This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft File: _stf432FEfZ6YFMW6wlTU4_P6ec.mft (raw, json) Hash identifier: ZaQGrgR3BPcXMw7F4p0d7N06Kr7u+97WtvMiXrK2oDs= Subject key identifier: 70:2D:6F:D1:67:4D:13:AA:9C:C6:0E:C9:95:A3:F9:44:78:F8:2F:00 Authority key identifier: FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7 Certificate issuer: /CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7 Certificate serial: 019AF277169DBF72D9CD08F80F0CE4310517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft Manifest number: 113C Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: _stf432FEfZ6YFMW6wlTU4_P6ec.crl (hash: RK6yH8BUMajwz0WEzwmMN01jMu4Q04JX3j9WNnSAsGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:16:9d:bf:72:d9:cd:08:f8:0f:0c:e4:31:05:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fecb5fe37d8511f67a605316eb0953538fcfe9e7 Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=702d6fd1674d13aa9cc60ec995a3f94478f82f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:67:85:f1:3d:2a:c4:ee:ff:f4:f2:69:dc:de: e4:bf:7e:72:03:e3:d3:fd:eb:60:14:54:6b:35:e9: c6:34:31:de:d1:0a:e1:60:3b:8d:b8:61:81:8e:03: 68:ca:f6:ae:61:39:a6:ea:5c:53:c0:e7:61:7b:c4: 3b:c5:12:7c:c7:2c:2c:9e:87:e7:cb:26:1c:75:9f: a5:fa:e7:09:b4:a9:d2:95:6f:2c:99:c6:c8:bb:ee: 1a:22:b2:af:f1:1c:3e:7a:12:cd:be:c8:6c:76:af: 9b:39:85:83:4b:24:cb:cc:e1:9e:3e:74:03:e4:74: 37:52:4e:f5:ce:a8:e1:6f:23:69:6b:16:9a:c9:3a: f7:64:5a:f5:ad:c1:c0:4d:65:89:28:d9:f3:4d:4c: 61:dd:a6:59:58:c4:bf:43:f0:22:a6:18:d5:20:b8: cf:ec:b8:35:94:99:bf:94:57:0a:57:73:40:18:7f: ad:6f:dd:1e:3a:3d:22:1a:79:7e:50:65:af:d8:33: 58:8e:f6:c1:7c:f0:74:df:01:c0:f0:f3:d1:5a:66: 3d:a6:e1:54:f3:b0:d6:4a:a7:60:b6:31:7e:27:80: 4b:1a:e0:1f:da:83:ec:13:4d:55:d4:87:4d:04:7f: 63:7b:ed:b2:f6:00:f1:37:ab:b3:25:de:73:60:27: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2D:6F:D1:67:4D:13:AA:9C:C6:0E:C9:95:A3:F9:44:78:F8:2F:00 X509v3 Authority Key Identifier: keyid:FE:CB:5F:E3:7D:85:11:F6:7A:60:53:16:EB:09:53:53:8F:CF:E9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_stf432FEfZ6YFMW6wlTU4_P6ec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8273b5-279c-4323-82dc-c257607317f3/1/_stf432FEfZ6YFMW6wlTU4_P6ec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:12:8e:b1:74:ce:6e:56:88:c3:03:50:65:d7:00:2d:a7:ec: fc:ca:a6:2a:95:df:3c:df:2f:9e:9b:7f:63:54:eb:64:7f:3c: c0:0a:fd:1b:dc:06:6b:e3:20:26:df:db:81:f1:59:20:fe:93: b6:2c:e0:13:51:50:2a:0e:af:cb:4d:51:ff:c3:c8:b9:cc:c4: 94:18:6d:6c:99:54:09:5f:ec:89:7c:b8:5d:12:7c:9b:9b:e2: 8a:f4:9f:86:69:3d:50:f6:35:8d:2b:15:6f:37:5c:9f:33:a4: 36:a9:31:e3:ea:d5:44:f5:9d:df:c7:4a:7c:6c:d5:0e:b7:85: 88:31:98:97:95:b6:bb:ff:3c:4b:cb:d8:8c:80:3e:d6:b3:4c: 1c:e0:21:91:46:d7:b9:ae:62:d2:69:e4:f9:b0:a4:04:0f:e7: e3:e7:5b:dc:eb:38:5a:b1:2f:47:dd:63:07:4c:21:dd:df:3f: c2:c3:42:37:c3:06:96:23:fa:c3:9d:c9:31:76:18:ac:3d:1a: 99:74:5d:a3:0d:df:83:fe:49:3d:1a:d5:7c:27:c9:63:df:fc: 8e:c0:b0:c4:24:6b:8e:87:e6:73:44:b5:8b:ae:f5:d6:6b:ea: 30:7a:04:7f:be:f3:11:f4:de:be:2b:70:8e:a7:20:4b:45:5b: f3:56:75:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxadv3LZzQj4DwzkMQUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlY2I1ZmUzN2Q4NTExZjY3YTYwNTMxNmViMDk1MzUzOGZj ZmU5ZTcwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD Eyg3MDJkNmZkMTY3NGQxM2FhOWNjNjBlYzk5NWEzZjk0NDc4ZjgyZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62eF8T0qxO7/9PJp3N7kv35yA+PT /etgFFRrNenGNDHe0QrhYDuNuGGBjgNoyvauYTmm6lxTwOdhe8Q7xRJ8xywsnofn yyYcdZ+l+ucJtKnSlW8smcbIu+4aIrKv8Rw+ehLNvshsdq+bOYWDSyTLzOGePnQD 5HQ3Uk71zqjhbyNpaxaayTr3ZFr1rcHATWWJKNnzTUxh3aZZWMS/Q/AiphjVILjP 7Lg1lJm/lFcKV3NAGH+tb90eOj0iGnl+UGWv2DNYjvbBfPB03wHA8PPRWmY9puFU 87DWSqdgtjF+J4BLGuAf2oPsE01V1IdNBH9je+2y9gDxN6uzJd5zYCd0pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAtb9FnTROqnMYOyZWj+UR4+C8AMB8GA1UdIwQY MBaAFP7LX+N9hRH2emBTFusJU1OPz+nnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84MjczYjUtMjc5Yy00MzIzLTgyZGMt YzI1NzYwNzMxN2YzLzEvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84MjczYjUtMjc5Yy00MzIzLTgyZGMtYzI1NzYwNzMxN2Yz LzEvX3N0ZjQzMkZFZlo2WUZNVzZ3bFRVNF9QNmVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxKOsXTO blaIwwNQZdcALafs/MqmKpXfPN8vnpt/Y1TrZH88wAr9G9wGa+MgJt/bgfFZIP6T tizgE1FQKg6vy01R/8PIuczElBhtbJlUCV/siXy4XRJ8m5viivSfhmk9UPY1jSsV bzdcnzOkNqkx4+rVRPWd38dKfGzVDreFiDGYl5W2u/88S8vYjIA+1rNMHOAhkUbX ua5i0mnk+bCkBA/n4+db3Os4WrEvR91jB0wh3d8/wsNCN8MGliP6w53JMXYYrD0a mXRdow3fg/5JPRrVfCfJY9/8jsCwxCRrjofmc0S1i6711mvqMHoEf77zEfTevitw jqcgS0Vb81Z1zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:28 2025 by rpki-client