This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft File: StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json) Hash identifier: b9ftjXFG4YlAED44EdxhN2iC18UbqbrZ8fYh5rSnM9M= Subject key identifier: B3:60:A2:06:50:7D:FD:14:A2:6B:67:DA:A5:0D:FF:6D:72:80:CB:C1 Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24 Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824 Certificate serial: 019B3C0FF300BD9426A8E31B9AFCA49E9928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 14:00:36 +0000 Manifest this update: Sat 20 Dec 2025 14:00:36 +0000 Manifest next update: Sun 21 Dec 2025 14:00:36 +0000 Files and hashes: 1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: Y3Ei1L2FmGQIBon806N1dXKXmMz8ro2Efm3xWNjn6Q0=) 2: aRNIY9aPisPsPJEyhtJc_m061Zk.roa (hash: ah5G0cArNKCIsOUw2/tpkDwad97MIaUDok+u/s4pKjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f3:00:bd:94:26:a8:e3:1b:9a:fc:a4:9e:99:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824 Validity Not Before: Dec 20 14:00:36 2025 GMT Not After : Dec 21 14:00:36 2025 GMT Subject: CN=b360a206507dfd14a26b67daa50dff6d7280cbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:f5:0d:0c:85:6b:05:75:19:56:72:96:7a: b1:c8:24:c2:b8:c9:05:fc:3e:d8:c3:3a:d0:59:11: e1:b7:6e:a6:f6:0d:11:d1:87:7d:78:10:1d:66:33: 90:6d:3d:e2:95:b5:04:13:1f:6a:3a:5b:83:88:68: a0:0b:2a:d5:5a:58:0c:f7:9c:2d:89:0a:21:62:6a: bc:30:41:11:cb:b3:f2:64:68:f7:78:e5:42:3f:c1: 0c:39:62:3b:77:4a:17:5c:6d:23:9d:4b:30:38:f7: 28:45:48:19:1e:60:89:a2:c7:54:c0:16:8f:ce:b4: c7:e5:13:97:88:6e:39:8a:33:38:58:48:93:8e:b1: 41:dd:30:f9:46:39:3e:f3:82:29:25:79:6d:5e:82: ea:46:01:de:dd:88:73:6d:f1:d3:fe:3c:7b:4d:0c: 03:87:c8:23:48:3c:bb:45:43:ae:7a:5c:1e:6e:3f: b5:0b:48:53:7e:e6:ef:0a:99:51:32:65:19:3a:60: 85:ac:ee:d1:18:88:a2:73:68:9a:c6:51:66:ce:b9: f0:fb:bc:c9:87:2d:ce:eb:22:cd:cc:25:06:8d:3e: 5d:da:2d:bb:f2:64:77:a4:f7:8c:2d:d9:db:62:b6: 32:e7:dd:e5:39:3b:4a:b0:7c:1f:10:aa:ba:ae:2e: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:60:A2:06:50:7D:FD:14:A2:6B:67:DA:A5:0D:FF:6D:72:80:CB:C1 X509v3 Authority Key Identifier: keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e3:2e:7e:53:fd:1b:a1:d0:52:59:90:c3:b5:8d:39:93:43: db:9d:8b:27:5a:e3:5a:b6:08:64:bb:15:dd:3e:8e:d2:14:29: 78:b0:7f:6d:89:fc:4b:08:96:de:ee:e9:be:a4:20:10:10:de: 26:fd:9f:d3:42:02:36:60:06:7a:1f:b2:35:29:46:41:83:f9: 78:b3:5c:64:b3:b2:1a:d2:89:5e:5e:98:5f:ab:ba:a7:43:23: 3a:8e:66:37:4d:c4:34:8d:ce:ad:e8:94:9c:92:8d:65:ba:71: 43:45:c9:8f:ef:7e:b1:a2:6d:f9:ad:b2:c1:d0:a9:cd:17:ec: 07:9e:0c:54:27:4b:d0:a7:04:57:7b:ad:fa:6d:22:00:58:25: 39:a2:b8:58:ff:8b:ce:b7:44:1b:35:ab:db:09:bb:83:23:d3: 7b:f1:08:ac:92:21:8e:0d:4b:48:9a:f7:0a:9e:80:be:01:aa: fb:8a:f6:1c:ee:22:3b:51:04:3f:fc:1c:16:f4:05:62:26:68: c2:77:31:a4:7d:7f:40:66:8f:ac:a3:c7:d8:0a:c5:cc:86:61: f4:03:9c:16:1d:73:e5:16:21:66:16:1c:31:09:84:9f:06:24: 1f:5d:22:48:cb:c0:c5:3d:96:11:db:58:e7:08:6c:d3:9c:b6: 6e:b4:f7:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/MAvZQmqOMbmvyknpkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZDFlOTE4NWVhYThiNWM3MWM4OWZhYmU2ZmJlMmFjZjdl YTk4MjQwHhcNMjUxMjIwMTQwMDM2WhcNMjUxMjIxMTQwMDM2WjAzMTEwLwYDVQQD EyhiMzYwYTIwNjUwN2RmZDE0YTI2YjY3ZGFhNTBkZmY2ZDcyODBjYmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvj1DQyFawV1GVZylnqxyCTCuMkF /D7YwzrQWRHht26m9g0R0Yd9eBAdZjOQbT3ilbUEEx9qOluDiGigCyrVWlgM95wt iQohYmq8MEERy7PyZGj3eOVCP8EMOWI7d0oXXG0jnUswOPcoRUgZHmCJosdUwBaP zrTH5ROXiG45ijM4WEiTjrFB3TD5Rjk+84IpJXltXoLqRgHe3YhzbfHT/jx7TQwD h8gjSDy7RUOuelwebj+1C0hTfubvCplRMmUZOmCFrO7RGIiic2iaxlFmzrnw+7zJ hy3O6yLNzCUGjT5d2i278mR3pPeMLdnbYrYy593lOTtKsHwfEKq6ri5z6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNgogZQff0Uomtn2qUN/21ygMvBMB8GA1UdIwQY MBaAFErR6Rheqotcccifq+b74qz36pgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMt YzM4NjY5YjM3YjllLzEvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMtYzM4NjY5YjM3Yjll LzEvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeMuflP9 G6HQUlmQw7WNOZND252LJ1rjWrYIZLsV3T6O0hQpeLB/bYn8SwiW3u7pvqQgEBDe Jv2f00ICNmAGeh+yNSlGQYP5eLNcZLOyGtKJXl6YX6u6p0MjOo5mN03ENI3OreiU nJKNZbpxQ0XJj+9+saJt+a2ywdCpzRfsB54MVCdL0KcEV3ut+m0iAFglOaK4WP+L zrdEGzWr2wm7gyPTe/EIrJIhjg1LSJr3Cp6AvgGq+4r2HO4iO1EEP/wcFvQFYiZo wncxpH1/QGaPrKPH2ArFzIZh9AOcFh1z5RYhZhYcMQmEnwYkH10iSMvAxT2WEdtY 5whs05y2brT3nw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:54 2025 by rpki-client