This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft File: St2XYC4ZGOerwfYtz9TaynNJmz4.mft (raw, json) Hash identifier: nEMyFcQFJyXvsrmcsoP1gbgfAMiV38VfMpKVaVh210Q= Subject key identifier: 03:EA:95:CC:F8:08:21:DB:2C:11:4C:ED:4F:38:CA:88:35:31:77:5E Authority key identifier: 4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E Certificate issuer: /CN=4add97602e1918e7abc1f62dcfd4daca73499b3e Certificate serial: 019B5FAF549A731F4D856422CFFBB8B87E55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft Manifest number: 0306 Signing time: Sat 27 Dec 2025 12:01:24 +0000 Manifest this update: Sat 27 Dec 2025 12:01:24 +0000 Manifest next update: Sun 28 Dec 2025 12:01:24 +0000 Files and hashes: 1: St2XYC4ZGOerwfYtz9TaynNJmz4.crl (hash: kqWWGprIJvdEfG3QiwDNAcNJQxTAzkmGcTa/VeudD6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:54:9a:73:1f:4d:85:64:22:cf:fb:b8:b8:7e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4add97602e1918e7abc1f62dcfd4daca73499b3e Validity Not Before: Dec 27 12:01:24 2025 GMT Not After : Dec 28 12:01:24 2025 GMT Subject: CN=03ea95ccf80821db2c114ced4f38ca883531775e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:37:a5:87:0e:08:ba:61:2b:c8:24:b9:ec: d7:1e:e0:08:02:95:44:1a:f4:80:43:99:df:73:6e: 34:db:85:fd:0c:f1:54:72:05:7a:b4:ee:86:9a:94: 35:ff:29:c1:0a:e5:f3:3b:c7:71:80:19:bd:77:c0: 61:24:af:25:23:81:00:ec:77:4e:54:fa:d8:fb:1c: 0c:f5:62:cd:0b:7b:b8:4f:a5:20:23:ca:f4:9e:ba: 32:e7:16:c7:ae:bc:c2:a1:1a:7c:a0:6f:05:e9:e4: 1b:94:73:cc:a5:2b:c2:b0:ff:6c:c7:df:8d:13:14: b2:34:43:bb:63:5b:09:0d:e2:18:99:e7:ee:c5:6f: a1:0c:80:29:da:ea:ff:bb:a5:f9:de:14:eb:35:f3: c0:dc:d2:ca:24:9c:75:c1:ac:37:5c:11:ce:e0:8d: 86:fb:ca:69:9d:f0:47:38:70:ae:8f:d6:db:f2:6a: 4b:d7:ad:4f:98:e1:85:76:b7:90:e1:fd:6c:1e:47: 3e:fb:34:6f:1b:98:f6:7a:9f:ff:ee:d6:c5:ea:91: 23:df:ac:3d:50:53:69:1e:98:b3:fc:61:55:c3:55: 15:36:20:84:e2:3b:fd:21:5a:d6:d6:ae:66:5d:d4: 99:77:12:43:0f:25:4d:a0:2b:a0:9b:56:42:d0:fe: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EA:95:CC:F8:08:21:DB:2C:11:4C:ED:4F:38:CA:88:35:31:77:5E X509v3 Authority Key Identifier: keyid:4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f7:4d:3d:30:a8:b4:dc:24:f3:e4:d1:af:a1:2d:25:5c:b0: 52:45:ab:e3:6f:3f:78:6e:90:a4:90:10:31:5a:99:cd:a5:a7: 9e:47:eb:3e:d4:92:d1:f0:ff:90:29:e3:8e:10:10:93:50:6f: 