This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json) Hash identifier: UaXssLTU+AT5IHKuW1Yoc1LF8cW5rL+ACn9xezVXmmk= Subject key identifier: 9B:C7:0E:40:03:E9:CF:C3:D3:86:CE:82:D6:89:24:58:D2:7F:0E:63 Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51 Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051 Certificate serial: 019AF4D2B2A725F429872A3565F263AD2011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft Manifest number: 0CF8 Signing time: Sat 06 Dec 2025 18:00:40 +0000 Manifest this update: Sat 06 Dec 2025 18:00:40 +0000 Manifest next update: Sun 07 Dec 2025 18:00:40 +0000 Files and hashes: 1: NjASS9Fcywmz2PQGC289Z6czZDw.roa (hash: HSbgUfk0PK7NcRU0i0FIegZSv4Qc7DSpvzCcUEz+mx0=) 2: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: 62JHSy+tMOwylTIbR+IsxD2Sq/i8To/auok0Lzf3jkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:b2:a7:25:f4:29:87:2a:35:65:f2:63:ad:20:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051 Validity Not Before: Dec 6 18:00:40 2025 GMT Not After : Dec 7 18:00:40 2025 GMT Subject: CN=9bc70e4003e9cfc3d386ce82d6892458d27f0e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0a:24:49:9e:d0:df:b0:83:a3:5b:6d:29:3c: 5e:9a:b8:79:2e:31:96:51:f0:8b:8c:7f:a8:58:08: 94:5d:e4:dd:da:d4:e8:b9:55:8d:83:b5:cf:b3:62: 69:67:c3:3b:86:ee:7f:ef:3d:97:38:a1:19:a6:f8: 0c:8f:ca:b7:b9:47:7e:9e:5f:88:b3:bf:1f:47:33: e5:e0:c5:11:86:84:47:bf:5c:2a:a3:7a:8f:93:3c: ac:a2:90:34:af:b8:b6:af:b7:b2:1f:31:9b:88:c9: 29:5a:84:a9:f9:33:82:27:de:8f:a3:c0:1d:21:78: db:52:fa:53:80:ab:68:0a:32:86:82:eb:0a:56:1e: 11:c7:38:9d:ca:67:d7:30:02:98:76:8f:6a:3f:9e: e2:7f:2f:64:1a:51:7a:9a:1d:00:bd:3a:c3:3f:e3: d0:a2:95:01:0f:1e:67:2f:75:4a:0d:1e:27:b3:ac: cc:16:a6:e9:62:1a:7e:47:cb:47:9c:a6:2d:59:4c: 5a:88:17:f7:f6:d6:26:75:dc:ba:ad:3d:22:ee:2f: 61:89:5d:36:f4:c8:3f:d2:1d:e1:64:9e:7b:17:30: 6c:39:2f:12:81:c9:e0:9b:80:74:09:16:f8:75:c1: 0a:db:f6:04:fd:41:f0:0d:41:ef:0c:b6:0a:95:3b: e2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C7:0E:40:03:E9:CF:C3:D3:86:CE:82:D6:89:24:58:D2:7F:0E:63 X509v3 Authority Key Identifier: keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:25:44:f7:ab:64:05:3d:2c:35:64:60:9c:c3:a4:45:4b:a6: c4:18:1b:11:bc:13:74:b9:0b:e3:ae:7d:ed:40:83:3b:10:43: 60:50:26:9d:aa:46:67:42:d8:16:4c:12:6d:51:66:7b:6b:05: 9a:80:f3:7b:be:f3:f3:d6:75:63:54:45:c3:43:96:24:88:32: aa:82:4d:15:62:4d:2b:f1:30:84:a3:97:00:de:ab:86:cf:25: a3:cf:bd:46:79:74:5e:54:c1:ad:78:4d:16:3a:db:e4:20:9a: ad:fc:7b:47:c9:e0:15:ed:15:82:f7:a0:60:91:33:72:24:0d: d8:91:a5:7a:58:6d:f3:5f:19:ec:6e:b5:eb:37:e1:ff:20:6a: c0:13:89:61:f5:e5:6f:d1:b9:a5:00:01:15:14:a3:41:7a:18: 55:86:de:e5:b3:9e:9d:bf:8c:21:75:6c:46:7f:f7:84:38:13: a4:f0:5b:0f:11:8a:14:b0:d0:95:04:ee:35:53:72:1c:42:11: e9:e6:80:6a:a8:a3:bd:5e:46:7e:b7:56:1c:ca:37:bf:73:8f: f5:fe:31:24:cd:84:6a:b6:fc:c2:3a:76:72:38:29:01:7f:c4: e0:5b:96:f8:b3:d8:0e:4c:ab:74:91:43:90:0d:05:31:4c:f9: db:d7:f1:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00rKnJfQphyo1ZfJjrSARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5Mzc4NjYwZjVmMDE5MjM5NDZjMzVkOTRiZTVjY2Q3ZDJi NzEwNTEwHhcNMjUxMjA2MTgwMDQwWhcNMjUxMjA3MTgwMDQwWjAzMTEwLwYDVQQD Eyg5YmM3MGU0MDAzZTljZmMzZDM4NmNlODJkNjg5MjQ1OGQyN2YwZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwokSZ7Q37CDo1ttKTxemrh5LjGW UfCLjH+oWAiUXeTd2tTouVWNg7XPs2JpZ8M7hu5/7z2XOKEZpvgMj8q3uUd+nl+I s78fRzPl4MURhoRHv1wqo3qPkzysopA0r7i2r7eyHzGbiMkpWoSp+TOCJ96Po8Ad IXjbUvpTgKtoCjKGgusKVh4RxzidymfXMAKYdo9qP57ify9kGlF6mh0AvTrDP+PQ opUBDx5nL3VKDR4ns6zMFqbpYhp+R8tHnKYtWUxaiBf39tYmddy6rT0i7i9hiV02 9Mg/0h3hZJ57FzBsOS8Sgcngm4B0CRb4dcEK2/YE/UHwDUHvDLYKlTviewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvHDkAD6c/D04bOgtaJJFjSfw5jMB8GA1UdIwQY MBaAFEk3hmD18BkjlGw12UvlzNfStxBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUt NDFiNzQ1YmY1M2RiLzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUtNDFiNzQ1YmY1M2Ri LzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCVE96tk BT0sNWRgnMOkRUumxBgbEbwTdLkL46597UCDOxBDYFAmnapGZ0LYFkwSbVFme2sF moDze77z89Z1Y1RFw0OWJIgyqoJNFWJNK/EwhKOXAN6rhs8lo8+9Rnl0XlTBrXhN Fjrb5CCarfx7R8ngFe0VgvegYJEzciQN2JGlelht818Z7G616zfh/yBqwBOJYfXl b9G5pQABFRSjQXoYVYbe5bOenb+MIXVsRn/3hDgTpPBbDxGKFLDQlQTuNVNyHEIR 6eaAaqijvV5GfrdWHMo3v3OP9f4xJM2Earb8wjp2cjgpAX/E4FuW+LPYDkyrdJFD kA0FMUz529fxmg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:16:12 2025 by rpki-client