This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft File: StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json) Hash identifier: 3aE01puDs1tAQO6sK/KxZegvn9arSrPcIlb429s0vbs= Subject key identifier: 8E:C1:EF:3A:D5:08:30:5D:B8:D8:91:7A:49:74:4C:FE:35:0F:F8:7A Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24 Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824 Certificate serial: 019B4B8308AA8BD010E53DEEAA1419B591D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 14:00:37 +0000 Manifest this update: Tue 23 Dec 2025 14:00:37 +0000 Manifest next update: Wed 24 Dec 2025 14:00:37 +0000 Files and hashes: 1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: bE1ApHs0nTiyV6ida/JPzyB3DiGMB5g9f3s5kag/17s=) 2: aRNIY9aPisPsPJEyhtJc_m061Zk.roa (hash: ah5G0cArNKCIsOUw2/tpkDwad97MIaUDok+u/s4pKjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:83:08:aa:8b:d0:10:e5:3d:ee:aa:14:19:b5:91:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824 Validity Not Before: Dec 23 14:00:37 2025 GMT Not After : Dec 24 14:00:37 2025 GMT Subject: CN=8ec1ef3ad508305db8d8917a49744cfe350ff87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:9c:8c:50:49:c3:b5:5b:6d:d2:f9:10:49: 4b:1f:98:0b:79:d0:77:65:fb:e7:64:60:67:e6:d0: f4:ae:11:64:fd:19:d0:aa:19:56:9e:33:90:46:ea: 49:06:88:80:4a:ab:27:6d:1a:d7:20:e3:0d:ac:89: de:90:4a:ba:ba:76:48:4f:5b:6d:43:43:da:ad:ec: b5:ee:50:55:60:82:c8:bd:6f:1c:1e:64:2f:96:da: 0b:17:3c:7f:19:d1:ed:02:7d:33:fd:8e:c1:ac:11: d2:0d:c0:de:ab:df:c5:69:f3:c2:7d:07:43:4d:c2: 21:b8:63:48:aa:2f:34:af:5c:eb:db:75:a9:f9:ea: e7:8b:a6:8d:ce:37:46:0e:63:2e:4f:0b:de:19:4d: f2:98:fe:9b:a7:a4:12:6c:19:10:98:89:0a:5f:d8: 90:f5:6b:71:4a:2c:af:27:b0:dd:c5:3c:17:a8:69: 64:44:c9:d5:79:20:7b:c3:20:da:31:b2:77:c3:d8: da:46:54:cc:d2:5e:6c:ed:87:c3:71:a7:8a:b1:56: 28:04:5d:49:ff:d7:1a:51:dc:71:2d:96:c0:ae:f9: 1f:18:83:d3:c3:46:dc:ce:0f:bf:2c:75:b1:7f:d9: c1:d1:ba:a1:15:7a:84:21:bb:f9:2b:36:96:30:d4: 40:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C1:EF:3A:D5:08:30:5D:B8:D8:91:7A:49:74:4C:FE:35:0F:F8:7A X509v3 Authority Key Identifier: keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:34:a6:05:2c:bd:99:59:46:da:52:d2:07:08:45:81:c3:e5: df:11:85:32:9e:df:f7:28:79:f4:4f:1b:26:48:b7:be:1d:61: d7:bf:1c:d2:b7:db:f9:ad:40:88:91:b2:8c:20:70:e9:93:df: 70:c2:c9:66:75:8d:af:0c:e3:cd:f8:2b:bf:cc:80:d7:77:be: 1f:b5:ba:e4:36:84:31:37:65:de:9e:19:77:ed:15:03:e0:9f: 3b:67:33:6b:2e:2f:5e:dd:46:cb:d9:8f:2a:04:3e:ab:5a:c0: 9a:04:36:93:80:52:8e:9e:9a:6f:03:54:bd:46:01:00:39:a2: 0f:7c:b5:72:62:7c:06:c2:46:72:3b:8c:b3:61:22:79:84:ba: a3:99:f6:58:7f:a3:14:7a:66:d4:4e:de:0a:35:49:eb:4e:44: 23:ef:8f:4b:d0:c0:81:4e:a1:13:5c:41:d7:ab:2e:24:4a:cc: 3c:cd:87:37:96:74:a7:f6:63:08:ae:14:af:62:f0:9b:c6:b8: 2f:c0:a9:39:4d:49:ed:e6:ba:5f:01:ed:7a:a6:5b:3c:8d:40: db:c9:67:69:8f:9b:36:2d:f6:76:02:38:9b:35:81:02:8b:30: 16:bc:f1:dd:2e:0b:e3:90:fe:1d:88:59:09:c1:a5:6e:57:a0: 46:a6:f6:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLgwiqi9AQ5T3uqhQZtZHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZDFlOTE4NWVhYThiNWM3MWM4OWZhYmU2ZmJlMmFjZjdl YTk4MjQwHhcNMjUxMjIzMTQwMDM3WhcNMjUxMjI0MTQwMDM3WjAzMTEwLwYDVQQD Eyg4ZWMxZWYzYWQ1MDgzMDVkYjhkODkxN2E0OTc0NGNmZTM1MGZmODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmomcjFBJw7VbbdL5EElLH5gLedB3 ZfvnZGBn5tD0rhFk/RnQqhlWnjOQRupJBoiASqsnbRrXIOMNrInekEq6unZIT1tt Q0Parey17lBVYILIvW8cHmQvltoLFzx/GdHtAn0z/Y7BrBHSDcDeq9/FafPCfQdD TcIhuGNIqi80r1zr23Wp+erni6aNzjdGDmMuTwveGU3ymP6bp6QSbBkQmIkKX9iQ 9WtxSiyvJ7DdxTwXqGlkRMnVeSB7wyDaMbJ3w9jaRlTM0l5s7YfDcaeKsVYoBF1J /9caUdxxLZbArvkfGIPTw0bczg+/LHWxf9nB0bqhFXqEIbv5KzaWMNRA/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7B7zrVCDBduNiRekl0TP41D/h6MB8GA1UdIwQY MBaAFErR6Rheqotcccifq+b74qz36pgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMt YzM4NjY5YjM3YjllLzEvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMtYzM4NjY5YjM3Yjll LzEvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijSmBSy9 mVlG2lLSBwhFgcPl3xGFMp7f9yh59E8bJki3vh1h178c0rfb+a1AiJGyjCBw6ZPf cMLJZnWNrwzjzfgrv8yA13e+H7W65DaEMTdl3p4Zd+0VA+CfO2czay4vXt1Gy9mP KgQ+q1rAmgQ2k4BSjp6abwNUvUYBADmiD3y1cmJ8BsJGcjuMs2EieYS6o5n2WH+j FHpm1E7eCjVJ605EI++PS9DAgU6hE1xB16suJErMPM2HN5Z0p/ZjCK4Ur2Lwm8a4 L8CpOU1J7ea6XwHteqZbPI1A28lnaY+bNi32dgI4mzWBAoswFrzx3S4L45D+HYhZ CcGlblegRqb2LA== -----END CERTIFICATE-----Generated at Tue Dec 23 16:54:25 2025 by rpki-client