This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft File: st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json) Hash identifier: tFt3T5rAWQnUdiNiTjA0Yj/iPDyNjUF8trJK4FDlYIE= Subject key identifier: E9:52:65:08:ED:1A:7D:5D:2E:79:27:5C:85:7A:B1:DF:09:93:81:53 Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96 Certificate issuer: /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96 Certificate serial: 019B5A88D3454774D4685FA9C1A2C4C0F884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 12:01:15 +0000 Manifest this update: Fri 26 Dec 2025 12:01:15 +0000 Manifest next update: Sat 27 Dec 2025 12:01:15 +0000 Files and hashes: 1: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: Vot7DjM9F6S3AzQtTunaAffJwoFV2Bpo1hICFfVlzPc=) 2: utentqqy5GUX6xjOO70Zx55fsK0.roa (hash: Z4JeWyzB0L9+u00qmx46AQ9h8ajUGAFCIAhK67ja97c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:d3:45:47:74:d4:68:5f:a9:c1:a2:c4:c0:f8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96 Validity Not Before: Dec 26 12:01:15 2025 GMT Not After : Dec 27 12:01:15 2025 GMT Subject: CN=e9526508ed1a7d5d2e79275c857ab1df09938153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:bb:98:d9:82:e5:e0:2e:8a:d5:f0:2f:dd: 61:28:7e:26:94:fd:96:af:93:3e:55:19:28:eb:d7: 2e:cd:c5:d8:a5:35:62:0c:ff:34:4b:01:fc:83:3a: 25:87:98:26:e3:66:59:65:25:3b:9a:ec:f1:82:98: ba:1b:71:23:7d:4d:d9:05:b0:4e:ce:9b:1c:99:21: ab:9a:13:1c:5a:60:47:d3:4d:29:42:05:a4:9f:97: 92:c4:43:79:bf:c4:aa:1c:bc:a0:1b:83:12:d7:91: 9b:08:cb:0e:51:e7:24:8b:5c:ce:6c:e5:3d:24:96: 50:f5:e4:c8:74:89:13:ce:a2:cc:fe:c4:03:b5:fb: 4f:a5:32:f8:af:88:b8:50:81:ac:28:fe:35:be:ff: 6b:c0:be:7a:4d:de:94:53:29:a4:e7:19:5f:73:8d: a4:90:6f:3f:db:ac:25:c5:af:bf:b9:62:29:fa:eb: bb:be:07:ff:15:d8:f8:02:61:d7:29:cb:00:b1:ff: 36:92:1e:eb:88:c0:c2:aa:ec:29:19:8f:a2:cc:dc: d9:2a:d0:4a:1e:15:28:b6:ed:74:dc:90:1b:15:80: de:c7:4c:1c:9a:36:02:7c:e5:97:18:c2:4a:6c:c2: fa:44:85:12:a5:2d:84:f5:f4:60:00:20:f1:89:cc: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:52:65:08:ED:1A:7D:5D:2E:79:27:5C:85:7A:B1:DF:09:93:81:53 X509v3 Authority Key Identifier: keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7d:98:73:a5:7e:f8:c8:40:7c:ac:fc:12:34:a5:ee:4b:d3: 96:7b:21:66:06:84:8c:9f:7c:8c:6a:0b:dc:47:c4:dd:82:17: 6c:18:b7:cd:da:18:cb:30:0c:4a:30:c9:1b:b2:48:b3:f1:cb: 99:ef:17:b3:cb:d2:96:80:fc:4b:5c:ca:fd:a2:07:b8:18:30: 76:3f:37:73:ab:81:d3:62:42:40:3b:21:6b:51:f8:03:ec:de: eb:92:41:17:13:cd:c2:2b:86:2f:c3:1e:0a:b8:67:6e:77:b5: 82:7b:86:46:e5:9b:f5:d4:8f:87:08:14:88:eb:34:c5:73:e7: ff:0c:dc:9c:78:75:0b:15:79:f7:13:ae:f2:fd:d5:05:f0:99: 3b:4c:7d:ac:74:4d:36:5e:6a:97:a4:b2:c5:82:d8:64:a9:e8: d9:78:dd:db:d8:49:e5:06:0a:fe:c1:c0:43:c4:ea:54:15:b0: 36:3a:fa:7a:16:02:0f:16:03:1c:d1:af:84:f7:c6:a6:1c:e5: 9e:d3:c7:6b:37:f9:1e:8b:e4:79:f3:bb:b7:a5:4c:a2:a5:a7: ff:bf:4f:0a:ac:77:0f:0a:42:95:14:55:a3:36:fd:e3:fb:e6: 7e:82:14:fb:09:93:7c:1f:e8:ed:0e:4f:f5:64:72:49:03:0f: f6:ad:f9:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiNNFR3TUaF+pwaLEwPiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGYxYzEzN2Q3ODk0Y2NkYmE3NjhjZWI5NzFjNGQzZGY1 OWZlOTYwHhcNMjUxMjI2MTIwMTE1WhcNMjUxMjI3MTIwMTE1WjAzMTEwLwYDVQQD EyhlOTUyNjUwOGVkMWE3ZDVkMmU3OTI3NWM4NTdhYjFkZjA5OTM4MTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj67mNmC5eAuitXwL91hKH4mlP2W r5M+VRko69cuzcXYpTViDP80SwH8gzolh5gm42ZZZSU7muzxgpi6G3EjfU3ZBbBO zpscmSGrmhMcWmBH000pQgWkn5eSxEN5v8SqHLygG4MS15GbCMsOUecki1zObOU9 JJZQ9eTIdIkTzqLM/sQDtftPpTL4r4i4UIGsKP41vv9rwL56Td6UUymk5xlfc42k kG8/26wlxa+/uWIp+uu7vgf/Fdj4AmHXKcsAsf82kh7riMDCquwpGY+izNzZKtBK HhUotu103JAbFYDex0wcmjYCfOWXGMJKbML6RIUSpS2E9fRgACDxicyatQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlSZQjtGn1dLnknXIV6sd8Jk4FTMB8GA1UdIwQY MBaAFLLfHBN9eJTM26dozrlxxNPfWf6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Q4Y0UzMTRsTXpicDJqT3VYSEUwOTlaX3BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMDY5NTYtZTczMy00NTY0LTk3ODEt ZDBjNGM4NmJiNWZlLzEvc3Q4Y0UzMTRsTXpicDJqT3VYSEUwOTlaX3BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iMDY5NTYtZTczMy00NTY0LTk3ODEtZDBjNGM4NmJiNWZl LzEvc3Q4Y0UzMTRsTXpicDJqT3VYSEUwOTlaX3BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjX2Yc6V+ +MhAfKz8EjSl7kvTlnshZgaEjJ98jGoL3EfE3YIXbBi3zdoYyzAMSjDJG7JIs/HL me8Xs8vSloD8S1zK/aIHuBgwdj83c6uB02JCQDsha1H4A+ze65JBFxPNwiuGL8Me Crhnbne1gnuGRuWb9dSPhwgUiOs0xXPn/wzcnHh1CxV59xOu8v3VBfCZO0x9rHRN Nl5ql6SyxYLYZKno2Xjd29hJ5QYK/sHAQ8TqVBWwNjr6ehYCDxYDHNGvhPfGphzl ntPHazf5HovkefO7t6VMoqWn/79PCqx3DwpClRRVozb94/vmfoIU+wmTfB/o7Q5P 9WRySQMP9q35qg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:16 2025 by rpki-client