This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft File: st8A84zO2SGXmTB2yzaFvzK8Xmk.mft (raw, json) Hash identifier: aei28xKhgXX6wlNwv5VB0auIJJQgfVAyRx5JvngvRPY= Subject key identifier: 4D:BC:64:6E:83:0C:C7:5C:CF:4B:3C:44:75:63:7A:CA:A8:12:A3:4B Authority key identifier: B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69 Certificate issuer: /CN=b2df00f38cced92197993076cb3685bf32bc5e69 Certificate serial: 019B337B69FE1A07F0CBA535B570614436BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft Manifest number: 12EC Signing time: Thu 18 Dec 2025 22:01:24 +0000 Manifest this update: Thu 18 Dec 2025 22:01:24 +0000 Manifest next update: Fri 19 Dec 2025 22:01:24 +0000 Files and hashes: 1: gbTQ5TFLqYdv3bxMQXRQSRcMIoc.roa (hash: rJ5djAjgxTYzs8j0EQsFjkKUrs3CGg0sgiibLKW68Ck=) 2: st8A84zO2SGXmTB2yzaFvzK8Xmk.crl (hash: ysza1sc518/FcVB2ZEoDFtP9hUDceshNrkAeu2TTgIc=) 3: wu3L_A3dWSKUeaU4lbLH5tQFGhs.roa (hash: QMvHM8N7K9OdWcNx9rJFFp+Z7jXiktM21WFlvU4ZxMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:69:fe:1a:07:f0:cb:a5:35:b5:70:61:44:36:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2df00f38cced92197993076cb3685bf32bc5e69 Validity Not Before: Dec 18 22:01:24 2025 GMT Not After : Dec 19 22:01:24 2025 GMT Subject: CN=4dbc646e830cc75ccf4b3c4475637acaa812a34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:dc:fb:5d:79:7f:bd:23:43:1f:66:5d:38: 96:3b:b1:39:c3:ba:28:36:3a:9f:42:c0:a3:77:94: 29:92:5f:6f:37:51:c9:9c:90:55:7e:d5:b5:a0:34: 66:ee:89:6c:e6:f3:0f:8b:f4:98:60:82:f3:8b:d1: 50:e5:55:12:99:b9:b4:e7:57:65:93:c8:99:fe:44: e1:dd:c8:32:98:b9:fa:3c:2a:f5:05:6d:2e:8f:ee: 9b:57:ff:90:f5:8f:0a:1a:e1:99:f0:29:e2:c3:90: 12:48:69:9d:85:7a:13:b7:b6:3f:e9:4e:bd:5d:a8: a1:0e:9e:74:a6:ed:81:f5:54:c4:86:0b:e4:7f:b8: 1e:ac:e7:4e:c2:f9:ce:7d:c2:30:6c:a1:3e:ae:48: fd:01:44:98:07:7a:7e:81:37:89:ef:2c:e2:83:8f: d8:1a:d7:f4:6f:5d:ac:e1:a0:07:26:15:c1:70:71: 7d:fc:f3:1e:18:29:84:5e:ae:93:10:d8:21:e7:98: ed:89:27:da:ce:d6:4e:3c:60:48:03:6e:8e:46:a5: ba:a6:b0:e3:81:05:15:a3:23:a7:ce:de:f2:e7:ec: fe:fd:92:44:0b:18:29:80:61:63:f3:5c:46:7b:63: ab:05:37:92:f4:bc:8f:57:15:ae:77:48:4e:e6:a9: d3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BC:64:6E:83:0C:C7:5C:CF:4B:3C:44:75:63:7A:CA:A8:12:A3:4B X509v3 Authority Key Identifier: keyid:B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:77:00:c4:dd:21:26:68:fd:64:b5:72:83:38:24:34:54:1b: 