This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json) Hash identifier: TDLgIWSppbDcih107adnU4RCTyevc8VpI+r8hZ92ppk= Subject key identifier: A7:83:0B:A1:5C:D4:E7:0A:07:9D:6F:AC:5F:12:BA:3B:17:09:A3:36 Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1 Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1 Certificate serial: 019B4324BD9C01A54E8E96A0C814C833A19A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft Manifest number: 0CE4 Signing time: Sun 21 Dec 2025 23:00:39 +0000 Manifest this update: Sun 21 Dec 2025 23:00:39 +0000 Manifest next update: Mon 22 Dec 2025 23:00:39 +0000 Files and hashes: 1: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: YPAugnjtwJBRaps/5M2s7Y9V9EWICGFu6/hS2MGIm3M=) 2: ww5W_AzyvORyhz7R6e4M2kGu004.roa (hash: h+p5BWiNgVQT+Ps96Xby3wyi4OgT8Zpuq9hDEAln8lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:bd:9c:01:a5:4e:8e:96:a0:c8:14:c8:33:a1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1 Validity Not Before: Dec 21 23:00:39 2025 GMT Not After : Dec 22 23:00:39 2025 GMT Subject: CN=a7830ba15cd4e70a079d6fac5f12ba3b1709a336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:94:2b:da:9f:75:73:c3:58:75:dc:95:9d: 23:ed:ff:be:41:d1:b1:64:c3:63:ad:1a:04:4b:0c: bd:58:40:4b:83:3b:40:49:aa:34:d2:97:0a:8e:7b: dc:ce:96:ee:27:53:88:bd:8b:cf:34:bf:04:b7:3b: 22:91:84:28:23:48:96:f7:33:e8:fd:69:8e:02:1a: 86:23:cb:43:b8:85:11:8d:d3:19:ac:5e:1b:1f:40: d6:e6:14:d2:cb:5a:e7:9e:3e:09:59:99:8c:39:64: 3d:7c:f2:4c:0f:fb:99:f4:59:47:e2:89:70:83:08: 4a:0f:90:99:61:31:cd:35:d4:52:43:0d:3d:09:8a: 52:3b:1c:cb:63:c2:b2:af:cf:3f:90:9c:ad:e6:92: ef:38:13:61:f5:72:f8:25:85:79:ee:31:80:98:2b: 21:a7:5a:af:9d:72:bc:fc:99:78:1c:d9:e5:f4:80: 55:d9:c3:f6:bb:00:09:4b:43:d1:1a:5e:bb:e8:c0: 1a:94:4c:0e:03:1c:3c:4d:e5:2a:79:1e:3f:74:82: b1:6f:48:5d:08:8d:14:54:e5:32:cd:f5:50:a0:56: db:7e:0f:47:be:e0:5c:dd:70:d7:89:c1:e2:dd:ae: 3d:aa:bc:e3:7f:79:d7:83:09:11:f5:05:8f:70:80: 0f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:83:0B:A1:5C:D4:E7:0A:07:9D:6F:AC:5F:12:BA:3B:17:09:A3:36 X509v3 Authority Key Identifier: keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3a:b0:6e:68:36:da:c6:37:18:09:01:63:a0:5e:82:2a:54: 2c:f6:64:fc:50:f8:5b:f5:8c:1b:8d:22:c3:cd:90:9f:aa:58: 21:c9:0c:5c:df:93:7d:fd:77:a6:93:e6:93:a3:93:40:e6:b0: e0:18:07:e0:51:8b:60:07:72:61:d4:28:33:51:87:bc:7b:05: 31:37:2d:fe:15:5d:04:a8:58:0c:83:e1:2b:e7:8f:95:f6:73: 60:f5:b2:75:28:bf:5b:bb:25:4c:f0:ba:98:3e:3f:24:42:80: 61:87:f1:4a:83:af:46:68:e0:9b:cc:c3:a2:82:ba:04:4f:a0: 39:77:fa:d6:de:bb:60:ee:bb:e4:a9:c5:97:2f:94:58:1f:d0: aa:5c:0b:7f:3b:d4:2c:61:e8:88:f9:60:d8:6e:89:e7:05:e7: ef:d1:fa:cf:f2:1a:26:66:96:8b:2d:9d:bf:a4:bf:71:d1:5e: 45:c7:88:f0:1f:c6:0a:df:f2:fa:07:1e:a0:4f:1b:e8:d3:38: c0:0d:d1:91:d1:d8:4e:b9:fe:6f:08:d5:c3:60:8d:b7:25:6c: 61:60:17:3e:79:31:c8:58:24:15:4d:4d:f4:dc:9a:d4:5d:0e: 03:17:ad:a3:93:99:ea:f3:68:1d:c6:dc:1e:d1:9b:c4:30:30: 0f:13:f5:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJL2cAaVOjpagyBTIM6GaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNGYxMjRjOTFjYWEwY2M5MWMzYjliYjRmOGFkYjA2MzI2 MjI0YTEwHhcNMjUxMjIxMjMwMDM5WhcNMjUxMjIyMjMwMDM5WjAzMTEwLwYDVQQD EyhhNzgzMGJhMTVjZDRlNzBhMDc5ZDZmYWM1ZjEyYmEzYjE3MDlhMzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4iUK9qfdXPDWHXclZ0j7f++QdGx ZMNjrRoESwy9WEBLgztASao00pcKjnvczpbuJ1OIvYvPNL8EtzsikYQoI0iW9zPo /WmOAhqGI8tDuIURjdMZrF4bH0DW5hTSy1rnnj4JWZmMOWQ9fPJMD/uZ9FlH4olw gwhKD5CZYTHNNdRSQw09CYpSOxzLY8Kyr88/kJyt5pLvOBNh9XL4JYV57jGAmCsh p1qvnXK8/Jl4HNnl9IBV2cP2uwAJS0PRGl676MAalEwOAxw8TeUqeR4/dIKxb0hd CI0UVOUyzfVQoFbbfg9HvuBc3XDXicHi3a49qrzjf3nXgwkR9QWPcIAPNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeDC6Fc1OcKB51vrF8SujsXCaM2MB8GA1UdIwQY MBaAFGtPEkyRyqDMkcO5u0+K2wYyYiShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMt YjY1MjYyY2YxOTgzLzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMtYjY1MjYyY2YxOTgz LzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTqwbmg2 2sY3GAkBY6BegipULPZk/FD4W/WMG40iw82Qn6pYIckMXN+Tff13ppPmk6OTQOaw 4BgH4FGLYAdyYdQoM1GHvHsFMTct/hVdBKhYDIPhK+ePlfZzYPWydSi/W7slTPC6 mD4/JEKAYYfxSoOvRmjgm8zDooK6BE+gOXf61t67YO675KnFly+UWB/QqlwLfzvU LGHoiPlg2G6J5wXn79H6z/IaJmaWiy2dv6S/cdFeRceI8B/GCt/y+gceoE8b6NM4 wA3RkdHYTrn+bwjVw2CNtyVsYWAXPnkxyFgkFU1N9Nya1F0OAxeto5OZ6vNoHcbc HtGbxDAwDxP1oQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:51:16 2025 by rpki-client