80:9a:87:ae:3b:6c:0d:d1:17:0c:2b:1a:3c:9b:6c:8a:9f:5f: 21:56:b8:69:6a:cd:e8:af:87:7f:16:2b:aa:64:46:95:b6:76: 70:01:dc:b9:81:77:0a:f1:43:2e:7f:a9:79:8a:fa:7a:d2:83: 12:43:67:be:60:55:fc:a9:9b:4f:9c:37:65:5e:1f:62:cd:de: 92:a7:5e:7d:60:50:b5:79:27:53:63:1f:73:01:0c:7a:f1:1d: 3b:23:ac:b7:8d:04:b8:2e:1d:23:23:b5:93:fe:97:0f:10:c8: f1:08:39:d1:44:8e:29:7a:ca:c9:12:38:c2:cf:ff:c8:9e:15: 71:1b:7a:1a:09:ea:b3:88:c0:04:f6:70:68:af:f0:a5:56:ff: fe:28:58:0c:45:8a:9b:90:35:e6:9d:b2:9b:c5:ac:1b:16:d7: 96:55:6c:85:81:56:26:2f:61:fe:48:ec:ef:ac:45:4c:b9:07: 7f:1e:c8:22:0d:0c:98:71:6f:f2:29:28:0b:0d:3e:34:af:ab: 40:a3:71:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfr1Sacx9NhWQiz/u4uH5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZGQ5NzYwMmUxOTE4ZTdhYmMxZjYyZGNmZDRkYWNhNzM0 OTliM2UwHhcNMjUxMjI3MTIwMTI0WhcNMjUxMjI4MTIwMTI0WjAzMTEwLwYDVQQD EygwM2VhOTVjY2Y4MDgyMWRiMmMxMTRjZWQ0ZjM4Y2E4ODM1MzE3NzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNk3pYcOCLphK8gkuezXHuAIApVE GvSAQ5nfc24024X9DPFUcgV6tO6GmpQ1/ynBCuXzO8dxgBm9d8BhJK8lI4EA7HdO VPrY+xwM9WLNC3u4T6UgI8r0nroy5xbHrrzCoRp8oG8F6eQblHPMpSvCsP9sx9+N ExSyNEO7Y1sJDeIYmefuxW+hDIAp2ur/u6X53hTrNfPA3NLKJJx1waw3XBHO4I2G +8ppnfBHOHCuj9bb8mpL161PmOGFdreQ4f1sHkc++zRvG5j2ep//7tbF6pEj36w9 UFNpHpiz/GFVw1UVNiCE4jv9IVrW1q5mXdSZdxJDDyVNoCugm1ZC0P4HQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPqlcz4CCHbLBFM7U84yog1MXdeMB8GA1UdIwQY MBaAFErdl2AuGRjnq8H2Lc/U2spzSZs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3QyWFlDNFpHT2Vyd2ZZdHo5VGF5bk5KbXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NzU0MmEtZTFhYy00MDE0LTg2ZmUt MTJlNWU4MTczMjAxLzEvU3QyWFlDNFpHT2Vyd2ZZdHo5VGF5bk5KbXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My81NzU0MmEtZTFhYy00MDE0LTg2ZmUtMTJlNWU4MTczMjAx LzEvU3QyWFlDNFpHT2Vyd2ZZdHo5VGF5bk5KbXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffdNPTCo tNwk8+TRr6EtJVywUkWr428/eG6QpJAQMVqZzaWnnkfrPtSS0fD/kCnjjhAQk1Bv gJqHrjtsDdEXDCsaPJtsip9fIVa4aWrN6K+HfxYrqmRGlbZ2cAHcuYF3CvFDLn+p eYr6etKDEkNnvmBV/KmbT5w3ZV4fYs3ekqdefWBQtXknU2MfcwEMevEdOyOst40E uC4dIyO1k/6XDxDI8Qg50USOKXrKyRI4ws//yJ4VcRt6Ggnqs4jABPZwaK/wpVb/ /ihYDEWKm5A15p2ym8WsGxbXllVshYFWJi9h/kjs76xFTLkHfx7IIg0MmHFv8iko Cw0+NK+rQKNx1A== -----END CERTIFICATE-----Generated at Sat Dec 27 17:48:21 2025 by rpki-client