This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft File: stsr_PWdmcpwgzcI_TADLyP-9IU.mft (raw, json) Hash identifier: FMx/rqi6wKCCPaxfJVmjIBnZlTnxKQQgkUh3fEiLmcI= Subject key identifier: 60:EE:A6:59:8E:19:7F:1C:58:B6:EA:58:42:28:1B:DE:A5:B8:C4:6A Authority key identifier: B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85 Certificate issuer: /CN=b2db2bfcf59d99ca70833708fd30032f23fef485 Certificate serial: 019B42EE8DB3CD66769181C7DEA696FECAC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft Manifest number: 1757 Signing time: Sun 21 Dec 2025 22:01:28 +0000 Manifest this update: Sun 21 Dec 2025 22:01:28 +0000 Manifest next update: Mon 22 Dec 2025 22:01:28 +0000 Files and hashes: 1: 8OSq_me_piuY9aTEESBxQ_Nz1Zc.roa (hash: jli/f4rA8lzODNLo/sC1h2DAhvEwSPZMgYQGoXMtAvM=) 2: stsr_PWdmcpwgzcI_TADLyP-9IU.crl (hash: 0/L6ByI2zkJQBpWcsvTaZhJ+m6LYpeDNk4JBT0kXji0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:8d:b3:cd:66:76:91:81:c7:de:a6:96:fe:ca:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2db2bfcf59d99ca70833708fd30032f23fef485 Validity Not Before: Dec 21 22:01:28 2025 GMT Not After : Dec 22 22:01:28 2025 GMT Subject: CN=60eea6598e197f1c58b6ea5842281bdea5b8c46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4c:a1:77:56:e1:e1:22:ec:f5:8b:03:ca:04: 37:c1:62:69:96:3f:49:a0:43:b8:e7:ed:89:49:e7: 36:50:92:1c:af:78:53:cd:9b:33:e8:9f:e5:ea:14: 82:a9:dd:12:ca:13:1b:8c:93:23:da:fc:f4:58:af: 8a:41:65:1a:8d:be:9d:8f:d2:45:37:d3:41:e8:d1: 7d:50:9e:1b:71:44:6c:f0:ab:16:61:68:8c:ec:67: 82:46:05:2d:89:fc:0b:64:6d:fd:b0:de:c1:cf:1c: d1:d3:ca:cf:00:98:48:9e:fb:c3:2b:85:13:26:21: 3f:09:b6:ca:ac:aa:02:5c:d3:c1:dc:59:52:61:31: da:fd:b1:ed:c5:d9:9f:c0:ab:2d:61:1a:c0:82:b2: 97:c5:ae:44:ab:10:d1:43:1f:a1:6c:f2:bf:0d:22: e8:78:f2:fe:fe:7b:14:e9:12:61:42:72:59:7d:5b: ce:df:ea:c7:9c:a9:61:fb:59:27:c4:d9:2e:5b:b5: 53:5a:91:7f:e6:37:ff:8a:f1:f4:28:c0:cd:9b:f6: 94:c7:64:32:fc:a2:b1:b5:ef:94:57:7e:b3:da:d9: d1:f2:8e:93:5d:14:db:58:12:be:fc:d9:e2:7a:94: 7c:e3:4c:26:c1:4f:3f:c9:a8:53:bd:9d:1d:2e:dd: 4f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EE:A6:59:8E:19:7F:1C:58:B6:EA:58:42:28:1B:DE:A5:B8:C4:6A X509v3 Authority Key Identifier: keyid:B2:DB:2B:FC:F5:9D:99:CA:70:83:37:08:FD:30:03:2F:23:FE:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stsr_PWdmcpwgzcI_TADLyP-9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/39db6c-f23b-4c9b-9f79-734994c52c1f/1/stsr_PWdmcpwgzcI_TADLyP-9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ed:d0:2e:ed:33:55:b2:46:b3:5a:f7:e7:cf:07:42:a1:20: 