This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft File: stNBgAdlZtcr7mHzoybFbgq7gEo.mft (raw, json) Hash identifier: qhd7VXZVif94CA5Rezt0pwzuE1uvHxMB3KGZdTftj3k= Subject key identifier: 92:45:F6:4D:95:1C:64:BA:77:EE:8E:9B:4C:B3:57:9A:B5:5C:4A:5A Authority key identifier: B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A Certificate issuer: /CN=b2d34180076566d72bee61f3a326c56e0abb804a Certificate serial: 019B72915D786FA016CD5B4FFB15C97B98F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft Manifest number: 107D Signing time: Wed 31 Dec 2025 04:01:27 +0000 Manifest this update: Wed 31 Dec 2025 04:01:27 +0000 Manifest next update: Thu 01 Jan 2026 04:01:27 +0000 Files and hashes: 1: stNBgAdlZtcr7mHzoybFbgq7gEo.crl (hash: y/H0JVfeFsi3AAzJ330CWPgnuOEXWD0cDe2rwVx6RlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:5d:78:6f:a0:16:cd:5b:4f:fb:15:c9:7b:98:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2d34180076566d72bee61f3a326c56e0abb804a Validity Not Before: Dec 31 04:01:27 2025 GMT Not After : Jan 1 04:01:27 2026 GMT Subject: CN=9245f64d951c64ba77ee8e9b4cb3579ab55c4a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:61:25:48:7a:f1:05:1e:80:c7:4e:12:ce: a1:a4:84:80:e2:7b:99:70:a4:60:16:ef:a4:d7:ca: 00:29:16:ac:0e:8c:22:f5:dc:41:52:b4:c2:13:ab: 0a:17:6b:47:87:d6:0a:47:f0:84:a0:a4:1e:89:c4: a5:99:5d:a2:e4:bd:e9:c5:e3:c7:81:02:01:5f:42: 29:9f:00:2b:76:70:88:86:b1:e6:22:dc:79:75:08: ae:45:ed:ca:38:a5:2f:fa:3f:7d:1f:aa:bf:4d:09: 14:0a:5b:01:d9:3f:9b:a8:e2:a0:a6:92:cd:b1:2c: 96:d6:b3:13:e2:b6:11:e8:4d:e3:16:90:19:3a:ef: c2:99:6f:4a:50:51:75:fa:86:f2:39:25:d8:64:1e: 1c:d0:92:d8:9f:c3:03:76:bd:fe:2b:12:f0:08:18: df:4e:20:d6:20:08:28:b4:c8:32:ff:31:73:77:f2: b0:70:a6:c2:ee:f5:50:b5:0f:50:79:93:7d:26:1f: 0a:ad:b6:05:55:35:32:eb:e8:4b:cb:20:9c:3d:9e: 8a:c8:c4:d1:eb:7a:86:1b:73:ed:98:77:2a:9c:9b: c6:f1:e4:28:e8:47:56:b3:c3:42:8b:34:d6:3d:8c: d9:76:ee:36:14:d4:d3:f1:ae:0e:a2:f1:ea:c0:f5: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:45:F6:4D:95:1C:64:BA:77:EE:8E:9B:4C:B3:57:9A:B5:5C:4A:5A X509v3 Authority Key Identifier: keyid:B2:D3:41:80:07:65:66:D7:2B:EE:61:F3:A3:26:C5:6E:0A:BB:80:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stNBgAdlZtcr7mHzoybFbgq7gEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bbf773-67f9-4be5-95cb-70d7f8f4925a/1/stNBgAdlZtcr7mHzoybFbgq7gEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b7:a0:43:f7:dd:e9:94:8d:9f:d9:b8:8b:45:ed:24:f4:c5: 