This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json) Hash identifier: wQSVxggSeNDvWFgvsHPtaGaIJoS1utnFhSRtsDDqB3E= Subject key identifier: 74:56:2E:F3:70:8A:68:A8:9B:29:11:22:B7:E2:C6:DE:5D:B1:94:96 Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51 Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051 Certificate serial: 019B3C46F882548CCCCA7B218CBDEEF1583E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft Manifest number: 0D1D Signing time: Sat 20 Dec 2025 15:00:42 +0000 Manifest this update: Sat 20 Dec 2025 15:00:42 +0000 Manifest next update: Sun 21 Dec 2025 15:00:42 +0000 Files and hashes: 1: NjASS9Fcywmz2PQGC289Z6czZDw.roa (hash: HSbgUfk0PK7NcRU0i0FIegZSv4Qc7DSpvzCcUEz+mx0=) 2: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: z6beGJhx6I8vCg+SzOim9opG/MmMqIuBxmXZUZ2IzY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:f8:82:54:8c:cc:ca:7b:21:8c:bd:ee:f1:58:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051 Validity Not Before: Dec 20 15:00:42 2025 GMT Not After : Dec 21 15:00:42 2025 GMT Subject: CN=74562ef3708a68a89b291122b7e2c6de5db19496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:01:67:7e:e8:c3:3a:4b:33:6a:36:90:a7: 1d:6e:ee:d0:d0:ec:17:e4:50:cd:4e:56:b9:a5:a9: fd:7c:8a:b4:75:91:c0:9d:44:91:6c:86:ba:0a:4d: 37:c4:a9:78:8c:ab:8d:9c:0e:18:5e:39:4a:1f:d0: 03:8c:2e:87:e1:2c:f7:25:1c:ef:52:fd:c6:1f:31: 93:a0:3b:63:f3:84:19:e0:42:7b:00:6f:9e:28:8f: 80:f4:59:cd:c9:8c:98:86:71:44:6d:d8:ad:ed:69: 47:b9:cf:2c:4a:13:11:a9:88:2b:8a:cc:01:55:e3: 24:26:da:80:a4:c2:d4:d2:a2:9e:c3:3f:f7:4e:10: fd:e7:c0:3d:e9:fe:4b:ae:a1:f9:bc:21:f7:0f:b5: 41:cb:bc:3c:01:4f:3c:b0:db:71:d5:49:00:38:a0: cb:f4:8b:6d:39:23:49:51:12:28:87:24:07:d7:9a: 46:9b:57:32:9b:41:d8:f8:cb:b6:48:b9:31:89:30: 22:97:ac:58:8d:d9:ef:8f:72:ce:e9:0d:27:32:77: 76:c3:94:e8:b8:e8:cc:ad:5a:4d:fa:f6:02:38:97: 2e:3a:c4:c3:c1:8c:90:aa:db:d0:e4:bb:2c:06:9e: 8c:18:a0:58:a1:3b:b6:5e:0c:98:33:17:c8:08:d2: 81:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:56:2E:F3:70:8A:68:A8:9B:29:11:22:B7:E2:C6:DE:5D:B1:94:96 X509v3 Authority Key Identifier: keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:13:2e:dc:5f:ef:62:a5:82:04:cb:8e:9a:e5:ae:d4:b3:1a: 49:d2:2a:3e:56:fa:53:e2:92:e1:86:63:7c:99:b4:21:5a:e0: 04:a6:69:f5:b2:fc:aa:f9:c4:ed:dd:57:a7:99:48:d5:c8:d0: b6:35:b7:be:3f:82:24:41:56:62:84:43:34:a9:21:58:07:36: e3:91:f9:32:34:43:6a:71:6a:4c:95:23:50:30:6c:f1:f1:c0: ef:6a:23:35:0e:0d:60:b8:37:f4:89:c5:e2:a4:a8:88:e7:ae: 0b:1d:d9:fe:65:9e:22:41:da:cb:61:59:8a:7d:6e:53:3e:c7: cb:a6:7e:d1:9e:39:4a:d1:d1:70:0c:22:aa:da:0e:51:a6:64: 3c:df:e6:61:d0:3a:28:6f:16:41:4a:fe:9b:96:18:a9:a7:d4: fb:72:b9:c8:0a:bf:87:0c:37:19:8f:fe:19:fe:29:a0:17:86: 85:5b:9e:3f:84:69:74:d9:6a:fd:5f:62:46:d8:b1:e3:70:b4: 3a:07:6d:8d:34:39:66:98:18:30:c9:9c:3f:1c:31:9b:a1:d8: d0:d5:28:0c:ca:fd:f6:e8:0b:3e:50:67:36:b2:23:c0:3b:c6: 50:5a:db:62:4f:ee:44:0b:74:b1:81:8a:37:f2:fb:ed:d2:ee: 07:8c:10:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RviCVIzMynshjL3u8Vg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5Mzc4NjYwZjVmMDE5MjM5NDZjMzVkOTRiZTVjY2Q3ZDJi NzEwNTEwHhcNMjUxMjIwMTUwMDQyWhcNMjUxMjIxMTUwMDQyWjAzMTEwLwYDVQQD Eyg3NDU2MmVmMzcwOGE2OGE4OWIyOTExMjJiN2UyYzZkZTVkYjE5NDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybkBZ37owzpLM2o2kKcdbu7Q0OwX 5FDNTla5pan9fIq0dZHAnUSRbIa6Ck03xKl4jKuNnA4YXjlKH9ADjC6H4Sz3JRzv Uv3GHzGToDtj84QZ4EJ7AG+eKI+A9FnNyYyYhnFEbdit7WlHuc8sShMRqYgriswB VeMkJtqApMLU0qKewz/3ThD958A96f5LrqH5vCH3D7VBy7w8AU88sNtx1UkAOKDL 9IttOSNJURIohyQH15pGm1cym0HY+Mu2SLkxiTAil6xYjdnvj3LO6Q0nMnd2w5To uOjMrVpN+vYCOJcuOsTDwYyQqtvQ5LssBp6MGKBYoTu2XgyYMxfICNKBOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRWLvNwimiomykRIrfixt5dsZSWMB8GA1UdIwQY MBaAFEk3hmD18BkjlGw12UvlzNfStxBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUt NDFiNzQ1YmY1M2RiLzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUtNDFiNzQ1YmY1M2Ri LzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBMu3F/v YqWCBMuOmuWu1LMaSdIqPlb6U+KS4YZjfJm0IVrgBKZp9bL8qvnE7d1Xp5lI1cjQ tjW3vj+CJEFWYoRDNKkhWAc245H5MjRDanFqTJUjUDBs8fHA72ojNQ4NYLg39InF 4qSoiOeuCx3Z/mWeIkHay2FZin1uUz7Hy6Z+0Z45StHRcAwiqtoOUaZkPN/mYdA6 KG8WQUr+m5YYqafU+3K5yAq/hww3GY/+Gf4poBeGhVueP4RpdNlq/V9iRtix43C0 OgdtjTQ5ZpgYMMmcPxwxm6HY0NUoDMr99ugLPlBnNrIjwDvGUFrbYk/uRAt0sYGK N/L77dLuB4wQuA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:08:44 2025 by rpki-client