This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft File: STotSDdjMKWC-vPjAy73sLzKM-g.mft (raw, json) Hash identifier: n1nk47FfF0C/zvkhpIsrPJBzGey5lFNMRTMm7CezFEE= Subject key identifier: 6B:DB:17:FF:AB:5E:A6:BC:C5:31:B2:4A:96:B4:D2:27:E5:20:1E:AE Authority key identifier: 49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 Certificate issuer: /CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Certificate serial: 019AF2768A62E474A2212F66846D39BE4758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft Manifest number: 058B Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: GXnQPnuqnvBWk7kpONau-2u0RoQ.roa (hash: uxonlVe7DqVs73Mq5GsJwlXeQ95X/yFAybekoDtId+I=) 2: K4xCdnhBZ_LTp1EUPDVlQMfBXVU.roa (hash: 0SSaEOqC5lcPOFsmccHT1RA1HgUBIU0mV5Hq5IzISvU=) 3: STotSDdjMKWC-vPjAy73sLzKM-g.crl (hash: iGtE/j8h9ne23BWxim4CwtXAxll5vr4yKKpW0dPWaAk=) 4: mR4Z2n-oSu5nW_s21Ev5X8B6AA0.roa (hash: Nu48O4pf7RyMZs46bJTZ1eHTnLF16hGHEGVie8zVALM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8a:62:e4:74:a2:21:2f:66:84:6d:39:be:47:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493a2d48376330a582faf3e3032ef7b0bcca33e8 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=6bdb17ffab5ea6bcc531b24a96b4d227e5201eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:eb:0b:a4:ec:ab:42:3d:66:2c:22:d9:2f: 01:d9:7f:aa:dc:f0:55:59:6d:bd:32:b6:d3:8e:e0: 29:02:bd:dc:cf:d8:c0:dd:d1:fb:df:20:d3:40:0b: 87:fb:b0:2d:df:30:cb:bd:44:b8:27:57:7d:b3:68: 08:69:b4:6a:d1:b5:f1:12:3c:2b:88:f9:41:c2:18: 0a:47:68:96:bf:0a:ec:e5:4e:e2:41:5c:9c:ea:f9: 20:61:37:e2:6d:1e:da:30:c7:43:84:90:b3:ae:4d: 23:ef:7e:2b:14:4f:fb:72:ed:3c:d3:14:ad:da:0c: b6:37:4d:23:c5:85:4a:f3:77:90:50:9e:ba:bf:62: b0:ea:d3:12:7a:fc:30:48:57:d8:8b:57:a6:99:e4: 25:14:b5:a6:09:07:76:12:ce:0e:85:c6:0c:86:2c: ba:b2:88:e3:ed:aa:46:1b:75:df:10:61:c7:26:c0: 6b:d8:6a:06:24:e1:4e:ba:20:08:6d:e8:e0:b0:2c: 4a:a1:a2:58:bc:76:53:34:12:84:2f:74:6d:e3:40: e5:2e:13:9c:a7:f4:24:cd:ec:51:d1:fd:10:ff:0b: d9:10:e5:40:0f:b3:94:a5:5b:5a:82:44:e0:d0:ee: 7b:7d:20:fc:3e:1a:59:d0:f1:99:8c:d6:3f:5e:a2: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DB:17:FF:AB:5E:A6:BC:C5:31:B2:4A:96:B4:D2:27:E5:20:1E:AE X509v3 Authority Key Identifier: keyid:49:3A:2D:48:37:63:30:A5:82:FA:F3:E3:03:2E:F7:B0:BC:CA:33:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STotSDdjMKWC-vPjAy73sLzKM-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d765a4-54eb-410d-8f3d-689ba4d33c4b/1/STotSDdjMKWC-vPjAy73sLzKM-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:13:cc:44:67:54:b0:b8:56:77:17:bc:2d:44:15:65:52:23: 