This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft File: STRpVEIDCC0sPB3fDwu9kL3FaUE.mft (raw, json) Hash identifier: JbAy7aGw/9n4dqECdvR9lLF18X+L/gzX5HuHNim7piU= Subject key identifier: 65:2C:52:FE:49:1A:16:2D:54:C4:F3:47:71:22:9A:AF:0D:34:86:65 Authority key identifier: 49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41 Certificate issuer: /CN=493469544203082d2c3c1ddf0f0bbd90bdc56941 Certificate serial: 019AF42E520040A605058D27575C6F8D0FA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft Manifest number: 1652 Signing time: Sat 06 Dec 2025 15:01:07 +0000 Manifest this update: Sat 06 Dec 2025 15:01:07 +0000 Manifest next update: Sun 07 Dec 2025 15:01:07 +0000 Files and hashes: 1: STRpVEIDCC0sPB3fDwu9kL3FaUE.crl (hash: 5ZejejXIMFIsoB0kFF/tm1TdMi1FCdHNhtToUegirUg=) 2: j2dUbB-NK5CfnidiqDMKydgI8YE.roa (hash: ZUxAxryB168omhb8dlNaslAttNVaqi4+cbp8ns+rOL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:52:00:40:a6:05:05:8d:27:57:5c:6f:8d:0f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493469544203082d2c3c1ddf0f0bbd90bdc56941 Validity Not Before: Dec 6 15:01:07 2025 GMT Not After : Dec 7 15:01:07 2025 GMT Subject: CN=652c52fe491a162d54c4f34771229aaf0d348665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:90:45:a4:c3:1a:6c:5c:4c:15:aa:ef:11: 6e:8e:a9:68:63:a8:dc:b1:35:c4:1e:47:1f:60:c4: 49:3e:36:97:cb:01:96:b3:c5:08:d4:7c:09:49:6f: 6f:1d:82:2c:c8:8b:97:45:0b:6f:5d:1c:81:88:ca: cd:7c:f6:65:15:fe:9a:ca:7b:9f:2e:2c:3c:b8:75: 4b:a4:3f:f2:57:45:82:52:d7:8f:fe:54:66:73:77: c8:b3:ea:9d:b3:0b:59:77:df:ef:27:66:c5:e6:a1: f0:09:9d:99:ce:f0:a2:a8:ec:30:ef:e8:32:7e:6d: ae:f0:54:fd:57:05:83:fe:c5:11:f1:43:16:7f:84: 4d:f7:61:4a:ec:79:82:3d:96:4e:e0:bc:29:6a:76: ca:8d:e7:7e:64:d9:9d:fd:56:a2:5d:e0:ba:24:67: 75:87:d6:49:d6:e7:df:71:bf:4d:e3:ab:23:da:23: c7:c4:aa:b3:68:e7:7e:fc:06:1d:c6:99:b1:c3:3f: 6d:19:6c:fb:ca:4b:2f:5a:86:d9:17:03:b0:3d:a2: 3d:b0:43:a3:83:9b:07:14:3f:b5:bb:a7:25:76:4f: 3a:66:b2:a8:23:a1:a1:f2:2d:b1:c8:55:4e:6a:23: 6e:9f:8c:b7:62:59:8b:d6:a3:c3:f1:25:49:b0:4f: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2C:52:FE:49:1A:16:2D:54:C4:F3:47:71:22:9A:AF:0D:34:86:65 X509v3 Authority Key Identifier: keyid:49:34:69:54:42:03:08:2D:2C:3C:1D:DF:0F:0B:BD:90:BD:C5:69:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STRpVEIDCC0sPB3fDwu9kL3FaUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d29730-515a-4bfb-ad55-e038d81b3f97/1/STRpVEIDCC0sPB3fDwu9kL3FaUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:30:0b:74:c7:4a:95:5f:33:a2:e9:07:e9:41:95:d4:10:d1: 