This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json) Hash identifier: qlQLTEIv9cr9dOOjLD4UBgQoDiO0kTa0QuvstV2XfUk= Subject key identifier: C8:A8:00:0E:8A:6E:8C:7D:92:1B:5E:9B:29:A7:CF:26:CF:56:15:7D Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35 Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235 Certificate serial: 019B4AA7E332E3EF92E1CB90CD30CB32FBC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft Manifest number: 16D9 Signing time: Tue 23 Dec 2025 10:01:15 +0000 Manifest this update: Tue 23 Dec 2025 10:01:15 +0000 Manifest next update: Wed 24 Dec 2025 10:01:15 +0000 Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=) 2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: AF+H3d2oVc7fq/CyKBVtbsH0YpI4bre/ZnjQU1K/oro=) 3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:e3:32:e3:ef:92:e1:cb:90:cd:30:cb:32:fb:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235 Validity Not Before: Dec 23 10:01:15 2025 GMT Not After : Dec 24 10:01:15 2025 GMT Subject: CN=c8a8000e8a6e8c7d921b5e9b29a7cf26cf56157d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:14:68:07:ef:c8:72:a3:a2:2f:09:1a:7b:bb: 22:16:4d:d7:f4:c0:bb:d9:52:a4:35:0a:e9:f6:a8: 40:06:c8:93:4d:55:96:45:2b:ff:e5:94:e1:7f:44: 33:0d:56:9e:b9:7b:0f:70:5b:cb:a8:31:1c:5c:41: 50:ab:fc:e5:fa:d4:7d:cd:c1:7c:9c:a9:f6:ed:e7: 3c:82:de:05:74:b3:13:ce:9b:73:12:58:8b:98:de: be:05:26:87:a6:40:90:f2:5d:28:0a:ad:d4:60:5e: f9:c0:f3:ce:e0:6a:2a:c1:3b:89:0f:be:c1:a1:56: 57:6a:a0:b4:08:41:57:a6:fb:80:cb:4e:7e:ad:8c: fc:13:6a:d9:17:e5:0c:05:66:06:aa:9b:9a:a1:ff: 96:24:fe:e8:8c:82:98:f5:58:c6:f1:9c:80:ee:ac: 01:fd:a0:9e:67:02:41:1b:19:76:e6:de:1b:fa:b6: 90:39:ba:c2:72:16:ac:a5:7e:49:6d:85:8d:80:8e: 57:7a:8d:ae:a1:25:f8:f4:23:d3:4d:81:31:37:1c: a8:ac:90:b2:77:8a:73:f0:b3:b3:66:5a:63:f8:c2: 19:ea:c4:a7:69:49:7d:d7:77:59:59:5b:0f:7f:83: 08:26:8c:c2:09:40:c7:fe:ab:91:c5:6f:23:24:58: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A8:00:0E:8A:6E:8C:7D:92:1B:5E:9B:29:A7:CF:26:CF:56:15:7D X509v3 Authority Key Identifier: keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:5b:4b:fd:46:72:16:d7:17:f3:c2:40:eb:e2:7b:ad:3a:07: 5a:43:25:78:03:be:4c:7e:ad:c3:51:8a:83:d4:fa:9b:25:31: 3c:31:55:eb:0a:64:f9:8b:b3:3e:35:28:94:a5:7d:2a:a4:4d: 85:50:28:e4:46:b9:da:8b:44:f6:6c:1f:ac:da:58:d9:b4:d7: 98:4f:f2:a1:3f:d8:c5:ac:89:90:f5:5c:bd:9e:a6:93:c8:44: 19:c3:03:ac:43:d8:56:c1:e0:ae:22:f5:3c:a8:66:84:cf:28: 45:93:98:b5:a7:90:a9:42:f0:fc:39:12:6a:b5:b6:ec:20:f0: 53:ff:d5:2b:01:d8:60:f2:f3:fc:32:db:fe:1c:e9:1e:1b:7b: 0b:c3:73:58:40:ba:52:b5:e1:fa:03:0b:c7:f9:39:47:c4:56: 3e:a6:e2:cb:cf:28:f0:2e:b6:bf:e2:f2:ed:8a:22:c0:58:2e: 44:ba:75:98:f1:b2:a9:de:0f:5e:44:5a:33:2a:64:56:0f:05: 7b:10:51:b4:0b:3b:05:cd:aa:1a:2b:36:4e:f1:9a:42:66:f7: 1d:5d:5f:c8:0f:78:80:52:39:3d:40:2b:8c:47:b4:aa:c3:9e: 43:3a:0b:02:80:1d:fe:46:25:73:04:5e:14:25:ce:86:8d:be: 51:7b:2f:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp+My4++S4cuQzTDLMvvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhY2VmNDVmYmIwZjI2OTMwYWViODMzY2Y3OWZjNDFlMjJj YTkyMzUwHhcNMjUxMjIzMTAwMTE1WhcNMjUxMjI0MTAwMTE1WjAzMTEwLwYDVQQD EyhjOGE4MDAwZThhNmU4YzdkOTIxYjVlOWIyOWE3Y2YyNmNmNTYxNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxRoB+/IcqOiLwkae7siFk3X9MC7 2VKkNQrp9qhABsiTTVWWRSv/5ZThf0QzDVaeuXsPcFvLqDEcXEFQq/zl+tR9zcF8 nKn27ec8gt4FdLMTzptzEliLmN6+BSaHpkCQ8l0oCq3UYF75wPPO4GoqwTuJD77B oVZXaqC0CEFXpvuAy05+rYz8E2rZF+UMBWYGqpuaof+WJP7ojIKY9VjG8ZyA7qwB /aCeZwJBGxl25t4b+raQObrCchaspX5JbYWNgI5Xeo2uoSX49CPTTYExNxyorJCy d4pz8LOzZlpj+MIZ6sSnaUl913dZWVsPf4MIJozCCUDH/quRxW8jJFhdHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMioAA6Kbox9khtemymnzybPVhV9MB8GA1UdIwQY MBaAFErO9F+7DyaTCuuDPPefxB4iypI1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85N2ZiMzYtZWE5Yi00M2Y0LWFhZDUt MDZmNzI5MGRjNDRhLzEvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85N2ZiMzYtZWE5Yi00M2Y0LWFhZDUtMDZmNzI5MGRjNDRh LzEvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFtL/UZy FtcX88JA6+J7rToHWkMleAO+TH6tw1GKg9T6myUxPDFV6wpk+YuzPjUolKV9KqRN hVAo5Ea52otE9mwfrNpY2bTXmE/yoT/YxayJkPVcvZ6mk8hEGcMDrEPYVsHgriL1 PKhmhM8oRZOYtaeQqULw/DkSarW27CDwU//VKwHYYPLz/DLb/hzpHht7C8NzWEC6 UrXh+gMLx/k5R8RWPqbiy88o8C62v+Ly7YoiwFguRLp1mPGyqd4PXkRaMypkVg8F exBRtAs7Bc2qGis2TvGaQmb3HV1fyA94gFI5PUArjEe0qsOeQzoLAoAd/kYlcwRe FCXOho2+UXsv8Q== -----END CERTIFICATE-----Generated at Tue Dec 23 17:18:49 2025 by rpki-client