9f:bd:16:4f:fd:ca:88:13:f0:cb:17:0a:35:6a:8d:bf:ff:61: b5:19:6d:f0:ec:00:e5:51:dc:a0:c0:85:31:b2:24:c8:0e:8e: b8:68:28:77:13:73:01:3a:a6:1a:b0:0a:b1:92:17:d9:f0:3d: 15:94:1f:ed:eb:b6:61:27:20:ff:33:9f:94:8c:e5:08:fc:20: 1d:12:6e:3e:84:e3:6d:3e:4a:b3:82:7e:65:7b:2e:07:46:f7: ea:fc:e7:52:d0:2c:fa:a8:65:bd:5a:23:35:c2:62:5b:ca:fc: 5f:43:99:a2:f1:74:a2:31:6b:91:af:84:c5:b1:22:0e:45:3c: a5:93:bd:d0:8e:19:8f:04:05:e2:37:e3:75:27:42:d7:53:68: de:d8:c3:7f:21:1b:7c:f8:16:ad:de:50:af:77:ce:e7:bb:34: da:e5:95:6e:77:6e:5b:bc:67:1a:b5:a6:bf:31:f9:d4:47:96: c9:d1:02:17:c0:02:57:b6:19:29:e4:f5:d9:56:6c:c3:67:e5: 02:97:27:de:07:f5:c4:11:bd:d7:35:11:82:03:8c:d2:8e:ac: 2e:22:22:56:ea:87:09:60:c9:04:a7:38:88:6b:a5:73:40:86: fb:51:a9:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7o2zzWZ2kYHH3qaW/srJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZGIyYmZjZjU5ZDk5Y2E3MDgzMzcwOGZkMzAwMzJmMjNm ZWY0ODUwHhcNMjUxMjIxMjIwMTI4WhcNMjUxMjIyMjIwMTI4WjAzMTEwLwYDVQQD Eyg2MGVlYTY1OThlMTk3ZjFjNThiNmVhNTg0MjI4MWJkZWE1YjhjNDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUyhd1bh4SLs9YsDygQ3wWJplj9J oEO45+2JSec2UJIcr3hTzZsz6J/l6hSCqd0SyhMbjJMj2vz0WK+KQWUajb6dj9JF N9NB6NF9UJ4bcURs8KsWYWiM7GeCRgUtifwLZG39sN7BzxzR08rPAJhInvvDK4UT JiE/CbbKrKoCXNPB3FlSYTHa/bHtxdmfwKstYRrAgrKXxa5EqxDRQx+hbPK/DSLo ePL+/nsU6RJhQnJZfVvO3+rHnKlh+1knxNkuW7VTWpF/5jf/ivH0KMDNm/aUx2Qy /KKxte+UV36z2tnR8o6TXRTbWBK+/NniepR840wmwU8/yahTvZ0dLt1PcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDuplmOGX8cWLbqWEIoG96luMRqMB8GA1UdIwQY MBaAFLLbK/z1nZnKcIM3CP0wAy8j/vSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zOWRiNmMtZjIzYi00YzliLTlmNzkt NzM0OTk0YzUyYzFmLzEvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zOWRiNmMtZjIzYi00YzliLTlmNzktNzM0OTk0YzUyYzFm LzEvc3Rzcl9QV2RtY3B3Z3pjSV9UQURMeVAtOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlu3QLu0z VbJGs1r3588HQqEgn70WT/3KiBPwyxcKNWqNv/9htRlt8OwA5VHcoMCFMbIkyA6O uGgodxNzATqmGrAKsZIX2fA9FZQf7eu2YScg/zOflIzlCPwgHRJuPoTjbT5Ks4J+ ZXsuB0b36vznUtAs+qhlvVojNcJiW8r8X0OZovF0ojFrka+ExbEiDkU8pZO90I4Z jwQF4jfjdSdC11No3tjDfyEbfPgWrd5Qr3fO57s02uWVbnduW7xnGrWmvzH51EeW ydECF8ACV7YZKeT12VZsw2flApcn3gf1xBG91zURggOM0o6sLiIiVuqHCWDJBKc4 iGulc0CG+1Gp0g== -----END CERTIFICATE-----Generated at Mon Dec 22 08:28:31 2025 by rpki-client