8a:fd:02:83:da:89:fd:dd:97:0e:85:ee:f1:6d:6e:4c:47:a9: a3:c1:59:4b:e9:b5:36:83:4d:2a:ca:34:95:56:2c:eb:57:7f: 17:d0:31:5f:2a:a2:b0:fe:45:7b:f2:8d:bd:df:bd:8b:cd:ad: 31:c8:6a:49:d1:78:24:a1:f7:06:f0:d5:dc:b8:1d:c4:ce:3d: e7:7f:e8:a1:77:60:67:ee:01:e6:a0:3b:10:1f:a9:ed:0e:ba: 7b:2c:9e:5f:03:6d:d0:4c:8d:46:92:9a:a5:72:41:8a:22:1e: 4a:fa:5c:cd:79:9c:3e:c3:35:84:94:b0:f0:9a:5c:28:66:1b: 63:58:b9:a5:47:3c:79:3b:0f:87:e8:20:cb:13:15:15:28:29: 27:0a:8a:36:e5:77:86:b1:14:e9:78:30:56:20:53:ce:29:d5: 48:f7:6d:41:71:11:12:95:65:8b:9f:0d:40:a6:aa:53:7c:e0: 32:ca:1c:97:6b:ad:1b:19:b4:d5:ae:e4:84:73:6e:d9:cf:5c: 48:a0:03:74:c0:b7:5a:47:53:a5:09:13:a7:c8:25:db:cd:aa: 10:14:24:21:11:6b:12:09:33:32:a1:1c:1a:a9:95:7c:98:ed: d1:78:0d:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LlIAQKYFBY0nV1xvjQ+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MzQ2OTU0NDIwMzA4MmQyYzNjMWRkZjBmMGJiZDkwYmRj NTY5NDEwHhcNMjUxMjA2MTUwMTA3WhcNMjUxMjA3MTUwMTA3WjAzMTEwLwYDVQQD Eyg2NTJjNTJmZTQ5MWExNjJkNTRjNGYzNDc3MTIyOWFhZjBkMzQ4NjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLmQRaTDGmxcTBWq7xFujqloY6jc sTXEHkcfYMRJPjaXywGWs8UI1HwJSW9vHYIsyIuXRQtvXRyBiMrNfPZlFf6aynuf Liw8uHVLpD/yV0WCUteP/lRmc3fIs+qdswtZd9/vJ2bF5qHwCZ2ZzvCiqOww7+gy fm2u8FT9VwWD/sUR8UMWf4RN92FK7HmCPZZO4LwpanbKjed+ZNmd/VaiXeC6JGd1 h9ZJ1uffcb9N46sj2iPHxKqzaOd+/AYdxpmxwz9tGWz7yksvWobZFwOwPaI9sEOj g5sHFD+1u6cldk86ZrKoI6Gh8i2xyFVOaiNun4y3YlmL1qPD8SVJsE/aGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUsUv5JGhYtVMTzR3Eimq8NNIZlMB8GA1UdIwQY MBaAFEk0aVRCAwgtLDwd3w8LvZC9xWlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUt ZTAzOGQ4MWIzZjk3LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9kMjk3MzAtNTE1YS00YmZiLWFkNTUtZTAzOGQ4MWIzZjk3 LzEvU1RScFZFSURDQzBzUEIzZkR3dTlrTDNGYVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjALdMdK lV8zoukH6UGV1BDRiv0Cg9qJ/d2XDoXu8W1uTEepo8FZS+m1NoNNKso0lVYs61d/ F9AxXyqisP5Fe/KNvd+9i82tMchqSdF4JKH3BvDV3LgdxM4953/ooXdgZ+4B5qA7 EB+p7Q66eyyeXwNt0EyNRpKapXJBiiIeSvpczXmcPsM1hJSw8JpcKGYbY1i5pUc8 eTsPh+ggyxMVFSgpJwqKNuV3hrEU6XgwViBTzinVSPdtQXEREpVli58NQKaqU3zg Msocl2utGxm01a7khHNu2c9cSKADdMC3WkdTpQkTp8gl282qEBQkIRFrEgkzMqEc GqmVfJjt0XgNMA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:11:53 2025 by rpki-client