This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json) Hash identifier: +S1vKbtT8SLrQOyk5LZVN2+F/E4LqZK3KPa15Vhuaxs= Subject key identifier: D6:5B:D9:2A:4F:8C:D0:0A:14:BB:80:21:53:09:D1:EA:D7:9C:7A:DC Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Certificate serial: 019B53AA5751E5F0476CAFB50842713D86EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft Manifest number: 06FA Signing time: Thu 25 Dec 2025 04:00:30 +0000 Manifest this update: Thu 25 Dec 2025 04:00:30 +0000 Manifest next update: Fri 26 Dec 2025 04:00:30 +0000 Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=) 2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: zTNiAzYg/mCLdHPErZzhv+g7pKX07GWUWmQX6oKycRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:57:51:e5:f0:47:6c:af:b5:08:42:71:3d:86:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Validity Not Before: Dec 25 04:00:30 2025 GMT Not After : Dec 26 04:00:30 2025 GMT Subject: CN=d65bd92a4f8cd00a14bb80215309d1ead79c7adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:1a:79:a3:c1:ea:40:33:d9:e9:a3:fa:37: 66:56:38:ab:26:c0:1b:66:11:d9:9a:ea:0d:92:23: 5c:9f:ee:f9:a2:ce:17:a6:34:ee:0d:35:71:33:ad: 18:17:2d:0f:ca:22:b8:50:ac:8d:28:a2:7e:12:cd: b8:b3:0b:eb:cd:99:1b:8c:69:89:21:aa:e8:1f:72: a3:85:7a:d5:33:11:39:ed:28:eb:0c:fa:a3:d5:91: 59:ef:a2:1b:ac:4d:09:88:3b:c2:b2:a0:b2:ab:ee: c3:ad:60:d9:81:12:a4:13:7d:9d:48:05:a7:c7:fb: 96:fe:26:e5:29:5e:6e:fc:e3:2f:84:b3:f6:ce:38: 17:df:3e:82:2f:99:8c:c7:e1:1b:73:6f:2f:6c:bb: eb:3b:7b:44:bb:c0:50:fd:93:cd:92:90:b1:ed:bd: 72:24:00:9f:0e:8f:ed:0c:65:e6:cc:14:0f:dc:e3: d2:9c:a9:22:25:23:af:c2:35:ec:82:0e:ae:de:22: bd:b0:66:66:a4:cd:21:59:60:a0:01:2f:d7:f5:b3: 45:8a:8e:c0:69:d2:5e:ea:c4:4a:f7:79:f4:dc:61: 4f:02:49:89:94:8a:7d:a6:2a:c5:f7:23:08:53:03: 6c:d5:bd:a4:64:e8:27:b2:22:7c:62:2b:1f:3e:e4: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5B:D9:2A:4F:8C:D0:0A:14:BB:80:21:53:09:D1:EA:D7:9C:7A:DC X509v3 Authority Key Identifier: keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:19:e2:7a:a1:c3:9c:76:c2:58:70:ac:d6:bf:7f:52:0e:35: 8e:85:c1:a3:03:76:85:5c:7c:b5:7a:b4:52:bc:99:5a:de:5d: 85:69:67:41:96:fb:43:f3:c5:ee:e2:81:59:38:1c:31:a8:49: 33:1e:9d:0a:30:9b:fd:f9:cf:b7:4a:eb:61:8a:c2:7f:72:4e: ae:ca:78:29:46:22:f1:91:b3:dd:69:17:38:3b:41:27:42:b7: 7d:21:c2:ad:49:98:1e:a4:ba:16:8c:e8:6d:0f:d7:56:d1:69: aa:10:dc:cc:1e:d6:77:39:6e:3a:b5:6a:74:bf:ef:e8:26:e0: 64:53:36:aa:31:11:db:74:57:fa:c6:08:0e:e3:53:ff:8d:bd: 85:20:c2:75:6f:ad:32:9c:f4:c0:ad:6f:f4:db:29:67:22:4e: 7b:b3:d3:f3:13:db:02:e6:b8:dc:38:8d:93:09:c9:16:8a:00: 90:a3:10:c9:8e:81:e8:84:0a:93:30:9c:94:5b:ab:83:f9:35: a3:0f:52:ad:d1:46:7a:a4:38:23:6e:51:5b:86:15:9d:60:dc: 6d:8a:b9:15:e5:df:2b:d7:0c:ff:2c:8f:f3:ed:86:98:30:39: b6:93:21:9d:3a:96:59:39:f2:c4:5c:86:49:73:b1:91:31:dc: b5:8e:eb:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqldR5fBHbK+1CEJxPYbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGViMzc2NWY1MzlmMWVjM2YwMDIxM2ZmODM0MDg1Yjdj OGM3NmYwHhcNMjUxMjI1MDQwMDMwWhcNMjUxMjI2MDQwMDMwWjAzMTEwLwYDVQQD EyhkNjViZDkyYTRmOGNkMDBhMTRiYjgwMjE1MzA5ZDFlYWQ3OWM3YWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuEaeaPB6kAz2emj+jdmVjirJsAb ZhHZmuoNkiNcn+75os4XpjTuDTVxM60YFy0PyiK4UKyNKKJ+Es24swvrzZkbjGmJ IaroH3KjhXrVMxE57SjrDPqj1ZFZ76IbrE0JiDvCsqCyq+7DrWDZgRKkE32dSAWn x/uW/iblKV5u/OMvhLP2zjgX3z6CL5mMx+Ebc28vbLvrO3tEu8BQ/ZPNkpCx7b1y JACfDo/tDGXmzBQP3OPSnKkiJSOvwjXsgg6u3iK9sGZmpM0hWWCgAS/X9bNFio7A adJe6sRK93n03GFPAkmJlIp9pirF9yMIUwNs1b2kZOgnsiJ8YisfPuRbpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZb2SpPjNAKFLuAIVMJ0erXnHrcMB8GA1UdIwQY MBaAFLLes3ZfU58ew/ACE/+DQIW3yMdvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYt YzZmNmUzZjI4OTU2LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYtYzZmNmUzZjI4OTU2 LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxnieqHD nHbCWHCs1r9/Ug41joXBowN2hVx8tXq0UryZWt5dhWlnQZb7Q/PF7uKBWTgcMahJ Mx6dCjCb/fnPt0rrYYrCf3JOrsp4KUYi8ZGz3WkXODtBJ0K3fSHCrUmYHqS6Fozo bQ/XVtFpqhDczB7WdzluOrVqdL/v6CbgZFM2qjER23RX+sYIDuNT/429hSDCdW+t Mpz0wK1v9NspZyJOe7PT8xPbAua43DiNkwnJFooAkKMQyY6B6IQKkzCclFurg/k1 ow9SrdFGeqQ4I25RW4YVnWDcbYq5FeXfK9cM/yyP8+2GmDA5tpMhnTqWWTnyxFyG SXOxkTHctY7roQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:08:11 2025 by rpki-client