This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json) Hash identifier: mha+S/g8RlshHRZ7bH15Hx3M9fCVWK7rMM6ohg0TtVE= Subject key identifier: 14:99:57:71:51:77:94:14:AB:42:EA:B2:D3:19:BF:E7:8B:5A:47:44 Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40 Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440 Certificate serial: 019AF208E303587AB22897D19491E323C43A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft Manifest number: 0C8A Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: j7tAtkU7X16dxo0q2axkpmgR2Jg.roa (hash: ee9X5e2Gsq7S7vtFMXjQ62kSEkjJdHkxbRMmxnYqFY4=) 2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: MesAss4fPScV/JMlQlAMJM6CUumrs8zOPE7BHuXk4XA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e3:03:58:7a:b2:28:97:d1:94:91:e3:23:c4:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=1499577151779414ab42eab2d319bfe78b5a4744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a8:df:9e:0f:c0:24:13:71:be:7b:10:b2:13: 2f:bf:15:33:b6:5e:ff:fa:a8:4e:8d:f0:9d:e0:09: 03:86:45:ce:34:e1:1d:ea:1d:26:f9:63:a7:b2:21: 72:07:1e:e6:ea:34:ac:8c:ac:e4:ea:2d:33:0d:17: b4:6f:97:c1:3b:32:f1:ae:d4:c8:04:77:48:42:82: 01:9d:30:fa:eb:5a:a1:ac:1c:85:e0:2b:e3:93:c0: c8:24:99:e3:e7:a6:fa:da:d9:01:5b:23:63:99:27: c9:a0:e1:aa:a6:fa:17:39:87:6d:9a:5f:ed:bb:a8: 22:2f:2c:4c:1d:dc:58:12:a8:57:dd:c9:65:6e:f3: 50:78:65:34:16:26:08:43:b1:2d:15:14:b7:d7:e8: 68:d9:ec:c3:17:f8:94:2e:12:9e:4a:78:2a:c6:73: 35:5b:43:fa:6e:08:49:83:f5:1a:35:49:52:f8:cc: 22:9d:f8:81:7d:f0:e6:44:af:0c:86:7c:57:2b:45: c4:7b:2b:7d:bd:4b:92:ca:a9:0f:65:08:80:30:c3: db:fe:cf:4f:7d:52:1e:1f:4c:6d:5d:9d:48:7b:ca: 8e:1d:4c:1a:91:27:55:6f:af:03:cd:d9:4f:1a:d0: a8:fa:bf:89:3a:28:41:2e:ed:31:30:1b:06:46:2a: a4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:99:57:71:51:77:94:14:AB:42:EA:B2:D3:19:BF:E7:8B:5A:47:44 X509v3 Authority Key Identifier: keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:80:11:94:34:b9:a3:65:76:dd:c2:05:54:0f:ff:05:72:6d: 27:04:f3:56:a4:7e:3b:de:67:03:54:14:d2:35:ce:ee:51:e5: 1d:ab:39:c3:70:55:03:e4:f8:e6:eb:b3:83:e3:6b:c1:d4:6a: 29:dd:a1:08:09:f7:97:a0:cc:56:20:d2:68:c8:20:1d:fb:74: f4:4d:f3:12:e4:58:9e:37:5a:1d:84:1f:27:51:e9:18:c7:9f: 6c:38:2e:da:fd:21:25:0a:d1:76:04:8b:8a:01:40:b3:63:34: d0:c7:8f:34:c8:55:eb:8c:63:93:e6:6b:97:6f:09:a5:e3:07: 13:3a:ab:f5:d1:0a:6d:c0:de:cd:22:6b:18:04:2a:52:ea:21: 27:d8:8d:a7:5b:7e:39:8f:d4:8b:d4:c3:32:6b:8e:5d:60:d1: be:bb:2e:0e:c2:29:e9:c6:8f:bd:4f:40:0f:ad:d4:25:d4:7b: d1:47:6d:b8:05:f0:70:74:4d:21:c0:21:a7:7c:52:18:cb:de: b0:cf:19:62:c8:7d:0a:c2:33:d8:e5:90:fb:27:2c:84:93:0f: 7b:bb:2b:c5:1e:b7:b5:9f:c7:04:cf:4d:ea:82:79:3a:c5:b4: c5:01:57:62:3b:dc:65:aa:6c:8c:84:10:3f:67:12:e7:2f:9e: 7d:e2:71:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOMDWHqyKJfRlJHjI8Q6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZDhhZDAyN2E5Njc0ZWRjOTM2ZTc4YzVkNGQxYjY0OTY0 ZDg0NDAwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EygxNDk5NTc3MTUxNzc5NDE0YWI0MmVhYjJkMzE5YmZlNzhiNWE0NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqjfng/AJBNxvnsQshMvvxUztl7/ +qhOjfCd4AkDhkXONOEd6h0m+WOnsiFyBx7m6jSsjKzk6i0zDRe0b5fBOzLxrtTI BHdIQoIBnTD661qhrByF4Cvjk8DIJJnj56b62tkBWyNjmSfJoOGqpvoXOYdtml/t u6giLyxMHdxYEqhX3cllbvNQeGU0FiYIQ7EtFRS31+ho2ezDF/iULhKeSngqxnM1 W0P6bghJg/UaNUlS+MwinfiBffDmRK8MhnxXK0XEeyt9vUuSyqkPZQiAMMPb/s9P fVIeH0xtXZ1Ie8qOHUwakSdVb68DzdlPGtCo+r+JOihBLu0xMBsGRiqkOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSZV3FRd5QUq0LqstMZv+eLWkdEMB8GA1UdIwQY MBaAFLLYrQJ6lnTtyTbnjF1NG2SWTYRAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4Njgt NzE1MjQ3YzNkY2RjLzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84OGM5ZDctZTM3Ny00ODc0LTk4NjgtNzE1MjQ3YzNkY2Rj LzEvc3RpdEFucVdkTzNKTnVlTVhVMGJaSlpOaEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyoARlDS5 o2V23cIFVA//BXJtJwTzVqR+O95nA1QU0jXO7lHlHas5w3BVA+T45uuzg+NrwdRq Kd2hCAn3l6DMViDSaMggHft09E3zEuRYnjdaHYQfJ1HpGMefbDgu2v0hJQrRdgSL igFAs2M00MePNMhV64xjk+Zrl28JpeMHEzqr9dEKbcDezSJrGAQqUuohJ9iNp1t+ OY/Ui9TDMmuOXWDRvrsuDsIp6caPvU9AD63UJdR70UdtuAXwcHRNIcAhp3xSGMve sM8ZYsh9CsIz2OWQ+ycshJMPe7srxR63tZ/HBM9N6oJ5OsW0xQFXYjvcZapsjIQQ P2cS5y+efeJxaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:18 2025 by rpki-client