This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft File: St2XYC4ZGOerwfYtz9TaynNJmz4.mft (raw, json) Hash identifier: 1o3/u/1rUnFd4C/nIfKUC+sjeeZOwTo58BUMWYFjJYY= Subject key identifier: 85:8A:D8:C2:D8:BF:56:D2:09:A4:52:3A:EB:0D:BB:E0:46:20:DA:CA Authority key identifier: 4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E Certificate issuer: /CN=4add97602e1918e7abc1f62dcfd4daca73499b3e Certificate serial: 019AF19B3C3C79F38E6EDA65BC4D1869988F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft Manifest number: 02CD Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: St2XYC4ZGOerwfYtz9TaynNJmz4.crl (hash: ejCQaZL2hxVqtdAB2zPtVnsrnQEiA5wAf3PoCXrtaxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3c:3c:79:f3:8e:6e:da:65:bc:4d:18:69:98:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4add97602e1918e7abc1f62dcfd4daca73499b3e Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=858ad8c2d8bf56d209a4523aeb0dbbe04620daca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e0:a9:05:55:98:80:29:2b:0b:25:69:54:15: 83:53:60:b5:fc:a9:5d:d2:fc:c5:0d:18:3c:db:21: 87:18:ab:af:9d:9c:bd:fa:95:bb:82:e2:80:e1:7a: 76:72:54:ef:57:50:0b:7f:4c:fa:0c:36:b4:e6:af: 3b:fe:32:8b:30:14:5d:a3:b4:a0:cc:be:05:f3:0e: d9:3a:39:c7:63:62:ac:1c:92:99:e7:51:30:01:3e: 72:1d:2d:fd:74:12:e7:f0:64:66:14:ac:cc:4e:42: a9:ce:08:83:f0:b9:be:24:f7:e3:3f:8b:7d:20:5b: 2a:82:a7:57:fa:b4:36:16:0a:9e:f9:0d:31:13:f5: ff:b7:62:f7:ce:14:17:5e:8d:62:d4:a1:81:a0:39: 34:81:10:97:eb:e3:71:d1:70:53:90:4b:bc:ed:45: 8f:db:21:01:53:8c:f6:67:45:2f:c9:e9:3f:79:ef: 9a:03:6f:e1:94:71:ca:fb:89:72:29:c9:ad:ef:04: 01:15:49:40:08:21:34:2d:f6:a9:df:8b:fa:76:5a: 07:3c:2c:6a:ff:ae:f5:fb:b8:52:1e:92:b3:58:e3: 52:71:79:b0:03:ea:7d:c1:1f:35:1e:62:ec:e2:cf: 5f:6f:8a:7a:47:2f:c1:f5:02:d4:f5:40:ef:5f:06: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8A:D8:C2:D8:BF:56:D2:09:A4:52:3A:EB:0D:BB:E0:46:20:DA:CA X509v3 Authority Key Identifier: keyid:4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:12:e9:1e:1f:6d:92:e8:95:09:76:49:9d:cf:80:39:69:6a: 6e:a9:38:3c:00:03:6c:63:d0:60:39:5d:45:ee:2c:6d:8a:2e: 90:ce:1b:d6:1d:19:b1:f6:21:85:a8:96:23:94:7a:41:ae:4c: 24:ee:4a:5a:52:47:2a:6c:4f:ff:fe:eb:b1:33:23:9e:e9:18: 6d:42:d3:e7:d9:d4:28:45:43:e3:07:41:94:5c:5f:3e:a3:d0: cc:0d:13:5e:71:24:ac:9a:e8:4d:da:83:c3:f5:65:f1:bf:b6: c7:72:52:bb:46:30:04:34:db:ed:5e:ad:28:a8:08:c2:e3:70: 2f:af:7e:6c:18:45:de:cd:4b:53:97:96:af:9a:4e:32:df:7b: 52:9d:7e:04:b4:fb:47:e3:f8:ba:11:94:31:23:f6:2d:27:82: 22:c5:ee:1c:b2:af:8c:49:66:4a:a5:8f:b5:eb:7a:c4:4d:68: e0:fd:45:bf:1d:38:30:ae:2d:30:48:14:80:bf:ec:dc:04:fa: 33:75:80:bd:2d:81:df:fb:f7:d3:25:f0:76:66:65:e6:8b:51: a9:21:54:f4:c1:03:2b:5f:0b:2f:a0:25:1c:93:80:30:fb:87: 8c:55:3f:dd:97:3a:b1:7f:72:16:07:6f:a8:4e:82:9c:61:5b: 86:2b:9d:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzw8efOObtplvE0YaZiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhZGQ5NzYwMmUxOTE4ZTdhYmMxZjYyZGNmZDRkYWNhNzM0 OTliM2UwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD Eyg4NThhZDhjMmQ4YmY1NmQyMDlhNDUyM2FlYjBkYmJlMDQ2MjBkYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuCpBVWYgCkrCyVpVBWDU2C1/Kld 0vzFDRg82yGHGKuvnZy9+pW7guKA4Xp2clTvV1ALf0z6DDa05q87/jKLMBRdo7Sg zL4F8w7ZOjnHY2KsHJKZ51EwAT5yHS39dBLn8GRmFKzMTkKpzgiD8Lm+JPfjP4t9 IFsqgqdX+rQ2Fgqe+Q0xE/X/t2L3zhQXXo1i1KGBoDk0gRCX6+Nx0XBTkEu87UWP 2yEBU4z2Z0Uvyek/ee+aA2/hlHHK+4lyKcmt7wQBFUlACCE0Lfap34v6dloHPCxq /671+7hSHpKzWONScXmwA+p9wR81HmLs4s9fb4p6Ry/B9QLU9UDvXwZW7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWK2MLYv1bSCaRSOusNu+BGINrKMB8GA1UdIwQY MBaAFErdl2AuGRjnq8H2Lc/U2spzSZs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3QyWFlDNFpHT2Vyd2ZZdHo5VGF5bk5KbXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NzU0MmEtZTFhYy00MDE0LTg2ZmUt MTJlNWU4MTczMjAxLzEvU3QyWFlDNFpHT2Vyd2ZZdHo5VGF5bk5KbXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My81NzU0MmEtZTFhYy00MDE0LTg2ZmUtMTJlNWU4MTczMjAx LzEvU3QyWFlDNFpHT2Vyd2ZZdHo5VGF5bk5KbXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRLpHh9t kuiVCXZJnc+AOWlqbqk4PAADbGPQYDldRe4sbYoukM4b1h0ZsfYhhaiWI5R6Qa5M JO5KWlJHKmxP//7rsTMjnukYbULT59nUKEVD4wdBlFxfPqPQzA0TXnEkrJroTdqD w/Vl8b+2x3JSu0YwBDTb7V6tKKgIwuNwL69+bBhF3s1LU5eWr5pOMt97Up1+BLT7 R+P4uhGUMSP2LSeCIsXuHLKvjElmSqWPtet6xE1o4P1Fvx04MK4tMEgUgL/s3AT6 M3WAvS2B3/v30yXwdmZl5otRqSFU9MEDK18LL6AlHJOAMPuHjFU/3Zc6sX9yFgdv qE6CnGFbhiudMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:12:06 2025 by rpki-client