This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft File: SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft (raw, json) Hash identifier: +CqYkFOV6+2lcfwclUJo8DIufM4mjx6CfDFX3xQrzwk= Subject key identifier: AD:E5:C4:4F:94:F9:D5:86:E5:4F:52:94:C7:40:68:2D:80:09:60:7E Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6 Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6 Certificate serial: 019B3B34AC7FB54E51C319B015C070EF146C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft Manifest number: 1252 Signing time: Sat 20 Dec 2025 10:01:06 +0000 Manifest this update: Sat 20 Dec 2025 10:01:06 +0000 Manifest next update: Sun 21 Dec 2025 10:01:06 +0000 Files and hashes: 1: 0mjmbcUYcJdUwsZqfFXQurt0QGs.roa (hash: vj/D2huTe28PQZ9MOq6LRDgSeNcaiaat155ny9UZvt0=) 2: 5JznkOHDsnezLypnW6QUHIz_JqI.roa (hash: uAlkr8hXMWL34v9FNVsgW8wHLyGgQu70yPukhjP+1nM=) 3: SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl (hash: fAXk6GNIcklMrdnkbztVBlftnctFK9I/R+bbvxgTHN8=) 4: T94PGq-eWjYniItYGztzb3OiEUY.roa (hash: fT3XH8Nt967S/av07WJbsq9vvvGHm5IDc+ITdZ2PmQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:ac:7f:b5:4e:51:c3:19:b0:15:c0:70:ef:14:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6 Validity Not Before: Dec 20 10:01:06 2025 GMT Not After : Dec 21 10:01:06 2025 GMT Subject: CN=ade5c44f94f9d586e54f5294c740682d8009607e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:33:40:a0:1c:88:07:0c:62:46:20:6c:4f: 47:d2:d3:7d:52:2b:21:73:e9:ed:c2:c9:df:db:4b: 20:fc:89:70:ce:d2:81:e5:30:20:5f:b2:e0:0d:7a: 39:60:28:f0:1a:be:d2:55:cf:be:17:34:91:d8:18: 1d:39:1f:b2:7e:6d:f4:43:21:6d:03:5c:37:b9:bf: 3c:c3:29:6d:ca:79:06:9b:5c:89:56:6f:ad:38:73: e1:df:10:00:b0:40:18:35:6c:38:fb:15:72:9e:62: 97:83:28:19:14:c0:ce:b8:7b:5e:81:37:d8:1e:7a: 9d:47:c9:4f:a2:92:07:ce:85:ee:35:ba:17:2f:b2: f1:7b:3d:2e:b2:66:1d:92:ba:29:c0:25:a4:75:3d: 6c:3e:8a:ee:83:43:c7:09:2b:ff:4f:4b:a3:37:22: ce:4b:22:31:a8:68:01:92:d2:75:6c:4d:81:20:71: 84:98:36:c3:01:49:44:c2:31:30:47:e7:c5:3c:49: f0:63:da:a1:4f:a2:e9:3c:ba:40:a5:61:3a:e7:78: 3a:b7:bc:96:8f:df:4d:1e:b0:ea:2b:88:80:69:76: 01:b5:56:0e:89:97:ed:76:dc:24:ef:0f:89:61:9e: 21:9f:10:d7:87:d5:79:44:9c:93:9a:be:70:9b:1a: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E5:C4:4F:94:F9:D5:86:E5:4F:52:94:C7:40:68:2D:80:09:60:7E X509v3 Authority Key Identifier: keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a0:fb:d9:f9:a4:fd:9b:58:69:49:af:7f:07:39:30:6f:51: 20:99:d1:fa:3d:51:35:72:69:ba:dd:60:27:40:28:0f:1e:8f: 59:0a:37:be:09:36:5f:20:d4:28:29:9e:a5:e4:34:05:0b:28: 87:ff:9f:86:a3:cf:4c:b3:cc:3a:5d:b1:bf:b1:ac:3c:b7:8a: 98:c1:ad:9f:73:79:30:1f:7f:b5:66:06:7b:a0:0e:d2:47:63: c8:31:a2:4d:8b:f8:40:28:1e:6c:25:58:ea:d8:a4:9c:81:d0: 19:e5:60:90:e4:e3:1a:28:2d:9b:0e:83:85:6a:3e:96:4c:b7: 0e:1b:52:4f:37:0b:c9:06:fc:f4:23:c0:47:c1:d0:27:d1:1b: a4:19:0e:ab:af:d4:0d:b0:1a:b1:88:ea:89:8b:0a:c4:d1:ff: 13:79:a3:a0:65:cb:54:f1:4b:a8:a5:6b:a5:1e:b0:da:ef:fe: e6:10:a6:f0:43:1c:91:3b:90:49:bc:0b:3a:a5:37:a4:e1:51: 77:2c:8a:7f:20:a6:79:fa:83:cf:eb:74:12:0f:51:3e:dc:36: 00:ac:d7:d6:f2:b6:a7:10:1d:9c:42:a4:99:89:1d:dc:62:5e: 66:a2:26:eb:62:ba:94:20:90:51:05:d2:82:1a:7e:23:d6:2a: 58:e5:ed:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NKx/tU5RwxmwFcBw7xRsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWM1ZTU2YWFjZDAxZmZiMjgyNWE5MzFlZDVlZGU0MWMz ZjkyZTYwHhcNMjUxMjIwMTAwMTA2WhcNMjUxMjIxMTAwMTA2WjAzMTEwLwYDVQQD EyhhZGU1YzQ0Zjk0ZjlkNTg2ZTU0ZjUyOTRjNzQwNjgyZDgwMDk2MDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUczQKAciAcMYkYgbE9H0tN9Uish c+ntwsnf20sg/IlwztKB5TAgX7LgDXo5YCjwGr7SVc++FzSR2BgdOR+yfm30QyFt A1w3ub88wyltynkGm1yJVm+tOHPh3xAAsEAYNWw4+xVynmKXgygZFMDOuHtegTfY HnqdR8lPopIHzoXuNboXL7Lxez0usmYdkropwCWkdT1sPorug0PHCSv/T0ujNyLO SyIxqGgBktJ1bE2BIHGEmDbDAUlEwjEwR+fFPEnwY9qhT6LpPLpApWE653g6t7yW j99NHrDqK4iAaXYBtVYOiZftdtwk7w+JYZ4hnxDXh9V5RJyTmr5wmxpYtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3lxE+U+dWG5U9SlMdAaC2ACWB+MB8GA1UdIwQY MBaAFEqcXlaqzQH/soJakx7V7eQcP5LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMDEwZGMtMDkxMC00MzQxLThiMzMt MmU2OTRiMzM5OTMzLzEvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jMDEwZGMtMDkxMC00MzQxLThiMzMtMmU2OTRiMzM5OTMz LzEvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqD72fmk /ZtYaUmvfwc5MG9RIJnR+j1RNXJput1gJ0AoDx6PWQo3vgk2XyDUKCmepeQ0BQso h/+fhqPPTLPMOl2xv7GsPLeKmMGtn3N5MB9/tWYGe6AO0kdjyDGiTYv4QCgebCVY 6tiknIHQGeVgkOTjGigtmw6DhWo+lky3DhtSTzcLyQb89CPAR8HQJ9EbpBkOq6/U DbAasYjqiYsKxNH/E3mjoGXLVPFLqKVrpR6w2u/+5hCm8EMckTuQSbwLOqU3pOFR dyyKfyCmefqDz+t0Eg9RPtw2AKzX1vK2pxAdnEKkmYkd3GJeZqIm62K6lCCQUQXS ghp+I9YqWOXtJA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:32 2025 by rpki-client