This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft File: StFxca6oV2xDHGN0GGkcnB9VdRY.mft (raw, json) Hash identifier: eBg5S74h0sPYD17AqI1dn7+DDzclAbwEvwdrgSBMw0E= Subject key identifier: BA:25:DF:82:A6:16:9B:E3:1C:41:20:58:4D:F1:FE:9F:AA:42:A2:79 Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16 Certificate issuer: /CN=4ad17171aea8576c431c637418691c9c1f557516 Certificate serial: 019B3231290FCDB9068709182FAD1B2D337A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft Manifest number: 142F Signing time: Thu 18 Dec 2025 16:00:41 +0000 Manifest this update: Thu 18 Dec 2025 16:00:41 +0000 Manifest next update: Fri 19 Dec 2025 16:00:41 +0000 Files and hashes: 1: SHXTlexCU640W6zbYxhCmQn8Cw4.roa (hash: k2ku6jDV9cI0tnwN43DyJg87QMwSJe7N2AG8yOiDsPE=) 2: StFxca6oV2xDHGN0GGkcnB9VdRY.crl (hash: 0AEag4Bw8qP6mzlrMI/1lTAOmNBCj/3TEda9wfX09iU=) 3: TPLmVhwEw6jgrdMtUuhmz_0dBbo.roa (hash: wGkqaR7oIjPHLb7cXn0PbtIJ1WFfuKuRjd0OcbETY00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:29:0f:cd:b9:06:87:09:18:2f:ad:1b:2d:33:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516 Validity Not Before: Dec 18 16:00:41 2025 GMT Not After : Dec 19 16:00:41 2025 GMT Subject: CN=ba25df82a6169be31c4120584df1fe9faa42a279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:c5:ab:b5:33:41:9e:1e:c8:b7:24:2c:fb: ec:b4:c8:70:87:78:0f:ca:47:df:52:a7:fc:f4:8a: c9:94:1f:2b:6d:3d:f7:4f:de:de:49:33:e2:57:ea: f5:bb:9a:63:94:ff:62:4b:15:88:41:d5:f8:26:ab: 76:4f:7b:21:3d:45:b8:50:e6:7c:61:13:e9:78:14: b3:b7:b1:c1:d6:23:3d:18:20:59:af:56:9a:63:77: 85:6f:99:90:89:84:6b:bc:e7:23:95:e3:cf:12:dc: 6a:2f:ab:3e:cc:17:ab:2d:2c:af:81:e4:9f:91:95: 05:bc:3e:47:ad:b9:c4:20:df:4a:7e:61:2f:3d:08: 3a:37:5a:1f:7f:bc:ae:46:5a:7b:92:d1:0c:81:13: a6:b3:dc:00:3b:16:59:b3:be:b7:1c:c4:6a:12:23: 2c:06:78:c3:4e:75:41:1b:79:39:e0:4b:83:2a:29: af:b6:a6:ad:5d:0d:e4:83:b3:d8:2d:b0:a7:b1:73: 90:ef:02:6f:1a:31:36:1b:8a:53:05:be:08:af:0b: 9f:e7:0f:2e:14:64:b2:3b:3a:79:2d:ee:6e:d0:18: 48:36:a5:e3:9e:1a:83:27:d8:df:f4:8b:4b:c3:45: 0a:a1:4e:6d:35:53:63:dd:2a:aa:00:37:a5:c2:74: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:25:DF:82:A6:16:9B:E3:1C:41:20:58:4D:F1:FE:9F:AA:42:A2:79 X509v3 Authority Key Identifier: keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:78:79:c7:0f:7b:1e:ae:28:9b:cd:07:19:73:a0:eb:c8:0c: