This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json) Hash identifier: fdD7bKYTfQiUD2kE9G4izukYGpPGogp2mKz4bIwXCGA= Subject key identifier: 51:12:5D:89:FD:AF:C2:DB:46:06:20:11:13:8C:2A:BD:9C:89:8E:B7 Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25 Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725 Certificate serial: 019AF1D256E880323EC45A508CDACFD1DD6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft Manifest number: 0B8A Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: 2JA-ZwNyhJfjy4iRgBz6O7qcilU.roa (hash: CuX1HDub6jnp4XmLQgh/JslHvidglBPgi73piILRqao=) 2: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: fS7+whONrbtqrKs/74Sz0kAfom/+kuZBvTtOx0+tCZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:56:e8:80:32:3e:c4:5a:50:8c:da:cf:d1:dd:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725 Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=51125d89fdafc2db46062011138c2abd9c898eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:d8:04:55:22:49:23:31:56:30:72:6f:c8: 5c:fe:ce:69:33:71:92:8b:20:ae:3e:8a:c1:f5:2c: ae:05:d5:f0:16:52:2b:07:29:b5:fd:85:92:47:df: 58:2c:08:49:ac:f4:5e:5d:f2:62:00:bf:95:66:75: c2:5e:41:66:5e:fb:94:14:45:27:8d:30:cb:af:2c: 8a:64:50:5e:38:7f:f0:64:0e:30:0a:a4:f6:da:2f: 64:c3:c0:f5:72:bf:c7:5c:44:ae:e6:42:01:31:a8: 36:42:63:c5:21:48:40:c3:c8:70:ea:69:d3:db:23: 38:dd:60:8b:10:b2:d6:29:b9:de:09:66:47:67:52: 03:71:3c:e5:0b:89:a9:7b:2b:35:7d:08:79:e5:0c: ab:52:5b:c9:07:80:7e:37:c6:e2:3f:3e:53:7e:da: 89:8a:52:a5:61:31:98:53:a0:ee:88:ed:13:04:3f: 0d:78:c7:09:4f:c4:a2:49:76:6c:28:85:47:e9:9f: 8d:af:58:34:c8:cb:32:43:ae:f0:02:1e:0c:f2:a3: a4:fc:42:ee:6f:cb:71:c0:7c:93:10:e7:74:95:81: 9c:12:62:66:ab:b3:2f:a1:f1:3f:24:f0:53:4d:2e: 9f:78:05:f7:81:23:66:2b:75:e2:92:c9:70:59:7e: 4b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:12:5D:89:FD:AF:C2:DB:46:06:20:11:13:8C:2A:BD:9C:89:8E:B7 X509v3 Authority Key Identifier: keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7e:26:20:88:f0:e9:d1:d7:ed:b7:d5:dc:43:6a:c3:57:29: 62:42:21:69:09:10:a6:66:3d:95:db:19:57:0d:9c:0a:31:80: 5e:15:89:29:2f:13:c5:57:1d:ea:e4:b0:0f:e9:4e:60:48:74: e8:7b:9b:0e:5e:dd:b0:95:11:58:a4:a3:cf:da:e3:63:77:ef: 90:2e:61:ed:c5:be:4d:c6:ce:00:ab:1f:aa:38:12:44:95:93: f8:c0:e7:e3:f3:60:31:4a:af:ff:80:a9:aa:e8:59:50:33:89: 0c:e9:ad:88:08:1a:c5:54:9f:00:29:55:64:8b:24:1f:93:b5: 16:ea:77:c8:df:de:88:d5:9f:6d:45:51:da:b7:1b:1f:da:7d: 6b:1e:b3:f5:f3:80:2b:6a:b6:6e:f8:b7:af:e9:8c:8a:5d:f9: 71:33:72:d0:67:19:cf:4e:5b:85:e9:44:52:84:eb:c4:e0:c7: 6a:ed:4f:b7:00:a0:8a:44:4d:43:e1:cc:5f:de:8b:ed:84:27: 0e:80:d3:90:55:61:11:92:54:d1:e4:ef:13:10:21:5f:79:83: 3a:f1:80:e1:1f:73:d1:ab:31:ba:86:5e:fb:5a:82:f6:53:6d: 9f:6e:93:08:21:f1:25:a8:07:66:59:40:ab:96:a8:f8:e7:6a: 76:c6:13:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lbogDI+xFpQjNrP0d1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDljYWMxNTFkYjE1OGVkNmE4NTYzMzU4NTU1NTdmNGU3 NWY3MjUwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD Eyg1MTEyNWQ4OWZkYWZjMmRiNDYwNjIwMTExMzhjMmFiZDljODk4ZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MPYBFUiSSMxVjByb8hc/s5pM3GS iyCuPorB9SyuBdXwFlIrBym1/YWSR99YLAhJrPReXfJiAL+VZnXCXkFmXvuUFEUn jTDLryyKZFBeOH/wZA4wCqT22i9kw8D1cr/HXESu5kIBMag2QmPFIUhAw8hw6mnT 2yM43WCLELLWKbneCWZHZ1IDcTzlC4mpeys1fQh55QyrUlvJB4B+N8biPz5TftqJ ilKlYTGYU6DuiO0TBD8NeMcJT8SiSXZsKIVH6Z+Nr1g0yMsyQ67wAh4M8qOk/ELu b8txwHyTEOd0lYGcEmJmq7MvofE/JPBTTS6feAX3gSNmK3XikslwWX5LrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFESXYn9r8LbRgYgEROMKr2ciY63MB8GA1UdIwQY MBaAFO9JysFR2xWO1qhWM1hVVX9OdfclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2It ZDhhN2EyY2M4NzNiLzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2ItZDhhN2EyY2M4NzNi LzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARn4mIIjw 6dHX7bfV3ENqw1cpYkIhaQkQpmY9ldsZVw2cCjGAXhWJKS8TxVcd6uSwD+lOYEh0 6HubDl7dsJURWKSjz9rjY3fvkC5h7cW+TcbOAKsfqjgSRJWT+MDn4/NgMUqv/4Cp quhZUDOJDOmtiAgaxVSfAClVZIskH5O1Fup3yN/eiNWfbUVR2rcbH9p9ax6z9fOA K2q2bvi3r+mMil35cTNy0GcZz05bhelEUoTrxODHau1PtwCgikRNQ+HMX96L7YQn DoDTkFVhEZJU0eTvExAhX3mDOvGA4R9z0asxuoZe+1qC9lNtn26TCCHxJagHZllA q5ao+OdqdsYTaA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:06 2025 by rpki-client