This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft File: st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json) Hash identifier: bGH5RlJTzaiccxUolbep6EHLqf6Yys0wPGsXFuxWPHw= Subject key identifier: B2:E1:0C:68:2A:69:93:93:34:C0:64:F4:94:63:32:5D:6E:2D:DC:9F Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96 Certificate issuer: /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96 Certificate serial: 019AF23F9D4E50C90D90982AD95D0A7BE2BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: Fl+7BryOhWgSFAzLBhkH7IPrLglzs6cK5rSEdXq6KwI=) 2: utentqqy5GUX6xjOO70Zx55fsK0.roa (hash: Z4JeWyzB0L9+u00qmx46AQ9h8ajUGAFCIAhK67ja97c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9d:4e:50:c9:0d:90:98:2a:d9:5d:0a:7b:e2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96 Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=b2e10c682a69939334c064f49463325d6e2ddc9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d9:40:00:cb:8c:56:3f:02:cd:93:21:64:ad: 68:69:5c:41:df:00:18:18:58:b6:a6:ea:1c:e1:9b: 73:9e:12:3d:72:86:4e:9c:55:fd:bb:7d:88:d7:7b: 6a:ee:f3:7d:e5:f9:b9:10:40:c6:f9:88:fc:82:96: d8:1a:f1:6e:aa:1b:44:2e:15:db:bf:bb:50:32:53: f2:84:61:ef:9a:17:ca:1b:30:84:7e:73:7f:5d:fa: 75:5b:7d:80:ca:47:54:58:80:64:8f:c3:3a:83:b9: 57:c8:8f:a5:03:c2:e7:a0:ce:d6:21:a0:7a:c9:67: 1a:71:6e:b8:3c:2f:7f:2f:06:4b:19:eb:42:ba:de: 22:1c:18:42:63:b7:d9:e1:c2:b8:b9:4c:14:d7:6a: 11:6d:2a:c9:84:3d:75:60:ad:0e:a1:70:10:0e:7b: ba:ba:a7:89:13:6c:b6:ce:7a:46:a2:4c:b2:cc:df: eb:bb:06:f5:e0:28:7a:cd:f2:70:ef:da:51:1c:40: a7:49:6e:d0:5d:84:25:28:d0:aa:28:bf:9b:c5:0f: 5d:80:1d:03:6c:88:e0:56:36:0a:13:72:07:30:f2: e4:cd:9f:bb:b9:ed:91:cd:d5:8b:a0:2f:36:35:01: a6:55:64:20:ad:2f:dc:59:66:00:db:1d:03:78:92: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E1:0C:68:2A:69:93:93:34:C0:64:F4:94:63:32:5D:6E:2D:DC:9F X509v3 Authority Key Identifier: keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:91:dc:11:06:52:e3:85:f9:d6:d0:07:5c:ae:eb:50:48:0e: e0:e1:66:3e:39:13:ef:cc:07:c8:20:ef:9f:07:ef:19:d7:cf: e1:14:e9:a3:6d:6f:6a:83:a4:79:bc:86:b6:0f:83:b5:88:ef: b1:73:c2:2c:3a:e4:b4:8d:0d:bd:a8:66:04:c4:b4:cd:fb:ec: 0c:ce:d7:43:78:a0:94:02:e3:38:4b:7a:f2:4a:3a:ec:5f:87: 72:4d:f9:41:77:d7:d0:fc:f8:09:df:cf:a1:41:24:0b:29:b6: 72:a2:f9:7a:59:c2:64:a0:3c:01:5a:9b:1c:32:ca:5c:85:2c: 15:6a:ec:12:5b:1d:c5:9c:52:28:52:27:f4:0c:b8:be:3e:4d: e7:7c:7f:ef:f7:5d:6a:01:51:5b:5c:e1:12:a5:66:d2:f2:a6: ce:37:b8:0e:dc:9e:d1:31:9d:94:76:63:80:80:60:06:d6:f5: d5:20:a3:9d:c6:b4:6d:1d:52:51:55:5e:80:e5:94:34:ae:5a: fb:4c:aa:f9:0e:b0:e1:5f:fa:b5:96:18:b5:a5:6f:86:71:fa: 1d:13:08:64:5c:90:72:40:c7:70:57:be:99:0b:45:02:42:4e: 57:72:70:71:02:f6:0f:e3:9d:36:90:00:3f:d5:c2:17:5a:94: e9:33:8f:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP51OUMkNkJgq2V0Ke+K7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGYxYzEzN2Q3ODk0Y2NkYmE3NjhjZWI5NzFjNGQzZGY1 OWZlOTYwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD EyhiMmUxMGM2ODJhNjk5MzkzMzRjMDY0ZjQ5NDYzMzI1ZDZlMmRkYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59lAAMuMVj8CzZMhZK1oaVxB3wAY GFi2puoc4ZtznhI9coZOnFX9u32I13tq7vN95fm5EEDG+Yj8gpbYGvFuqhtELhXb v7tQMlPyhGHvmhfKGzCEfnN/Xfp1W32AykdUWIBkj8M6g7lXyI+lA8LnoM7WIaB6 yWcacW64PC9/LwZLGetCut4iHBhCY7fZ4cK4uUwU12oRbSrJhD11YK0OoXAQDnu6 uqeJE2y2znpGokyyzN/ruwb14Ch6zfJw79pRHECnSW7QXYQlKNCqKL+bxQ9dgB0D bIjgVjYKE3IHMPLkzZ+7ue2RzdWLoC82NQGmVWQgrS/cWWYA2x0DeJLuPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLhDGgqaZOTNMBk9JRjMl1uLdyfMB8GA1UdIwQY MBaAFLLfHBN9eJTM26dozrlxxNPfWf6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Q4Y0UzMTRsTXpicDJqT3VYSEUwOTlaX3BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMDY5NTYtZTczMy00NTY0LTk3ODEt ZDBjNGM4NmJiNWZlLzEvc3Q4Y0UzMTRsTXpicDJqT3VYSEUwOTlaX3BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iMDY5NTYtZTczMy00NTY0LTk3ODEtZDBjNGM4NmJiNWZl LzEvc3Q4Y0UzMTRsTXpicDJqT3VYSEUwOTlaX3BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJHcEQZS 44X51tAHXK7rUEgO4OFmPjkT78wHyCDvnwfvGdfP4RTpo21vaoOkebyGtg+DtYjv sXPCLDrktI0NvahmBMS0zfvsDM7XQ3iglALjOEt68ko67F+Hck35QXfX0Pz4Cd/P oUEkCym2cqL5elnCZKA8AVqbHDLKXIUsFWrsElsdxZxSKFIn9Ay4vj5N53x/7/dd agFRW1zhEqVm0vKmzje4Dtye0TGdlHZjgIBgBtb11SCjnca0bR1SUVVegOWUNK5a +0yq+Q6w4V/6tZYYtaVvhnH6HRMIZFyQckDHcFe+mQtFAkJOV3JwcQL2D+OdNpAA P9XCF1qU6TOPTA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:11 2025 by rpki-client