This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft File: 70Ku0OkbI9DNy_skrIObDb5qoEs.mft (raw, json) Hash identifier: FJoe45eX3CYTUxpPZxnLPi6aCE0MRpOmqjAvoWCWvlY= Subject key identifier: 0A:5F:FD:44:84:6F:F4:3E:A3:39:EA:37:E9:4B:36:27:2D:07:C7:3E Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b Certificate serial: 019AF27681991DEB5339992A58C0D125C206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft Manifest number: 0CD7 Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: 70Ku0OkbI9DNy_skrIObDb5qoEs.crl (hash: JsdXl+zTguFiW7bat2xomZC0+WX8maajij+4y4ElTUg=) 2: FiLJrOB6VSbXcUW10ayq5u0-45c.roa (hash: SVzm6u7ARr2O1cZhcAUWJuayXj1RRfV/z3YIwyKiXZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:81:99:1d:eb:53:39:99:2a:58:c0:d1:25:c2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=0a5ffd44846ff43ea339ea37e94b36272d07c73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:6c:1c:bb:c5:7f:49:45:ba:6f:1f:cd:46: 80:fc:8a:03:3f:d2:c7:93:b3:c1:ba:65:3c:aa:33: 6d:f0:b0:64:24:20:75:d5:bc:da:b5:c9:19:9d:65: cd:82:f7:e0:5f:0d:de:27:1b:11:a6:b8:43:c7:89: 2f:f7:c2:ad:79:d0:e4:5f:d8:30:fb:51:13:a5:ed: 60:60:00:ba:07:ce:f1:a8:dc:3e:35:8a:6b:fb:b7: 08:35:54:54:7f:6e:ab:5b:27:fb:4a:1f:48:23:35: 3a:df:66:15:53:d6:8f:59:82:9c:6e:ac:93:ca:05: 08:71:b1:f5:48:1d:d6:26:d3:5c:16:80:da:2e:79: 90:4f:40:4a:81:0e:31:a3:6d:b0:70:f8:56:62:59: 5b:32:ba:5c:d6:6c:f7:75:53:f4:f6:94:a3:3b:f1: 97:37:4d:db:65:c1:5f:f3:b3:a5:3c:54:b2:da:44: ca:bb:db:53:bb:d2:39:9f:0c:e8:37:18:73:df:61: ad:b2:e1:99:6c:a4:e7:e7:74:bd:42:1a:f8:95:94: 3d:ee:3c:fb:4b:a9:5d:5b:cc:2a:ab:38:2a:a2:c8: 5c:b9:14:23:86:dd:39:8e:3e:b2:9e:d7:52:ec:66: 05:7f:e2:1a:00:54:82:52:a8:d1:b2:5b:51:3e:37: 65:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5F:FD:44:84:6F:F4:3E:A3:39:EA:37:E9:4B:36:27:2D:07:C7:3E X509v3 Authority Key Identifier: keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:7d:ce:f9:c8:12:a2:5e:a2:3c:f4:c9:27:6b:e2:48:73:98: e3:89:2f:07:33:df:b6:c9:a8:f8:e4:0a:73:9d:b0:80:9e:20: 15:e4:7d:5b:fd:65:9c:b6:a4:96:0a:db:bf:a5:f9:4b:9a:f4: aa:67:ad:62:1b:1e:92:32:d5:5d:a6:e6:8e:ce:e7:13:ca:c2: ae:a7:10:75:5b:08:d3:7e:bf:45:b2:56:66:f5:72:ad:4f:32: c7:c4:15:54:39:b2:e5:bc:36:3a:6a:af:54:97:8f:e1:6a:ec: 93:2a:9b:03:fe:32:74:95:30:21:db:9f:74:7a:72:2b:42:6c: 4f:4b:aa:53:04:cd:ef:c7:4f:53:ae:68:99:51:09:77:14:0b: f5:66:b3:2c:5e:2c:3d:e4:56:70:44:a9:50:e3:d9:ee:3f:72: a4:fb:99:3d:06:eb:52:4a:08:df:e3:67:68:ed:d9:fc:e1:2f: c4:c6:e5:48:67:22:0a:ba:37:10:2b:59:61:7d:08:70:60:10: 60:ab:3b:39:10:03:4e:41:0c:cc:5c:3f:9f:19:6e:45:da:d0: 17:d0:ce:6a:bd:44:ba:8c:97:c2:91:56:0c:b6:75:cd:58:03: 55:28:19:59:e9:79:46:92:fc:ab:9a:5a:cd:33:ba:2e:bc:8a: 34:93:ae:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoGZHetTOZkqWMDRJcIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDJhZWQwZTkxYjIzZDBjZGNiZmIyNGFjODM5YjBkYmU2 YWEwNGIwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD EygwYTVmZmQ0NDg0NmZmNDNlYTMzOWVhMzdlOTRiMzYyNzJkMDdjNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2xsHLvFf0lFum8fzUaA/IoDP9LH k7PBumU8qjNt8LBkJCB11bzatckZnWXNgvfgXw3eJxsRprhDx4kv98KtedDkX9gw +1ETpe1gYAC6B87xqNw+NYpr+7cINVRUf26rWyf7Sh9IIzU632YVU9aPWYKcbqyT ygUIcbH1SB3WJtNcFoDaLnmQT0BKgQ4xo22wcPhWYllbMrpc1mz3dVP09pSjO/GX N03bZcFf87OlPFSy2kTKu9tTu9I5nwzoNxhz32GtsuGZbKTn53S9Qhr4lZQ97jz7 S6ldW8wqqzgqoshcuRQjht05jj6yntdS7GYFf+IaAFSCUqjRsltRPjdl0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApf/USEb/Q+oznqN+lLNictB8c+MB8GA1UdIwQY MBaAFO9CrtDpGyPQzcv7JKyDmw2+aqBLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBLdTBPa2JJOUROeV9za3JJT2JEYjVxb0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iZDc1YTItZmM2ZS00YTg2LTllZGYt NjY5OTA5ZTExY2UzLzEvNzBLdTBPa2JJOUROeV9za3JJT2JEYjVxb0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iZDc1YTItZmM2ZS00YTg2LTllZGYtNjY5OTA5ZTExY2Uz LzEvNzBLdTBPa2JJOUROeV9za3JJT2JEYjVxb0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuX3O+cgS ol6iPPTJJ2viSHOY44kvBzPftsmo+OQKc52wgJ4gFeR9W/1lnLaklgrbv6X5S5r0 qmetYhsekjLVXabmjs7nE8rCrqcQdVsI036/RbJWZvVyrU8yx8QVVDmy5bw2Omqv VJeP4WrskyqbA/4ydJUwIdufdHpyK0JsT0uqUwTN78dPU65omVEJdxQL9WazLF4s PeRWcESpUOPZ7j9ypPuZPQbrUkoI3+NnaO3Z/OEvxMblSGciCro3ECtZYX0IcGAQ YKs7ORADTkEMzFw/nxluRdrQF9DOar1EuoyXwpFWDLZ1zVgDVSgZWel5RpL8q5pa zTO6LryKNJOubg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:16:36 2025 by rpki-client