This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json) Hash identifier: 4mjob2CSXkPaZfJyUdOMB6fEeiZHoRvbGF2uQ+2Vu3s= Subject key identifier: D4:75:74:A1:C5:16:F2:3B:31:B4:E5:0D:1E:3B:17:70:B3:27:6C:95 Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27 Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127 Certificate serial: 019AF276B5959E0D0FDAACAC69A0F0EA10B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:57 +0000 Manifest this update: Sat 06 Dec 2025 07:00:57 +0000 Manifest next update: Sun 07 Dec 2025 07:00:57 +0000 Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: eNi0IGPw1rdUd3lFD/JxHD4hpLJ/rNWuxsBM6QOP5c8=) 2: W0KEQ42eAsjOaTiDlKrXfXSH1aw.roa (hash: MjWN2D0Y+IB6RDhAWue+MqeEjuWUWzQKaH29Oe4TfRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b5:95:9e:0d:0f:da:ac:ac:69:a0:f0:ea:10:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127 Validity Not Before: Dec 6 07:00:57 2025 GMT Not After : Dec 7 07:00:57 2025 GMT Subject: CN=d47574a1c516f23b31b4e50d1e3b1770b3276c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:f5:30:8b:d7:d7:5b:54:1a:b1:ca:52:13: 4c:4e:09:4a:78:e8:c4:43:f5:cb:d1:33:b3:3d:c0: 4a:f3:fb:b4:db:81:07:d2:b8:77:5e:a3:01:cf:f8: 57:43:1c:67:ca:e2:2b:19:b6:04:d1:43:23:d8:bc: 7b:0d:c2:fd:dd:b2:f7:86:04:fb:86:8d:10:3e:b2: e8:0c:0d:d1:d8:16:55:4b:fd:9d:2a:f3:a8:dc:ef: 9f:cd:11:26:16:ac:4e:cd:11:63:a8:00:72:dd:a0: f7:f0:34:cf:be:58:fa:c3:a2:23:51:d4:85:2d:a0: 70:8b:12:ca:30:1b:62:c4:79:c5:61:dd:36:62:c5: 7e:15:37:6d:8d:31:c4:0d:db:94:e5:5b:b3:9f:51: 3f:05:36:e1:99:e8:a3:d4:c9:70:ec:ce:aa:75:a6: 82:3d:29:ff:f0:a2:9e:0f:db:2a:ae:65:f0:c4:d1: 18:87:61:21:09:94:ff:d1:68:ef:ad:62:6b:4a:1c: ad:c5:57:a9:e4:ab:89:70:01:c9:40:1a:1a:99:3b: f2:5e:c0:51:52:f8:06:59:75:e6:f6:32:30:a4:a5: ae:ae:0c:55:36:83:47:33:13:6d:b4:40:a7:9e:5d: 92:82:e6:03:60:fd:a0:ce:16:1e:23:19:02:d3:81: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:75:74:A1:C5:16:F2:3B:31:B4:E5:0D:1E:3B:17:70:B3:27:6C:95 X509v3 Authority Key Identifier: keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a4:93:33:4a:76:1b:80:82:b3:32:db:21:a7:8e:a4:44:9f: 43:26:41:66:e6:96:16:41:f5:a8:15:cc:b7:6b:42:7e:cc:09: a2:b3:85:7a:13:68:80:7b:13:3e:2a:9d:5d:ae:72:2c:6e:dd: 3b:67:52:e4:a3:bd:9d:12:87:e2:ee:fb:06:f6:b7:e1:e8:b4: 4a:0b:05:48:2b:b3:83:26:77:2e:ed:f0:4e:f9:64:ed:3e:8e: 1d:77:80:7f:8e:a8:04:b0:46:84:47:c9:2d:d0:d8:00:cf:eb: 16:79:4d:d4:97:a5:59:9c:6c:f7:ae:76:5b:fc:12:6d:ac:4e: 0c:7c:fc:80:7c:57:1d:67:51:fa:6b:fc:03:ff:d2:9e:11:c1: 9b:d6:1a:25:bb:c2:70:b9:f7:21:61:bb:b0:86:e8:52:6f:6a: 0d:5a:2f:3f:6c:8e:1a:ab:ac:b3:bb:1a:00:19:8c:99:17:c4: c7:53:b0:bf:a7:5b:7f:d3:c5:fb:84:a7:4e:db:96:b1:6c:65: 69:8e:60:bd:f2:96:5d:de:b6:99:21:cb:5e:42:73:57:81:da: 00:d2:c3:cd:ac:ff:5d:5e:32:14:e6:93:fb:7d:c6:32:3c:be: 11:14:40:8c:58:91:6f:bd:00:46:fe:1f:39:67:be:2f:cf:5c: 30:9d:2c:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrWVng0P2qysaaDw6hC0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDQwZTEzY2QyNjExMmNjYjU5NTE3NjBmY2ZiMmQ0OTE2 ZDcxMjcwHhcNMjUxMjA2MDcwMDU3WhcNMjUxMjA3MDcwMDU3WjAzMTEwLwYDVQQD EyhkNDc1NzRhMWM1MTZmMjNiMzFiNGU1MGQxZTNiMTc3MGIzMjc2Yzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9H1MIvX11tUGrHKUhNMTglKeOjE Q/XL0TOzPcBK8/u024EH0rh3XqMBz/hXQxxnyuIrGbYE0UMj2Lx7DcL93bL3hgT7 ho0QPrLoDA3R2BZVS/2dKvOo3O+fzREmFqxOzRFjqABy3aD38DTPvlj6w6IjUdSF LaBwixLKMBtixHnFYd02YsV+FTdtjTHEDduU5Vuzn1E/BTbhmeij1Mlw7M6qdaaC PSn/8KKeD9sqrmXwxNEYh2EhCZT/0WjvrWJrShytxVep5KuJcAHJQBoamTvyXsBR UvgGWXXm9jIwpKWurgxVNoNHMxNttECnnl2SguYDYP2gzhYeIxkC04HoSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNR1dKHFFvI7MbTlDR47F3CzJ2yVMB8GA1UdIwQY MBaAFO9EDhPNJhEsy1lRdg/PstSRbXEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDkt N2E4MzY4MDBlOWY3LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81OTgzMWItZGU4YS00MGFjLWE5NDktN2E4MzY4MDBlOWY3 LzEvNzBRT0U4MG1FU3pMV1ZGMkQ4LXkxSkZ0Y1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKSTM0p2 G4CCszLbIaeOpESfQyZBZuaWFkH1qBXMt2tCfswJorOFehNogHsTPiqdXa5yLG7d O2dS5KO9nRKH4u77Bva34ei0SgsFSCuzgyZ3Lu3wTvlk7T6OHXeAf46oBLBGhEfJ LdDYAM/rFnlN1JelWZxs9652W/wSbaxODHz8gHxXHWdR+mv8A//SnhHBm9YaJbvC cLn3IWG7sIboUm9qDVovP2yOGquss7saABmMmRfEx1Owv6dbf9PF+4SnTtuWsWxl aY5gvfKWXd62mSHLXkJzV4HaANLDzaz/XV4yFOaT+33GMjy+ERRAjFiRb70ARv4f OWe+L89cMJ0s2w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:22 2025 by rpki-client