This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json) Hash identifier: B/3bVWGsUHTEl421DOkwp+ejYb8T3sNND/LsXMZ6JdE= Subject key identifier: 12:CB:60:CB:B7:CD:7E:7A:21:8C:0A:E0:C5:36:68:1B:5F:01:F3:AE Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92 Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692 Certificate serial: 019B3A91666004A3E8D7DC6BE21B26413874 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft Manifest number: 168C Signing time: Sat 20 Dec 2025 07:02:45 +0000 Manifest this update: Sat 20 Dec 2025 07:02:45 +0000 Manifest next update: Sun 21 Dec 2025 07:02:45 +0000 Files and hashes: 1: OmeM_n0y_6-zOQ1ggpf3SAaIYGM.roa (hash: nPLGIcarXsWhg9mWE06KhP99Y61Hg7uEiGrRbDzptwU=) 2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: 2nrJy7I0PEey4cURqCl3AypnYuDUJsOuu6GJKAQKyMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:66:60:04:a3:e8:d7:dc:6b:e2:1b:26:41:38:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692 Validity Not Before: Dec 20 07:02:45 2025 GMT Not After : Dec 21 07:02:45 2025 GMT Subject: CN=12cb60cbb7cd7e7a218c0ae0c536681b5f01f3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:07:10:15:59:85:11:d5:6a:6c:68:ae:c1: b3:9c:05:24:1f:e0:69:11:20:20:05:cb:7e:04:30: 50:42:da:1b:84:6f:66:29:fa:d3:ec:23:9f:4f:9a: 71:22:16:2e:6d:4e:72:df:bb:a4:61:12:ac:44:e2: 9e:1b:0a:7d:88:03:f5:b2:eb:d4:b7:f2:6a:13:86: 4e:b3:40:c0:cc:c3:20:cd:b9:e2:f6:7d:80:9a:00: b0:a7:13:36:75:e8:1d:53:9a:9b:00:7d:0b:1a:4e: ae:98:2e:45:3a:7a:ca:cc:fb:59:4d:a4:2c:53:67: 98:81:36:e5:92:a0:ac:b3:47:1a:52:dc:a0:69:58: 24:33:72:74:18:96:24:d5:87:7b:cf:04:64:52:fa: 0d:da:f0:1b:15:25:16:1e:58:f0:e8:ea:1f:2e:a2: 0f:4a:c6:40:f7:f2:ca:95:3f:b0:2b:57:13:dd:a5: b7:86:df:97:6d:c5:29:63:c2:31:77:50:7f:17:81: a7:2b:65:6d:12:c8:5b:fc:4e:2c:f9:d7:07:f0:e9: 9f:a3:ba:0f:ae:5e:3f:ce:e6:df:bd:0c:20:4f:c9: ee:fe:27:40:eb:df:4a:03:bf:7f:20:6b:36:9e:36: f8:9b:8c:72:64:71:09:8e:8a:62:70:f9:3c:52:30: 91:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CB:60:CB:B7:CD:7E:7A:21:8C:0A:E0:C5:36:68:1B:5F:01:F3:AE X509v3 Authority Key Identifier: keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:74:c5:14:ae:d7:1a:df:11:cb:6e:aa:0e:d8:a9:89:67:c7: b9:ed:e0:df:6c:3a:be:aa:f8:41:c1:95:62:af:4b:04:18:78: c4:cc:26:37:85:74:5a:46:cb:af:2f:22:86:ba:21:93:0b:62: b2:53:d6:e2:f8:ba:a6:56:b7:b9:3b:89:b6:5e:46:40:2e:a2: 50:3b:6f:1b:59:3a:58:88:68:d5:fb:de:37:99:bd:4b:74:27: 76:2e:77:bb:e8:a6:f1:81:1e:b7:f5:5f:e7:2e:12:77:b9:67: 0f:6c:36:08:05:68:a7:3e:d2:6d:b6:3f:4c:55:80:0f:6c:8a: 16:31:0d:06:bb:d4:45:39:49:a9:66:82:99:e7:83:a5:0e:90: 39:f2:4c:11:9b:65:0f:31:ef:3f:7a:25:1c:71:45:a0:67:d2: 75:34:ce:94:fa:3c:57:0e:a2:3a:b4:6d:9f:36:de:86:d8:9e: 71:9d:0a:6d:16:14:79:7a:1c:c7:15:fe:0b:5b:fd:e1:75:f8: 71:af:30:4d:5d:c9:f9:98:06:cf:6b:7d:43:1b:a3:e8:01:21: f0:22:87:09:a0:a8:b8:3a:60:59:09:ec:61:4e:c0:62:5a:c1: 6b:34:09:c4:a8:90:ea:c7:ed:27:f0:0b:cb:17:4a:4b:0c:fb: e3:a7:16:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kWZgBKPo19xr4hsmQTh0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyOTIwOTRkNjkxZGY0YTdjMzhmMTZiNzU1NTdlOWMyNmQ0 YWM2OTIwHhcNMjUxMjIwMDcwMjQ1WhcNMjUxMjIxMDcwMjQ1WjAzMTEwLwYDVQQD EygxMmNiNjBjYmI3Y2Q3ZTdhMjE4YzBhZTBjNTM2NjgxYjVmMDFmM2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydUHEBVZhRHVamxorsGznAUkH+Bp ESAgBct+BDBQQtobhG9mKfrT7COfT5pxIhYubU5y37ukYRKsROKeGwp9iAP1suvU t/JqE4ZOs0DAzMMgzbni9n2AmgCwpxM2degdU5qbAH0LGk6umC5FOnrKzPtZTaQs U2eYgTblkqCss0caUtygaVgkM3J0GJYk1Yd7zwRkUvoN2vAbFSUWHljw6OofLqIP SsZA9/LKlT+wK1cT3aW3ht+XbcUpY8Ixd1B/F4GnK2VtEshb/E4s+dcH8Omfo7oP rl4/zubfvQwgT8nu/idA699KA79/IGs2njb4m4xyZHEJjopicPk8UjCRBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLLYMu3zX56IYwK4MU2aBtfAfOuMB8GA1UdIwQY MBaAFLKSCU1pHfSnw48Wt1VX6cJtSsaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAt MTVhMDkzZTJiYjhmLzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAtMTVhMDkzZTJiYjhm LzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXTFFK7X Gt8Ry26qDtipiWfHue3g32w6vqr4QcGVYq9LBBh4xMwmN4V0WkbLry8ihrohkwti slPW4vi6pla3uTuJtl5GQC6iUDtvG1k6WIho1fveN5m9S3Qndi53u+im8YEet/Vf 5y4Sd7lnD2w2CAVopz7SbbY/TFWAD2yKFjENBrvURTlJqWaCmeeDpQ6QOfJMEZtl DzHvP3olHHFFoGfSdTTOlPo8Vw6iOrRtnzbehtiecZ0KbRYUeXocxxX+C1v94XX4 ca8wTV3J+ZgGz2t9Qxuj6AEh8CKHCaCouDpgWQnsYU7AYlrBazQJxKiQ6sftJ/AL yxdKSwz746cW7A== -----END CERTIFICATE-----Generated at Sat Dec 20 15:27:00 2025 by rpki-client