This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json) Hash identifier: 5BCA+0LoK2ivivVhDomWu/Sd4nsJiSii/yqgnriPNMA= Subject key identifier: 56:AD:39:BD:CC:DC:F1:FC:E1:93:3F:64:C2:FF:EF:C6:0A:E2:87:C3 Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Certificate serial: 019B4DDF2DEF1AAC63D90D995DF820120AB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft Manifest number: 06F7 Signing time: Wed 24 Dec 2025 01:00:30 +0000 Manifest this update: Wed 24 Dec 2025 01:00:30 +0000 Manifest next update: Thu 25 Dec 2025 01:00:30 +0000 Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=) 2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: /nS6xgFbHA1Nz9cU8WQwtYkE900s+smZf58timG4XCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:2d:ef:1a:ac:63:d9:0d:99:5d:f8:20:12:0a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Validity Not Before: Dec 24 01:00:30 2025 GMT Not After : Dec 25 01:00:30 2025 GMT Subject: CN=56ad39bdccdcf1fce1933f64c2ffefc60ae287c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:3b:9f:1d:16:e2:39:82:59:42:da:87:57: 9a:6f:b0:0e:91:3c:6a:3b:19:32:0c:5d:f3:6a:3e: 88:cf:03:4b:18:24:57:ae:77:c2:6b:ff:c6:8b:05: 60:e9:ea:4d:e2:4d:34:ca:87:3b:ef:2e:ae:05:a5: a9:d9:3d:f3:a5:52:41:19:c6:48:b3:1b:aa:25:65: 4d:6a:bb:e9:b9:39:af:1d:70:6c:0d:ac:a8:f3:10: 5c:e2:b9:d5:11:1e:66:e3:c9:12:73:ef:cd:0a:71: bb:37:d8:ea:a1:62:0d:d9:b5:66:81:38:56:98:d3: 39:7a:93:17:de:ee:12:be:68:07:04:eb:11:db:1e: a0:6b:c6:f4:ac:bf:d1:07:c7:e9:8e:e9:98:c2:67: 0c:f0:8c:c7:2d:c5:ee:fb:d1:5a:05:02:51:78:2f: f6:41:0c:3c:f8:70:d3:f0:60:73:d5:ee:1f:42:23: 74:05:3e:71:a5:01:07:fb:c0:2c:b7:b2:7b:08:ba: d0:ae:0d:62:a4:7b:74:6c:a7:a9:38:51:e9:97:28: e4:eb:0f:a7:9e:78:c2:4f:53:eb:36:6b:f5:bc:30: c3:ea:04:f1:20:9d:85:52:a5:61:e3:d7:de:48:01: 9b:66:0d:e7:72:0b:d5:de:82:63:e9:2a:21:da:6a: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AD:39:BD:CC:DC:F1:FC:E1:93:3F:64:C2:FF:EF:C6:0A:E2:87:C3 X509v3 Authority Key Identifier: keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bc:98:08:73:d6:b2:79:10:ab:db:da:44:0f:af:60:c2:e0: 96:5b:eb:ad:e8:43:35:aa:99:35:f9:8e:cc:98:3c:57:c4:d9: 55:dd:b7:da:4e:45:bb:50:fc:b2:82:cd:d1:fb:4d:66:37:58: a7:67:24:3b:15:b6:aa:19:ce:8c:47:f9:f2:b5:99:56:fc:9e: d2:d6:77:06:61:ea:dc:19:90:d0:b6:f1:2b:a6:3f:63:83:bc: 05:e2:05:01:46:cd:38:bc:1e:dd:4d:a1:51:00:7e:20:9e:72: 4b:8c:f0:15:c5:84:b4:f7:34:b7:be:57:36:cc:32:82:63:f8: d8:5d:66:73:e0:10:2f:e2:20:b9:cc:21:94:aa:60:b2:49:3e: 00:ce:7d:26:69:8c:63:71:e0:d1:09:de:52:67:a9:1e:bd:38: 30:a6:05:a0:81:22:0c:7b:70:60:9a:0a:37:48:e4:8f:80:93: 03:2d:dd:bf:2b:ec:a1:bb:ae:ee:ad:63:48:b0:ba:23:1a:4c: 46:4f:29:00:b8:c7:dc:aa:eb:77:c5:12:45:cb:41:b7:92:32: 6c:e8:ba:b0:e8:f5:de:90:68:60:0e:ae:b3:f0:76:41:3f:76: b2:54:ff:0e:03:81:70:6a:89:13:1e:96:f2:dd:75:8a:20:cb: b7:12:f8:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN3y3vGqxj2Q2ZXfggEgqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGViMzc2NWY1MzlmMWVjM2YwMDIxM2ZmODM0MDg1Yjdj OGM3NmYwHhcNMjUxMjI0MDEwMDMwWhcNMjUxMjI1MDEwMDMwWjAzMTEwLwYDVQQD Eyg1NmFkMzliZGNjZGNmMWZjZTE5MzNmNjRjMmZmZWZjNjBhZTI4N2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMg7nx0W4jmCWULah1eab7AOkTxq OxkyDF3zaj6IzwNLGCRXrnfCa//GiwVg6epN4k00yoc77y6uBaWp2T3zpVJBGcZI sxuqJWVNarvpuTmvHXBsDayo8xBc4rnVER5m48kSc+/NCnG7N9jqoWIN2bVmgThW mNM5epMX3u4SvmgHBOsR2x6ga8b0rL/RB8fpjumYwmcM8IzHLcXu+9FaBQJReC/2 QQw8+HDT8GBz1e4fQiN0BT5xpQEH+8Ast7J7CLrQrg1ipHt0bKepOFHplyjk6w+n nnjCT1PrNmv1vDDD6gTxIJ2FUqVh49feSAGbZg3ncgvV3oJj6Soh2mqmCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFatOb3M3PH84ZM/ZML/78YK4ofDMB8GA1UdIwQY MBaAFLLes3ZfU58ew/ACE/+DQIW3yMdvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYt YzZmNmUzZjI4OTU2LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYtYzZmNmUzZjI4OTU2 LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaryYCHPW snkQq9vaRA+vYMLgllvrrehDNaqZNfmOzJg8V8TZVd232k5Fu1D8soLN0ftNZjdY p2ckOxW2qhnOjEf58rWZVvye0tZ3BmHq3BmQ0LbxK6Y/Y4O8BeIFAUbNOLwe3U2h UQB+IJ5yS4zwFcWEtPc0t75XNswygmP42F1mc+AQL+IgucwhlKpgskk+AM59JmmM Y3Hg0QneUmepHr04MKYFoIEiDHtwYJoKN0jkj4CTAy3dvyvsobuu7q1jSLC6IxpM Rk8pALjH3Krrd8USRctBt5IybOi6sOj13pBoYA6us/B2QT92slT/DgOBcGqJEx6W 8t11iiDLtxL4uQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:39:11 2025 by rpki-client