7a:7a:85:5b:0b:d7:8b:0a:9a:50:06:15:9d:6b:e9:0f:25:22: 9b:77:38:48:1e:42:c4:f6:63:e7:f7:92:62:c9:24:9e:55:48: 20:cd:37:d8:1b:e7:f8:ec:09:1a:32:d0:ad:11:a3:14:fa:d1: ce:4b:17:a7:6a:ed:b0:c6:1f:ff:ee:48:a6:eb:81:0a:98:04: 1a:29:18:e2:65:80:f6:49:c2:03:c1:b2:33:23:e7:b0:f7:39: 9c:29:5e:4a:7e:5c:6a:fb:47:09:67:43:12:91:f1:d2:79:34: 4d:f9:18:9b:c1:60:96:87:18:2f:d8:e7:15:5e:07:77:f0:31: 33:c4:c4:41:94:ad:e4:45:7b:a3:13:8d:30:3c:cd:6b:06:3c: a5:a0:f3:cd:96:37:25:80:47:2c:32:ef:5e:07:62:dd:f1:63: 10:f3:fc:df:63:3e:96:91:ee:50:4f:cb:c4:d7:b1:55:7c:b1: da:24:7f:98:d4:6c:7d:0c:21:19:16:b7:f0:e9:73:8b:0a:44: 72:a5:40:eb:8f:69:3b:1a:80:f1:fe:34:64:5c:2d:62:91:f5: ee:84:19:2a:c5:3b:f0:65:01:36:09:71:1d:14:a1:29:88:b0: 97:6b:0e:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykV14b6AWzVtP+xXJe5jyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZDM0MTgwMDc2NTY2ZDcyYmVlNjFmM2EzMjZjNTZlMGFi YjgwNGEwHhcNMjUxMjMxMDQwMTI3WhcNMjYwMTAxMDQwMTI3WjAzMTEwLwYDVQQD Eyg5MjQ1ZjY0ZDk1MWM2NGJhNzdlZThlOWI0Y2IzNTc5YWI1NWM0YTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXdhJUh68QUegMdOEs6hpISA4nuZ cKRgFu+k18oAKRasDowi9dxBUrTCE6sKF2tHh9YKR/CEoKQeicSlmV2i5L3pxePH gQIBX0IpnwArdnCIhrHmItx5dQiuRe3KOKUv+j99H6q/TQkUClsB2T+bqOKgppLN sSyW1rMT4rYR6E3jFpAZOu/CmW9KUFF1+obyOSXYZB4c0JLYn8MDdr3+KxLwCBjf TiDWIAgotMgy/zFzd/KwcKbC7vVQtQ9QeZN9Jh8KrbYFVTUy6+hLyyCcPZ6KyMTR 63qGG3PtmHcqnJvG8eQo6EdWs8NCizTWPYzZdu42FNTT8a4OovHqwPVsvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJF9k2VHGS6d+6Om0yzV5q1XEpaMB8GA1UdIwQY MBaAFLLTQYAHZWbXK+5h86MmxW4Ku4BKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3ROQmdBZGxadGNyN21Iem95YkZiZ3E3Z0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYmY3NzMtNjdmOS00YmU1LTk1Y2It NzBkN2Y4ZjQ5MjVhLzEvc3ROQmdBZGxadGNyN21Iem95YkZiZ3E3Z0VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iYmY3NzMtNjdmOS00YmU1LTk1Y2ItNzBkN2Y4ZjQ5MjVh LzEvc3ROQmdBZGxadGNyN21Iem95YkZiZ3E3Z0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGregQ/fd 6ZSNn9m4i0XtJPTFenqFWwvXiwqaUAYVnWvpDyUim3c4SB5CxPZj5/eSYskknlVI IM032Bvn+OwJGjLQrRGjFPrRzksXp2rtsMYf/+5IpuuBCpgEGikY4mWA9knCA8Gy MyPnsPc5nCleSn5cavtHCWdDEpHx0nk0TfkYm8FglocYL9jnFV4Hd/AxM8TEQZSt 5EV7oxONMDzNawY8paDzzZY3JYBHLDLvXgdi3fFjEPP832M+lpHuUE/LxNexVXyx 2iR/mNRsfQwhGRa38OlziwpEcqVA649pOxqA8f40ZFwtYpH17oQZKsU78GUBNglx HRShKYiwl2sOJg== -----END CERTIFICATE-----Generated at Wed Dec 31 05:21:36 2025 by rpki-client