4d:f9:91:2a:df:41:e5:60:ca:d1:e4:8e:db:23:ad:96:93:cb: a6:aa:60:b6:93:92:ae:fe:a5:f8:b3:97:2c:fe:66:f2:51:1e: e7:3d:43:53:87:b4:84:6c:5e:f0:04:7a:20:26:48:f9:6d:c5: 74:80:6b:1b:ca:fc:02:f0:16:1b:7d:bc:73:33:57:c5:42:d7: 19:86:1c:2d:4f:66:3a:ee:42:06:4c:b4:a4:3b:75:6d:7f:f2: 4a:99:36:0b:01:ad:28:e1:5a:bb:38:e4:cd:28:44:94:d4:9c: 04:e3:72:f1:d5:32:07:b3:fd:d8:60:cd:80:ec:35:94:fd:61: fa:14:13:0b:46:b6:ec:2e:6c:ee:2d:be:61:87:8a:03:f4:da: f8:dd:52:7f:f4:4f:98:83:22:c6:be:b9:04:f7:91:c1:4b:cb: 0c:c4:84:d1:a9:57:66:d5:cf:9c:96:5e:e2:2b:0f:f7:25:ad: f4:1b:bd:f8:70:98:46:b1:98:fe:75:ff:00:f8:ff:9e:c1:36: 55:63:6a:77:d4:e8:84:84:83:f6:9a:e4:97:06:e5:a6:ae:a5: 04:56:7c:68:2b:69:76:d3:dd:a7:46:08:d1:27:9d:a5:a2:f3: b8:c4:10:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze2n+Ggfwy6U1tXBhRDa+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGYwMGYzOGNjZWQ5MjE5Nzk5MzA3NmNiMzY4NWJmMzJi YzVlNjkwHhcNMjUxMjE4MjIwMTI0WhcNMjUxMjE5MjIwMTI0WjAzMTEwLwYDVQQD Eyg0ZGJjNjQ2ZTgzMGNjNzVjY2Y0YjNjNDQ3NTYzN2FjYWE4MTJhMzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprfc+115f70jQx9mXTiWO7E5w7oo NjqfQsCjd5Qpkl9vN1HJnJBVftW1oDRm7ols5vMPi/SYYILzi9FQ5VUSmbm051dl k8iZ/kTh3cgymLn6PCr1BW0uj+6bV/+Q9Y8KGuGZ8Cniw5ASSGmdhXoTt7Y/6U69 XaihDp50pu2B9VTEhgvkf7gerOdOwvnOfcIwbKE+rkj9AUSYB3p+gTeJ7yzig4/Y Gtf0b12s4aAHJhXBcHF9/PMeGCmEXq6TENgh55jtiSfaztZOPGBIA26ORqW6prDj gQUVoyOnzt7y5+z+/ZJECxgpgGFj81xGe2OrBTeS9LyPVxWud0hO5qnTyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE28ZG6DDMdcz0s8RHVjesqoEqNLMB8GA1UdIwQY MBaAFLLfAPOMztkhl5kwdss2hb8yvF5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Q4QTg0ek8yU0dYbVRCMnl6YUZ2eks4WG1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MDZmYTgtNTJhMi00ZWQyLWEyZTEt MDRlNGU0ZGM1ZmJhLzEvc3Q4QTg0ek8yU0dYbVRCMnl6YUZ2eks4WG1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83MDZmYTgtNTJhMi00ZWQyLWEyZTEtMDRlNGU0ZGM1ZmJh LzEvc3Q4QTg0ek8yU0dYbVRCMnl6YUZ2eks4WG1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHcAxN0h Jmj9ZLVygzgkNFQbTfmRKt9B5WDK0eSO2yOtlpPLpqpgtpOSrv6l+LOXLP5m8lEe 5z1DU4e0hGxe8AR6ICZI+W3FdIBrG8r8AvAWG328czNXxULXGYYcLU9mOu5CBky0 pDt1bX/ySpk2CwGtKOFauzjkzShElNScBONy8dUyB7P92GDNgOw1lP1h+hQTC0a2 7C5s7i2+YYeKA/Ta+N1Sf/RPmIMixr65BPeRwUvLDMSE0alXZtXPnJZe4isP9yWt 9Bu9+HCYRrGY/nX/APj/nsE2VWNqd9TohISD9prklwblpq6lBFZ8aCtpdtPdp0YI 0SedpaLzuMQQ+Q== -----END CERTIFICATE-----Generated at Fri Dec 19 06:25:03 2025 by rpki-client