This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft File: sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json) Hash identifier: Eq0tT3FmeOCKQXUMcJMzVRSAcWS4wdEjxF7ec1h7aLM= Subject key identifier: B8:03:63:7D:6F:95:EE:74:73:3A:AA:E5:BF:7B:83:9B:EA:B1:16:14 Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94 Certificate issuer: /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894 Certificate serial: 019AF31BDFF8267DC9E8A76C3CD5D5CB336E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft Manifest number: 0C46 Signing time: Sat 06 Dec 2025 10:01:21 +0000 Manifest this update: Sat 06 Dec 2025 10:01:21 +0000 Manifest next update: Sun 07 Dec 2025 10:01:21 +0000 Files and hashes: 1: Ewu_L9NGAMIn9J1bD2mKPYHfLN0.roa (hash: MPg//qxTuFJeVfIte2bOUUVJ5G8w+mQ6T68mV0V7xWY=) 2: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: R60sx8dDuSJsKnaYlXdduZbXto8f0ye8RnvT9+oys/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:df:f8:26:7d:c9:e8:a7:6c:3c:d5:d5:cb:33:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894 Validity Not Before: Dec 6 10:01:21 2025 GMT Not After : Dec 7 10:01:21 2025 GMT Subject: CN=b803637d6f95ee74733aaae5bf7b839beab11614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:73:02:8a:53:23:5b:b3:3f:f8:b6:23:e1:0b: b1:41:24:76:d7:cb:3b:99:0f:ed:33:82:7c:ce:5e: 0a:24:0a:08:eb:b0:cf:22:99:ae:8b:81:c5:fe:25: ca:9e:62:21:ff:38:1e:37:f3:7d:76:54:d5:0f:36: e1:dd:c2:79:a6:f9:c8:27:7b:41:da:1b:4b:b0:38: 34:9f:d4:7e:a3:5e:ec:40:1b:46:97:4d:b9:16:e3: 22:a1:e2:0a:48:79:a9:83:78:d5:fa:a3:ba:4f:7b: 06:88:d4:49:7d:ac:9a:24:2e:4d:4c:65:d7:61:7c: 85:03:3f:da:f1:87:73:19:a2:fe:8f:bd:69:6b:17: d1:5f:7a:fc:44:9a:e2:09:1d:69:68:18:44:96:54: 98:62:4a:2c:8a:f9:6f:40:78:1c:cc:dd:b7:a6:0f: 16:10:4f:d4:e9:cf:59:e4:a2:fd:c0:e2:ae:5c:71: c3:9f:70:e9:8d:28:b8:44:e8:c0:85:ae:2d:8f:54: 98:92:c5:95:ca:9f:92:88:b9:e8:c8:b5:d5:b6:99: fc:24:a2:4e:1b:01:19:5b:4d:53:77:c4:16:ea:95: 50:a7:61:14:3a:32:33:6d:b8:c7:d0:a1:4e:3e:84: 8d:26:6e:1b:69:9d:01:36:b9:f4:6a:e2:f1:8b:a8: bb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:03:63:7D:6F:95:EE:74:73:3A:AA:E5:BF:7B:83:9B:EA:B1:16:14 X509v3 Authority Key Identifier: keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ef:1f:fc:36:0f:c3:9e:ac:24:b7:36:d9:9d:6a:38:1b:39:9b: ee:75:e8:00:41:6b:49:92:f7:f4:10:9f:8c:2d:0f:5d:d2:31: f1:7b:dc:84:e4:0c:6a:a0:22:db:5d:6f:e8:86:2b:c8:5d:1f: 2d:b6:24:3e:4d:46:95:35:e1:f0:ca:f4:b7:db:26:88:db:6a: 14:eb:a6:2f:83:82:5e:4c:0f:7e:43:8e:76:f1:94:2f:39:5f: 63:40:5d:d8:4b:21:39:67:94:7d:ba:3d:cb:86:e3:66:4c:38: fd:7b:f2:1d:60:fa:36:69:ee:5b:8e:90:e6:a4:7a:ee:15:41: 4e:80:b6:4e:b0:af:af:59:bd:e8:a8:18:fa:63:06:2c:06:f6: c5:18:a3:f8:2f:85:c5:45:2c:e9:20:b3:a4:15:5a:03:6f:3f: 3f:7c:47:00:b0:40:d4:8b:ba:4a:9b:b5:30:1e:0d:49:db:f7: e7:0c:29:f5:4b:fd:4d:f4:dc:76:45:69:68:34:ea:6c:28:29: 1b:3f:55:47:2d:d0:04:9f:17:48:28:c4:bf:b0:71:ce:da:fd: 94:49:c7:51:d5:3c:aa:e1:e6:92:57:ae:41:ee:9b:34:2b:51: 25:65:95:32:11:21:2d:31:35:01:d8:dd:94:43:62:08:a6:e3: 6f:30:52:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9/4Jn3J6KdsPNXVyzNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMzk3MWJmZWE3OGQ2YWE1YjQ5ZWQ1YWMzNWM3N2I2YTMw YTA4OTQwHhcNMjUxMjA2MTAwMTIxWhcNMjUxMjA3MTAwMTIxWjAzMTEwLwYDVQQD EyhiODAzNjM3ZDZmOTVlZTc0NzMzYWFhZTViZjdiODM5YmVhYjExNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHMCilMjW7M/+LYj4QuxQSR218s7 mQ/tM4J8zl4KJAoI67DPIpmui4HF/iXKnmIh/zgeN/N9dlTVDzbh3cJ5pvnIJ3tB 2htLsDg0n9R+o17sQBtGl025FuMioeIKSHmpg3jV+qO6T3sGiNRJfayaJC5NTGXX YXyFAz/a8YdzGaL+j71paxfRX3r8RJriCR1paBhEllSYYkosivlvQHgczN23pg8W EE/U6c9Z5KL9wOKuXHHDn3DpjSi4ROjAha4tj1SYksWVyp+SiLnoyLXVtpn8JKJO GwEZW01Td8QW6pVQp2EUOjIzbbjH0KFOPoSNJm4baZ0BNrn0auLxi6i7JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgDY31vle50czqq5b97g5vqsRYUMB8GA1UdIwQY MBaAFLE5cb/qeNaqW0ntWsNcd7ajCgiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zZjAwODMtNTlkNy00MzNhLTkwNWEt NDdiMWJkZjhkNTMwLzEvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8zZjAwODMtNTlkNy00MzNhLTkwNWEtNDdiMWJkZjhkNTMw LzEvc1RseHYtcDQxcXBiU2UxYXcxeDN0cU1LQ0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7x/8Ng/D nqwktzbZnWo4Gzmb7nXoAEFrSZL39BCfjC0PXdIx8XvchOQMaqAi211v6IYryF0f LbYkPk1GlTXh8Mr0t9smiNtqFOumL4OCXkwPfkOOdvGULzlfY0Bd2EshOWeUfbo9 y4bjZkw4/XvyHWD6NmnuW46Q5qR67hVBToC2TrCvr1m96KgY+mMGLAb2xRij+C+F xUUs6SCzpBVaA28/P3xHALBA1Iu6Spu1MB4NSdv35wwp9Uv9TfTcdkVpaDTqbCgp Gz9VRy3QBJ8XSCjEv7Bxztr9lEnHUdU8quHmkleuQe6bNCtRJWWVMhEhLTE1Adjd lENiCKbjbzBSCA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:53 2025 by rpki-client