This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json) Hash identifier: 9D+ns8L1bboJ3Lxqp/AO9/8IkBfoIzI3Czbcwq9ITmw= Subject key identifier: ED:27:41:ED:B3:AF:2F:7A:EE:1A:97:A5:30:73:04:7B:2D:5E:A9:91 Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35 Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235 Certificate serial: 019B318CBB9350B2EC49011F7C3455FE5AF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft Manifest number: 16CC Signing time: Thu 18 Dec 2025 13:01:05 +0000 Manifest this update: Thu 18 Dec 2025 13:01:05 +0000 Manifest next update: Fri 19 Dec 2025 13:01:05 +0000 Files and hashes: 1: KZ9MaFf9moOlWzhDiV51E6z4ruQ.roa (hash: o42ZvTk2aV903nYiy/wXE7YfcS2jTGFMZ4dlRDRmvzw=) 2: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: Kx/dY/v+VmoeASveOuyAxqpgj065Cw9icDpamp+BJsA=) 3: aXfurIc0y425R07LNYbqG3Kj0ls.roa (hash: Fo4G/OQhw0U+aibrSU4yWNkHhdgB1l5Zyp+qa99xuIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:bb:93:50:b2:ec:49:01:1f:7c:34:55:fe:5a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235 Validity Not Before: Dec 18 13:01:05 2025 GMT Not After : Dec 19 13:01:05 2025 GMT Subject: CN=ed2741edb3af2f7aee1a97a53073047b2d5ea991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:13:a2:a5:a2:0a:9b:7c:41:c4:60:ab:40: 56:b6:70:09:a3:33:29:fa:fa:96:25:9b:4c:88:80: eb:69:df:4f:5b:ab:c1:11:55:1e:a4:5d:de:c6:97: f7:c1:2b:e3:f3:87:1c:12:70:dd:09:20:9b:f3:2d: e8:0b:85:ec:75:94:37:ed:29:58:38:6f:63:7c:3d: 6c:2b:7d:de:ec:a0:82:f9:6a:7d:8b:2f:89:7c:22: 0d:a8:83:15:b6:75:48:ed:33:93:26:b7:c5:87:af: e8:ef:4a:8d:c2:24:be:e3:46:47:a3:63:74:3d:c5: d8:c0:49:21:9a:2a:21:20:ae:14:23:1c:48:c6:46: 4d:13:31:fc:73:10:41:b0:8f:3e:9f:f8:71:01:62: 8a:cc:7a:66:fb:16:0f:48:b7:26:6f:3b:82:0c:6b: ba:8c:9e:9b:12:8f:7c:8c:32:f5:63:09:b9:10:95: 93:83:3a:44:d1:41:85:30:c4:b5:5d:c8:9f:5e:83: 9d:e6:ce:1e:53:c2:24:9b:a3:c3:6f:d6:c1:e9:78: f8:fc:3c:54:6f:6f:26:9e:1c:47:6a:6d:d7:03:99: c1:57:32:f3:f7:c2:b9:8f:e2:0a:82:6e:d9:de:85: 98:eb:19:86:08:8f:ac:5c:b6:1c:d2:7c:8d:cc:01: 57:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:27:41:ED:B3:AF:2F:7A:EE:1A:97:A5:30:73:04:7B:2D:5E:A9:91 X509v3 Authority Key Identifier: keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:11:4a:13:c9:78:bf:87:ba:45:b4:a9:60:19:a3:0f:a7:07: 