This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json) Hash identifier: 1vQW70MeCKDycup3qZTNM6SfScEyybqEfGMxrirwH6Q= Subject key identifier: 05:8A:B0:E6:BA:56:F5:1C:34:09:79:DC:29:31:6C:F4:2C:86:96:25 Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40 Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440 Certificate serial: 019B804C11F13083011D58EB8F1D6CDD441B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft Manifest number: 0CD4 Signing time: Fri 02 Jan 2026 20:00:27 +0000 Manifest this update: Fri 02 Jan 2026 20:00:27 +0000 Manifest next update: Sat 03 Jan 2026 20:00:27 +0000 Files and hashes: 1: Ndo0H8OG8vRSLoifFLdL4WBmDe0.roa (hash: 5hp1DShZ+J7PJA9pLGwqVerUNVFFVAfh1QBYpOplNiw=) 2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: fMSeXfeyZvKS8SHgc8v6knbgwoQXzvnIdW8HH6xzFMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:4c:11:f1:30:83:01:1d:58:eb:8f:1d:6c:dd:44:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440 Validity Not Before: Jan 2 20:00:27 2026 GMT Not After : Jan 3 20:00:27 2026 GMT Subject: CN=058ab0e6ba56f51c340979dc29316cf42c869625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:6e:9e:60:a3:78:6b:0b:dc:e3:48:c7:7f: ae:77:80:c7:4a:f8:54:71:6d:21:c4:7d:8e:62:ff: d7:94:e6:6a:f0:d8:14:54:77:57:92:45:50:21:fb: 53:6e:84:12:4a:4a:8e:6d:1e:7b:40:2c:53:20:74: 98:db:6e:96:93:b4:1c:69:68:26:fd:00:a0:8a:32: ac:81:0f:28:dd:b5:38:54:4c:e3:8a:7b:e0:4a:31: 38:d7:c9:b8:8b:a3:95:3a:72:ab:2d:0d:e3:1f:b1: 37:06:a4:db:de:ce:88:39:16:64:e4:af:9e:08:13: 8c:df:a6:e5:78:29:6c:af:9d:a1:35:f2:1c:82:15: b0:d2:0f:32:55:2f:8e:e8:1a:18:2a:31:f5:e7:7e: b8:cb:a7:da:d3:8e:fa:c5:bc:2a:85:4e:46:e7:e5: 02:25:4f:14:a0:ee:2c:82:73:da:85:9b:d8:67:01: 88:f3:38:44:82:39:d6:be:b5:92:1c:2e:7e:2e:23: 19:8f:25:d0:8b:a4:9d:8c:72:41:d1:63:f9:1e:35: 3f:1a:01:da:1e:1a:19:3b:e2:fe:83:d0:66:e7:ef: e1:c2:bd:fa:db:89:bb:c3:38:96:05:e0:86:c9:78: b3:ed:54:d0:23:9e:07:c5:03:e5:ea:4a:4c:8b:5f: 17:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8A:B0:E6:BA:56:F5:1C:34:09:79:DC:29:31:6C:F4:2C:86:96:25 X509v3 Authority Key Identifier: keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:28:d4:d6:47:24:bf:66:fb:4b:0a:2a:89:15:7c:13:3f:3d: 8b:10:27:7a:f3:8b:08:ea:a8:b7:37:9d:04:7d:5a:e1:6f:40: f2:6b:76:d9:3d:a1:1d:27:60:d5:a3:52:3b:82:a1:d7:23:39: 5e:86:4f:69:1d:2b:f4:25:6d:8f:1a:aa:19:52:75:3d:e1:2c: 5f:83:0d:7a:9a:b6:4c:a9:31:c0:aa:d8:6c:44:b3:8c:46:2b: 0b:f7:db:73:5b:70:93:bf:d1:98:51:b2:96:ed:93:0c:5d:4f: d3:56:59:d1:3c:22:27:66:82:61:4e:f0:75:ac:c2:bc:3c:9c: 73:6b:d7:2d:34:ac:47:2e:c8:40:75:1d:e5:80:0b:f9:c3:e7: 29:12:97:a7:1c:2c:06:56:c1:51:58:76:80:9a:25:80:cd:04: 98:77:56:56:88:9a:cd:75:45:cb:a1:bc:21:dc:8b:0d:67:c3: 5b:db:54:57:1b:94:c0:8b:ea:0b:37:81:70:31:77:b3:87:65: 41:d2:c5:7c:81:70:a7:f3:af:a1:12:e0:bf:07:8b:10:c5:be: 48:3c:57:f0:f2:54:e8:12:50:9e:e5:28:40:05:0c:67:d5:fc: c4:22:5c:a7:ce:22:df:91:e0:6e:d9:07:9a:a7:18:29:ea:0f: 14:65:a8:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuATBHxMIMBHVjrjx1s3UQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZDhhZDAyN2E5Njc0ZWRjOTM2ZTc4YzVkNGQxYjY0OTY0 ZDg0NDAwHhcNMjYwMTAyMjAwMDI3WhcNMjYwMTAzMjAwMDI3WjAzMTEwLwYDVQQD EygwNThhYjBlNmJhNTZmNTFjMzQwOTc5ZGMyOTMxNmNmNDJjODY5NjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqdunmCjeGsL3ONIx3+ud4DHSvhU cW0hxH2OYv/XlOZq8NgUVHdXkkVQIftTboQSSkqObR57QCxTIHSY226Wk7QcaWgm /QCgijKsgQ8o3bU4VEzjinvgSjE418m4i6OVOnKrLQ3jH7E3BqTb3s6IORZk5K+e CBOM36bleClsr52hNfIcghWw0g8yVS+O6BoYKjH15364y6fa0476xbwqhU5G5+UC JU8UoO4sgnPahZvYZwGI8zhEgjnWvrWSHC5+LiMZjyXQi6SdjHJB0WP5HjU/GgHa HhoZO+L+g9Bm5+/hwr3624m7wziWBeCGyXiz7VTQI54HxQPl6kpMi18XyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWKsOa6VvUcNAl53CkxbPQshpYlMB8GA1UdIwQY MBaAFLLYrQJ6lnTtyTbnjF1NG2SWTYRAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4Njgt NzE1MjQ3YzNkY2RjLzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4NjgtNzE1MjQ3YzNkY2Rj LzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSjU1kck v2b7SwoqiRV8Ez89ixAnevOLCOqotzedBH1a4W9A8mt22T2hHSdg1aNSO4Kh1yM5 XoZPaR0r9CVtjxqqGVJ1PeEsX4MNepq2TKkxwKrYbESzjEYrC/fbc1twk7/RmFGy lu2TDF1P01ZZ0TwiJ2aCYU7wdazCvDycc2vXLTSsRy7IQHUd5YAL+cPnKRKXpxws BlbBUVh2gJolgM0EmHdWVoiazXVFy6G8IdyLDWfDW9tUVxuUwIvqCzeBcDF3s4dl QdLFfIFwp/OvoRLgvweLEMW+SDxX8PJU6BJQnuUoQAUMZ9X8xCJcp84i35HgbtkH mqcYKeoPFGWorg== -----END CERTIFICATE-----Generated at Fri Jan 2 21:45:20 2026 by rpki-client