This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft File: StRn8W0JUeQwcTgyxsdZVh52BB8.mft (raw, json) Hash identifier: CprA1oDI+XALc+0SMBAZImUw47BZ7fRkYcfZNbfcbic= Subject key identifier: 34:92:C6:2D:53:04:58:11:7E:48:E5:9E:0A:BA:E1:05:43:F4:A8:AD Authority key identifier: 4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F Certificate issuer: /CN=4ad467f16d0951e430713832c6c759561e76041f Certificate serial: 019B7937591128D123D7EE680264DD46A62B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft Manifest number: 17A8 Signing time: Thu 01 Jan 2026 11:00:28 +0000 Manifest this update: Thu 01 Jan 2026 11:00:28 +0000 Manifest next update: Fri 02 Jan 2026 11:00:28 +0000 Files and hashes: 1: LA87c0N0jLLIJNyaAxdsrLDiRKc.roa (hash: 4oqbXXgz6mLbQ2FF6T8Y0DHtnqReuO9S3IDQ8izJVL4=) 2: StRn8W0JUeQwcTgyxsdZVh52BB8.crl (hash: 4bMg7xT6LU3HhVu89dtoqHQvEMxKAOFmn0YzHtUFtMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:37:59:11:28:d1:23:d7:ee:68:02:64:dd:46:a6:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad467f16d0951e430713832c6c759561e76041f Validity Not Before: Jan 1 11:00:28 2026 GMT Not After : Jan 2 11:00:28 2026 GMT Subject: CN=3492c62d530458117e48e59e0abae10543f4a8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5b:cb:ca:ae:c2:43:8b:99:88:d8:32:f9:03: 72:b2:4a:23:cd:28:95:4c:ff:62:26:a4:a9:49:1d: 5a:7c:55:81:17:4d:49:07:43:29:93:4f:b1:d6:c4: be:f3:07:fe:ef:52:bd:7e:ec:72:97:00:de:11:0c: 90:6c:23:5f:31:7c:53:c0:95:f2:a5:b9:60:2d:c3: 9d:b3:39:1d:4b:9e:a8:2d:22:ab:6a:55:78:31:a1: be:3a:e6:4d:f5:13:d6:2b:04:f1:7d:ee:69:b0:87: e5:d0:ea:67:d3:da:8c:9d:e1:90:9d:d2:d3:b7:c5: ce:a3:cf:b0:97:44:ae:dd:35:af:77:93:ff:da:7e: f3:8c:76:b8:dd:cc:6e:ca:1d:3c:ab:af:c6:bc:c0: 13:98:b1:4f:4e:a8:52:9c:58:f1:e6:4d:77:ba:7e: 6e:b3:b7:ae:f5:79:1c:72:54:bd:16:53:49:e2:8c: 67:9a:6d:cf:13:f1:1d:3e:df:e1:38:f2:06:22:d3: 16:a5:19:7f:ef:26:5f:81:79:f0:7e:1a:34:ce:2a: 7f:ee:43:31:53:a5:d1:f4:a1:80:51:a3:a4:05:98: 38:80:b5:9a:a6:e4:60:62:a4:f2:ea:5b:a2:5a:51: 72:f1:71:c7:12:44:99:2f:03:a3:73:e1:a7:ac:69: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:92:C6:2D:53:04:58:11:7E:48:E5:9E:0A:BA:E1:05:43:F4:A8:AD X509v3 Authority Key Identifier: keyid:4A:D4:67:F1:6D:09:51:E4:30:71:38:32:C6:C7:59:56:1E:76:04:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StRn8W0JUeQwcTgyxsdZVh52BB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/338605-4db4-4ede-a310-5642353d431a/1/StRn8W0JUeQwcTgyxsdZVh52BB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bf:df:60:2e:28:6a:ff:33:0f:8f:7a:76:b5:25:eb:e2:ed: 