This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft File: sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json) Hash identifier: UkmxHEVxSPQLvXsTR5C3mg7adtmdNtg+eJg22CzdyM0= Subject key identifier: 09:63:4A:D3:B1:A2:C6:A3:85:77:D1:F6:D8:1D:74:80:29:96:A9:0E Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90 Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90 Certificate serial: 019AF12E15A883974385DACD238CAD985CF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:00 +0000 Manifest this update: Sat 06 Dec 2025 01:02:00 +0000 Manifest next update: Sun 07 Dec 2025 01:02:00 +0000 Files and hashes: 1: gF7OF-sH3XFh2hq8KjpdxJgt63g.roa (hash: EpA0qsYa3m/WYOamet70LyZkiEfTFAk3SQEWKz+UC8w=) 2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: 3mH/DZ0nHalDwLA1k52S1BS0d5BydUDiCYWxVT0PHPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:15:a8:83:97:43:85:da:cd:23:8c:ad:98:5c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90 Validity Not Before: Dec 6 01:02:00 2025 GMT Not After : Dec 7 01:02:00 2025 GMT Subject: CN=09634ad3b1a2c6a38577d1f6d81d74802996a90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:6a:52:0b:c5:f2:e7:cb:87:e6:0f:ad:8b: 8c:bb:f4:ab:5c:6a:b7:4b:ea:25:df:44:6f:fc:5b: 5d:02:01:6b:d3:27:b1:63:a2:55:d2:37:3d:28:42: 5e:75:93:41:11:a6:ae:6b:10:8f:eb:bb:de:eb:23: 60:fa:85:40:31:0e:e5:fa:2e:76:7c:45:8a:cd:9b: a3:31:9e:98:bc:a5:49:2a:0c:99:58:5c:1c:60:44: b2:52:52:8c:98:ee:30:1d:97:8d:58:ec:4b:91:cc: d0:d2:a6:7b:38:23:7c:53:dc:2e:49:3a:d3:cd:42: 0a:50:25:47:48:02:e1:d3:b2:ff:13:3a:27:fa:18: 40:c7:9d:c0:f4:58:3b:33:48:f5:60:be:b6:69:68: 2c:87:3a:e7:f0:0f:37:f3:d1:c2:30:6d:e8:af:f8: c4:f5:a8:94:d1:bf:c2:32:91:b4:88:45:a3:f2:81: fb:9e:fb:dc:d1:94:d3:f6:17:69:ab:eb:a5:43:13: 6d:79:5c:94:43:2c:1b:7a:7a:af:09:87:db:a9:db: 1e:19:ee:bf:44:d5:fd:12:80:48:72:4b:9b:60:3f: ee:93:4d:be:7e:8f:64:59:7a:4f:d7:08:4d:f3:1c: ba:f3:f6:40:48:99:b9:d3:51:d6:10:fb:a2:59:53: 6d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:63:4A:D3:B1:A2:C6:A3:85:77:D1:F6:D8:1D:74:80:29:96:A9:0E X509v3 Authority Key Identifier: keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e5:cd:49:fb:9a:32:01:da:98:d2:b2:d6:9e:45:df:f2:6b: 8e:be:cd:01:2e:4c:1d:12:54:87:3a:45:7e:c6:9e:bb:33:c9: 4c:a3:13:12:a9:51:3d:e2:46:a8:38:4c:49:29:32:86:22:ba: 4e:f6:f2:56:2f:29:61:a3:f1:59:c2:5f:31:36:e8:6e:bb:80: 30:d3:58:e1:07:ba:3e:af:19:bf:d0:de:bd:f2:2a:3c:0f:2f: cb:3e:59:52:d7:01:df:9a:38:91:9b:07:78:a7:11:d5:2d:58: 16:01:f8:a6:e2:a9:84:e9:ee:39:8c:8b:e2:df:bd:7a:84:d4: 8e:cd:f0:70:4d:1f:b0:92:e7:67:21:f3:14:bf:08:33:0b:a9: 18:9e:32:ea:b4:66:d5:01:8f:9b:d4:1c:bd:fe:09:22:7b:61: 86:4b:d9:77:b7:3f:7b:6a:a0:93:09:50:7a:6a:57:66:fb:c5: fb:b1:89:80:4e:d1:a9:1e:eb:fa:3c:1d:e1:ef:f3:b5:7a:6d: 89:0c:59:ee:9d:a6:db:0d:99:4e:3f:8d:a9:56:cf:bb:ef:29: fd:25:85:fa:72:ba:0c:9f:fa:87:f5:9e:af:5e:2e:25:ec:91: b1:09:06:36:df:07:45:af:19:2b:3b:bc:f9:06:ec:c6:97:05: f5:06:41:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhWog5dDhdrNI4ytmFz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMzA5OWMzOGI2NDc3YTY4Yzk4MDE5ZmY2ZTAwNDA4MDgw NzhiOTAwHhcNMjUxMjA2MDEwMjAwWhcNMjUxMjA3MDEwMjAwWjAzMTEwLwYDVQQD EygwOTYzNGFkM2IxYTJjNmEzODU3N2QxZjZkODFkNzQ4MDI5OTZhOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowNqUgvF8ufLh+YPrYuMu/SrXGq3 S+ol30Rv/FtdAgFr0yexY6JV0jc9KEJedZNBEaauaxCP67ve6yNg+oVAMQ7l+i52 fEWKzZujMZ6YvKVJKgyZWFwcYESyUlKMmO4wHZeNWOxLkczQ0qZ7OCN8U9wuSTrT zUIKUCVHSALh07L/Ezon+hhAx53A9Fg7M0j1YL62aWgshzrn8A8389HCMG3or/jE 9aiU0b/CMpG0iEWj8oH7nvvc0ZTT9hdpq+ulQxNteVyUQywbenqvCYfbqdseGe6/ RNX9EoBIckubYD/uk02+fo9kWXpP1whN8xy68/ZASJm501HWEPuiWVNtpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAljStOxosajhXfR9tgddIAplqkOMB8GA1UdIwQY MBaAFLEwmcOLZHemjJgBn/bgBAgIB4uQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEt Mjg0ZjdjOTYyMmI1LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81OTJjZjAtMDNkZi00ODg2LWIwNjEtMjg0ZjdjOTYyMmI1 LzEvc1RDWnc0dGtkNmFNbUFHZjl1QUVDQWdIaTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+XNSfua MgHamNKy1p5F3/Jrjr7NAS5MHRJUhzpFfsaeuzPJTKMTEqlRPeJGqDhMSSkyhiK6 TvbyVi8pYaPxWcJfMTbobruAMNNY4Qe6Pq8Zv9DevfIqPA8vyz5ZUtcB35o4kZsH eKcR1S1YFgH4puKphOnuOYyL4t+9eoTUjs3wcE0fsJLnZyHzFL8IMwupGJ4y6rRm 1QGPm9Qcvf4JInthhkvZd7c/e2qgkwlQempXZvvF+7GJgE7RqR7r+jwd4e/ztXpt iQxZ7p2m2w2ZTj+NqVbPu+8p/SWF+nK6DJ/6h/Wer14uJeyRsQkGNt8HRa8ZKzu8 +QbsxpcF9QZBtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:53 2025 by rpki-client