5f:c5:5b:a1:5a:94:b7:5f:cd:03:74:16:14:8b:c0:e0:42:93: c9:82:0b:1c:43:04:6d:32:9d:88:94:b8:67:d6:a3:fd:f0:e8: 9c:50:7b:64:ec:de:a1:32:e3:96:55:bf:63:1e:43:17:24:c8: 7a:59:f0:8a:df:b7:a6:60:b2:99:33:b5:57:05:97:b1:db:c8: 0f:d0:b7:ca:4d:ce:ec:3c:a8:72:9c:c3:81:d8:0a:14:50:6c: 98:2e:47:bb:ae:27:b4:55:8b:2f:0d:18:ee:0b:6c:09:7b:e7: fa:98:4a:a7:42:fd:c4:09:28:9e:61:c8:b0:29:41:14:0c:65: 31:70:d4:f6:e8:4d:b8:a1:81:0b:69:c8:b4:d1:be:c3:73:e4: 70:aa:37:2a:9d:7f:ec:8e:35:87:c4:f1:46:51:01:0f:ac:29: 5c:41:f8:28:47:47:ac:d1:f4:f8:ed:82:6c:9a:0f:16:28:87: 23:8d:0b:96:51:21:0b:02:c5:e0:67:c5:a0:3e:b7:b9:77:b3: af:a5:b7:4c:1e:b7:cf:90:7e:60:2d:59:e0:6c:f4:1a:b0:40: f6:00:4f:88:6e:a3:74:b1:e8:a6:8a:f7:49:65:b1:b2:8e:a0: 68:91:df:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjLuTULLsSQEffDRV/lrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhY2VmNDVmYmIwZjI2OTMwYWViODMzY2Y3OWZjNDFlMjJj YTkyMzUwHhcNMjUxMjE4MTMwMTA1WhcNMjUxMjE5MTMwMTA1WjAzMTEwLwYDVQQD EyhlZDI3NDFlZGIzYWYyZjdhZWUxYTk3YTUzMDczMDQ3YjJkNWVhOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC4ToqWiCpt8QcRgq0BWtnAJozMp +vqWJZtMiIDrad9PW6vBEVUepF3expf3wSvj84ccEnDdCSCb8y3oC4XsdZQ37SlY OG9jfD1sK33e7KCC+Wp9iy+JfCINqIMVtnVI7TOTJrfFh6/o70qNwiS+40ZHo2N0 PcXYwEkhmiohIK4UIxxIxkZNEzH8cxBBsI8+n/hxAWKKzHpm+xYPSLcmbzuCDGu6 jJ6bEo98jDL1Ywm5EJWTgzpE0UGFMMS1XcifXoOd5s4eU8Ikm6PDb9bB6Xj4/DxU b28mnhxHam3XA5nBVzLz98K5j+IKgm7Z3oWY6xmGCI+sXLYc0nyNzAFXvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0nQe2zry967hqXpTBzBHstXqmRMB8GA1UdIwQY MBaAFErO9F+7DyaTCuuDPPefxB4iypI1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85N2ZiMzYtZWE5Yi00M2Y0LWFhZDUt MDZmNzI5MGRjNDRhLzEvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85N2ZiMzYtZWE5Yi00M2Y0LWFhZDUtMDZmNzI5MGRjNDRh LzEvU3M3MFg3c1BKcE1LNjRNODk1X0VIaUxLa2pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBFKE8l4 v4e6RbSpYBmjD6cHX8VboVqUt1/NA3QWFIvA4EKTyYILHEMEbTKdiJS4Z9aj/fDo nFB7ZOzeoTLjllW/Yx5DFyTIelnwit+3pmCymTO1VwWXsdvID9C3yk3O7DyocpzD gdgKFFBsmC5Hu64ntFWLLw0Y7gtsCXvn+phKp0L9xAkonmHIsClBFAxlMXDU9uhN uKGBC2nItNG+w3PkcKo3Kp1/7I41h8TxRlEBD6wpXEH4KEdHrNH0+O2CbJoPFiiH I40LllEhCwLF4GfFoD63uXezr6W3TB63z5B+YC1Z4Gz0GrBA9gBPiG6jdLHopor3 SWWxso6gaJHfiw== -----END CERTIFICATE-----Generated at Thu Dec 18 22:02:54 2025 by rpki-client