This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json) Hash identifier: IEIB9G0AOKrPHyQOluTJIZZTy1/dMyJuZxS1OZ2zaDg= Subject key identifier: AD:05:97:B6:BE:0A:59:B4:14:47:61:27:5E:AD:B4:E3:B9:2F:B2:65 Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Certificate serial: 019AF509A4D166EAAEDE4E539DC97B9C2677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft Manifest number: 06C9 Signing time: Sat 06 Dec 2025 19:00:41 +0000 Manifest this update: Sat 06 Dec 2025 19:00:41 +0000 Manifest next update: Sun 07 Dec 2025 19:00:41 +0000 Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=) 2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: zdUOtYF+78Ucgx9M+PbclAJvs+NZNNqGQFU9LmRYfws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:a4:d1:66:ea:ae:de:4e:53:9d:c9:7b:9c:26:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f Validity Not Before: Dec 6 19:00:41 2025 GMT Not After : Dec 7 19:00:41 2025 GMT Subject: CN=ad0597b6be0a59b4144761275eadb4e3b92fb265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:24:b8:61:45:45:8a:57:8e:a0:f3:28:04: 71:b6:c7:83:b0:e3:c2:f3:fe:78:4d:a0:63:02:57: 5c:98:98:b3:d9:49:bc:64:e2:91:61:fb:fe:90:8d: 12:e3:9d:f6:fb:ad:c5:d3:c7:83:40:cc:78:0b:ab: 01:1c:d7:76:12:bd:f0:5a:24:95:92:a8:90:fd:9b: 0b:ce:f3:17:2b:94:32:2b:bf:e1:54:af:f0:eb:16: 29:75:92:e4:db:b5:41:8d:71:e1:5e:38:76:43:8f: 0d:78:69:15:e8:56:24:6a:5b:1a:12:50:7a:d9:4d: fd:c7:6c:bc:0d:33:f9:89:d5:8a:a6:53:59:39:08: fa:2c:55:74:59:8d:09:89:19:b5:32:00:49:41:bc: 2f:c1:44:98:8a:47:5e:05:04:56:28:0d:73:6b:ad: db:57:54:69:31:82:04:bb:8a:f8:c1:21:81:79:10: fb:86:e5:d7:9b:e5:82:4a:f2:ae:f4:50:bb:34:ca: 00:2e:bd:89:b6:90:6a:ef:e5:fa:1a:eb:d8:04:61: 86:4d:46:8e:f9:e6:6a:a3:9d:fc:d7:a6:56:1a:e3: ce:ea:9b:6c:ef:4e:8c:d4:32:e2:7e:b5:61:14:23: ed:06:8a:ce:16:6c:29:71:80:25:67:f6:b2:b4:6e: 2a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:05:97:B6:BE:0A:59:B4:14:47:61:27:5E:AD:B4:E3:B9:2F:B2:65 X509v3 Authority Key Identifier: keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:10:36:80:f3:1c:58:41:29:6f:bc:de:26:fe:cc:af:f0:92: 41:d6:a3:1f:30:be:7a:51:79:33:b5:47:2d:f6:07:69:64:ee: fc:7b:fe:73:c9:f8:1f:bd:3f:8f:6b:84:e9:04:3a:51:4d:87: f7:8e:43:ee:79:05:25:7d:ea:ef:07:6b:41:47:3a:26:8a:ef: dd:71:de:a7:0f:4c:76:ad:41:fe:0c:2e:6b:9d:f3:f0:1f:ec: 7d:6d:f9:54:aa:8f:f3:ae:04:56:a7:68:58:b0:99:a1:c0:3d: 2a:4c:61:4e:6e:07:8f:37:d4:2d:27:a8:e5:8a:de:1d:97:50: 18:c7:5e:c9:67:de:ba:85:0f:4b:ae:5c:bc:36:61:d7:b2:07: 58:b2:d9:5c:3d:d8:80:db:cd:f6:e6:cd:99:c5:f6:41:ef:6d: 8c:86:a5:33:95:4b:7c:4f:9a:5c:3c:f1:2a:91:f8:30:f9:77: 35:6d:81:57:f9:9b:fa:38:b9:7b:75:05:26:d6:97:3e:de:19: c0:f5:09:c0:41:c6:f4:8e:2f:75:90:0d:d8:ad:de:21:5e:2c: 36:19:d5:5b:5c:0c:24:ba:7f:96:a3:d8:e5:0c:7b:1c:a1:3c: 45:53:9c:ba:19:10:38:7f:d6:b3:58:d8:a9:61:9a:4f:fc:ee: 94:e4:92:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CaTRZuqu3k5Tncl7nCZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGViMzc2NWY1MzlmMWVjM2YwMDIxM2ZmODM0MDg1Yjdj OGM3NmYwHhcNMjUxMjA2MTkwMDQxWhcNMjUxMjA3MTkwMDQxWjAzMTEwLwYDVQQD EyhhZDA1OTdiNmJlMGE1OWI0MTQ0NzYxMjc1ZWFkYjRlM2I5MmZiMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriwkuGFFRYpXjqDzKARxtseDsOPC 8/54TaBjAldcmJiz2Um8ZOKRYfv+kI0S4532+63F08eDQMx4C6sBHNd2Er3wWiSV kqiQ/ZsLzvMXK5QyK7/hVK/w6xYpdZLk27VBjXHhXjh2Q48NeGkV6FYkalsaElB6 2U39x2y8DTP5idWKplNZOQj6LFV0WY0JiRm1MgBJQbwvwUSYikdeBQRWKA1za63b V1RpMYIEu4r4wSGBeRD7huXXm+WCSvKu9FC7NMoALr2JtpBq7+X6GuvYBGGGTUaO +eZqo53816ZWGuPO6pts706M1DLifrVhFCPtBorOFmwpcYAlZ/aytG4qEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0Fl7a+Clm0FEdhJ16ttOO5L7JlMB8GA1UdIwQY MBaAFLLes3ZfU58ew/ACE/+DQIW3yMdvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYt YzZmNmUzZjI4OTU2LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84YzYzOTUtNjQ2YS00N2EyLWI0YjYtYzZmNmUzZjI4OTU2 LzEvc3Q2emRsOVRueDdEOEFJVF80TkFoYmZJeDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBA2gPMc WEEpb7zeJv7Mr/CSQdajHzC+elF5M7VHLfYHaWTu/Hv+c8n4H70/j2uE6QQ6UU2H 945D7nkFJX3q7wdrQUc6Jorv3XHepw9Mdq1B/gwua53z8B/sfW35VKqP864EVqdo WLCZocA9KkxhTm4HjzfULSeo5YreHZdQGMdeyWfeuoUPS65cvDZh17IHWLLZXD3Y gNvN9ubNmcX2Qe9tjIalM5VLfE+aXDzxKpH4MPl3NW2BV/mb+ji5e3UFJtaXPt4Z wPUJwEHG9I4vdZAN2K3eIV4sNhnVW1wMJLp/lqPY5Qx7HKE8RVOcuhkQOH/Ws1jY qWGaT/zulOSSfw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:39 2025 by rpki-client