ca:68:8b:29:3d:d0:e5:3c:85:42:9b:f3:b0:3c:17:9e:13:d3: a5:ef:99:84:54:38:cf:ae:a5:4c:00:7f:a0:80:a0:f5:59:c5: 4b:c8:b3:f6:e3:f9:a8:aa:0b:0b:41:eb:15:07:69:59:e3:d7: 69:a9:a1:0d:49:02:82:13:dc:8b:34:e4:b0:0b:5d:d0:d7:42: b0:1c:17:e7:69:34:86:35:50:98:26:12:7f:42:00:fc:d7:76: 15:30:0a:3a:3e:41:8f:e6:fc:47:1b:6e:23:ba:27:3c:d6:a6: 49:33:4b:f4:66:b3:7d:0e:31:63:9f:ec:2b:bc:a6:69:17:9d: a2:b8:ff:6a:42:40:0e:dd:a0:12:33:5a:e7:59:c4:ea:69:3a: f1:aa:da:0b:b3:3e:f0:bc:e4:26:da:5b:9e:43:fe:25:c6:a4: 7b:b4:bd:d3:bf:be:ec:25:95:a2:0b:0c:b7:7c:a4:2b:62:9f: 21:f9:af:37:e2:03:c8:88:09:9a:29:71:ef:1e:90:eb:86:ae: 46:f5:59:68:4a:98:36:38:2a:2b:f9:21:85:55:0f:0a:8f:ff: 5b:2c:d9:56:e4:83:ae:3a:30:6a:4a:ce:ae:50:85:d0:23:fe: 08:91:15:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMSkPzbkGhwkYL60bLTN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZDE3MTcxYWVhODU3NmM0MzFjNjM3NDE4NjkxYzljMWY1 NTc1MTYwHhcNMjUxMjE4MTYwMDQxWhcNMjUxMjE5MTYwMDQxWjAzMTEwLwYDVQQD EyhiYTI1ZGY4MmE2MTY5YmUzMWM0MTIwNTg0ZGYxZmU5ZmFhNDJhMjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhbFq7UzQZ4eyLckLPvstMhwh3gP ykffUqf89IrJlB8rbT33T97eSTPiV+r1u5pjlP9iSxWIQdX4Jqt2T3shPUW4UOZ8 YRPpeBSzt7HB1iM9GCBZr1aaY3eFb5mQiYRrvOcjlePPEtxqL6s+zBerLSyvgeSf kZUFvD5HrbnEIN9KfmEvPQg6N1off7yuRlp7ktEMgROms9wAOxZZs763HMRqEiMs BnjDTnVBG3k54EuDKimvtqatXQ3kg7PYLbCnsXOQ7wJvGjE2G4pTBb4Irwuf5w8u FGSyOzp5Le5u0BhINqXjnhqDJ9jf9ItLw0UKoU5tNVNj3SqqADelwnSVbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLol34KmFpvjHEEgWE3x/p+qQqJ5MB8GA1UdIwQY MBaAFErRcXGuqFdsQxxjdBhpHJwfVXUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YTNjZDEtODEwOS00YzY2LTgzMjQt NDgyOGQ2NTEwNGUxLzEvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81YTNjZDEtODEwOS00YzY2LTgzMjQtNDgyOGQ2NTEwNGUx LzEvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXh5xw97 Hq4om80HGXOg68gMymiLKT3Q5TyFQpvzsDwXnhPTpe+ZhFQ4z66lTAB/oICg9VnF S8iz9uP5qKoLC0HrFQdpWePXaamhDUkCghPcizTksAtd0NdCsBwX52k0hjVQmCYS f0IA/Nd2FTAKOj5Bj+b8RxtuI7onPNamSTNL9GazfQ4xY5/sK7ymaRedorj/akJA Dt2gEjNa51nE6mk68araC7M+8LzkJtpbnkP+Jcake7S907++7CWVogsMt3ykK2Kf IfmvN+IDyIgJmilx7x6Q64auRvVZaEqYNjgqK/khhVUPCo//WyzZVuSDrjowakrO rlCF0CP+CJEV8w== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:44 2025 by rpki-client