This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft File: StFxca6oV2xDHGN0GGkcnB9VdRY.mft (raw, json) Hash identifier: 7BJ96Tzco0fd27Y/FNPizkZ5SBgUV3s6dxu27xi1Adg= Subject key identifier: 17:97:3B:C9:EC:F5:73:40:84:0F:67:FF:7E:69:B7:49:4F:34:7B:08 Authority key identifier: 4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16 Certificate issuer: /CN=4ad17171aea8576c431c637418691c9c1f557516 Certificate serial: 019B4D3ACE5EEF5E9721080D285D8A55E0DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft Manifest number: 143D Signing time: Tue 23 Dec 2025 22:00:58 +0000 Manifest this update: Tue 23 Dec 2025 22:00:58 +0000 Manifest next update: Wed 24 Dec 2025 22:00:58 +0000 Files and hashes: 1: SHXTlexCU640W6zbYxhCmQn8Cw4.roa (hash: k2ku6jDV9cI0tnwN43DyJg87QMwSJe7N2AG8yOiDsPE=) 2: StFxca6oV2xDHGN0GGkcnB9VdRY.crl (hash: LEVh82y2N8yWM12lpt4ZPN1FJZhxLQ9GbLVDAVkdyEk=) 3: TPLmVhwEw6jgrdMtUuhmz_0dBbo.roa (hash: wGkqaR7oIjPHLb7cXn0PbtIJ1WFfuKuRjd0OcbETY00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:ce:5e:ef:5e:97:21:08:0d:28:5d:8a:55:e0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad17171aea8576c431c637418691c9c1f557516 Validity Not Before: Dec 23 22:00:58 2025 GMT Not After : Dec 24 22:00:58 2025 GMT Subject: CN=17973bc9ecf57340840f67ff7e69b7494f347b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:62:d5:76:59:77:d1:53:58:76:68:33:6a:38: 18:12:ba:de:1f:76:ab:fc:43:c4:f3:b3:3c:be:d9: e4:11:49:92:82:04:f2:a0:e9:08:7b:15:b5:04:3a: ba:24:74:96:24:27:9b:e2:98:90:d1:f5:05:e4:97: e7:69:1f:fc:da:4e:87:6d:fd:3a:d3:a4:06:72:df: 70:19:af:9f:71:5f:cb:c8:f0:98:9e:46:07:ef:d2: 0b:78:4c:f1:d3:1b:c6:98:66:8c:60:f1:10:a1:51: fd:44:2b:05:82:68:ca:27:f9:35:c3:6c:91:de:01: d4:05:ad:d3:62:4a:ec:0c:98:fe:26:08:f4:59:a1: cb:c6:d1:30:4d:da:84:a1:35:b4:9b:6b:69:f5:13: 17:fd:cf:1f:7d:0a:ae:ec:68:62:0e:cc:6e:bf:38: 42:1c:25:19:f2:58:a6:96:e1:74:06:b8:fd:aa:77: 43:51:9c:93:32:62:cb:52:3e:50:fa:85:a7:d8:05: a8:13:e2:53:a5:b8:7d:07:4c:55:fd:d9:57:e8:b3: fa:2c:8f:64:6e:80:b0:43:12:2a:d7:05:7e:02:da: bb:cb:33:a5:16:76:e1:2e:ad:74:b7:0e:45:61:38: 71:df:46:7a:73:11:c0:21:23:01:ee:12:f7:ac:66: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:97:3B:C9:EC:F5:73:40:84:0F:67:FF:7E:69:B7:49:4F:34:7B:08 X509v3 Authority Key Identifier: keyid:4A:D1:71:71:AE:A8:57:6C:43:1C:63:74:18:69:1C:9C:1F:55:75:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StFxca6oV2xDHGN0GGkcnB9VdRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5a3cd1-8109-4c66-8324-4828d65104e1/1/StFxca6oV2xDHGN0GGkcnB9VdRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:42:a8:ee:eb:eb:f4:a2:b6:da:c6:ec:a8:40:56:1c:e6:85: a3:a6:32:a9:1a:7c:85:e3:ec:eb:92:74:7d:45:91:f1:74:bc: 94:f2:a7:7e:a1:70:49:37:c9:63:2c:ef:17:8d:df:fa:52:80: 4b:53:25:5a:dc:30:28:53:f0:7f:b0:4c:c1:d2:76:37:2f:cb: 7b:1c:e7:c0:be:75:ff:28:81:41:e3:9f:2e:d1:1f:6e:20:94: 74:0a:51:37:86:46:25:ba:99:9a:a6:b4:d5:cf:40:e6:1e:0c: 82:6a:26:c0:90:0f:9e:7f:c3:bb:47:ed:6c:c2:00:44:d4:c3: b4:b0:b9:cd:97:3a:b9:47:a1:3a:13:43:ae:76:ab:d7:a1:e4: 1e:45:4d:7f:aa:3d:7a:94:eb:aa:57:06:b6:f0:64:1d:20:06: 1a:4a:9d:ea:bc:98:8b:9f:31:39:03:c3:19:88:bf:52:45:15: f9:ca:09:ab:af:ab:43:36:ef:0b:37:7d:f2:72:55:d5:de:df: f4:2a:be:20:8f:a2:bf:96:3b:10:1d:37:26:89:79:38:22:22: 7d:d3:52:51:7b:58:ee:c2:50:f8:bf:59:d3:5a:5a:82:fb:2e: ab:69:9b:d3:95:29:06:1d:11:f5:91:91:51:a7:05:f3:4c:cf: 16:04:03:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOs5e716XIQgNKF2KVeDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZDE3MTcxYWVhODU3NmM0MzFjNjM3NDE4NjkxYzljMWY1 NTc1MTYwHhcNMjUxMjIzMjIwMDU4WhcNMjUxMjI0MjIwMDU4WjAzMTEwLwYDVQQD EygxNzk3M2JjOWVjZjU3MzQwODQwZjY3ZmY3ZTY5Yjc0OTRmMzQ3YjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22LVdll30VNYdmgzajgYErreH3ar /EPE87M8vtnkEUmSggTyoOkIexW1BDq6JHSWJCeb4piQ0fUF5JfnaR/82k6Hbf06 06QGct9wGa+fcV/LyPCYnkYH79ILeEzx0xvGmGaMYPEQoVH9RCsFgmjKJ/k1w2yR 3gHUBa3TYkrsDJj+Jgj0WaHLxtEwTdqEoTW0m2tp9RMX/c8ffQqu7GhiDsxuvzhC HCUZ8limluF0Brj9qndDUZyTMmLLUj5Q+oWn2AWoE+JTpbh9B0xV/dlX6LP6LI9k boCwQxIq1wV+Atq7yzOlFnbhLq10tw5FYThx30Z6cxHAISMB7hL3rGaXvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeXO8ns9XNAhA9n/35pt0lPNHsIMB8GA1UdIwQY MBaAFErRcXGuqFdsQxxjdBhpHJwfVXUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YTNjZDEtODEwOS00YzY2LTgzMjQt NDgyOGQ2NTEwNGUxLzEvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81YTNjZDEtODEwOS00YzY2LTgzMjQtNDgyOGQ2NTEwNGUx LzEvU3RGeGNhNm9WMnhESEdOMEdHa2NuQjlWZFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUKo7uvr 9KK22sbsqEBWHOaFo6YyqRp8hePs65J0fUWR8XS8lPKnfqFwSTfJYyzvF43f+lKA S1MlWtwwKFPwf7BMwdJ2Ny/LexznwL51/yiBQeOfLtEfbiCUdApRN4ZGJbqZmqa0 1c9A5h4MgmomwJAPnn/Du0ftbMIARNTDtLC5zZc6uUehOhNDrnar16HkHkVNf6o9 epTrqlcGtvBkHSAGGkqd6ryYi58xOQPDGYi/UkUV+coJq6+rQzbvCzd98nJV1d7f 9Cq+II+iv5Y7EB03Jol5OCIifdNSUXtY7sJQ+L9Z01pagvsuq2mb05UpBh0R9ZGR UacF80zPFgQDbA== -----END CERTIFICATE-----Generated at Wed Dec 24 03:38:04 2025 by rpki-client