This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft File: S70EYZouForJV1Iu3_Ai-QvApN8.mft (raw, json) Hash identifier: gLvNlMIppG87eQsiTbE9P6zxjTDn+T/iKTkAED4oYns= Subject key identifier: 46:FB:D4:22:06:FC:9D:C7:9B:69:C0:E2:61:16:08:45:E2:E8:89:B1 Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df Certificate serial: 019AF12CE3A50971F9490EDDED945CE21785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft Manifest number: 0EFC Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: Fg5ya9jEENzzvmGwH2Ykprm5YIM.roa (hash: o09Ogu5nR2BkFMd5V+jfaqfvdxmKcg813astixFQ7Wo=) 2: S70EYZouForJV1Iu3_Ai-QvApN8.crl (hash: tL1QB99KSt0n6Khma2moWqFu8R5PBSRzPOU2ULgA2Ig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e3:a5:09:71:f9:49:0e:dd:ed:94:5c:e2:17:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=46fbd42206fc9dc79b69c0e261160845e2e889b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:bc:14:2f:b3:b4:cc:aa:f0:32:ad:08:a9: 8c:81:ae:ad:71:47:cb:5d:21:93:4e:10:20:0e:a4: 5b:ce:6a:47:e2:07:7d:99:26:26:89:f3:f6:19:fa: 3d:2b:3c:81:b0:24:2a:c2:10:36:af:ef:8a:a4:5a: 32:92:18:ce:58:6f:27:f9:e0:11:5c:f8:67:9e:a0: bd:71:27:e7:1f:34:69:f2:d9:00:d6:fc:b8:52:cc: cc:3d:3c:7f:73:ae:6d:0a:8d:cc:10:ab:e1:e5:40: 1e:94:24:34:3c:78:14:f4:12:69:1b:f8:df:c0:7d: 1f:a3:e8:ff:b8:6e:3b:fb:45:a0:f8:46:8f:70:9d: 91:5b:fe:79:eb:5c:ef:f6:c7:d4:79:9a:d5:ad:97: 01:5a:a9:a3:8f:03:c6:3d:c0:db:20:2b:c6:7d:15: c3:9f:9b:8b:71:e4:90:77:15:45:08:7b:72:57:14: 84:1f:26:86:fb:11:64:61:e5:78:d4:8b:df:fb:a5: 30:d0:4d:f3:49:cb:f6:2f:9e:c7:59:1b:ad:bb:26: dd:50:72:c3:61:6d:36:a8:d5:d2:00:7b:b5:b5:57: 5d:75:a3:b5:9d:6a:f2:c5:cf:1d:8c:f9:6f:45:4d: 30:d6:93:0b:a5:fb:21:26:95:8e:77:28:7c:45:fa: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FB:D4:22:06:FC:9D:C7:9B:69:C0:E2:61:16:08:45:E2:E8:89:B1 X509v3 Authority Key Identifier: keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:72:d0:07:08:3f:53:12:4e:9c:ca:03:8a:9c:97:e3:fc:55: 10:04:74:e9:eb:d5:fd:30:50:7c:f3:42:a5:90:06:c2:f1:d1: ef:01:d3:21:b9:e3:57:1d:c0:c3:47:d7:72:17:d8:43:71:0c: b5:25:48:3d:9e:40:69:b0:32:ca:1a:fc:cf:aa:52:42:b4:b5: 4d:85:da:ba:7f:c2:35:e8:9d:33:db:ab:7b:0e:0a:de:05:ff: 63:31:80:4a:04:a9:a1:ad:23:93:49:47:81:3f:5e:ad:1a:2a: b8:6a:fd:ad:fc:fd:06:51:36:0d:c6:f7:34:d3:c5:23:9f:19: 24:31:fc:14:9b:7b:d6:bc:7f:88:e4:54:fe:61:d1:6b:f1:be: dd:6d:31:43:dd:f6:0d:11:b5:e0:be:47:b4:ca:13:10:73:2e: 41:54:68:6a:72:61:74:a3:ad:92:fd:1c:79:24:13:b9:39:8b: e2:50:a3:d9:d9:56:20:16:d0:48:df:0c:22:47:b7:c7:e4:8e: 54:4a:44:91:17:c4:55:94:f2:64:8e:4c:ed:ad:f1:99:af:84: f4:15:76:69:60:09:1c:95:a2:73:a6:19:45:e6:ad:e2:f9:07: 03:a3:d1:fe:e4:72:2e:3b:5e:e0:67:3e:bc:c5:d6:05:eb:8c: f6:c0:64:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOOlCXH5SQ7d7ZRc4heFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYmQwNDYxOWEyZTE2OGFjOTU3NTIyZWRmZjAyMmY5MGJj MGE0ZGYwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD Eyg0NmZiZDQyMjA2ZmM5ZGM3OWI2OWMwZTI2MTE2MDg0NWUyZTg4OWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZa8FC+ztMyq8DKtCKmMga6tcUfL XSGTThAgDqRbzmpH4gd9mSYmifP2Gfo9KzyBsCQqwhA2r++KpFoykhjOWG8n+eAR XPhnnqC9cSfnHzRp8tkA1vy4UszMPTx/c65tCo3MEKvh5UAelCQ0PHgU9BJpG/jf wH0fo+j/uG47+0Wg+EaPcJ2RW/5561zv9sfUeZrVrZcBWqmjjwPGPcDbICvGfRXD n5uLceSQdxVFCHtyVxSEHyaG+xFkYeV41Ivf+6Uw0E3zScv2L57HWRutuybdUHLD YW02qNXSAHu1tVdddaO1nWryxc8djPlvRU0w1pMLpfshJpWOdyh8Rfo0OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb71CIG/J3Hm2nA4mEWCEXi6ImxMB8GA1UdIwQY MBaAFEu9BGGaLhaKyVdSLt/wIvkLwKTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mZDkyY2MtNGZmNC00OTU3LTg4OTgt MmZhZjUzODNiNTA1LzEvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mZDkyY2MtNGZmNC00OTU3LTg4OTgtMmZhZjUzODNiNTA1 LzEvUzcwRVlab3VGb3JKVjFJdTNfQWktUXZBcE44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanLQBwg/ UxJOnMoDipyX4/xVEAR06evV/TBQfPNCpZAGwvHR7wHTIbnjVx3Aw0fXchfYQ3EM tSVIPZ5AabAyyhr8z6pSQrS1TYXaun/CNeidM9urew4K3gX/YzGASgSpoa0jk0lH gT9erRoquGr9rfz9BlE2Dcb3NNPFI58ZJDH8FJt71rx/iORU/mHRa/G+3W0xQ932 DRG14L5HtMoTEHMuQVRoanJhdKOtkv0ceSQTuTmL4lCj2dlWIBbQSN8MIke3x+SO VEpEkRfEVZTyZI5M7a3xma+E9BV2aWAJHJWic6YZReat4vkHA6PR/uRyLjte4Gc+ vMXWBeuM9sBkYg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:52:29 2025 by rpki-client