This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json) Hash identifier: NzFsVFeXRAY5PqJR0miLQmEZ7BNXaiuoZZOtaeLID0I= Subject key identifier: AC:98:EB:4F:29:E2:1C:40:6B:46:CA:D0:3F:3D:08:62:81:63:C7:78 Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Certificate serial: 019B4392B41300E759F0EF3ACD7EE6D03042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft Manifest number: 05B5 Signing time: Mon 22 Dec 2025 01:00:46 +0000 Manifest this update: Mon 22 Dec 2025 01:00:46 +0000 Manifest next update: Tue 23 Dec 2025 01:00:46 +0000 Files and hashes: 1: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=) 2: K4xCdnhBZ_LTp1EUPDVlQMfBXVU.roa (hash: 0SSaEOqC5lcPOFsmccHT1RA1HgUBIU0mV5Hq5IzISvU=) 3: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: sN0TklQm6xd6TlHE6anO0S/VeJ5BS82oap8HEOdiyYM=) 4: mR4Z2n-oSu5nW_s21Ev5X8B6AA0.roa (hash: Nu48O4pf7RyMZs46bJTZ1eHTnLF16hGHEGVie8zVALM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:b4:13:00:e7:59:f0:ef:3a:cd:7e:e6:d0:30:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Validity Not Before: Dec 22 01:00:46 2025 GMT Not After : Dec 23 01:00:46 2025 GMT Subject: CN=ac98eb4f29e21c406b46cad03f3d08628163c778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:e2:27:06:bc:cb:2c:cf:6e:c3:c1:44:f5: 9c:74:4e:20:3f:a4:7f:26:46:15:1f:36:ba:f2:ce: b9:b7:82:a4:3e:c3:89:57:ea:47:61:3f:af:77:fe: ce:30:d1:c5:f3:39:f2:9c:7d:f8:dc:95:cb:cf:92: ca:78:e2:cc:2b:eb:19:bb:91:c1:68:6e:05:b8:cd: e5:cd:bd:45:2a:62:27:b5:22:ca:3d:cb:32:f9:da: 4b:39:d4:a9:46:7b:7a:4e:3d:d6:0e:55:2a:58:bf: de:51:6a:e6:30:6a:03:6d:eb:77:69:0b:e3:07:40: 79:91:ca:24:7a:50:7a:4b:56:8b:d4:bf:d1:58:f5: 4a:70:e8:9c:38:cf:ae:59:a1:ec:ad:8e:d6:41:14: 02:e7:8f:0b:e8:3e:e1:c9:c0:16:cd:72:ea:93:e2: 83:5b:e0:4d:17:b2:11:d3:b0:15:48:3b:1f:fe:94: cf:b8:02:00:e1:a1:8f:55:58:30:05:cf:3e:53:21: 4e:57:fb:da:e0:d8:34:53:57:ca:02:9f:bf:31:09: 3a:b5:94:77:4b:a7:e4:79:80:9c:34:5c:f9:2e:81: e2:0e:fb:30:68:a0:26:6b:77:06:e0:03:53:d3:9f: 55:10:75:d7:03:1e:9b:84:3f:9e:ac:58:38:a4:94: f3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:98:EB:4F:29:E2:1C:40:6B:46:CA:D0:3F:3D:08:62:81:63:C7:78 X509v3 Authority Key Identifier: keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:68:d5:76:50:75:f9:82:20:bd:46:9c:5f:98:0e:9d:42:f5: d8:40:74:1c:98:af:3f:66:8d:af:c6:4b:a0:b3:c0:a7:72:e6: 3e:ca:2a:ac:82:78:e9:5c:ad:13:e1:1d:cf:35:ef:5c:83:b6: 38:00:ff:d1:64:4e:c0:6f:f5:d9:19:c0:5e:ba:79:01:9f:8e: 28:20:d0:03:be:56:69:10:b4:f7:d3:bd:0a:da:8b:b4:92:b2: e8:b8:d4:02:a2:cf:50:90:bf:fc:65:c9:98:73:1d:58:ce:2f: cc:9c:15:99:c8:63:0a:ec:b9:7c:c5:91:8b:72:35:ea:79:57: 72:dd:6e:28:cc:f1:1b:5d:cc:5b:ca:a2:9a:a3:2e:01:dc:87: e7:db:27:dc:8a:b9:56:26:b7:64:9d:7a:d7:9c:91:23:c9:8d: 9a:b9:d3:e6:b8:72:05:6d:89:0d:6f:bd:c3:d1:52:05:c9:48: 18:53:33:96:2c:ac:d3:3e:49:cf:d0:0f:9e:e3:8e:10:47:d3: dd:99:2f:a6:f6:47:52:eb:6f:3b:71:f6:b4:13:46:04:16:99: 9f:32:6a:e9:cc:b2:ac:70:8f:7f:f7:d1:cb:5e:53:60:a7:28: 35:b3:c2:38:80:39:96:23:92:e1:b2:13:b7:50:eb:9b:9d:ba: c9:91:e8:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkrQTAOdZ8O86zX7m0DBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5M2EyZDQ4Mzc2MzMwYTU4MmZhZjNlMzAzMmVmN2IwYmNj YTMzZTgwHhcNMjUxMjIyMDEwMDQ2WhcNMjUxMjIzMDEwMDQ2WjAzMTEwLwYDVQQD EyhhYzk4ZWI0ZjI5ZTIxYzQwNmI0NmNhZDAzZjNkMDg2MjgxNjNjNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgviJwa8yyzPbsPBRPWcdE4gP6R/ JkYVHza68s65t4KkPsOJV+pHYT+vd/7OMNHF8znynH343JXLz5LKeOLMK+sZu5HB aG4FuM3lzb1FKmIntSLKPcsy+dpLOdSpRnt6Tj3WDlUqWL/eUWrmMGoDbet3aQvj B0B5kcokelB6S1aL1L/RWPVKcOicOM+uWaHsrY7WQRQC548L6D7hycAWzXLqk+KD W+BNF7IR07AVSDsf/pTPuAIA4aGPVVgwBc8+UyFOV/va4Ng0U1fKAp+/MQk6tZR3 S6fkeYCcNFz5LoHiDvswaKAma3cG4ANT059VEHXXAx6bhD+erFg4pJTzWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyY608p4hxAa0bK0D89CGKBY8d4MB8GA1UdIwQY MBaAFEk6LUg3YzClgvrz4wMu97C8yjPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2Qt Njg5YmE0ZDMzYzRiLzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2QtNjg5YmE0ZDMzYzRi LzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamjVdlB1 +YIgvUacX5gOnUL12EB0HJivP2aNr8ZLoLPAp3LmPsoqrIJ46VytE+EdzzXvXIO2 OAD/0WROwG/12RnAXrp5AZ+OKCDQA75WaRC099O9CtqLtJKy6LjUAqLPUJC//GXJ mHMdWM4vzJwVmchjCuy5fMWRi3I16nlXct1uKMzxG13MW8qimqMuAdyH59sn3Iq5 Via3ZJ1615yRI8mNmrnT5rhyBW2JDW+9w9FSBclIGFMzliys0z5Jz9APnuOOEEfT 3ZkvpvZHUutvO3H2tBNGBBaZnzJq6cyyrHCPf/fRy15TYKcoNbPCOIA5liOS4bIT t1Drm526yZHoFw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:28:19 2025 by rpki-client