This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft File: sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft (raw, json) Hash identifier: i010grWp5UnSLgljz+wXEY/Gr1i1Slks2GD1i3SIYE4= Subject key identifier: 1E:0D:34:54:08:42:58:C3:2F:2D:D0:11:8E:51:D8:B7:11:C7:62:A2 Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77 Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277 Certificate serial: 019B698E22D67B5933CF5A4110C9777A0D3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft Manifest number: 17A2 Signing time: Mon 29 Dec 2025 10:01:21 +0000 Manifest this update: Mon 29 Dec 2025 10:01:21 +0000 Manifest next update: Tue 30 Dec 2025 10:01:21 +0000 Files and hashes: 1: 00GJlkuxjT-xB1LSuZloHmKQPmA.roa (hash: 9a/Biy4j/OZlZRXYUZR8+r88dbkZ+LAsW+76+eBVauw=) 2: mcZ_wFiKJ5ceIsgC2BUu4MFFKQo.roa (hash: T2KHfDIrrN3cj+Vf6WCXsB4RoiQ2FgY7quTVSGHtuCI=) 3: sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl (hash: c2h/UMZDzPby5y04rMoDaa1D3AzRjPRXsSIeMHjyw0c=) 4: wgdhruz0xtRxWdWf--i6dPU1wQE.roa (hash: WcvpeOu2J24CdapCRKlSln4v+gu+O2IeoZu5OdQe1GY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:8e:22:d6:7b:59:33:cf:5a:41:10:c9:77:7a:0d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277 Validity Not Before: Dec 29 10:01:21 2025 GMT Not After : Dec 30 10:01:21 2025 GMT Subject: CN=1e0d3454084258c32f2dd0118e51d8b711c762a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:ec:94:4c:a0:6a:7a:98:36:59:55:7d:dc: 24:5a:17:45:c6:93:7a:15:f6:de:8c:70:79:5f:ae: e4:ac:7a:eb:c9:f3:0f:12:83:82:e5:64:08:86:5e: f6:21:c7:ed:93:86:e9:b8:57:6c:9e:e9:be:97:d9: 11:a9:5f:02:0e:e5:5d:08:40:c3:46:84:4e:6e:79: 15:66:38:0b:24:a4:2a:22:a6:89:08:29:52:05:07: 8e:e0:05:03:54:3c:bc:15:e9:e4:97:82:b3:72:7a: 5f:ef:da:5a:a5:30:a0:34:1c:33:2d:27:4b:83:44: a2:12:99:40:91:c2:7b:ab:22:0a:63:51:a7:15:55: 7d:f4:1e:cb:22:05:ed:bb:58:5f:2a:36:0c:58:be: 45:86:42:e6:a4:fc:3f:8e:b0:74:30:c2:77:16:f8: 7c:f0:e3:22:d1:a4:d1:4b:d6:c3:e0:5a:09:bf:36: 73:a4:d5:84:51:39:f0:22:4e:8a:12:a3:3f:58:91: e3:07:2f:9f:9b:01:cd:93:0a:80:4e:38:27:40:32: f7:19:01:73:c5:b7:a0:b4:a7:e2:08:45:dc:51:d9: df:b1:07:e5:aa:96:88:ea:46:7f:05:6d:37:31:fa: dc:ed:bd:19:06:b4:3d:1c:60:65:28:54:29:05:29: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0D:34:54:08:42:58:C3:2F:2D:D0:11:8E:51:D8:B7:11:C7:62:A2 X509v3 Authority Key Identifier: keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:51:49:63:29:c1:01:16:67:7a:a8:4a:1c:94:3b:39:f5:35: 