This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft File: 704eplKHok4gxmO1FhwVE_AMio0.mft (raw, json) Hash identifier: 1VD321YiksfDvIkYR3e+v1zpn8ZJ1IU6/Zo0fzqPRSA= Subject key identifier: 2B:10:BA:2A:FB:61:74:F5:B2:99:7C:9D:0E:DA:97:81:EA:48:09:0F Authority key identifier: EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D Certificate issuer: /CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d Certificate serial: 019AF1D25A0610E46AAC1E25C3B331817DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft Manifest number: 0677 Signing time: Sat 06 Dec 2025 04:01:25 +0000 Manifest this update: Sat 06 Dec 2025 04:01:25 +0000 Manifest next update: Sun 07 Dec 2025 04:01:25 +0000 Files and hashes: 1: 1-x-3ccNzP71eAFgXPav3YRKbPc0.roa (hash: gcNVzNBHfGC67t/xgrOBlYz2dVPSnS4yGm9+O2azC54=) 2: 704eplKHok4gxmO1FhwVE_AMio0.crl (hash: zURCs4ZgE4m9YU84OwdJfIJpHi6YdNJPTNIEj87v5NM=) 3: J5QgCxKNKik7O15LPyeeQADYm_g.roa (hash: R0sIPZo3mElg4IM+t4du68+jxxhuTbAlvWncgQxpH3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5a:06:10:e4:6a:ac:1e:25:c3:b3:31:81:7d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef4e1ea65287a24e20c663b5161c1513f00c8a8d Validity Not Before: Dec 6 04:01:25 2025 GMT Not After : Dec 7 04:01:25 2025 GMT Subject: CN=2b10ba2afb6174f5b2997c9d0eda9781ea48090f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ad:8b:cb:d1:d1:72:19:54:30:1d:7a:f6:94: 80:08:aa:7b:74:05:63:73:d6:34:8f:51:a3:8a:ec: 4a:0f:28:94:16:4f:93:c3:9a:29:1f:44:33:c3:22: b0:32:fa:36:ea:0e:ff:a4:ec:f5:4f:14:5e:e6:15: 06:49:8b:0c:86:78:45:89:39:03:4f:fd:fb:15:c3: 7b:31:87:70:c5:e1:31:80:45:78:c3:89:05:b6:05: 4e:ad:e3:1d:34:a6:36:b8:24:93:76:57:81:3c:33: b6:10:0d:56:df:4e:d9:2e:66:7c:2b:df:8e:5f:fa: a9:b1:8f:12:ab:59:05:e9:a3:1d:7c:3b:86:92:11: a8:2e:0b:1e:7d:ce:36:f8:7d:d1:61:ba:2c:0b:c0: a7:bc:6a:e8:5e:42:f9:28:ed:c6:0b:9f:07:ab:81: 13:12:f3:68:d3:00:be:8e:66:a8:71:c0:9b:9f:34: f7:a4:e2:8e:da:d2:78:e7:e7:20:54:6a:a9:b6:30: f6:3e:50:cb:f9:f1:5f:d0:03:7a:7a:db:6d:cd:12: 85:27:fd:56:54:ee:b2:c4:7c:aa:f0:04:9a:af:8c: 63:7b:c6:95:68:c7:8c:58:7c:fe:e1:de:c2:eb:db: 5a:62:ef:11:5f:92:a4:3e:46:05:47:e0:02:bd:89: c7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:BA:2A:FB:61:74:F5:B2:99:7C:9D:0E:DA:97:81:EA:48:09:0F X509v3 Authority Key Identifier: keyid:EF:4E:1E:A6:52:87:A2:4E:20:C6:63:B5:16:1C:15:13:F0:0C:8A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/704eplKHok4gxmO1FhwVE_AMio0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a52ceb-c8c8-4236-a037-60a5743e6e1f/1/704eplKHok4gxmO1FhwVE_AMio0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:19:1f:c2:85:c5:aa:48:b5:60:28:bf:d6:43:d7:e3:fd:55: 7b:22:30:00:64:06:ad:83:c2:b5:70:45:c3:fe:48:65:d2:e9: 6c:7b:5d:6c:64:b8:30:4a:93:34:24:93:fd:31:ff:0b:e9:da: 8c:9f:3a:89:81:70:8b:7f:d8:a6:b7:38:ce:a2:03:7d:88:e1: 1b:41:e0:d1:98:44:20:10:4b:d3:c9:83:51:79:0d:f2:3f:2f: c5:93:69:d3:89:7c:ad:c1:d6:d2:f9:f1:3f:78:c5:a2:14:93: 38:69:03:1d:6e:e2:16:87:31:0b:65:bd:1e:a2:b4:40:b2:a0: 37:44:7f:e3:52:c2:ca:84:eb:15:d4:2c:3f:eb:57:a5:e0:dc: b4:21:ab:60:dd:5a:3a:ab:f4:ae:f5:75:f1:d4:73:fc:76:e6: f9:a6:83:48:51:c4:d0:a8:1f:70:b9:6f:ea:df:28:1c:cc:c0: 9d:1d:4b:e7:87:f5:25:68:b6:26:0c:c8:47:63:32:5a:6d:30: 68:ff:cd:52:17:93:e1:ea:2e:17:05:90:2f:45:2e:f8:79:30: 1d:d2:06:8d:f0:d1:44:be:81:c0:6d:2d:ab:84:5f:55:50:49: a9:6a:b0:fc:ad:5c:c1:9b:56:fe:78:ad:af:80:3e:17:dc:2c: 7a:ea:79:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0loGEORqrB4lw7MxgX3QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNGUxZWE2NTI4N2EyNGUyMGM2NjNiNTE2MWMxNTEzZjAw YzhhOGQwHhcNMjUxMjA2MDQwMTI1WhcNMjUxMjA3MDQwMTI1WjAzMTEwLwYDVQQD EygyYjEwYmEyYWZiNjE3NGY1YjI5OTdjOWQwZWRhOTc4MWVhNDgwOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq2Ly9HRchlUMB169pSACKp7dAVj c9Y0j1GjiuxKDyiUFk+Tw5opH0QzwyKwMvo26g7/pOz1TxRe5hUGSYsMhnhFiTkD T/37FcN7MYdwxeExgEV4w4kFtgVOreMdNKY2uCSTdleBPDO2EA1W307ZLmZ8K9+O X/qpsY8Sq1kF6aMdfDuGkhGoLgsefc42+H3RYbosC8CnvGroXkL5KO3GC58Hq4ET EvNo0wC+jmaoccCbnzT3pOKO2tJ45+cgVGqptjD2PlDL+fFf0AN6etttzRKFJ/1W VO6yxHyq8ASar4xje8aVaMeMWHz+4d7C69taYu8RX5KkPkYFR+ACvYnHsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsQuir7YXT1spl8nQ7al4HqSAkPMB8GA1UdIwQY MBaAFO9OHqZSh6JOIMZjtRYcFRPwDIqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hNTJjZWItYzhjOC00MjM2LWEwMzct NjBhNTc0M2U2ZTFmLzEvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9hNTJjZWItYzhjOC00MjM2LWEwMzctNjBhNTc0M2U2ZTFm LzEvNzA0ZXBsS0hvazRneG1PMUZod1ZFX0FNaW8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhkfwoXF qki1YCi/1kPX4/1VeyIwAGQGrYPCtXBFw/5IZdLpbHtdbGS4MEqTNCST/TH/C+na jJ86iYFwi3/Yprc4zqIDfYjhG0Hg0ZhEIBBL08mDUXkN8j8vxZNp04l8rcHW0vnx P3jFohSTOGkDHW7iFocxC2W9HqK0QLKgN0R/41LCyoTrFdQsP+tXpeDctCGrYN1a Oqv0rvV18dRz/Hbm+aaDSFHE0KgfcLlv6t8oHMzAnR1L54f1JWi2JgzIR2MyWm0w aP/NUheT4eouFwWQL0Uu+HkwHdIGjfDRRL6BwG0tq4RfVVBJqWqw/K1cwZtW/nit r4A+F9wseup5ZA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:21:32 2025 by rpki-client