This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft File: StzxlnKWX1GxbYevqxsUkILmw-4.mft (raw, json) Hash identifier: 4nAv5rye3OOXCeFgoiXwEXXUmKbTEZtjQCP4sXrB5jM= Subject key identifier: FF:A8:0E:EE:75:B3:98:CB:23:51:22:80:17:D2:68:11:1D:79:98:66 Authority key identifier: 4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE Certificate issuer: /CN=4adcf19672965f51b16d87afab1b149082e6c3ee Certificate serial: 019AF2091064269319963B63EC363ADFAF44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: StzxlnKWX1GxbYevqxsUkILmw-4.crl (hash: 5/BGA2BK93gt85MlFK8OYrZb0MFQruCfjItKL6kvV6U=) 2: rGUQbl63n9K0Wn_57q9XL0tQAuA.roa (hash: vyvu3YaIjRy8oAh1PUr3JRdMW+KlCqlVTwrvF8kfQF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:10:64:26:93:19:96:3b:63:ec:36:3a:df:af:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4adcf19672965f51b16d87afab1b149082e6c3ee Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=ffa80eee75b398cb2351228017d268111d799866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:29:23:14:13:bb:17:0a:9c:ea:41:f6:30: d9:0d:e5:40:9c:1f:d3:3e:e8:74:5a:ac:92:a7:35: c9:a5:9e:c9:87:69:24:38:53:5e:55:ff:31:ae:93: f2:4c:a7:df:c3:6b:7d:e5:4e:6c:a9:38:d2:34:18: 99:6d:5b:3a:2f:db:24:23:d2:f0:9d:24:b6:ed:c0: 5f:c2:5e:07:5e:b9:36:94:8b:c0:38:82:cc:b6:01: 84:c4:de:86:15:29:0b:42:4f:f8:16:87:45:1b:fd: d1:d7:2d:7d:55:83:a2:9e:b0:85:29:15:fc:69:4a: 3e:9a:d5:1c:77:26:0b:0f:79:01:53:39:90:bf:30: 53:ac:c3:71:62:a1:35:ec:22:77:f7:9c:e0:cd:5d: 1a:36:18:bb:e7:4c:10:55:4b:5a:f7:c0:83:22:bf: c8:b9:eb:11:b2:26:7c:5f:a3:70:57:ff:61:31:87: 29:9a:4d:d4:d7:19:fe:3e:c5:ab:d2:35:c4:11:42: cd:72:91:e7:86:52:f2:27:3d:f7:1d:e1:18:f6:1b: 2b:46:85:44:2a:2d:d0:1b:aa:83:fd:2c:45:75:82: 34:ad:8e:21:8f:a8:60:26:11:1b:e1:e8:19:bf:8d: 42:33:69:cc:f1:f6:48:43:f4:f7:5b:76:25:2e:6e: fd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A8:0E:EE:75:B3:98:CB:23:51:22:80:17:D2:68:11:1D:79:98:66 X509v3 Authority Key Identifier: keyid:4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f5:2b:c5:4c:bf:9c:02:2d:c5:ab:cc:6d:37:c3:19:d8:55: 78:5d:9b:81:2d:e4:b2:6c:b0:df:b9:90:fd:73:05:4a:0a:08: de:5d:44:3d:4f:55:9d:3d:30:ab:22:ca:c6:62:5e:a8:f4:cd: 11:1c:32:4e:d4:1f:8e:b9:aa:37:86:52:f1:2f:b0:f0:59:c8: 34:13:14:ff:81:32:89:a1:5d:31:6d:9c:40:b0:71:6d:28:6e: 46:6a:26:eb:bd:91:e8:c4:04:06:25:a9:a6:1f:9e:d9:d2:0d: 5a:a6:eb:51:97:ed:81:b7:f4:25:c0:b3:d8:74:23:a5:f9:76: 4c:a5:11:52:32:10:34:7b:5c:62:6c:1c:e6:50:7f:a3:9c:a5: f2:b8:1c:7e:ec:91:2a:6a:3d:53:11:7c:32:a6:f2:33:f6:0c: 78:10:2f:ce:59:a0:a0:f9:4e:80:6f:53:4a:1e:3d:49:81:f0: 46:40:75:fc:8f:e5:a0:e1:29:f0:ef:e8:e8:ba:4b:f8:a2:c8: cb:9a:7e:84:6e:4a:ea:e0:bb:0e:60:f0:9b:02:76:68:7f:20: 49:9a:96:ab:54:48:26:e5:a0:3a:f6:c0:b9:71:33:33:59:0c: fb:a7:df:f7:e4:10:4d:56:0f:63:55:0d:e9:ad:5c:0e:31:07: 0c:d4:11:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRBkJpMZljtj7DY6369EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZGNmMTk2NzI5NjVmNTFiMTZkODdhZmFiMWIxNDkwODJl NmMzZWUwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD EyhmZmE4MGVlZTc1YjM5OGNiMjM1MTIyODAxN2QyNjgxMTFkNzk5ODY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pApIxQTuxcKnOpB9jDZDeVAnB/T Puh0WqySpzXJpZ7Jh2kkOFNeVf8xrpPyTKffw2t95U5sqTjSNBiZbVs6L9skI9Lw nSS27cBfwl4HXrk2lIvAOILMtgGExN6GFSkLQk/4FodFG/3R1y19VYOinrCFKRX8 aUo+mtUcdyYLD3kBUzmQvzBTrMNxYqE17CJ395zgzV0aNhi750wQVUta98CDIr/I uesRsiZ8X6NwV/9hMYcpmk3U1xn+PsWr0jXEEULNcpHnhlLyJz33HeEY9hsrRoVE Ki3QG6qD/SxFdYI0rY4hj6hgJhEb4egZv41CM2nM8fZIQ/T3W3YlLm79dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+oDu51s5jLI1EigBfSaBEdeZhmMB8GA1UdIwQY MBaAFErc8ZZyll9RsW2Hr6sbFJCC5sPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3R6eGxuS1dYMUd4YllldnF4c1VrSUxtdy00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8yZDJlYjYtMDVkNS00N2EwLThmZWQt ZWJmMzJhMDQ2OWM3LzEvU3R6eGxuS1dYMUd4YllldnF4c1VrSUxtdy00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8yZDJlYjYtMDVkNS00N2EwLThmZWQtZWJmMzJhMDQ2OWM3 LzEvU3R6eGxuS1dYMUd4YllldnF4c1VrSUxtdy00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/UrxUy/ nAItxavMbTfDGdhVeF2bgS3ksmyw37mQ/XMFSgoI3l1EPU9VnT0wqyLKxmJeqPTN ERwyTtQfjrmqN4ZS8S+w8FnINBMU/4EyiaFdMW2cQLBxbShuRmom672R6MQEBiWp ph+e2dINWqbrUZftgbf0JcCz2HQjpfl2TKURUjIQNHtcYmwc5lB/o5yl8rgcfuyR Kmo9UxF8MqbyM/YMeBAvzlmgoPlOgG9TSh49SYHwRkB1/I/loOEp8O/o6LpL+KLI y5p+hG5K6uC7DmDwmwJ2aH8gSZqWq1RIJuWgOvbAuXEzM1kM+6ff9+QQTVYPY1UN 6a1cDjEHDNQRbg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:26 2025 by rpki-client