This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json) Hash identifier: 7UnmXxJyMXkMtsgwYgXsjjxAsoC19Y7ULbBuFslQyck= Subject key identifier: 70:F1:65:CE:CA:FB:AA:ED:0B:9B:A9:3E:8C:D9:0A:CD:15:7F:BE:55 Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Certificate serial: 019B41A4692F6EABE9181D3E677BBD522506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft Manifest number: 05B4 Signing time: Sun 21 Dec 2025 16:00:52 +0000 Manifest this update: Sun 21 Dec 2025 16:00:52 +0000 Manifest next update: Mon 22 Dec 2025 16:00:52 +0000 Files and hashes: 1: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=) 2: K4xCdnhBZ_LTp1EUPDVlQMfBXVU.roa (hash: 0SSaEOqC5lcPOFsmccHT1RA1HgUBIU0mV5Hq5IzISvU=) 3: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: A7OEYw4x0Bou4uv+8psxD7P2DOrcG3c8kmbbhJ2MGWQ=) 4: mR4Z2n-oSu5nW_s21Ev5X8B6AA0.roa (hash: Nu48O4pf7RyMZs46bJTZ1eHTnLF16hGHEGVie8zVALM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:69:2f:6e:ab:e9:18:1d:3e:67:7b:bd:52:25:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Validity Not Before: Dec 21 16:00:52 2025 GMT Not After : Dec 22 16:00:52 2025 GMT Subject: CN=70f165cecafbaaed0b9ba93e8cd90acd157fbe55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:c7:74:07:5f:5d:3e:65:a6:3d:d5:32:98: cc:62:f1:b4:38:61:c6:93:af:a4:d6:80:b8:66:55: 2e:4a:df:4f:ff:d7:bb:46:ff:3f:f9:47:ca:81:95: bc:01:ff:ec:29:a5:48:5d:ed:9b:11:5f:e4:b8:70: 29:01:3c:c0:d8:7e:c7:f1:05:eb:cd:a0:38:03:ff: fb:b2:ae:45:7e:09:81:d8:1c:b7:cf:d6:2b:7e:e5: 11:ff:19:65:80:3d:59:da:93:ba:9b:84:d4:13:ee: a9:29:a1:89:ca:8d:3b:cb:e6:22:bc:72:e4:af:60: e5:a2:25:e9:12:fa:6e:45:57:50:d3:48:57:ae:a4: f4:fc:ba:57:55:a8:9a:6e:a6:96:97:e3:ee:04:58: 5c:0a:fb:7d:62:90:7b:03:67:08:a6:35:62:af:d6: 4c:cc:ff:d6:a3:da:f8:11:1a:5b:d2:bf:10:52:39: 75:d6:ce:6d:4f:e7:d7:be:58:ca:2d:90:75:23:d1: 27:6a:3a:dc:fc:6c:a9:37:d5:ba:34:2c:a0:eb:05: 14:46:93:d2:e7:b4:92:29:7e:7c:ab:73:2a:09:f5: fd:53:3c:f2:f7:e2:81:33:31:54:c8:0a:91:b4:5e: a5:ac:88:cb:a5:17:11:34:f2:25:37:b1:49:93:14: a3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F1:65:CE:CA:FB:AA:ED:0B:9B:A9:3E:8C:D9:0A:CD:15:7F:BE:55 X509v3 Authority Key Identifier: keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:68:22:30:a6:45:1a:c1:28:e6:de:e0:b9:84:57:54:d1:1b: 4a:a3:70:cc:d0:55:12:c6:50:66:67:8e:20:84:c4:e5:dd:f6: 0c:64:09:30:81:02:2d:67:65:aa:4f:08:3a:6a:b1:12:9b:63: 3b:6f:08:71:24:fc:db:d1:85:6d:5d:69:14:fd:8a:1c:40:d4: df:50:a9:f1:2d:23:db:a1:55:05:68:ec:c3:b5:7f:68:0c:e5: 61:f3:2c:2b:d2:fb:a3:55:45:2a:34:e0:9f:40:62:a7:9d:bf: 79:0e:51:cd:e7:82:0f:4e:6c:81:17:be:55:49:d4:f9:5d:fa: bd:fa:b5:49:fa:78:ca:a3:3d:e6:60:d8:e3:8a:3d:9e:50:05: fd:0c:07:ad:a9:ef:60:1a:cc:9a:67:77:a1:5c:66:82:1c:22: d1:b1:8a:a3:03:04:f1:d9:99:77:aa:1a:ee:34:d8:ed:a9:50: 70:e0:20:d1:a0:1f:a3:7d:4c:f8:31:79:aa:91:52:41:89:dc: 8b:5d:31:23:ae:2c:d5:f1:03:cb:e5:e2:33:d2:a8:40:38:bf: a9:30:89:86:6c:f7:79:e6:22:94:ed:08:33:f3:cb:2a:74:89: aa:36:bf:c6:cf:74:07:f5:df:54:8c:20:5c:35:36:71:c9:01: 29:4e:cd:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpGkvbqvpGB0+Z3u9UiUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5M2EyZDQ4Mzc2MzMwYTU4MmZhZjNlMzAzMmVmN2IwYmNj YTMzZTgwHhcNMjUxMjIxMTYwMDUyWhcNMjUxMjIyMTYwMDUyWjAzMTEwLwYDVQQD Eyg3MGYxNjVjZWNhZmJhYWVkMGI5YmE5M2U4Y2Q5MGFjZDE1N2ZiZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdDHdAdfXT5lpj3VMpjMYvG0OGHG k6+k1oC4ZlUuSt9P/9e7Rv8/+UfKgZW8Af/sKaVIXe2bEV/kuHApATzA2H7H8QXr zaA4A//7sq5FfgmB2By3z9YrfuUR/xllgD1Z2pO6m4TUE+6pKaGJyo07y+YivHLk r2DloiXpEvpuRVdQ00hXrqT0/LpXVaiabqaWl+PuBFhcCvt9YpB7A2cIpjVir9ZM zP/Wo9r4ERpb0r8QUjl11s5tT+fXvljKLZB1I9Enajrc/GypN9W6NCyg6wUURpPS 57SSKX58q3MqCfX9Uzzy9+KBMzFUyAqRtF6lrIjLpRcRNPIlN7FJkxSj4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDxZc7K+6rtC5upPozZCs0Vf75VMB8GA1UdIwQY MBaAFEk6LUg3YzClgvrz4wMu97C8yjPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2Qt Njg5YmE0ZDMzYzRiLzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2QtNjg5YmE0ZDMzYzRi LzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWgiMKZF GsEo5t7guYRXVNEbSqNwzNBVEsZQZmeOIITE5d32DGQJMIECLWdlqk8IOmqxEptj O28IcST829GFbV1pFP2KHEDU31Cp8S0j26FVBWjsw7V/aAzlYfMsK9L7o1VFKjTg n0Bip52/eQ5RzeeCD05sgRe+VUnU+V36vfq1Sfp4yqM95mDY44o9nlAF/QwHranv YBrMmmd3oVxmghwi0bGKowME8dmZd6oa7jTY7alQcOAg0aAfo31M+DF5qpFSQYnc i10xI64s1fEDy+XiM9KoQDi/qTCJhmz3eeYilO0IM/PLKnSJqja/xs90B/XfVIwg XDU2cckBKU7NtA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:14 2025 by rpki-client