This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft File: StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json) Hash identifier: bfdyGSx4or8DvnZDh+7Srup/4dnpe38i+xazAVhCvuA= Subject key identifier: BF:88:37:6A:80:36:50:B7:18:24:43:F6:45:94:39:F9:06:A3:D6:A2 Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24 Certificate issuer: /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824 Certificate serial: 019B0FA53C6F1653A121702373192E53D3CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 23:00:45 +0000 Manifest this update: Thu 11 Dec 2025 23:00:45 +0000 Manifest next update: Fri 12 Dec 2025 23:00:45 +0000 Files and hashes: 1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: 1iUarlTOJbJwSeHkklJx3Lgh7ctfNp0h1OBZsLS4hj0=) 2: aRNIY9aPisPsPJEyhtJc_m061Zk.roa (hash: ah5G0cArNKCIsOUw2/tpkDwad97MIaUDok+u/s4pKjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:3c:6f:16:53:a1:21:70:23:73:19:2e:53:d3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824 Validity Not Before: Dec 11 23:00:45 2025 GMT Not After : Dec 12 23:00:45 2025 GMT Subject: CN=bf88376a803650b7182443f6459439f906a3d6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:c3:b1:b5:fd:07:f0:90:5b:c2:3a:20:64: 31:77:34:4a:ee:ff:25:6c:a7:50:37:99:6a:cb:8d: 73:d2:e5:27:44:15:ba:63:d9:6d:2e:67:a6:13:6d: c0:39:8e:a2:6c:4c:17:52:95:5a:b3:b4:3d:bd:0c: cb:1e:e1:59:46:ff:71:03:fe:0c:ce:15:c6:10:08: f4:fb:ac:10:05:24:b2:11:b1:dc:ce:97:c6:bb:e6: d7:4d:2f:f5:1f:d7:e2:9f:e4:19:fd:7e:9c:2d:99: 61:f8:af:47:ee:45:f8:f7:42:99:ea:06:ef:6d:fb: 79:65:24:44:ca:2e:33:7f:5f:09:fb:99:be:42:74: 23:e5:f2:1d:ab:18:eb:28:b6:0c:ac:97:9f:90:d5: cf:de:48:be:78:6c:54:7b:fb:fd:d9:71:af:74:d5: e8:62:fe:d3:ba:1d:8c:54:6e:dc:d4:f0:39:88:b4: 68:2a:30:0b:b9:a6:fb:07:bf:a8:cc:af:96:8b:b4: f8:5e:84:9f:83:49:1d:35:3e:18:66:72:7c:15:43: 2f:17:55:c2:a3:ee:c1:ed:7f:fb:d4:ba:f6:da:ad: 4e:2e:01:d1:8c:4e:cc:61:8e:76:c2:a2:4e:99:ed: 1d:c7:85:e1:23:22:e1:73:d0:3a:1f:fe:d1:ae:50: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:88:37:6A:80:36:50:B7:18:24:43:F6:45:94:39:F9:06:A3:D6:A2 X509v3 Authority Key Identifier: keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:33:74:1f:21:c5:0a:9b:b1:14:ff:c9:c1:cf:f3:e6:92:84: 85:96:c0:c8:09:0e:6e:0f:23:34:e1:e7:ff:c9:7c:04:52:d3: 46:78:21:e7:7f:44:77:56:86:c1:fd:f8:82:f6:3e:a9:ca:f9: de:4c:73:68:fc:db:b2:6c:52:06:09:4e:25:71:f1:d9:c8:76: 17:6b:a9:d1:f1:2f:bb:63:e9:e6:ad:6d:a4:8a:08:d8:ee:02: d2:a1:ad:ec:2d:cf:57:f3:5b:6e:17:dc:90:d8:f3:1f:09:8e: 20:46:ea:b5:c4:80:6a:72:64:e2:d9:47:e9:06:76:ba:9c:34: ce:fe:27:75:41:62:3c:82:72:30:0a:45:48:c4:38:04:00:a3: c8:72:e9:39:75:43:3e:e6:11:71:28:9a:d9:f8:12:bb:a3:4f: 12:d1:9b:f3:81:01:4b:d6:f8:20:77:98:b3:11:57:7a:bb:38: c0:8a:81:71:8e:dc:8a:6c:a0:28:d4:39:85:9e:f9:3b:c8:b1: 2a:00:b5:4d:90:7a:3d:1a:10:56:ff:55:e3:9d:b1:ed:89:d5: ee:56:c8:00:32:b6:82:7a:63:2e:72:d6:c6:1d:95:96:a5:ca: 14:6a:45:da:2a:c1:21:3b:ab:71:8d:08:c1:02:88:0d:6b:cf: 4d:71:18:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpTxvFlOhIXAjcxkuU9PMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZDFlOTE4NWVhYThiNWM3MWM4OWZhYmU2ZmJlMmFjZjdl YTk4MjQwHhcNMjUxMjExMjMwMDQ1WhcNMjUxMjEyMjMwMDQ1WjAzMTEwLwYDVQQD EyhiZjg4Mzc2YTgwMzY1MGI3MTgyNDQzZjY0NTk0MzlmOTA2YTNkNmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZzDsbX9B/CQW8I6IGQxdzRK7v8l bKdQN5lqy41z0uUnRBW6Y9ltLmemE23AOY6ibEwXUpVas7Q9vQzLHuFZRv9xA/4M zhXGEAj0+6wQBSSyEbHczpfGu+bXTS/1H9fin+QZ/X6cLZlh+K9H7kX490KZ6gbv bft5ZSREyi4zf18J+5m+QnQj5fIdqxjrKLYMrJefkNXP3ki+eGxUe/v92XGvdNXo Yv7Tuh2MVG7c1PA5iLRoKjALuab7B7+ozK+Wi7T4XoSfg0kdNT4YZnJ8FUMvF1XC o+7B7X/71Lr22q1OLgHRjE7MYY52wqJOme0dx4XhIyLhc9A6H/7RrlDvBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+IN2qANlC3GCRD9kWUOfkGo9aiMB8GA1UdIwQY MBaAFErR6Rheqotcccifq+b74qz36pgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMt YzM4NjY5YjM3YjllLzEvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMtYzM4NjY5YjM3Yjll LzEvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3DN0HyHF CpuxFP/Jwc/z5pKEhZbAyAkObg8jNOHn/8l8BFLTRngh539Ed1aGwf34gvY+qcr5 3kxzaPzbsmxSBglOJXHx2ch2F2up0fEvu2Pp5q1tpIoI2O4C0qGt7C3PV/Nbbhfc kNjzHwmOIEbqtcSAanJk4tlH6QZ2upw0zv4ndUFiPIJyMApFSMQ4BACjyHLpOXVD PuYRcSia2fgSu6NPEtGb84EBS9b4IHeYsxFXers4wIqBcY7cimygKNQ5hZ75O8ix KgC1TZB6PRoQVv9V452x7YnV7lbIADK2gnpjLnLWxh2VlqXKFGpF2irBITurcY0I wQKIDWvPTXEY2Q== -----END CERTIFICATE-----Generated at Fri Dec 12 05:13:00 2025 by rpki-client