80:e6:dd:80:49:a6:7c:54:b5:da:c6:8a:01:1d:1d:e4:9f:76: e3:29:9c:ce:d7:50:e6:cc:c2:0b:0c:47:bf:5f:ac:26:d9:9f: 4a:d0:52:03:55:a8:a8:aa:1d:3a:b6:28:89:57:2f:9c:29:5f: ea:9b:3b:9f:f5:b9:1e:40:60:ff:ad:5b:f4:46:17:79:ff:0c: f7:1f:33:27:13:42:c6:94:50:0f:4e:76:be:28:ae:92:9f:75: af:25:e2:6a:82:de:e7:16:f1:60:61:15:db:f5:26:c9:8e:68: 9f:ff:e4:51:58:0d:9b:d7:a8:4f:8f:16:d3:48:c3:65:8a:cb: c3:04:98:9e:49:50:80:3c:cd:6c:c6:f7:2b:f9:a2:61:f0:bd: 97:75:88:27:13:a0:d0:71:c8:7a:96:cc:c0:b1:23:03:68:84: 27:fd:f2:1f:cb:0b:49:f7:be:6b:78:96:08:6c:66:d5:59:3b: 96:e1:df:23:35:91:6f:3f:20:a1:23:51:8d:74:c3:e1:d7:00: a6:f3:30:04:71:91:d3:44:13:97:0c:f0:b0:99:5c:fc:07:45: d5:04:25:40:d0:a6:ed:9e:cf:e0:52:b7:86:c5:b4:5d:03:6b: a2:3e:b0:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5N1kRKNEj1+5oAmTdRqYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZDQ2N2YxNmQwOTUxZTQzMDcxMzgzMmM2Yzc1OTU2MWU3 NjA0MWYwHhcNMjYwMTAxMTEwMDI4WhcNMjYwMTAyMTEwMDI4WjAzMTEwLwYDVQQD EygzNDkyYzYyZDUzMDQ1ODExN2U0OGU1OWUwYWJhZTEwNTQzZjRhOGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlvLyq7CQ4uZiNgy+QNyskojzSiV TP9iJqSpSR1afFWBF01JB0Mpk0+x1sS+8wf+71K9fuxylwDeEQyQbCNfMXxTwJXy pblgLcOdszkdS56oLSKralV4MaG+OuZN9RPWKwTxfe5psIfl0Opn09qMneGQndLT t8XOo8+wl0Su3TWvd5P/2n7zjHa43cxuyh08q6/GvMATmLFPTqhSnFjx5k13un5u s7eu9XkcclS9FlNJ4oxnmm3PE/EdPt/hOPIGItMWpRl/7yZfgXnwfho0zip/7kMx U6XR9KGAUaOkBZg4gLWapuRgYqTy6luiWlFy8XHHEkSZLwOjc+GnrGlsYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSSxi1TBFgRfkjlngq64QVD9KitMB8GA1UdIwQY MBaAFErUZ/FtCVHkMHE4MsbHWVYedgQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAt NTY0MjM1M2Q0MzFhLzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMzg2MDUtNGRiNC00ZWRlLWEzMTAtNTY0MjM1M2Q0MzFh LzEvU3RSbjhXMEpVZVF3Y1RneXhzZFpWaDUyQkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbL/fYC4o av8zD496drUl6+LtgObdgEmmfFS12saKAR0d5J924ymcztdQ5szCCwxHv1+sJtmf StBSA1WoqKodOrYoiVcvnClf6ps7n/W5HkBg/61b9EYXef8M9x8zJxNCxpRQD052 viiukp91ryXiaoLe5xbxYGEV2/UmyY5on//kUVgNm9eoT48W00jDZYrLwwSYnklQ gDzNbMb3K/miYfC9l3WIJxOg0HHIepbMwLEjA2iEJ/3yH8sLSfe+a3iWCGxm1Vk7 luHfIzWRbz8goSNRjXTD4dcApvMwBHGR00QTlwzwsJlc/AdF1QQlQNCm7Z7P4FK3 hsW0XQNroj6w2A== -----END CERTIFICATE-----Generated at Thu Jan 1 18:04:08 2026 by rpki-client