This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json) Hash identifier: fa6G+XMhbG/0D4F4PgoHb+mVNL/WzO4gSFl1O1U4CBE= Subject key identifier: 29:0B:1C:7B:DA:7B:0B:AB:2B:DE:E5:FA:D3:24:C6:D8:80:CE:CE:E2 Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51 Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051 Certificate serial: 019B66C39A195A2D85D41778E508C77B8CEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft Manifest number: 0D33 Signing time: Sun 28 Dec 2025 21:00:53 +0000 Manifest this update: Sun 28 Dec 2025 21:00:53 +0000 Manifest next update: Mon 29 Dec 2025 21:00:53 +0000 Files and hashes: 1: NjASS9Fcywmz2PQGC289Z6czZDw.roa (hash: HSbgUfk0PK7NcRU0i0FIegZSv4Qc7DSpvzCcUEz+mx0=) 2: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: rkcgbEFAFvk3hwIja545T1eLq/U4HgwDcuCacJdYuSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:c3:9a:19:5a:2d:85:d4:17:78:e5:08:c7:7b:8c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051 Validity Not Before: Dec 28 21:00:53 2025 GMT Not After : Dec 29 21:00:53 2025 GMT Subject: CN=290b1c7bda7b0bab2bdee5fad324c6d880cecee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2f:c0:26:94:97:5b:fb:ad:5f:64:2c:66:8a: 9c:dd:52:c8:7c:d9:ca:a7:6c:2d:af:eb:12:2c:74: 51:fa:c1:0c:92:0c:9b:28:08:52:26:18:4c:99:35: 4b:5d:e5:d0:02:86:6a:81:da:34:9e:1c:f3:25:53: 3a:77:57:b6:9e:c5:86:3b:27:9d:91:62:34:e6:cd: 13:ed:da:42:79:ff:39:03:99:d8:5e:a3:f7:c5:94: 32:fb:d2:33:08:93:09:d3:52:c9:ba:3d:16:5f:a5: cd:ef:53:fd:e5:a4:6a:4e:3d:6f:e0:c1:c4:b1:db: ee:ce:e4:69:dd:62:d3:fc:0f:a8:b4:0e:ca:81:e0: ea:ef:92:ce:cc:b2:ab:3d:2d:7a:e9:c9:fd:a7:f6: 19:e3:09:a7:25:62:fd:b2:5f:be:89:6c:c0:16:d9: 89:ee:9b:7b:25:6e:fd:db:ae:47:17:3d:9a:21:fe: c8:b1:18:a0:89:bd:04:6d:95:06:84:40:7e:7e:3c: b2:a6:b3:7f:d1:69:ff:c4:0d:8b:37:41:c5:aa:52: 36:2d:a6:b0:1e:90:9e:00:ee:2a:5d:d2:7e:16:70: 7c:19:60:7e:ed:94:81:f8:0a:33:14:cb:6f:55:0d: 44:fe:1c:46:0c:36:eb:d8:3f:44:9b:51:9b:60:5f: 9a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0B:1C:7B:DA:7B:0B:AB:2B:DE:E5:FA:D3:24:C6:D8:80:CE:CE:E2 X509v3 Authority Key Identifier: keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6b:1d:d1:82:6f:08:95:f3:1d:03:3d:f0:ae:db:06:f7:b5: 1a:0b:8d:a6:88:84:bf:e2:c5:e1:81:07:2f:49:b0:b5:b5:78: 12:8d:b4:4c:4f:95:e5:c4:d7:bc:37:ed:22:50:df:74:92:f0: a4:04:90:89:74:83:3f:7a:71:6e:64:88:ec:d6:96:47:f4:2c: bf:8f:2b:11:10:81:5d:cd:91:67:b5:12:bd:bd:79:8a:6c:69: af:8b:04:44:cf:af:1d:f0:41:4a:2e:f9:55:82:d4:5e:a7:5d: 7f:62:f9:5e:7f:44:0e:1e:59:26:b9:a7:10:c9:ec:63:90:c9: fe:c4:c7:8e:18:12:42:7a:d7:f2:34:93:8f:b3:9e:8c:74:4a: 25:06:af:48:36:a2:c6:de:61:15:33:41:5d:50:41:f5:94:67: 1e:33:c6:f6:b2:45:26:18:28:e1:c9:72:f8:37:a0:a4:7f:bc: f5:e0:3c:af:0f:f2:f1:4f:ce:49:29:7c:d3:eb:d1:27:2e:42: 37:b5:da:18:53:84:ca:41:74:5d:5f:93:8e:58:45:12:06:44: b5:fd:67:4a:b1:b9:f1:3d:94:0f:06:ec:28:89:2e:ee:4e:a4: b2:57:96:f4:0d:88:33:53:51:9c:2f:02:6e:15:14:fb:c3:78: 24:c1:bc:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmw5oZWi2F1Bd45QjHe4zsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5Mzc4NjYwZjVmMDE5MjM5NDZjMzVkOTRiZTVjY2Q3ZDJi NzEwNTEwHhcNMjUxMjI4MjEwMDUzWhcNMjUxMjI5MjEwMDUzWjAzMTEwLwYDVQQD EygyOTBiMWM3YmRhN2IwYmFiMmJkZWU1ZmFkMzI0YzZkODgwY2VjZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy/AJpSXW/utX2QsZoqc3VLIfNnK p2wtr+sSLHRR+sEMkgybKAhSJhhMmTVLXeXQAoZqgdo0nhzzJVM6d1e2nsWGOyed kWI05s0T7dpCef85A5nYXqP3xZQy+9IzCJMJ01LJuj0WX6XN71P95aRqTj1v4MHE sdvuzuRp3WLT/A+otA7KgeDq75LOzLKrPS166cn9p/YZ4wmnJWL9sl++iWzAFtmJ 7pt7JW79265HFz2aIf7IsRigib0EbZUGhEB+fjyyprN/0Wn/xA2LN0HFqlI2Laaw HpCeAO4qXdJ+FnB8GWB+7ZSB+AozFMtvVQ1E/hxGDDbr2D9Em1GbYF+abQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkLHHvaewurK97l+tMkxtiAzs7iMB8GA1UdIwQY MBaAFEk3hmD18BkjlGw12UvlzNfStxBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUt NDFiNzQ1YmY1M2RiLzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUtNDFiNzQ1YmY1M2Ri LzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGsd0YJv CJXzHQM98K7bBve1GguNpoiEv+LF4YEHL0mwtbV4Eo20TE+V5cTXvDftIlDfdJLw pASQiXSDP3pxbmSI7NaWR/Qsv48rERCBXc2RZ7USvb15imxpr4sERM+vHfBBSi75 VYLUXqddf2L5Xn9EDh5ZJrmnEMnsY5DJ/sTHjhgSQnrX8jSTj7OejHRKJQavSDai xt5hFTNBXVBB9ZRnHjPG9rJFJhgo4cly+DegpH+89eA8rw/y8U/OSSl80+vRJy5C N7XaGFOEykF0XV+TjlhFEgZEtf1nSrG58T2UDwbsKIku7k6ksleW9A2IM1NRnC8C bhUU+8N4JMG8KQ== -----END CERTIFICATE-----Generated at Mon Dec 29 06:05:08 2025 by rpki-client