This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json) Hash identifier: 2YLMTAp+UkjJ+4LwtJlY1kyFcXleiHJm5CV2zQ+c+1c= Subject key identifier: CF:9B:CD:7F:BE:09:BD:74:35:58:21:6E:FA:BC:80:89:30:D5:D8:66 Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40 Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440 Certificate serial: 019B397DD0CCCB34B3CCFE370E14022A0210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft Manifest number: 0CAF Signing time: Sat 20 Dec 2025 02:01:45 +0000 Manifest this update: Sat 20 Dec 2025 02:01:45 +0000 Manifest next update: Sun 21 Dec 2025 02:01:45 +0000 Files and hashes: 1: j7tAtkU7X16dxo0q2axkpmgR2Jg.roa (hash: ee9X5e2Gsq7S7vtFMXjQ62kSEkjJdHkxbRMmxnYqFY4=) 2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: 2JRyf5eEN95ukbyTMck5XJv0NELCqz5JE/dFXruJfZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:d0:cc:cb:34:b3:cc:fe:37:0e:14:02:2a:02:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440 Validity Not Before: Dec 20 02:01:45 2025 GMT Not After : Dec 21 02:01:45 2025 GMT Subject: CN=cf9bcd7fbe09bd743558216efabc808930d5d866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:72:de:7c:0e:54:82:16:87:ac:ad:b0:29:b8: c3:9f:df:8c:ab:f7:1c:54:2e:26:8a:fc:77:28:0b: 9f:34:9b:aa:c3:c2:e0:a6:2f:6a:7f:3a:ab:e9:4c: cb:11:23:57:b3:06:b3:19:a2:f1:27:3f:35:e2:28: cf:f0:5d:00:36:37:71:27:06:87:98:ff:e5:e4:a4: 69:64:72:28:52:b3:c0:0f:b9:71:ff:61:7d:06:45: 6f:94:56:1b:3b:34:11:e2:4e:99:28:ce:2c:31:c7: 4d:ff:7b:ce:4a:a7:6d:35:00:03:23:c8:c5:08:63: 6f:93:08:15:7a:ed:4b:7f:48:dc:ed:34:32:b5:07: 01:00:e4:2d:f7:cd:55:32:e9:56:41:be:4d:6b:4a: 9a:5a:07:ea:35:ae:9e:7c:7d:07:e7:75:9c:94:ae: 54:68:ab:18:ec:dd:d6:eb:79:5a:6a:5d:2a:7d:41: 37:79:79:ae:2e:31:a1:72:69:e8:98:71:fb:ae:aa: e7:07:1d:5a:c5:9a:62:3d:70:eb:98:15:62:25:96: b7:36:d8:38:78:22:6a:8e:fa:47:45:fc:72:ef:05: 95:cd:02:49:f1:1f:7a:4e:e7:d2:c9:f2:b7:59:be: c3:52:6c:e4:25:76:07:f0:e7:a6:38:03:9f:81:5f: 57:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9B:CD:7F:BE:09:BD:74:35:58:21:6E:FA:BC:80:89:30:D5:D8:66 X509v3 Authority Key Identifier: keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:01:1b:90:c7:aa:a5:4d:fa:f2:e8:6f:11:be:20:ac:ad:46: c8:70:b9:25:ce:a2:d5:1e:fd:0b:6f:a6:ab:bc:88:ff:81:8d: db:cd:86:8a:dc:31:9f:45:71:a5:31:08:90:04:ee:ed:da:72: 06:27:75:02:8e:e2:19:5a:b8:0f:a1:dd:d7:91:db:58:46:a4: c5:08:49:93:d8:5f:76:88:75:ac:9c:74:80:37:a9:1b:0f:66: 55:25:c8:bb:ca:14:67:33:f3:fc:15:21:6b:ec:47:53:7e:98: c7:96:8e:d9:23:f2:ec:7f:4b:7d:50:f4:7d:06:0d:40:57:f6: 3e:e9:91:4d:9d:cc:aa:1c:2a:ad:1b:56:22:9f:11:c4:7b:25: 7d:7c:aa:02:67:e4:7e:70:cf:52:67:37:d3:29:de:45:8b:b2: 09:da:02:99:09:25:53:ca:d6:6b:be:fb:13:b7:90:5b:1d:4e: 15:7f:37:78:f9:77:d3:df:25:4d:aa:d6:51:6f:0e:c4:7d:50: fb:98:b3:e3:30:c8:82:17:76:a1:75:43:d4:31:85:2f:4d:b7: 92:1a:fd:a1:49:24:4f:6d:2a:0f:7d:fb:63:3b:7f:ab:4a:05: e7:8c:e1:9c:69:76:d1:95:be:f4:ea:95:84:10:49:69:c3:fd: 9e:4f:54:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fdDMyzSzzP43DhQCKgIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZDhhZDAyN2E5Njc0ZWRjOTM2ZTc4YzVkNGQxYjY0OTY0 ZDg0NDAwHhcNMjUxMjIwMDIwMTQ1WhcNMjUxMjIxMDIwMTQ1WjAzMTEwLwYDVQQD EyhjZjliY2Q3ZmJlMDliZDc0MzU1ODIxNmVmYWJjODA4OTMwZDVkODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HLefA5UghaHrK2wKbjDn9+Mq/cc VC4mivx3KAufNJuqw8Lgpi9qfzqr6UzLESNXswazGaLxJz814ijP8F0ANjdxJwaH mP/l5KRpZHIoUrPAD7lx/2F9BkVvlFYbOzQR4k6ZKM4sMcdN/3vOSqdtNQADI8jF CGNvkwgVeu1Lf0jc7TQytQcBAOQt981VMulWQb5Na0qaWgfqNa6efH0H53WclK5U aKsY7N3W63laal0qfUE3eXmuLjGhcmnomHH7rqrnBx1axZpiPXDrmBViJZa3Ntg4 eCJqjvpHRfxy7wWVzQJJ8R96TufSyfK3Wb7DUmzkJXYH8OemOAOfgV9XNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+bzX++Cb10NVghbvq8gIkw1dhmMB8GA1UdIwQY MBaAFLLYrQJ6lnTtyTbnjF1NG2SWTYRAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4Njgt NzE1MjQ3YzNkY2RjLzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4NjgtNzE1MjQ3YzNkY2Rj LzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgEbkMeq pU368uhvEb4grK1GyHC5Jc6i1R79C2+mq7yI/4GN282Gitwxn0VxpTEIkATu7dpy Bid1Ao7iGVq4D6Hd15HbWEakxQhJk9hfdoh1rJx0gDepGw9mVSXIu8oUZzPz/BUh a+xHU36Yx5aO2SPy7H9LfVD0fQYNQFf2PumRTZ3MqhwqrRtWIp8RxHslfXyqAmfk fnDPUmc30yneRYuyCdoCmQklU8rWa777E7eQWx1OFX83ePl3098lTarWUW8OxH1Q +5iz4zDIghd2oXVD1DGFL023khr9oUkkT20qD337Yzt/q0oF54zhnGl20ZW+9OqV hBBJacP9nk9UJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:33:13 2025 by rpki-client