This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft File: STGaFtGrBlzvNlhRkqfv-H-VFV8.mft (raw, json) Hash identifier: yNJO6dHHsIr5j6bwfHH6OYJL8c0dxgjJnxh0NKwARcM= Subject key identifier: 1F:A3:C3:82:3F:09:30:F9:11:D8:77:78:1F:89:A3:4E:DB:EA:1C:E5 Authority key identifier: 49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F Certificate issuer: /CN=49319a16d1ab065cef36585192a7eff87f95155f Certificate serial: 019AF31B3E752BC356F9F26353083E378AA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft Manifest number: 0624 Signing time: Sat 06 Dec 2025 10:00:40 +0000 Manifest this update: Sat 06 Dec 2025 10:00:40 +0000 Manifest next update: Sun 07 Dec 2025 10:00:40 +0000 Files and hashes: 1: STGaFtGrBlzvNlhRkqfv-H-VFV8.crl (hash: 6HN6Dp83tKwIKTRNdmx+R/HfPQNhBcsLgZYGJBNGarw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3e:75:2b:c3:56:f9:f2:63:53:08:3e:37:8a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49319a16d1ab065cef36585192a7eff87f95155f Validity Not Before: Dec 6 10:00:40 2025 GMT Not After : Dec 7 10:00:40 2025 GMT Subject: CN=1fa3c3823f0930f911d877781f89a34edbea1ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ab:d8:d2:21:ba:e5:15:57:e4:95:27:38:e4: 82:51:f8:ef:e6:01:0e:29:cd:0c:1b:7b:d2:36:a0: e2:80:55:88:26:e6:32:f9:92:12:d2:e8:57:94:79: 2a:12:10:fc:1f:a1:f6:72:ee:27:0c:e8:a6:73:49: 7c:a0:fa:43:98:28:51:a3:7c:07:63:b9:bf:2a:78: 94:b1:02:5b:87:a7:da:1b:c3:0f:14:19:33:61:d0: 4e:70:f5:b2:e6:2a:4b:85:10:d9:cb:9f:5e:ce:73: d5:57:22:20:9e:c8:d3:9c:10:1c:ab:4e:13:d5:7c: c5:59:23:6f:8b:9d:cc:ce:3e:49:b9:fa:c6:6b:7f: 7b:d0:52:3c:8f:1c:dc:c5:36:da:a5:6b:bd:42:b9: f8:a6:a6:3a:89:36:30:ba:04:a5:63:1a:28:89:68: 49:0e:82:a9:98:de:83:03:cf:ab:95:64:f6:9b:73: ca:60:0b:eb:cc:e8:76:c2:53:75:1f:d4:9d:62:f5: 65:48:8b:69:53:fc:95:9f:36:37:a7:db:ba:cc:ad: 97:f6:8a:b4:d6:4b:33:48:56:3a:08:64:1d:a8:73: c0:dd:99:ce:56:b6:e3:fc:b1:49:fe:a8:2d:6e:e4: 73:a2:cc:cf:b8:41:5f:35:53:00:f2:01:01:4f:ce: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A3:C3:82:3F:09:30:F9:11:D8:77:78:1F:89:A3:4E:DB:EA:1C:E5 X509v3 Authority Key Identifier: keyid:49:31:9A:16:D1:AB:06:5C:EF:36:58:51:92:A7:EF:F8:7F:95:15:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STGaFtGrBlzvNlhRkqfv-H-VFV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/13da12-e553-4714-9618-4ce506cf7a2c/1/STGaFtGrBlzvNlhRkqfv-H-VFV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b9:7b:c9:ac:70:6b:8e:d4:da:58:5f:5f:05:19:ee:d3:a1: