This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json) Hash identifier: L+PG+12qowYs1R2ikIdMPD4eGNxzIzw4gyWirZ/uq+g= Subject key identifier: A6:6C:FA:24:08:77:04:CB:8D:C6:77:42:80:39:AD:35:A3:63:E4:9A Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90 Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90 Certificate serial: 019B3E6CF2DF1C7EE3E5A69E454E9D38DB1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 01:01:25 +0000 Manifest this update: Sun 21 Dec 2025 01:01:25 +0000 Manifest next update: Mon 22 Dec 2025 01:01:25 +0000 Files and hashes: 1: gF7OF-sH3XFh2hq8KjpdxJgt63g.roa (hash: EpA0qsYa3m/WYOamet70LyZkiEfTFAk3SQEWKz+UC8w=) 2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: r6HI0qdlyaCH2buZz0outlfA+4MNQ9uaMYPZwm93uZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:f2:df:1c:7e:e3:e5:a6:9e:45:4e:9d:38:db:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90 Validity Not Before: Dec 21 01:01:25 2025 GMT Not After : Dec 22 01:01:25 2025 GMT Subject: CN=a66cfa24087704cb8dc677428039ad35a363e49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:fb:14:ab:c9:78:0a:90:fd:12:82:79:c4: e3:52:15:57:5e:70:ef:2e:b5:7e:83:3c:19:cd:33: 30:82:cb:b3:bb:fc:c6:80:a6:84:31:82:de:a7:eb: e1:05:be:56:63:c9:b8:3e:3a:6c:b0:c1:46:da:3e: a5:3e:f3:67:85:d6:60:fc:b2:48:93:3e:4c:28:f3: 13:74:d5:92:70:17:dd:cc:af:fb:9c:e8:8b:1a:11: b2:87:7a:06:78:06:09:e0:1c:1d:09:97:2f:92:d9: 51:5e:58:a1:1a:35:4c:b1:7b:de:61:ad:f0:f1:3e: 98:a5:0c:81:88:33:46:da:ac:d0:d1:3a:e5:41:ed: 79:62:43:d6:8c:ba:86:7a:4f:fa:ea:e4:0b:ef:bf: bf:cf:f1:11:85:22:68:89:46:6e:31:68:5a:78:99: 72:c6:8f:6d:4a:6f:17:ab:69:fd:06:16:05:6e:86: b1:65:91:7e:26:09:30:3c:cd:56:90:23:cd:d7:66: 73:45:14:b2:77:f0:34:7e:5f:f6:78:74:61:f4:1f: 6c:40:34:5b:a2:24:ef:a8:66:63:32:4d:d3:df:e1: d2:78:ea:9d:d4:78:80:62:fd:db:2b:10:0d:cf:c3: 26:fe:08:5b:f2:ff:7a:b5:3e:8c:4d:6a:ff:16:db: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6C:FA:24:08:77:04:CB:8D:C6:77:42:80:39:AD:35:A3:63:E4:9A X509v3 Authority Key Identifier: keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:fe:70:11:9c:ee:26:89:6f:f3:01:15:5f:ff:a9:32:b3:a2: 6b:50:10:d3:1d:43:63:c4:0b:c3:aa:b2:42:da:1d:fe:4c:1d: 5f:6f:8c:a8:aa:fe:fc:e1:dc:b7:74:d1:99:a1:42:8a:a7:ec: cd:f2:2c:47:e2:b3:17:3e:f5:c4:5f:ef:6a:0e:b2:a6:2d:ed: 1f:89:4c:bc:e0:82:f7:58:a9:87:49:ee:70:84:80:73:76:e3: fe:22:f1:4b:81:1b:de:19:ba:d8:31:b7:15:2f:d7:f2:4e:3e: 1b:d7:34:97:2b:93:17:d5:06:c9:ef:74:e2:07:4b:aa:95:aa: b0:14:df:23:7b:45:de:b2:97:63:36:46:65:30:ad:26:d6:e4: 9d:ae:7e:61:cb:39:f8:b4:5b:0b:02:aa:72:75:5c:75:15:7c: d3:3a:ca:2f:c4:d6:7a:17:96:4c:fa:76:3b:de:15:9c:86:f8: d1:c8:22:e9:c8:ee:cb:6d:3c:de:50:33:d0:cd:17:44:15:de: 30:91:32:97:86:36:2c:51:f8:25:fa:12:a1:37:15:aa:a8:47: a8:72:c6:31:43:7f:a4:14:bc:58:1f:60:a0:b1:90:b6:c0:fc: 98:e5:4c:a1:cf:66:12:5a:fa:f0:57:59:9e:82:d8:d8:09:76: cb:73:6b:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bPLfHH7j5aaeRU6dONsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMzA5OWMzOGI2NDc3YTY4Yzk4MDE5ZmY2ZTAwNDA4MDgw NzhiOTAwHhcNMjUxMjIxMDEwMTI1WhcNMjUxMjIyMDEwMTI1WjAzMTEwLwYDVQQD EyhhNjZjZmEyNDA4NzcwNGNiOGRjNjc3NDI4MDM5YWQzNWEzNjNlNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xf7FKvJeAqQ/RKCecTjUhVXXnDv LrV+gzwZzTMwgsuzu/zGgKaEMYLep+vhBb5WY8m4PjpssMFG2j6lPvNnhdZg/LJI kz5MKPMTdNWScBfdzK/7nOiLGhGyh3oGeAYJ4BwdCZcvktlRXlihGjVMsXveYa3w 8T6YpQyBiDNG2qzQ0TrlQe15YkPWjLqGek/66uQL77+/z/ERhSJoiUZuMWhaeJly xo9tSm8Xq2n9BhYFboaxZZF+JgkwPM1WkCPN12ZzRRSyd/A0fl/2eHRh9B9sQDRb oiTvqGZjMk3T3+HSeOqd1HiAYv3bKxANz8Mm/ghb8v96tT6MTWr/Ftvm+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZs+iQIdwTLjcZ3QoA5rTWjY+SaMB8GA1UdIwQY MBaAFLEwmcOLZHemjJgBn/bgBAgIB4uQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEt Mjg0ZjdjOTYyMmI1LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEtMjg0ZjdjOTYyMmI1 LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADP5wEZzu Jolv8wEVX/+pMrOia1AQ0x1DY8QLw6qyQtod/kwdX2+MqKr+/OHct3TRmaFCiqfs zfIsR+KzFz71xF/vag6ypi3tH4lMvOCC91iph0nucISAc3bj/iLxS4Eb3hm62DG3 FS/X8k4+G9c0lyuTF9UGye904gdLqpWqsBTfI3tF3rKXYzZGZTCtJtbkna5+Ycs5 +LRbCwKqcnVcdRV80zrKL8TWeheWTPp2O94VnIb40cgi6cjuy2083lAz0M0XRBXe MJEyl4Y2LFH4JfoSoTcVqqhHqHLGMUN/pBS8WB9goLGQtsD8mOVMoc9mElr68FdZ noLY2Al2y3Nr2g== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:41 2025 by rpki-client