This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json) Hash identifier: tS/mJOoBxOLgIbMXObM2jmQSQThS+JV1Wq8mYxPIx8A= Subject key identifier: F2:A4:3D:4B:D4:AB:83:A8:BE:38:F7:AD:0E:76:30:79:AE:CF:32:63 Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Certificate serial: 019B3042E07FDC234D612A15A11BE42D1B7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft Manifest number: 05AB Signing time: Thu 18 Dec 2025 07:00:47 +0000 Manifest this update: Thu 18 Dec 2025 07:00:47 +0000 Manifest next update: Fri 19 Dec 2025 07:00:47 +0000 Files and hashes: 1: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=) 2: K4xCdnhBZ_LTp1EUPDVlQMfBXVU.roa (hash: 0SSaEOqC5lcPOFsmccHT1RA1HgUBIU0mV5Hq5IzISvU=) 3: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: Td9a3pgOw1ssUriCxutg33T5/fQ5DhUNo7QUWQvT0LQ=) 4: mR4Z2n-oSu5nW_s21Ev5X8B6AA0.roa (hash: Nu48O4pf7RyMZs46bJTZ1eHTnLF16hGHEGVie8zVALM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:e0:7f:dc:23:4d:61:2a:15:a1:1b:e4:2d:1b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Validity Not Before: Dec 18 07:00:47 2025 GMT Not After : Dec 19 07:00:47 2025 GMT Subject: CN=f2a43d4bd4ab83a8be38f7ad0e763079aecf3263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:79:6c:c5:8e:a2:27:f7:65:26:ea:32:bb: 3f:62:20:fe:c1:95:00:80:7a:7f:b3:17:fb:fb:6c: 5c:ea:c2:b1:78:e6:04:5e:91:4b:97:55:05:94:d2: bc:06:ac:74:fe:cd:fb:5c:d1:31:44:1c:c0:94:ad: 2e:24:61:ad:c1:1b:b8:ae:ef:ae:4b:f0:ec:02:68: 35:d7:ca:d9:33:43:a5:eb:a7:0b:f9:f6:db:25:46: a8:69:4b:78:0a:2d:ec:21:f9:03:95:71:36:49:d7: 38:e9:18:b1:43:4e:d5:77:56:12:2f:62:01:76:2c: 11:17:b2:ce:6d:3a:16:2a:5a:34:70:19:f6:47:fc: da:d1:e3:ff:d7:99:bd:19:d8:90:18:93:af:14:3c: c8:89:62:da:cc:97:25:ae:2a:08:03:3a:82:97:37: e9:95:2e:3c:a5:8a:3d:c5:67:86:b1:a2:78:9b:c0: 42:5e:41:1b:d6:86:0c:a8:c8:69:8d:81:5a:14:64: b0:e8:0d:b1:7d:d1:94:10:1b:1f:db:60:bb:75:1b: 4c:cf:6b:ac:de:3c:bc:2b:dd:74:a3:2e:0a:5f:32: e4:b9:5a:3e:39:93:a6:0b:f9:5e:c2:c4:83:32:51: 23:3a:62:2d:b5:ab:f5:70:fc:d7:df:64:33:89:b0: 2e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A4:3D:4B:D4:AB:83:A8:BE:38:F7:AD:0E:76:30:79:AE:CF:32:63 X509v3 Authority Key Identifier: keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:91:25:5f:dc:a8:f2:41:d2:60:37:e1:1f:a6:6c:b7:c9:5e: 10:2d:ec:c4:79:b7:62:10:17:a9:b8:8e:5a:20:77:e7:3e:dd: da:4c:8b:8e:c4:ae:d7:4d:29:c1:14:7a:50:63:10:bf:15:f7: 29:52:ce:55:ce:67:c9:10:07:d2:48:c4:56:2c:0e:e1:fc:30: cc:14:5b:82:c8:22:3e:e7:ee:e8:df:c4:dc:f9:b4:a5:9e:52: 20:c9:53:73:d4:33:f6:90:2b:00:f0:55:f5:d0:93:11:9d:e2: e1:fc:e4:db:99:89:87:94:2a:ba:a7:eb:2b:89:85:4b:fe:5c: d0:b3:48:48:82:20:e9:16:d9:36:48:8a:d4:23:fe:b7:07:25: f9:c2:5d:da:fc:2b:e6:a0:ff:6d:e1:a1:9e:cb:8f:b0:c9:9d: d6:e3:60:98:2b:53:36:35:e8:67:e3:2b:fb:07:06:d4:39:79: 85:24:b3:24:62:82:dd:f5:6e:c0:2d:91:9c:2a:05:c7:39:01: d0:7e:48:18:71:a9:e7:5b:0f:d3:7e:08:84:58:b8:27:a1:d3: 56:a6:84:93:5e:7a:c5:32:fc:69:c6:a3:c8:f0:43:b4:9e:ca: a1:91:95:b8:3c:73:eb:72:da:8b:29:af:93:ec:e3:d3:c8:2a: f2:12:52:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQuB/3CNNYSoVoRvkLRt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5M2EyZDQ4Mzc2MzMwYTU4MmZhZjNlMzAzMmVmN2IwYmNj YTMzZTgwHhcNMjUxMjE4MDcwMDQ3WhcNMjUxMjE5MDcwMDQ3WjAzMTEwLwYDVQQD EyhmMmE0M2Q0YmQ0YWI4M2E4YmUzOGY3YWQwZTc2MzA3OWFlY2YzMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4h5bMWOoif3ZSbqMrs/YiD+wZUA gHp/sxf7+2xc6sKxeOYEXpFLl1UFlNK8Bqx0/s37XNExRBzAlK0uJGGtwRu4ru+u S/DsAmg118rZM0Ol66cL+fbbJUaoaUt4Ci3sIfkDlXE2Sdc46RixQ07Vd1YSL2IB diwRF7LObToWKlo0cBn2R/za0eP/15m9GdiQGJOvFDzIiWLazJclrioIAzqClzfp lS48pYo9xWeGsaJ4m8BCXkEb1oYMqMhpjYFaFGSw6A2xfdGUEBsf22C7dRtMz2us 3jy8K910oy4KXzLkuVo+OZOmC/lewsSDMlEjOmIttav1cPzX32QzibAu+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKkPUvUq4Oovjj3rQ52MHmuzzJjMB8GA1UdIwQY MBaAFEk6LUg3YzClgvrz4wMu97C8yjPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2Qt Njg5YmE0ZDMzYzRiLzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2QtNjg5YmE0ZDMzYzRi LzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZElX9yo 8kHSYDfhH6Zst8leEC3sxHm3YhAXqbiOWiB35z7d2kyLjsSu100pwRR6UGMQvxX3 KVLOVc5nyRAH0kjEViwO4fwwzBRbgsgiPufu6N/E3Pm0pZ5SIMlTc9Qz9pArAPBV 9dCTEZ3i4fzk25mJh5QquqfrK4mFS/5c0LNISIIg6RbZNkiK1CP+twcl+cJd2vwr 5qD/beGhnsuPsMmd1uNgmCtTNjXoZ+Mr+wcG1Dl5hSSzJGKC3fVuwC2RnCoFxzkB 0H5IGHGp51sP034IhFi4J6HTVqaEk156xTL8acajyPBDtJ7KoZGVuDxz63Laiymv k+zj08gq8hJSrw== -----END CERTIFICATE-----Generated at Thu Dec 18 17:14:37 2025 by rpki-client