This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json) Hash identifier: tN6EjvHoXoCOXVJHaWpIBaGu2+bzaVpifP4DRhc/86Q= Subject key identifier: EC:DC:A5:52:64:3B:5F:CD:C9:65:20:B9:33:FC:4D:2B:73:68:66:73 Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Certificate serial: 019B3D90B43B4902141A093BABF688085BDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 21:00:51 +0000 Manifest this update: Sat 20 Dec 2025 21:00:51 +0000 Manifest next update: Sun 21 Dec 2025 21:00:51 +0000 Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: 9phaVPURdLFuQfF/4wsHmCAgl9y8Pjm9bDptS1V7Sc0=) 2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:b4:3b:49:02:14:1a:09:3b:ab:f6:88:08:5b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Validity Not Before: Dec 20 21:00:51 2025 GMT Not After : Dec 21 21:00:51 2025 GMT Subject: CN=ecdca552643b5fcdc96520b933fc4d2b73686673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:2f:04:98:3b:aa:83:5b:17:c1:3c:23:55: 81:27:5f:f8:e3:7c:9a:ba:45:51:8f:6c:5b:f1:6d: 3b:7e:aa:e2:79:9f:10:55:48:08:0c:40:0c:b2:80: 25:0a:71:a7:ba:c6:50:b8:06:bc:a0:c3:b4:f1:18: b8:cf:64:81:01:11:df:78:fc:19:92:ce:f5:78:19: 94:2f:b8:53:5c:a6:93:e8:c7:3a:12:76:fd:0e:d9: 99:f8:b3:49:6f:9b:9e:68:b7:72:eb:83:25:28:1e: 15:46:46:ec:42:e9:bc:17:b8:eb:ea:f4:bd:f1:dc: 2d:01:62:bf:0f:92:ac:37:de:6e:ce:26:99:49:3f: 62:52:f7:98:3e:58:de:50:67:3f:4f:e9:09:31:14: 06:65:7f:65:1a:af:a9:2e:87:98:c0:a6:4c:44:63: 40:6a:6e:9d:67:9a:a1:2b:c4:ab:34:79:23:61:1f: fa:9c:59:0f:13:35:fa:3b:e8:54:89:94:44:57:a9: 85:61:58:cc:72:2a:5c:cb:fa:85:87:4a:b0:3b:fa: 5e:3c:6a:94:55:5e:0b:ed:3d:4f:ae:a4:3b:bf:af: e4:e6:79:fb:13:ec:27:8c:92:30:61:4c:0f:73:8d: 54:f0:c1:dc:e5:06:24:58:f8:c2:06:39:45:c7:2a: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DC:A5:52:64:3B:5F:CD:C9:65:20:B9:33:FC:4D:2B:73:68:66:73 X509v3 Authority Key Identifier: keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1c:3d:52:d6:fd:cc:59:28:c1:59:8b:32:9c:c0:62:b4:99: 74:d2:fe:5a:87:e6:74:8c:a1:30:71:ea:ee:83:f5:95:0f:29: 8e:e9:62:62:89:24:7a:3c:42:5c:a6:2b:31:ff:9b:f4:dc:a7: e9:ed:0f:a8:04:75:28:55:5e:02:e8:ef:88:6f:5f:23:4c:a6: 5b:fb:5d:d4:3a:48:e1:fe:ea:72:39:ad:50:35:1a:b5:98:2d: 84:82:31:1b:c5:26:8d:ef:03:15:74:eb:24:3d:82:3c:f0:06: 82:98:2a:e3:50:d4:8d:cb:3d:d8:34:99:31:8c:56:5a:3b:2a: eb:a0:92:56:11:75:0d:bc:01:b8:10:8c:a5:4d:71:47:77:a9: 68:b0:a9:fb:a2:c1:f9:6a:a2:8f:8d:3c:c8:5c:36:2c:d9:10: 76:45:7b:16:c2:60:0a:89:26:59:be:fb:28:c3:c8:1b:06:22: 04:a1:e8:c3:ca:4a:fd:f7:9a:68:f6:63:97:86:6b:dc:61:24: 88:46:30:1b:e0:df:81:97:87:8d:8e:0f:02:86:99:27:f4:3b: 63:34:2f:b9:42:32:8d:5c:b6:53:c6:14:1d:2b:db:8d:a2:34: f8:0f:b5:1e:25:a3:75:35:f7:d3:9a:93:01:db:2b:16:48:54: a9:d8:c2:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kLQ7SQIUGgk7q/aICFveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWRiMDBjYjE0YTM0YTE5M2Y4NGFjYTE0NGIyYWViMWYz YzAyYzgwHhcNMjUxMjIwMjEwMDUxWhcNMjUxMjIxMjEwMDUxWjAzMTEwLwYDVQQD EyhlY2RjYTU1MjY0M2I1ZmNkYzk2NTIwYjkzM2ZjNGQyYjczNjg2NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm0vBJg7qoNbF8E8I1WBJ1/443ya ukVRj2xb8W07fqrieZ8QVUgIDEAMsoAlCnGnusZQuAa8oMO08Ri4z2SBARHfePwZ ks71eBmUL7hTXKaT6Mc6Enb9DtmZ+LNJb5ueaLdy64MlKB4VRkbsQum8F7jr6vS9 8dwtAWK/D5KsN95uziaZST9iUveYPljeUGc/T+kJMRQGZX9lGq+pLoeYwKZMRGNA am6dZ5qhK8SrNHkjYR/6nFkPEzX6O+hUiZREV6mFYVjMcipcy/qFh0qwO/pePGqU VV4L7T1PrqQ7v6/k5nn7E+wnjJIwYUwPc41U8MHc5QYkWPjCBjlFxyqiSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzcpVJkO1/NyWUguTP8TStzaGZzMB8GA1UdIwQY MBaAFEqdsAyxSjShk/hKyhRLKusfPALIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2Et YzFjNjYwNzhlNWJhLzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2EtYzFjNjYwNzhlNWJh LzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxw9Utb9 zFkowVmLMpzAYrSZdNL+WofmdIyhMHHq7oP1lQ8pjuliYokkejxCXKYrMf+b9Nyn 6e0PqAR1KFVeAujviG9fI0ymW/td1DpI4f7qcjmtUDUatZgthIIxG8Umje8DFXTr JD2CPPAGgpgq41DUjcs92DSZMYxWWjsq66CSVhF1DbwBuBCMpU1xR3epaLCp+6LB +Wqij408yFw2LNkQdkV7FsJgCokmWb77KMPIGwYiBKHow8pK/feaaPZjl4Zr3GEk iEYwG+DfgZeHjY4PAoaZJ/Q7YzQvuUIyjVy2U8YUHSvbjaI0+A+1HiWjdTX305qT AdsrFkhUqdjCjg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:04:04 2025 by rpki-client