a7:3c:2c:3d:1f:a0:fe:c9:ce:df:86:f9:84:eb:18:32:e5:e6: a9:c9:d8:22:f9:c2:8b:f4:03:ec:d8:74:5d:37:e4:25:4d:86: ee:b9:63:84:ac:af:c7:28:39:6b:60:f4:76:ca:a1:3f:76:c9: 7a:82:06:6c:34:9d:46:04:c8:17:de:d2:27:ee:ab:81:99:c1: c5:16:57:07:01:e8:67:3d:a7:73:64:73:91:9a:00:17:29:7f: 3a:79:6f:8c:70:eb:84:d6:e6:56:a1:21:66:74:77:f5:c1:9f: 5e:60:9a:b2:33:81:53:4a:ab:f6:2c:eb:67:75:d9:a0:fc:c7: 12:bc:a1:b7:03:d3:88:d5:0e:b6:de:88:ef:70:d2:68:28:2b: bb:9b:f4:17:ee:23:ce:59:1c:f7:e6:53:fd:58:d6:f2:03:1f: 4f:89:b1:3e:bb:3c:bc:13:d9:37:11:6c:95:f9:2f:8d:88:24: 48:1b:a1:7c:c2:7f:24:0f:e2:2d:e4:1e:93:1b:a7:0f:a4:1b: 70:08:cc:38:7a:b1:45:6b:67:5f:aa:5d:ef:00:26:1f:dc:af: f3:1c:80:76:7d:56:80:ad:ba:9f:6c:66:49:f4:f9:a6:6e:4a: 37:da:6c:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGz51K8NW+fJjUwg+N4qgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MzE5YTE2ZDFhYjA2NWNlZjM2NTg1MTkyYTdlZmY4N2Y5 NTE1NWYwHhcNMjUxMjA2MTAwMDQwWhcNMjUxMjA3MTAwMDQwWjAzMTEwLwYDVQQD EygxZmEzYzM4MjNmMDkzMGY5MTFkODc3NzgxZjg5YTM0ZWRiZWExY2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuavY0iG65RVX5JUnOOSCUfjv5gEO Kc0MG3vSNqDigFWIJuYy+ZIS0uhXlHkqEhD8H6H2cu4nDOimc0l8oPpDmChRo3wH Y7m/KniUsQJbh6faG8MPFBkzYdBOcPWy5ipLhRDZy59eznPVVyIgnsjTnBAcq04T 1XzFWSNvi53Mzj5JufrGa3970FI8jxzcxTbapWu9Qrn4pqY6iTYwugSlYxooiWhJ DoKpmN6DA8+rlWT2m3PKYAvrzOh2wlN1H9SdYvVlSItpU/yVnzY3p9u6zK2X9oq0 1kszSFY6CGQdqHPA3ZnOVrbj/LFJ/qgtbuRzoszPuEFfNVMA8gEBT85dmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+jw4I/CTD5Edh3eB+Jo07b6hzlMB8GA1UdIwQY MBaAFEkxmhbRqwZc7zZYUZKn7/h/lRVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xM2RhMTItZTU1My00NzE0LTk2MTgt NGNlNTA2Y2Y3YTJjLzEvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xM2RhMTItZTU1My00NzE0LTk2MTgtNGNlNTA2Y2Y3YTJj LzEvU1RHYUZ0R3JCbHp2TmxoUmtxZnYtSC1WRlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrl7yaxw a47U2lhfXwUZ7tOhpzwsPR+g/snO34b5hOsYMuXmqcnYIvnCi/QD7Nh0XTfkJU2G 7rljhKyvxyg5a2D0dsqhP3bJeoIGbDSdRgTIF97SJ+6rgZnBxRZXBwHoZz2nc2Rz kZoAFyl/OnlvjHDrhNbmVqEhZnR39cGfXmCasjOBU0qr9izrZ3XZoPzHEryhtwPT iNUOtt6I73DSaCgru5v0F+4jzlkc9+ZT/VjW8gMfT4mxPrs8vBPZNxFslfkvjYgk SBuhfMJ/JA/iLeQekxunD6QbcAjMOHqxRWtnX6pd7wAmH9yv8xyAdn1WgK26n2xm SfT5pm5KN9psTw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:10 2025 by rpki-client