This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json) Hash identifier: KyO3W8mDOCbgb2gs6HdKsALO7x5Oc0DnZYRtmWW6M/s= Subject key identifier: 66:C5:F2:DC:DD:01:B2:4C:58:38:6A:01:47:57:B1:90:F2:61:42:E7 Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4 Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4 Certificate serial: 019AF2AD5A402569BD295A6844350CEF7B98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft Manifest number: 139F Signing time: Sat 06 Dec 2025 08:00:38 +0000 Manifest this update: Sat 06 Dec 2025 08:00:38 +0000 Manifest next update: Sun 07 Dec 2025 08:00:38 +0000 Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=) 2: mxU7ZGuWRrVnoU7neP0ntyKL78s.roa (hash: X4Bp+WOWNCY8+u0/f19L8Y2SQKOHLXJCsrOK+p7unk8=) 3: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: JoLku56V7AQWk4JT+whE673o5xNzO3tw+m/b13ggWnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5a:40:25:69:bd:29:5a:68:44:35:0c:ef:7b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4 Validity Not Before: Dec 6 08:00:38 2025 GMT Not After : Dec 7 08:00:38 2025 GMT Subject: CN=66c5f2dcdd01b24c58386a014757b190f26142e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:b5:72:e0:78:16:36:2e:e3:89:fb:05:59: ba:33:03:88:37:85:04:e7:c4:35:be:b3:97:20:81: db:ff:8f:69:50:f0:ae:25:d5:f4:bb:df:8f:e5:a4: 99:71:10:17:1a:3a:d1:74:2f:3f:0c:be:b5:b7:56: 1e:8f:d8:8f:a2:4e:88:64:50:d8:42:9e:37:37:b4: e5:f7:69:1e:1a:8b:32:5a:90:93:f7:8d:42:13:a1: 08:21:27:e1:bc:6b:7a:25:1c:c5:bb:65:05:72:6d: 7d:12:72:96:c2:ec:37:98:18:cb:36:a1:81:93:cb: 02:36:49:76:7c:87:9e:6e:ee:72:f2:05:3d:88:c0: 17:d3:66:3f:87:9c:44:90:57:87:8a:9f:1c:36:36: 61:ea:e9:97:3e:5e:31:0a:52:6e:41:12:93:1f:c6: e4:63:5a:d4:67:4d:28:0f:b4:cc:63:90:10:de:f0: d7:ca:ce:fa:f9:32:90:34:51:f2:a5:08:33:b4:f8: 6a:4c:17:16:89:c4:f7:f9:b9:3a:85:01:9a:53:e5: 0b:3e:2f:d9:f3:94:02:5a:f0:1a:cb:54:40:d1:da: 10:5f:9b:5c:d9:67:ff:ed:a7:08:44:e2:26:ec:7e: 5f:15:fa:41:f8:33:29:e0:cd:cb:88:d3:99:06:cf: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C5:F2:DC:DD:01:B2:4C:58:38:6A:01:47:57:B1:90:F2:61:42:E7 X509v3 Authority Key Identifier: keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a9:a4:38:34:cc:3c:05:39:7d:4a:c6:72:6a:b7:c3:7f:9b: 73:9d:df:65:9e:a8:6d:33:51:7d:dd:25:57:eb:cb:02:b1:b5: 53:fb:90:06:ae:0f:a7:b8:b4:d8:c5:50:3d:87:b9:64:62:79: 47:07:ac:40:86:f0:33:15:7a:fd:4e:d1:98:a8:72:d7:65:a7: e6:64:60:64:fa:74:33:6d:67:6e:74:65:7f:81:a5:b3:f8:96: 2a:5c:0a:c1:06:0c:7b:d3:b8:9d:ca:9e:de:56:1e:ab:6f:9c: 93:98:72:2f:be:9c:b2:23:32:41:0a:7d:37:0a:98:12:cd:34: 32:c8:8b:f4:28:a5:47:a2:3c:60:2d:68:54:00:95:ca:3e:9e: bf:18:20:5c:be:ec:7c:9a:db:2f:88:fe:a5:51:8a:d7:eb:de: 64:c7:0a:e9:95:d3:56:30:ca:8d:31:4c:38:f0:9c:4c:b6:e6: e0:42:dc:f2:41:5f:4d:4e:7b:7e:f3:90:c0:f6:85:eb:13:02: e1:a6:15:d0:0c:9b:8e:9b:b7:e6:62:2b:b1:de:67:3e:6d:31: 9e:86:70:d3:66:14:04:a0:95:05:bc:4d:e9:c0:14:63:38:6e: 37:fc:ea:6e:77:54:b1:16:ac:01:8a:bb:56:b5:9e:81:8c:67: 48:cd:12:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVpAJWm9KVpoRDUM73uYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMzJlOTM1YTEwZjljZTIxNmUwOTkzYWU0MTk5Yzk2ZjUy NzNhZjQwHhcNMjUxMjA2MDgwMDM4WhcNMjUxMjA3MDgwMDM4WjAzMTEwLwYDVQQD Eyg2NmM1ZjJkY2RkMDFiMjRjNTgzODZhMDE0NzU3YjE5MGYyNjE0MmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11i1cuB4FjYu44n7BVm6MwOIN4UE 58Q1vrOXIIHb/49pUPCuJdX0u9+P5aSZcRAXGjrRdC8/DL61t1Yej9iPok6IZFDY Qp43N7Tl92keGosyWpCT941CE6EIISfhvGt6JRzFu2UFcm19EnKWwuw3mBjLNqGB k8sCNkl2fIeebu5y8gU9iMAX02Y/h5xEkFeHip8cNjZh6umXPl4xClJuQRKTH8bk Y1rUZ00oD7TMY5AQ3vDXys76+TKQNFHypQgztPhqTBcWicT3+bk6hQGaU+ULPi/Z 85QCWvAay1RA0doQX5tc2Wf/7acIROIm7H5fFfpB+DMp4M3LiNOZBs8fOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbF8tzdAbJMWDhqAUdXsZDyYULnMB8GA1UdIwQY MBaAFLEy6TWhD5ziFuCZOuQZnJb1Jzr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMt YThmMGVlMDBiMmFkLzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMtYThmMGVlMDBiMmFk LzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqmkODTM PAU5fUrGcmq3w3+bc53fZZ6obTNRfd0lV+vLArG1U/uQBq4Pp7i02MVQPYe5ZGJ5 RwesQIbwMxV6/U7RmKhy12Wn5mRgZPp0M21nbnRlf4Gls/iWKlwKwQYMe9O4ncqe 3lYeq2+ck5hyL76csiMyQQp9NwqYEs00MsiL9CilR6I8YC1oVACVyj6evxggXL7s fJrbL4j+pVGK1+veZMcK6ZXTVjDKjTFMOPCcTLbm4ELc8kFfTU57fvOQwPaF6xMC 4aYV0Aybjpu35mIrsd5nPm0xnoZw02YUBKCVBbxN6cAUYzhuN/zqbndUsRasAYq7 VrWegYxnSM0Sww== -----END CERTIFICATE-----Generated at Sat Dec 6 16:21:02 2025 by rpki-client