This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json) Hash identifier: kv+VPv6UNGLtCg08LYqRyDOkuw23MitI2hay1GDAI9M= Subject key identifier: 3A:F2:39:AA:DE:D1:7D:A1:4C:E0:F9:35:54:09:22:DE:7F:68:82:AC Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f Certificate serial: 019B631DAFB34DAAA39122D27C257508EC33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 04:00:48 +0000 Manifest this update: Sun 28 Dec 2025 04:00:48 +0000 Manifest next update: Mon 29 Dec 2025 04:00:48 +0000 Files and hashes: 1: 0qO4O1iuPzCMlLlUt1HamKiYOoA.roa (hash: cgE/JK3sVjQnbjv1N0QFg9l7ug/Hstmhscf6qZhJ3xA=) 2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: 3776rZ9u+cweH+FQmczrOofHLr5cz//aAaTlZbcGL3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:af:b3:4d:aa:a3:91:22:d2:7c:25:75:08:ec:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f Validity Not Before: Dec 28 04:00:48 2025 GMT Not After : Dec 29 04:00:48 2025 GMT Subject: CN=3af239aaded17da14ce0f935540922de7f6882ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:26:e5:fd:2b:b4:3b:14:65:b8:f2:76:7c:71: 69:25:1e:f6:7c:4c:0f:65:b8:f0:4c:09:ab:6a:4e: 2b:90:48:25:2c:9a:07:c2:a8:18:e6:29:3c:ff:5c: 87:39:39:cd:be:a9:7c:ea:28:13:08:7c:07:fb:9b: 7a:7e:51:e7:26:ba:ad:d9:00:dd:66:09:34:31:17: 91:af:dc:44:71:9d:6f:ed:30:4e:6c:ee:10:cd:91: 71:29:e8:16:e3:7c:e9:c4:34:b2:46:6e:0a:21:4c: 94:4a:14:59:25:e9:33:cf:fe:8e:df:22:ed:fc:a0: 46:a8:69:3a:1b:d4:34:60:ba:c8:ac:f9:47:03:9c: 92:91:e3:f7:2d:e0:88:c3:2f:1c:b5:c8:86:ec:e1: e9:63:aa:8f:cc:71:b7:a0:00:d7:f9:c3:58:1d:0a: d8:ec:53:9b:56:0b:df:d2:7c:70:cd:d9:93:a3:80: fc:fc:87:07:dd:67:45:75:66:c4:04:88:ef:53:c2: 49:76:90:9c:cd:65:c3:6a:12:22:2c:1b:9a:77:38: 82:f2:e1:2c:b6:c1:c2:3d:c7:fc:24:e2:05:27:3b: 72:1a:69:39:2a:64:59:47:79:c9:d3:1e:99:06:56: 7d:65:0b:7a:b9:fa:18:d8:8c:fa:d5:21:d8:5b:be: 29:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F2:39:AA:DE:D1:7D:A1:4C:E0:F9:35:54:09:22:DE:7F:68:82:AC X509v3 Authority Key Identifier: keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:4a:f3:13:c4:b1:5f:c8:1d:43:d7:e0:b6:f8:bb:50:53:c7: ff:bf:b0:46:d1:11:4f:92:4e:08:e3:1d:d3:9c:e4:8c:a1:10: 08:3e:46:46:8f:cf:9f:f9:ca:32:a5:ee:dd:d3:89:13:c9:df: 71:db:b6:e9:0b:bf:d5:11:8a:1a:ee:a4:10:fe:f0:15:9d:1a: bf:1e:c4:ee:7f:1b:3e:6c:9c:42:e2:d0:13:b4:3e:78:5d:71: b9:c5:32:ec:37:9c:6c:bd:7c:64:21:38:0e:70:62:72:5f:61: 32:08:1f:ff:9e:8f:a4:20:51:cb:9c:e7:d7:51:01:8e:b7:29: 11:3d:1e:cd:ac:a5:26:c9:2e:e5:cb:bd:72:ad:5a:80:20:cb: 2f:4d:93:bf:15:5e:8a:1b:61:9c:d6:ed:23:1f:67:6b:64:6c: 47:a7:9c:b1:66:5c:36:4d:3c:45:2f:dd:91:b1:8a:d3:76:83: 5c:e6:21:0a:e6:f6:4c:05:68:6f:1a:6c:35:fe:fb:6b:03:e4: a7:8a:1b:bb:b6:b4:4f:f2:22:54:0a:50:4c:6a:0f:07:47:51: a6:09:3c:52:0a:db:a9:93:4a:a1:49:e8:63:64:72:82:61:7b: e8:67:f5:9c:91:35:35:a9:43:86:e3:79:f3:6d:46:12:ce:11: d8:25:7e:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHa+zTaqjkSLSfCV1COwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZDQ2N2YxNmQwOTUxZTQzMDcxMzgzMmM2Yzc1OTU2MWU3 NjA0MWYwHhcNMjUxMjI4MDQwMDQ4WhcNMjUxMjI5MDQwMDQ4WjAzMTEwLwYDVQQD EygzYWYyMzlhYWRlZDE3ZGExNGNlMGY5MzU1NDA5MjJkZTdmNjg4MmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSbl/Su0OxRluPJ2fHFpJR72fEwP ZbjwTAmrak4rkEglLJoHwqgY5ik8/1yHOTnNvql86igTCHwH+5t6flHnJrqt2QDd Zgk0MReRr9xEcZ1v7TBObO4QzZFxKegW43zpxDSyRm4KIUyUShRZJekzz/6O3yLt /KBGqGk6G9Q0YLrIrPlHA5ySkeP3LeCIwy8ctciG7OHpY6qPzHG3oADX+cNYHQrY 7FObVgvf0nxwzdmTo4D8/IcH3WdFdWbEBIjvU8JJdpCczWXDahIiLBuadziC8uEs tsHCPcf8JOIFJztyGmk5KmRZR3nJ0x6ZBlZ9ZQt6ufoY2Iz61SHYW74p/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDryOare0X2hTOD5NVQJIt5/aIKsMB8GA1UdIwQY MBaAFErUZ/FtCVHkMHE4MsbHWVYedgQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAt NTY0MjM1M2Q0MzFhLzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAtNTY0MjM1M2Q0MzFh LzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUrzE8Sx X8gdQ9fgtvi7UFPH/7+wRtERT5JOCOMd05zkjKEQCD5GRo/Pn/nKMqXu3dOJE8nf cdu26Qu/1RGKGu6kEP7wFZ0avx7E7n8bPmycQuLQE7Q+eF1xucUy7DecbL18ZCE4 DnBicl9hMggf/56PpCBRy5zn11EBjrcpET0ezaylJsku5cu9cq1agCDLL02TvxVe ihthnNbtIx9na2RsR6ecsWZcNk08RS/dkbGK03aDXOYhCub2TAVobxpsNf77awPk p4obu7a0T/IiVApQTGoPB0dRpgk8UgrbqZNKoUnoY2RygmF76Gf1nJE1NalDhuN5 821GEs4R2CV+1w== -----END CERTIFICATE-----Generated at Sun Dec 28 09:07:51 2025 by rpki-client