40:80:52:2c:6e:71:43:ec:b5:e9:ca:a7:fd:31:fa:31:b6:f1: 10:f3:e9:29:b2:89:84:b9:b2:ae:9a:d7:a7:dc:03:25:ef:0e: 05:08:59:53:57:2c:92:f3:9e:d2:62:8a:9a:99:cc:f2:f4:8c: 7d:8f:31:48:b4:10:20:50:ed:26:95:bf:85:5e:7f:8b:9e:14: df:11:01:a8:65:e3:dd:38:84:79:fa:3b:72:d9:2a:01:b7:d7: 0b:f3:87:e1:68:a9:25:f5:bc:41:d6:f7:5a:3c:dd:98:86:74: f4:ca:fc:13:67:49:82:74:27:13:d9:a1:64:ad:29:93:20:3b: eb:8e:7d:3d:98:06:1e:5b:53:ef:eb:5d:34:0e:63:38:cd:e9: 28:bb:d7:6e:58:70:f5:d8:af:0e:55:1b:99:9d:26:07:1d:ad: c7:a1:33:e8:2c:7c:d5:d3:ef:61:22:00:09:1c:fa:0a:ad:4f: e3:0e:21:52:c1:9b:11:35:5f:b6:98:a4:a0:43:29:2b:bb:94: a6:b6:f9:af:fb:39:0d:22:fc:d4:6f:ee:48:98:54:95:b4:fb: f8:bf:84:ee:9b:cd:fd:d8:e4:1c:24:b7:79:85:a6:90:60:7d: c4:03:a3:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpjiLWe1kzz1pBEMl3eg0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMzUzNzc5MDFhNzg3MWQzYmZmN2E3MDI3N2EyZjRlMmZj MGUyNzcwHhcNMjUxMjI5MTAwMTIxWhcNMjUxMjMwMTAwMTIxWjAzMTEwLwYDVQQD EygxZTBkMzQ1NDA4NDI1OGMzMmYyZGQwMTE4ZTUxZDhiNzExYzc2MmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbfslEyganqYNllVfdwkWhdFxpN6 FfbejHB5X67krHrryfMPEoOC5WQIhl72Icftk4bpuFdsnum+l9kRqV8CDuVdCEDD RoRObnkVZjgLJKQqIqaJCClSBQeO4AUDVDy8Fenkl4Kzcnpf79papTCgNBwzLSdL g0SiEplAkcJ7qyIKY1GnFVV99B7LIgXtu1hfKjYMWL5FhkLmpPw/jrB0MMJ3Fvh8 8OMi0aTRS9bD4FoJvzZzpNWEUTnwIk6KEqM/WJHjBy+fmwHNkwqATjgnQDL3GQFz xbegtKfiCEXcUdnfsQflqpaI6kZ/BW03Mfrc7b0ZBrQ9HGBlKFQpBSn6twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4NNFQIQljDLy3QEY5R2LcRx2KiMB8GA1UdIwQY MBaAFLE1N3kBp4cdO/96cCd6L04vwOJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1RVM2VRR25oeDA3XzNwd0ozb3ZUaV9BNG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi80NjVjNDAtNjcxOC00ZWE5LTkxZTUt OTEyMDQ3MTUzZTAxLzEvc1RVM2VRR25oeDA3XzNwd0ozb3ZUaV9BNG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi80NjVjNDAtNjcxOC00ZWE5LTkxZTUtOTEyMDQ3MTUzZTAx LzEvc1RVM2VRR25oeDA3XzNwd0ozb3ZUaV9BNG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1FJYynB ARZneqhKHJQ7OfU1QIBSLG5xQ+y16cqn/TH6MbbxEPPpKbKJhLmyrprXp9wDJe8O BQhZU1cskvOe0mKKmpnM8vSMfY8xSLQQIFDtJpW/hV5/i54U3xEBqGXj3TiEefo7 ctkqAbfXC/OH4WipJfW8Qdb3WjzdmIZ09Mr8E2dJgnQnE9mhZK0pkyA76459PZgG HltT7+tdNA5jOM3pKLvXblhw9divDlUbmZ0mBx2tx6Ez6Cx81dPvYSIACRz6Cq1P 4w4hUsGbETVftpikoEMpK7uUprb5r/s5DSL81G/uSJhUlbT7+L+E7pvN/djkHCS3 eYWmkGB9xAOjJw== -----END CERTIFICATE-----Generated at Mon Dec 29 18:01:15 2025 by rpki-client