This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json) Hash identifier: xIq0ed6KU+9QGgrrNxVXFstxFa9NjyPXfynzeoJ2u1A= Subject key identifier: 84:ED:DA:7A:D5:06:40:0A:DE:F0:60:52:56:38:47:0F:F6:A1:91:84 Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1 Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1 Certificate serial: 019AF5E5B7EE63971FD8222846E148F81307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft Manifest number: 0CBC Signing time: Sat 06 Dec 2025 23:01:03 +0000 Manifest this update: Sat 06 Dec 2025 23:01:03 +0000 Manifest next update: Sun 07 Dec 2025 23:01:03 +0000 Files and hashes: 1: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: yzN5QpuvJV5qqjkpg6ct6cT9/fNQ6K1DAlGn77jXsJs=) 2: ww5W_AzyvORyhz7R6e4M2kGu004.roa (hash: h+p5BWiNgVQT+Ps96Xby3wyi4OgT8Zpuq9hDEAln8lQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:b7:ee:63:97:1f:d8:22:28:46:e1:48:f8:13:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1 Validity Not Before: Dec 6 23:01:03 2025 GMT Not After : Dec 7 23:01:03 2025 GMT Subject: CN=84edda7ad506400adef060525638470ff6a19184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:e5:d1:3e:c5:62:52:2d:ff:3d:0d:f4:bc: 11:7a:79:c2:c4:45:77:45:dd:5b:45:67:c0:e4:df: e2:b9:ad:b0:23:63:89:27:37:41:03:4d:a6:92:17: 22:ae:5d:05:64:21:77:04:1e:3d:cf:04:d5:81:05: 7a:3f:78:dd:53:ea:3f:d3:db:5e:2a:c4:45:f3:83: 79:37:d3:27:2d:2a:5b:22:6a:72:53:c5:32:d3:f3: e7:db:d1:99:df:60:e0:36:c7:20:98:b9:24:dd:d0: 79:24:06:35:fa:0c:a4:a0:c3:1f:0e:36:63:96:a0: bc:43:1c:c4:0e:a8:6f:b0:eb:95:ff:ba:51:8c:de: b1:3f:71:04:b3:ff:ca:22:d0:76:c1:74:aa:cb:c6: 5b:f5:0f:70:60:9a:66:5b:65:5e:e0:0c:17:3d:45: b4:99:f7:67:b5:af:e2:0d:8b:bf:09:6a:c8:c9:63: 95:b5:19:5a:88:87:74:59:1d:cd:60:2c:ff:32:01: 18:af:50:ad:5e:27:d5:75:d5:cb:cc:b9:c2:1a:b5: 35:07:8c:4e:58:76:4d:60:27:2e:6d:fd:c1:de:0e: 7d:b3:79:ad:c7:9c:ab:7b:a3:59:e0:8c:57:1e:ec: df:35:6b:12:b7:50:84:8d:ba:7f:d6:3c:ae:95:47: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:ED:DA:7A:D5:06:40:0A:DE:F0:60:52:56:38:47:0F:F6:A1:91:84 X509v3 Authority Key Identifier: keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:43:2a:a2:6b:0b:ab:99:64:cc:87:6c:d1:23:c7:2d:95:ed: ce:26:43:f2:05:6e:a7:7a:2c:38:30:00:a9:40:9f:8e:fe:6e: ee:7e:5f:8f:43:a7:d8:15:f5:a5:2d:49:99:41:6a:bf:c8:b0: 6d:93:9d:ca:30:d9:12:06:6e:67:05:8a:1c:a9:2f:92:0d:ed: ca:89:f6:24:b0:21:59:d3:02:bd:a5:8b:06:e2:61:b9:30:a4: 9f:48:9f:49:0f:2a:01:6f:7b:e0:33:02:dc:2e:e3:79:1c:b2: e7:08:e5:bf:72:b9:8a:97:6a:35:d9:75:dc:30:83:33:6c:b3: 05:8a:3f:54:98:45:9c:f0:e7:48:75:a5:12:35:59:ce:aa:58: d6:45:9e:3e:ea:92:6c:ee:0b:2a:4e:d3:f4:6d:bc:62:f6:bb: ef:cb:aa:5e:0b:06:70:28:ca:e9:f8:c9:10:1f:db:1e:72:0b: 22:63:5c:a2:ae:6e:4d:cd:a2:27:33:c2:85:b6:da:c8:25:12: 5e:7f:8e:59:ae:3d:d3:cb:20:75:30:59:7b:e1:06:66:f8:d3: 36:65:81:78:f1:04:f3:f2:86:aa:2a:d5:38:97:a9:c4:ac:da: 85:01:8b:ab:65:61:79:d1:8c:48:c5:42:9d:87:0a:30:fb:3e: a3:62:4f:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15bfuY5cf2CIoRuFI+BMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNGYxMjRjOTFjYWEwY2M5MWMzYjliYjRmOGFkYjA2MzI2 MjI0YTEwHhcNMjUxMjA2MjMwMTAzWhcNMjUxMjA3MjMwMTAzWjAzMTEwLwYDVQQD Eyg4NGVkZGE3YWQ1MDY0MDBhZGVmMDYwNTI1NjM4NDcwZmY2YTE5MTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1vl0T7FYlIt/z0N9LwRennCxEV3 Rd1bRWfA5N/iua2wI2OJJzdBA02mkhcirl0FZCF3BB49zwTVgQV6P3jdU+o/09te KsRF84N5N9MnLSpbImpyU8Uy0/Pn29GZ32DgNscgmLkk3dB5JAY1+gykoMMfDjZj lqC8QxzEDqhvsOuV/7pRjN6xP3EEs//KItB2wXSqy8Zb9Q9wYJpmW2Ve4AwXPUW0 mfdnta/iDYu/CWrIyWOVtRlaiId0WR3NYCz/MgEYr1CtXifVddXLzLnCGrU1B4xO WHZNYCcubf3B3g59s3mtx5yre6NZ4IxXHuzfNWsSt1CEjbp/1jyulUfPJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITt2nrVBkAK3vBgUlY4Rw/2oZGEMB8GA1UdIwQY MBaAFGtPEkyRyqDMkcO5u0+K2wYyYiShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMt YjY1MjYyY2YxOTgzLzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMtYjY1MjYyY2YxOTgz LzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkMqomsL q5lkzIds0SPHLZXtziZD8gVup3osODAAqUCfjv5u7n5fj0On2BX1pS1JmUFqv8iw bZOdyjDZEgZuZwWKHKkvkg3tyon2JLAhWdMCvaWLBuJhuTCkn0ifSQ8qAW974DMC 3C7jeRyy5wjlv3K5ipdqNdl13DCDM2yzBYo/VJhFnPDnSHWlEjVZzqpY1kWePuqS bO4LKk7T9G28Yva778uqXgsGcCjK6fjJEB/bHnILImNcoq5uTc2iJzPChbbayCUS Xn+OWa4908sgdTBZe+EGZvjTNmWBePEE8/KGqirVOJepxKzahQGLq2VhedGMSMVC nYcKMPs+o2JPag== -----END CERTIFICATE-----Generated at Sun Dec 7 07:34:39 2025 by rpki-client