9b:3a:64:d6:31:a4:b0:1b:24:d1:4b:0e:70:c7:d7:3a:a8:1f: d6:7a:f8:8b:86:bb:42:67:54:4a:3a:6e:04:df:12:39:70:8b: c4:24:15:0e:24:eb:9b:c6:b8:24:cf:84:03:d5:42:74:7d:b5: 0f:77:fb:ec:2f:52:3a:e7:eb:d2:7f:8a:58:12:a3:ee:9c:c3: 19:17:c9:84:f0:5c:6e:fb:08:b1:50:9e:6a:fd:85:83:ce:62: 14:f9:0f:dd:92:03:c0:b0:63:99:1e:99:75:50:59:da:b5:0f: d0:72:02:ce:48:19:65:0c:e0:ee:d3:0f:93:bb:04:28:6c:dd: 93:b7:a3:8c:e4:48:ba:ef:8e:e2:09:69:a1:45:36:7f:5d:80: 94:bd:17:4f:0a:6d:8f:ef:f8:c9:4a:86:69:1b:a3:dc:56:82: a0:f7:ef:ff:d3:2b:39:ee:5c:0a:01:cd:1c:ba:00:c8:3f:11: cb:0a:cf:2b:aa:18:fa:e7:d8:16:23:07:b6:1a:70:d1:f8:45: 9f:c3:00:b6:d2:2d:f4:3f:f9:ce:e6:9c:a1:6d:71:4c:1e:60: 8d:03:e4:db:68:d5:b3:57:93:29:7a:75:72:c2:d5:d5:c4:b7: e1:ca:ef:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydopi5HSiIS9mhG05vkdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5M2EyZDQ4Mzc2MzMwYTU4MmZhZjNlMzAzMmVmN2IwYmNj YTMzZTgwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg2YmRiMTdmZmFiNWVhNmJjYzUzMWIyNGE5NmI0ZDIyN2U1MjAxZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKvrC6Tsq0I9Ziwi2S8B2X+q3PBV WW29MrbTjuApAr3cz9jA3dH73yDTQAuH+7At3zDLvUS4J1d9s2gIabRq0bXxEjwr iPlBwhgKR2iWvwrs5U7iQVyc6vkgYTfibR7aMMdDhJCzrk0j734rFE/7cu080xSt 2gy2N00jxYVK83eQUJ66v2Kw6tMSevwwSFfYi1emmeQlFLWmCQd2Es4OhcYMhiy6 sojj7apGG3XfEGHHJsBr2GoGJOFOuiAIbejgsCxKoaJYvHZTNBKEL3Rt40DlLhOc p/QkzexR0f0Q/wvZEOVAD7OUpVtagkTg0O57fSD8PhpZ0PGZjNY/XqInuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvbF/+rXqa8xTGySpa00iflIB6uMB8GA1UdIwQY MBaAFEk6LUg3YzClgvrz4wMu97C8yjPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2Qt Njg5YmE0ZDMzYzRiLzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9kNzY1YTQtNTRlYi00MTBkLThmM2QtNjg5YmE0ZDMzYzRi LzEvU1RvdFNEZGpNS1dDLXZQakF5NzNzTHpLTS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhPMRGdU sLhWdxe8LUQVZVIjmzpk1jGksBsk0UsOcMfXOqgf1nr4i4a7QmdUSjpuBN8SOXCL xCQVDiTrm8a4JM+EA9VCdH21D3f77C9SOufr0n+KWBKj7pzDGRfJhPBcbvsIsVCe av2Fg85iFPkP3ZIDwLBjmR6ZdVBZ2rUP0HICzkgZZQzg7tMPk7sEKGzdk7ejjORI uu+O4glpoUU2f12AlL0XTwptj+/4yUqGaRuj3FaCoPfv/9MrOe5cCgHNHLoAyD8R ywrPK6oY+ufYFiMHthpw0fhFn8MAttIt9D/5zuacoW1xTB5gjQPk22jVs1eTKXp1 csLV1cS34crvbw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:01:29 2025 by rpki-client