This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json) Hash identifier: Fhp2nBo3s40C3hXaNYK7UEN2a+o97qbX3pPTnNUiyFw= Subject key identifier: 84:17:07:66:12:53:F5:C2:08:4E:E3:51:97:28:BB:27:0F:D9:07:E5 Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7 Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7 Certificate serial: 019BF6514E544AA994AD037B4EB8820882C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft Manifest number: 11C3 Signing time: Sun 25 Jan 2026 18:01:22 +0000 Manifest this update: Sun 25 Jan 2026 18:01:22 +0000 Manifest next update: Mon 26 Jan 2026 18:01:22 +0000 Files and hashes: 1: 6NQ5wIXBNMCuDmhGHUrV4zcgIlk.asa (hash: k9XIzZz2YS/IqcKj1MEO/9AD4eBMuTTQ1lkoUK4El4A=) 2: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: wJDLt6PA5f9d7RQJ7xzRIEp8ri10QClWPn7+t2Xsqis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:4e:54:4a:a9:94:ad:03:7b:4e:b8:82:08:82:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7 Validity Not Before: Jan 25 18:01:22 2026 GMT Not After : Jan 26 18:01:22 2026 GMT Subject: CN=841707661253f5c2084ee3519728bb270fd907e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:ac:74:8d:d6:49:f1:97:37:13:d4:81:7e: 5d:ef:90:51:1d:2c:e3:8d:67:f5:b7:46:3f:9d:4e: b9:d7:a5:e6:b2:8c:52:2f:b5:c1:f8:50:c3:28:12: 59:23:49:45:a1:80:1b:35:86:01:e1:29:89:38:c6: 1d:aa:e4:43:98:95:be:be:ca:f8:61:35:6e:98:f1: 85:bc:8d:4f:23:14:0c:12:e1:c9:01:bb:7a:b2:56: e9:45:5b:2d:c6:d3:55:e1:25:1d:dd:df:8f:11:b8: 0b:c2:bb:e9:1e:f1:c8:fa:0f:1a:f6:97:25:4b:7f: f7:86:dd:9c:04:25:87:2e:da:3b:cb:93:17:23:a1: fd:99:d8:6f:d9:b8:e2:07:9e:18:44:2f:1f:9a:c0: 4e:d6:63:df:b4:79:29:0f:72:0d:7e:cc:a9:9a:66: f3:07:68:d3:7e:2b:6e:2f:26:ff:46:ef:bf:03:25: ea:8d:51:36:37:03:b8:1b:dc:60:a8:97:63:84:79: eb:42:bd:80:72:24:3a:2d:67:52:21:b1:9c:44:3a: 9a:7e:4e:02:f7:80:4e:a1:eb:b5:a2:e0:19:dd:5f: 69:8f:b2:b0:ef:e3:34:6e:ea:52:0e:3e:4d:ac:fe: 1e:e5:69:9f:43:2f:10:1d:33:5d:1f:08:12:02:58: cb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:17:07:66:12:53:F5:C2:08:4E:E3:51:97:28:BB:27:0F:D9:07:E5 X509v3 Authority Key Identifier: keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e6:31:58:dc:94:b4:84:d0:cd:b5:b5:e9:d4:2e:4a:5f:29: a5:3d:f2:7c:9f:34:2d:0f:72:56:fa:ab:55:d0:22:0e:72:57: ce:af:99:f6:45:84:d6:3c:5a:d6:29:1c:40:fb:17:52:92:ed: b4:be:bb:fa:42:e3:28:76:2a:9d:36:51:56:21:98:9d:fb:c1: a7:75:c9:bc:42:71:e7:3d:9e:f1:73:9b:cd:4c:7d:fb:a4:3f: 63:8b:d6:d3:78:70:9e:ed:ac:68:6c:51:11:c4:07:31:34:44: 0a:d6:6f:01:7a:2d:3d:40:05:94:46:85:25:16:25:a0:e1:ee: 8d:4e:51:6f:46:7c:24:c5:df:15:3f:46:4d:76:ef:0c:5a:71: 03:ac:3f:b0:d0:a3:08:2a:3a:8d:5c:e7:6b:ef:e6:55:38:91: 76:a7:a7:5c:5b:9a:c8:80:38:87:95:08:32:16:cf:0b:a8:b2: 67:b1:8d:da:3a:62:f4:e9:19:6f:1e:35:02:d2:b6:8c:de:fd: 0e:cb:45:a6:77:3c:4a:fd:be:3a:c3:2d:a2:29:2c:a6:60:f9: 5d:60:c9:02:0d:fe:ee:24:e7:a1:59:32:24:25:86:c9:08:ec: ee:70:d5:be:10:c5:06:a5:a7:f6:6f:43:07:c4:ee:a3:51:89: f8:3e:c4:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UU5USqmUrQN7TriCCILCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlY2I1ZmUzN2Q4NTExZjY3YTYwNTMxNmViMDk1MzUzOGZj ZmU5ZTcwHhcNMjYwMTI1MTgwMTIyWhcNMjYwMTI2MTgwMTIyWjAzMTEwLwYDVQQD Eyg4NDE3MDc2NjEyNTNmNWMyMDg0ZWUzNTE5NzI4YmIyNzBmZDkwN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3GsdI3WSfGXNxPUgX5d75BRHSzj jWf1t0Y/nU6516XmsoxSL7XB+FDDKBJZI0lFoYAbNYYB4SmJOMYdquRDmJW+vsr4 YTVumPGFvI1PIxQMEuHJAbt6slbpRVstxtNV4SUd3d+PEbgLwrvpHvHI+g8a9pcl S3/3ht2cBCWHLto7y5MXI6H9mdhv2bjiB54YRC8fmsBO1mPftHkpD3INfsypmmbz B2jTfituLyb/Ru+/AyXqjVE2NwO4G9xgqJdjhHnrQr2AciQ6LWdSIbGcRDqafk4C 94BOoeu1ouAZ3V9pj7Kw7+M0bupSDj5NrP4e5WmfQy8QHTNdHwgSAljLVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQXB2YSU/XCCE7jUZcouycP2QflMB8GA1UdIwQY MBaAFP7LX+N9hRH2emBTFusJU1OPz+nnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84MjczYjUtMjc5Yy00MzIzLTgyZGMt YzI1NzYwNzMxN2YzLzEvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84MjczYjUtMjc5Yy00MzIzLTgyZGMtYzI1NzYwNzMxN2Yz LzEvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+YxWNyU tITQzbW16dQuSl8ppT3yfJ80LQ9yVvqrVdAiDnJXzq+Z9kWE1jxa1ikcQPsXUpLt tL67+kLjKHYqnTZRViGYnfvBp3XJvEJx5z2e8XObzUx9+6Q/Y4vW03hwnu2saGxR EcQHMTRECtZvAXotPUAFlEaFJRYloOHujU5Rb0Z8JMXfFT9GTXbvDFpxA6w/sNCj CCo6jVzna+/mVTiRdqenXFuayIA4h5UIMhbPC6iyZ7GN2jpi9OkZbx41AtK2jN79 DstFpnc8Sv2+OsMtoikspmD5XWDJAg3+7iTnoVkyJCWGyQjs7nDVvhDFBqWn9m9D B8Tuo1GJ+D7E7w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:34 2026 by rpki-client