This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json) Hash identifier: LUnZIquZ8yptKAtM8RTZY9PD9NYyEI9PiWBlKhuc8ZU= Subject key identifier: 4C:AE:4C:A2:2A:F5:78:05:B2:28:5E:A1:FC:1C:7E:59:87:22:03:43 Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae Certificate serial: 019BF2E282C7795F5CB114BA03C3CBB10560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 02:01:29 +0000 Manifest this update: Sun 25 Jan 2026 02:01:29 +0000 Manifest next update: Mon 26 Jan 2026 02:01:29 +0000 Files and hashes: 1: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: 9W2W2ajIt5nF3ot3E9Fp0QWP/5G8YQ8mNGd9YVTjIJc=) 2: H48g7J5f54HPKybnkF1vukenPZg.roa (hash: 7PtKxa4yT/qOjY0FqftHzwitC0sVsAtnedeT+OfYLcM=) 3: lRo9q02GzXTO-VdLgUyky_WucDQ.roa (hash: qdBqdNSlAa567AWHXHUkkyLxccIE0UG651WDqdBe+uA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:82:c7:79:5f:5c:b1:14:ba:03:c3:cb:b1:05:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae Validity Not Before: Jan 25 02:01:29 2026 GMT Not After : Jan 26 02:01:29 2026 GMT Subject: CN=4cae4ca22af57805b2285ea1fc1c7e5987220343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:7e:23:e4:73:b1:64:49:26:1f:cd:0b:e0: 2b:17:22:9f:4e:c9:a8:7c:36:77:58:e0:8f:7c:db: c5:9d:c4:c1:f9:c1:04:6a:a6:05:95:1c:5a:81:16: 41:65:fb:87:3a:33:92:8c:af:e5:79:e2:78:6a:9c: 6d:dc:f6:c3:a1:90:d2:78:2c:3f:ae:76:da:b6:f9: 3e:af:76:24:89:3a:e2:dc:19:78:20:88:99:95:05: 19:dc:07:24:72:67:c4:c1:b6:1f:54:6f:06:76:ef: 41:f0:b8:b4:36:e1:ca:9e:90:ca:72:e0:11:f0:57: 1f:ef:1e:01:83:9b:a1:9f:d6:fa:43:20:f5:4e:18: 46:71:bb:c3:84:80:72:47:57:f0:8b:7c:bc:1b:79: 40:52:0f:bf:26:b1:69:91:c6:d6:ac:d8:2d:83:87: 09:83:17:9b:bd:c5:e5:3e:3b:93:99:e1:5b:b5:1d: 66:6c:9f:17:b3:08:c0:22:63:91:fc:fd:06:a7:80: 56:26:d9:f9:9e:43:58:de:b9:0e:86:43:4a:42:f3: 0a:66:0f:4c:3c:a8:6b:63:95:0d:24:01:fa:36:6f: d9:2f:5b:95:0f:c1:bb:cd:72:f5:99:f3:a2:04:fc: 65:03:4f:7b:57:ec:50:0e:8f:97:20:1f:bf:cf:5a: ee:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AE:4C:A2:2A:F5:78:05:B2:28:5E:A1:FC:1C:7E:59:87:22:03:43 X509v3 Authority Key Identifier: keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:bd:39:88:a1:13:69:2d:6f:46:c7:b0:90:ae:d8:f2:10:e2: b4:25:89:01:f5:d7:f4:73:5d:65:c0:fd:3e:d0:c8:90:bc:e4: 67:df:99:db:10:c1:c8:4b:5d:95:83:0a:59:e2:ce:25:e0:00: ef:23:e1:c1:00:fc:de:fc:73:41:4d:5f:de:af:f8:0f:26:b4: b8:75:d8:4e:9b:ea:67:9b:03:e8:6a:87:1b:51:3b:18:16:7c: ee:5b:48:86:52:7a:bd:7f:f3:48:b2:1e:b5:01:b5:a3:1b:58: a8:cd:e2:9b:ff:00:55:08:49:69:9f:15:b5:60:b6:17:6e:0e: bb:15:1b:ff:e7:b5:42:00:89:ba:b6:2c:6d:c9:06:6a:f7:e0: 9a:8a:1f:eb:64:1b:99:8a:40:de:88:c5:c7:65:fd:da:4a:21: a6:b1:cb:a7:5d:cf:71:21:4f:80:96:dd:82:89:b2:07:05:17: ee:e2:b8:19:cf:cb:ff:49:ac:b2:86:cf:15:40:4f:3f:ec:80: 72:00:76:9b:44:3e:11:10:ad:20:e1:1b:4a:3e:62:82:e0:c5: 28:52:5c:d5:fc:0f:94:18:e7:35:85:ba:dc:0a:71:7e:42:9e: a6:6f:66:f4:ef:a3:6e:72:be:ef:b0:90:36:90:02:d5:91:38: 8b:79:d7:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4oLHeV9csRS6A8PLsQVgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDc3Y2EzYjQ0OWJiYzQxMjQ3ZThjOTIxZTRjOGRhYmZj MWFmYWUwHhcNMjYwMTI1MDIwMTI5WhcNMjYwMTI2MDIwMTI5WjAzMTEwLwYDVQQD Eyg0Y2FlNGNhMjJhZjU3ODA1YjIyODVlYTFmYzFjN2U1OTg3MjIwMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvt+I+RzsWRJJh/NC+ArFyKfTsmo fDZ3WOCPfNvFncTB+cEEaqYFlRxagRZBZfuHOjOSjK/leeJ4apxt3PbDoZDSeCw/ rnbatvk+r3YkiTri3Bl4IIiZlQUZ3AckcmfEwbYfVG8Gdu9B8Li0NuHKnpDKcuAR 8Fcf7x4Bg5uhn9b6QyD1ThhGcbvDhIByR1fwi3y8G3lAUg+/JrFpkcbWrNgtg4cJ gxebvcXlPjuTmeFbtR1mbJ8XswjAImOR/P0Gp4BWJtn5nkNY3rkOhkNKQvMKZg9M PKhrY5UNJAH6Nm/ZL1uVD8G7zXL1mfOiBPxlA097V+xQDo+XIB+/z1ruiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyuTKIq9XgFsiheofwcflmHIgNDMB8GA1UdIwQY MBaAFO9HfKO0SbvEEkfoySHkyNq/wa+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUt NjAzYWExZjIwOWQ4LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUtNjAzYWExZjIwOWQ4 LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAL05iKET aS1vRsewkK7Y8hDitCWJAfXX9HNdZcD9PtDIkLzkZ9+Z2xDByEtdlYMKWeLOJeAA 7yPhwQD83vxzQU1f3q/4Dya0uHXYTpvqZ5sD6GqHG1E7GBZ87ltIhlJ6vX/zSLIe tQG1oxtYqM3im/8AVQhJaZ8VtWC2F24OuxUb/+e1QgCJurYsbckGavfgmoof62Qb mYpA3ojFx2X92kohprHLp13PcSFPgJbdgomyBwUX7uK4Gc/L/0mssobPFUBPP+yA cgB2m0Q+ERCtIOEbSj5iguDFKFJc1fwPlBjnNYW63ApxfkKepm9m9O+jbnK+77CQ NpAC1ZE4i3nXOQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:29 2026 by rpki-client