This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json) Hash identifier: CVcYTFvxCs2pHfMvSU/El968Ed17WWe7LFgdnasiPkA= Subject key identifier: 0B:63:C3:3B:47:62:ED:B4:78:AD:BD:FD:15:0D:4A:31:20:31:3C:62 Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4 Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4 Certificate serial: 019B2E8B3B38E03C80474D773870FF3B50A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft Manifest number: 13BE Signing time: Wed 17 Dec 2025 23:00:35 +0000 Manifest this update: Wed 17 Dec 2025 23:00:35 +0000 Manifest next update: Thu 18 Dec 2025 23:00:35 +0000 Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=) 2: mxU7ZGuWRrVnoU7neP0ntyKL78s.roa (hash: X4Bp+WOWNCY8+u0/f19L8Y2SQKOHLXJCsrOK+p7unk8=) 3: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: McOB1wwj+Od0uBhqGqhGPvyDRmdb/QIAC9VnbKtaoAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:3b:38:e0:3c:80:47:4d:77:38:70:ff:3b:50:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4 Validity Not Before: Dec 17 23:00:35 2025 GMT Not After : Dec 18 23:00:35 2025 GMT Subject: CN=0b63c33b4762edb478adbdfd150d4a3120313c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:e2:2e:2d:93:af:35:1e:7c:3f:d1:1a:c1: a7:f0:16:47:b1:d0:58:fa:9c:d2:41:84:f5:67:78: 62:87:47:b2:3b:a9:ec:5d:d0:bb:54:79:43:a7:40: 91:f9:b4:15:89:e8:7f:d8:52:f8:6d:75:5a:ac:c4: e0:85:d2:5c:e7:57:bc:67:c3:da:59:79:b5:e1:98: 4c:4e:e4:02:62:5d:75:0d:e2:ac:54:1c:af:a7:0a: 42:35:a1:af:e4:d7:bd:ee:42:9b:28:3f:73:46:51: 04:70:0e:73:62:78:42:c4:3b:e9:a4:77:08:21:fa: ed:b6:9d:03:48:be:e3:e7:78:02:48:d1:ae:5d:e3: 20:d2:a2:f1:7e:47:48:c5:70:c0:f3:34:92:be:5f: 95:c2:99:1a:e1:2e:4e:8e:5b:b5:1b:78:2f:1d:5e: d5:c6:06:57:0b:a0:79:99:22:03:0f:20:20:bb:32: 1e:90:c8:ba:b6:0a:08:df:cd:ae:89:a1:f8:93:84: 7a:d0:8e:0a:33:e2:3a:bd:fc:c2:67:1f:70:bf:9f: 9c:e8:43:3a:05:10:3a:b0:8d:d9:0d:68:ce:59:85: 8b:35:ba:9e:14:95:24:85:c8:50:c5:b3:7c:91:07: 05:36:09:49:83:3d:a3:73:fd:36:95:ed:1a:32:dc: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:63:C3:3B:47:62:ED:B4:78:AD:BD:FD:15:0D:4A:31:20:31:3C:62 X509v3 Authority Key Identifier: keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fa:b1:e6:f9:c4:55:2e:e8:1d:8c:ec:2d:8b:10:97:04:6f: cf:34:f5:31:e7:d4:ee:05:2a:16:2e:04:3e:a5:ec:25:6a:3f: 0b:27:fa:d0:1f:10:a3:5c:f6:b5:0e:ec:35:c8:02:6c:d7:fa: c0:93:41:87:fe:ac:03:ac:3c:0d:5a:72:22:f0:81:b1:4d:30: 12:93:93:44:a0:81:80:df:f7:33:d0:65:4c:cc:8f:90:fd:bc: 37:2a:4d:b3:5a:33:cb:04:ae:48:20:46:ae:e0:e3:e8:f2:c8: e3:c7:9d:d3:82:e6:ce:95:19:a1:28:aa:2c:88:f1:0a:6f:c4: 75:f3:f3:0a:8e:0f:47:44:59:1a:9c:3f:09:12:9c:09:29:46: 06:dd:3e:ea:8c:e5:6f:c3:fb:fc:83:b3:82:7f:40:50:0d:26: 97:24:cb:fe:cc:fc:9f:e8:16:6a:45:7e:13:d1:a4:9d:dc:3d: 99:f4:5d:d4:16:99:3d:fb:53:4c:30:58:eb:32:02:39:3c:71: ef:78:6e:13:51:1e:9f:c6:c3:f0:88:2f:95:ab:89:8f:32:0a: 32:75:a5:2c:a8:0e:b9:a8:d0:95:c6:96:01:3a:9e:53:aa:2b: 44:a9:3e:e1:0f:cf:05:60:2f:f3:24:3b:30:b6:d8:10:ad:d8: 1d:5d:2b:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuizs44DyAR013OHD/O1ChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMzJlOTM1YTEwZjljZTIxNmUwOTkzYWU0MTk5Yzk2ZjUy NzNhZjQwHhcNMjUxMjE3MjMwMDM1WhcNMjUxMjE4MjMwMDM1WjAzMTEwLwYDVQQD EygwYjYzYzMzYjQ3NjJlZGI0NzhhZGJkZmQxNTBkNGEzMTIwMzEzYzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsTiLi2TrzUefD/RGsGn8BZHsdBY +pzSQYT1Z3hih0eyO6nsXdC7VHlDp0CR+bQVieh/2FL4bXVarMTghdJc51e8Z8Pa WXm14ZhMTuQCYl11DeKsVByvpwpCNaGv5Ne97kKbKD9zRlEEcA5zYnhCxDvppHcI Ifrttp0DSL7j53gCSNGuXeMg0qLxfkdIxXDA8zSSvl+Vwpka4S5Ojlu1G3gvHV7V xgZXC6B5mSIDDyAguzIekMi6tgoI382uiaH4k4R60I4KM+I6vfzCZx9wv5+c6EM6 BRA6sI3ZDWjOWYWLNbqeFJUkhchQxbN8kQcFNglJgz2jc/02le0aMtwrawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtjwztHYu20eK29/RUNSjEgMTxiMB8GA1UdIwQY MBaAFLEy6TWhD5ziFuCZOuQZnJb1Jzr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMt YThmMGVlMDBiMmFkLzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMtYThmMGVlMDBiMmFk LzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvqx5vnE VS7oHYzsLYsQlwRvzzT1MefU7gUqFi4EPqXsJWo/Cyf60B8Qo1z2tQ7sNcgCbNf6 wJNBh/6sA6w8DVpyIvCBsU0wEpOTRKCBgN/3M9BlTMyPkP28NypNs1ozywSuSCBG ruDj6PLI48ed04LmzpUZoSiqLIjxCm/EdfPzCo4PR0RZGpw/CRKcCSlGBt0+6ozl b8P7/IOzgn9AUA0mlyTL/sz8n+gWakV+E9Gkndw9mfRd1BaZPftTTDBY6zICOTxx 73huE1Een8bD8IgvlauJjzIKMnWlLKgOuajQlcaWATqeU6orRKk+4Q/PBWAv8yQ7 MLbYEK3YHV0rbA== -----END CERTIFICATE-----Generated at Thu Dec 18 04:57:05 2025 by rpki-client