This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json) Hash identifier: msrvgMhE+voCEhKMqlb4wxe9Xnhf1jwNQGC1Abgl9Ok= Subject key identifier: FF:5D:1C:11:51:D3:65:46:61:65:F1:2F:0B:B2:CA:7F:EA:F7:46:25 Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Certificate serial: 019B405AD2CC2E2340F6A195480A32434C18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft Manifest number: 06F0 Signing time: Sun 21 Dec 2025 10:00:52 +0000 Manifest this update: Sun 21 Dec 2025 10:00:52 +0000 Manifest next update: Mon 22 Dec 2025 10:00:52 +0000 Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=) 2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: eKVAgNOrZnC2H24lsJq6PJrK6SOXFHFNt1um7jq00Cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:d2:cc:2e:23:40:f6:a1:95:48:0a:32:43:4c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Validity Not Before: Dec 21 10:00:52 2025 GMT Not After : Dec 22 10:00:52 2025 GMT Subject: CN=ff5d1c1151d365466165f12f0bb2ca7feaf74625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:4b:ce:b9:f4:06:2b:2e:02:c7:07:f2:08: 47:0c:bb:c5:a7:58:a4:09:0c:51:62:c8:50:c8:14: 13:a3:d5:a9:22:54:4a:7b:ee:56:fb:08:4c:08:ac: d0:b0:63:c3:c2:2f:37:9b:e5:04:6c:79:ea:23:54: 19:f3:20:23:d7:e4:92:44:74:cb:9d:45:b6:a2:41: 8e:a0:76:7c:0a:9c:ab:ac:0e:ce:16:4b:7b:16:20: 44:c8:27:2c:ff:49:4c:fe:70:62:1d:96:64:80:f9: e1:78:ca:14:fe:6e:52:b3:90:8a:ac:13:fc:23:d8: c5:42:45:cb:1c:1a:a5:ed:c1:6e:8b:b9:03:f6:21: c2:f6:41:39:05:0b:1e:b5:3d:a9:0d:10:47:d0:7f: 53:50:e7:57:ea:bc:91:b7:4e:d7:3d:6a:ec:3a:a8: 5d:16:91:10:19:42:45:e8:81:55:22:69:53:20:e9: bb:8a:5b:0a:80:ae:9e:6c:d2:af:fd:8a:fc:57:18: b0:f8:93:29:0e:34:4c:38:a6:1c:4a:f6:db:bf:6b: d0:79:c2:74:76:4d:21:75:d6:e1:5e:b9:85:dd:ea: 7c:e1:42:43:06:21:cc:8c:94:2f:b9:b2:f8:c9:99: 68:7b:9a:2c:09:cd:33:24:b2:0e:b5:35:e0:72:74: d6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5D:1C:11:51:D3:65:46:61:65:F1:2F:0B:B2:CA:7F:EA:F7:46:25 X509v3 Authority Key Identifier: keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6d:a1:d5:3f:3c:ed:9d:b3:b6:5e:31:20:31:23:14:a4:de: 9f:30:25:21:89:0a:26:be:9d:0a:d5:7f:0e:dd:35:a2:35:1b: 36:bc:ff:21:a2:56:c4:8a:48:8b:d6:52:c1:08:a2:50:19:a7: a4:a8:75:aa:12:87:7c:fd:89:2b:c1:07:a8:78:f3:48:07:ee: 69:57:07:e5:f2:b9:e6:a0:4f:0a:50:60:d8:6f:e7:71:f2:fa: 04:5b:65:c1:19:4f:f5:6a:2b:2b:04:77:30:6c:fa:51:fe:95: 9c:02:45:15:51:ee:69:34:41:b3:94:dd:dc:68:97:87:82:6d: 5b:a4:5f:8b:a2:0a:8c:a3:f3:97:48:f1:29:d7:9f:38:b9:ad: b2:36:e7:22:8a:6a:07:ab:aa:a9:a4:58:f6:e1:f9:21:87:68: ae:b8:c1:fe:31:f1:f7:a4:6e:ac:6c:2d:3a:d2:7c:c0:47:fa: a5:53:4d:31:67:0d:ae:c2:e8:a2:47:f7:ac:e8:ea:9b:d8:cc: 0a:c8:1e:c5:32:9b:c5:47:10:0b:16:89:2f:71:23:b9:60:73: 8b:92:7d:b9:91:d6:59:72:f3:5f:6f:39:66:4e:7e:7c:75:38: 83:b8:e9:a2:ae:a7:ed:06:41:4a:25:68:4d:45:eb:06:84:06: 7f:8e:4c:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWtLMLiNA9qGVSAoyQ0wYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGViMzc2NWY1MzlmMWVjM2YwMDIxM2ZmODM0MDg1Yjdj OGM3NmYwHhcNMjUxMjIxMTAwMDUyWhcNMjUxMjIyMTAwMDUyWjAzMTEwLwYDVQQD EyhmZjVkMWMxMTUxZDM2NTQ2NjE2NWYxMmYwYmIyY2E3ZmVhZjc0NjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnxLzrn0BisuAscH8ghHDLvFp1ik CQxRYshQyBQTo9WpIlRKe+5W+whMCKzQsGPDwi83m+UEbHnqI1QZ8yAj1+SSRHTL nUW2okGOoHZ8CpyrrA7OFkt7FiBEyCcs/0lM/nBiHZZkgPnheMoU/m5Ss5CKrBP8 I9jFQkXLHBql7cFui7kD9iHC9kE5BQsetT2pDRBH0H9TUOdX6ryRt07XPWrsOqhd FpEQGUJF6IFVImlTIOm7ilsKgK6ebNKv/Yr8Vxiw+JMpDjRMOKYcSvbbv2vQecJ0 dk0hddbhXrmF3ep84UJDBiHMjJQvubL4yZloe5osCc0zJLIOtTXgcnTWgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9dHBFR02VGYWXxLwuyyn/q90YlMB8GA1UdIwQY MBaAFLLes3ZfU58ew/ACE/+DQIW3yMdvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYt YzZmNmUzZjI4OTU2LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYtYzZmNmUzZjI4OTU2 LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAm2h1T88 7Z2ztl4xIDEjFKTenzAlIYkKJr6dCtV/Dt01ojUbNrz/IaJWxIpIi9ZSwQiiUBmn pKh1qhKHfP2JK8EHqHjzSAfuaVcH5fK55qBPClBg2G/ncfL6BFtlwRlP9WorKwR3 MGz6Uf6VnAJFFVHuaTRBs5Td3GiXh4JtW6Rfi6IKjKPzl0jxKdefOLmtsjbnIopq B6uqqaRY9uH5IYdorrjB/jHx96RurGwtOtJ8wEf6pVNNMWcNrsLookf3rOjqm9jM CsgexTKbxUcQCxaJL3EjuWBzi5J9uZHWWXLzX285Zk5+fHU4g7jpoq6n7QZBSiVo TUXrBoQGf45MFA== -----END CERTIFICATE-----Generated at Sun Dec 21 18:36:02 2025 by rpki-client