This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json) Hash identifier: xg6ofTIyDDtAJQTQBxyigI6wDgNBAi9ctqZ6bgYNXEI= Subject key identifier: 9D:A3:AF:81:E4:41:25:60:AB:5B:34:71:29:76:44:06:6A:37:62:2B Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Certificate serial: 019B52CED99A6817173398FED5F6BB4E3D41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft Manifest number: 1726 Signing time: Thu 25 Dec 2025 00:00:46 +0000 Manifest this update: Thu 25 Dec 2025 00:00:46 +0000 Manifest next update: Fri 26 Dec 2025 00:00:46 +0000 Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: ih4ckrViSUhGxuLa730pYSZJ/JIjbwrrkrFngIuHJLY=) 2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:d9:9a:68:17:17:33:98:fe:d5:f6:bb:4e:3d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Validity Not Before: Dec 25 00:00:46 2025 GMT Not After : Dec 26 00:00:46 2025 GMT Subject: CN=9da3af81e4412560ab5b3471297644066a37622b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:e9:67:8f:e6:8d:40:dc:cf:be:6c:db:31: f1:c6:9e:90:2a:54:4f:02:25:db:c4:a8:91:fd:c8: be:92:a3:70:cb:28:52:5a:a8:78:4f:c2:a4:23:8e: 10:dc:1a:84:84:4d:51:76:c0:d0:6d:95:80:05:b4: 8e:e8:62:ee:2f:cc:35:47:b2:ca:dc:f8:d3:ea:2c: 03:71:d5:33:62:f1:be:fc:b2:97:ed:53:0a:a3:f2: 51:c5:4d:a9:0a:50:ed:0b:cd:5a:59:0b:d5:b2:40: f8:12:a7:0f:55:42:f8:66:8c:34:06:90:f4:9b:59: 83:bb:ec:b4:1a:f4:cc:60:33:94:8e:95:15:63:b4: 5f:fb:31:0d:68:3e:5f:cd:57:c5:ca:93:4b:ce:b8: 63:32:e3:3a:58:ac:a1:94:f9:a9:43:1e:e3:22:67: c9:ef:67:0f:b0:d3:fc:db:a1:3a:76:fe:fd:e9:8c: da:e8:9d:d6:be:e0:46:61:39:fb:d7:2b:79:ee:c5: 4f:6f:f4:af:e7:75:6f:0e:5f:25:0a:11:26:04:db: 5d:93:a6:c4:de:cc:e6:91:8d:98:7e:1c:48:06:de: 74:11:48:2f:ce:fc:8e:52:42:f1:1c:3d:d9:6f:94: 5a:e1:2d:f5:c4:29:f2:6f:dc:04:ff:a9:3d:15:a8: e7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A3:AF:81:E4:41:25:60:AB:5B:34:71:29:76:44:06:6A:37:62:2B X509v3 Authority Key Identifier: keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b1:2f:28:e7:ea:0d:b6:63:a1:aa:09:6b:05:f4:be:cb:3a: 6b:da:4e:53:7e:64:c5:e2:b7:e9:03:ab:89:19:64:0b:2f:99: ea:54:28:01:be:fc:29:38:39:04:38:84:4e:06:1b:ba:99:76: 0c:d2:0f:b7:9e:fd:1b:db:0e:46:63:6f:d2:93:91:b3:be:31: b4:8a:2d:b4:e5:53:22:70:30:24:67:b0:64:ef:39:dc:a2:99: 55:3c:80:d1:64:37:ba:77:e6:7f:5f:d7:48:91:fd:e4:52:c6: 46:2c:9d:d1:0b:56:44:0f:16:0b:99:dd:51:c8:36:53:c2:bb: ac:c1:c2:eb:9e:81:85:8c:af:52:c1:18:b4:41:fa:cb:31:e3: 8d:b8:da:82:e6:0b:17:97:ce:b2:ae:63:de:ed:70:03:1a:90: 8c:f9:bb:b5:7e:ae:55:4e:59:c3:96:71:4a:52:0f:4b:17:6d: b7:3a:7f:b2:c7:cd:e2:d7:68:40:91:d2:92:fd:a2:d2:5f:6c: 51:97:17:9f:3d:e0:5d:75:f3:a1:ff:dd:84:8f:95:34:85:9d: cb:b4:75:68:81:2d:77:99:7e:d3:55:0d:28:00:e7:f8:d0:eb: 35:48:f2:1f:70:df:ea:0d:75:ca:f4:bb:57:3e:6f:74:2b:a6: aa:7e:7f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSztmaaBcXM5j+1fa7Tj1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWRiMDBjYjE0YTM0YTE5M2Y4NGFjYTE0NGIyYWViMWYz YzAyYzgwHhcNMjUxMjI1MDAwMDQ2WhcNMjUxMjI2MDAwMDQ2WjAzMTEwLwYDVQQD Eyg5ZGEzYWY4MWU0NDEyNTYwYWI1YjM0NzEyOTc2NDQwNjZhMzc2MjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw/pZ4/mjUDcz75s2zHxxp6QKlRP AiXbxKiR/ci+kqNwyyhSWqh4T8KkI44Q3BqEhE1RdsDQbZWABbSO6GLuL8w1R7LK 3PjT6iwDcdUzYvG+/LKX7VMKo/JRxU2pClDtC81aWQvVskD4EqcPVUL4Zow0BpD0 m1mDu+y0GvTMYDOUjpUVY7Rf+zENaD5fzVfFypNLzrhjMuM6WKyhlPmpQx7jImfJ 72cPsNP826E6dv796Yza6J3WvuBGYTn71yt57sVPb/Sv53VvDl8lChEmBNtdk6bE 3szmkY2YfhxIBt50EUgvzvyOUkLxHD3Zb5Ra4S31xCnyb9wE/6k9FajnzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2jr4HkQSVgq1s0cSl2RAZqN2IrMB8GA1UdIwQY MBaAFEqdsAyxSjShk/hKyhRLKusfPALIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2Et YzFjNjYwNzhlNWJhLzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2EtYzFjNjYwNzhlNWJh LzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7EvKOfq DbZjoaoJawX0vss6a9pOU35kxeK36QOriRlkCy+Z6lQoAb78KTg5BDiETgYbupl2 DNIPt579G9sORmNv0pORs74xtIottOVTInAwJGewZO853KKZVTyA0WQ3unfmf1/X SJH95FLGRiyd0QtWRA8WC5ndUcg2U8K7rMHC656BhYyvUsEYtEH6yzHjjbjaguYL F5fOsq5j3u1wAxqQjPm7tX6uVU5Zw5ZxSlIPSxdttzp/ssfN4tdoQJHSkv2i0l9s UZcXnz3gXXXzof/dhI+VNIWdy7R1aIEtd5l+01UNKADn+NDrNUjyH3Df6g11yvS7 Vz5vdCumqn5/+Q== -----END CERTIFICATE-----Generated at Thu Dec 25 07:26:04 2025 by rpki-client