:ed: 0f:e6:b9:1c:b9:56:8d:3c:22:33:c2:c2:ba:89:35:3c:98:65: cb:b7:1d:93:3d:ed:6a:cf:88:67:06:6f:3e:35:b3:1b:ab:29: cc:ab:e4:58:3f:65:77:96:a5:0c:f5:0e:1d:24:84:f0:4d:ac: cd:6e:cd:e6:b6:bc:98:90:3a:14:bf:e9:b1:ab:23:aa:ca:30: b8:31:b2:64:09:6a:20:3d:71:a3:11:13:40:a7:74:f0:c5:a2: 5e:6d:f3:63:fb:42:4d:8f:ad:c7:45:cd:6a:82:6b:aa:67:d9: 21:29:92:40:69:f9:09:da:32:12:28:2e:70:e7:2a:4b:5c:5e: 59:86:84:a9:1e:a6:15:bc:2a:85:2f:09:14:51:11:42:3e:cf: 09:b4:0a:8b:43:c5:56:00:f3:12:60:6d:3e:6c:56:da:86:18: af:9e:cc:58:e9:93:5a:6b:fd:98:3e:06:f2:66:7c:3c:6a:82: ec:ec:3b:94:a1:5e:77:8e:19:51:ae:90:e4:84:99:82:08:e8: 87:a0:28:3b:38:ea:47:1d:7e:cf:60:42:85:4b:2c:65:61:f0: 33:b8:e4:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvAo8JWs5KfYVa/r94hBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYmQwNDYxOWEyZTE2OGFjOTU3NTIyZWRmZjAyMmY5MGJj MGE0ZGYwHhcNMjUxMjI0MTkwMDM2WhcNMjUxMjI1MTkwMDM2WjAzMTEwLwYDVQQD Eyg5YzgxYzc0ZmRmNmU3OGJmMjQ4MzhlODI4NDlkMjExOWJiZDU3MDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Uj895I09v+wSaTAGBz8PzdjK5v oRISYDjw7Jzb+YCPKecQqKtJHdaZrzfGgHtpXrV7nQfdS/EFTdNOBCTLHEIW24tY 2nOFP25/SNzrtG1VGlwOfmIRftzE4IxMN1dIalh/pHeQ72Ae9mxzQOTt6S7S/6xP cEMsvdKk1DCwuSsHO7lurVm/alSDHkGokhDA9NXzxeRx+cK24d6WhkmfuthIak4+ V4pzYNEWAx0wEHInXmDsot9RDcz5ER7jQIpnfy4vOPeUmgV9PZch+Hk7jH0oIsGr 0QP0SHgZZzZuQRk/m2z2GgtbqDf/8b+SOYckO/lyfu4hB22RX+oTij3ibQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyBx0/fbni/JIOOgoSdIRm71XAzMB8GA1UdIwQY MBaAFEu9BGGaLhaKyVdSLt/wIvkLwKTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mZDkyY2MtNGZmNC00OTU3LTg4OTgt MmZhZjUzODNiNTA1LzEvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mZDkyY2MtNGZmNC00OTU3LTg4OTgtMmZhZjUzODNiNTA1 LzEvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivEhJSQK 59zZIBDR88msxqpAVSLY4oOyw2+Ti1Vqcj1DZLDtD+a5HLlWjTwiM8LCuok1PJhl y7cdkz3tas+IZwZvPjWzG6spzKvkWD9ld5alDPUOHSSE8E2szW7N5ra8mJA6FL/p sasjqsowuDGyZAlqID1xoxETQKd08MWiXm3zY/tCTY+tx0XNaoJrqmfZISmSQGn5 CdoyEigucOcqS1xeWYaEqR6mFbwqhS8JFFERQj7PCbQKi0PFVgDzEmBtPmxW2oYY r57MWOmTWmv9mD4G8mZ8PGqC7Ow7lKFed44ZUa6Q5ISZggjoh6AoOzjqRx1+z2BC hUssZWHwM7jkdA== -----END CERTIFICATE-----Generated at Thu Dec 25 01:22:04 2025 by rpki-client