This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json) Hash identifier: bygp07LrCydSQFSL+1yW2hGjOfftWS+oBSIlr5yg94s= Subject key identifier: 30:C7:04:5C:7F:8C:6A:8D:1F:E1:1D:6B:E8:E0:12:7F:D6:9A:05:44 Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6 Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6 Certificate serial: 019B4324EE2598FA0C82C4989084F75B638A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft Manifest number: 133E Signing time: Sun 21 Dec 2025 23:00:52 +0000 Manifest this update: Sun 21 Dec 2025 23:00:52 +0000 Manifest next update: Mon 22 Dec 2025 23:00:52 +0000 Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: jOOEaqmEpiVye/PAN0yNoNjpPGLfQS+StYJsLGx/+NU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:ee:25:98:fa:0c:82:c4:98:90:84:f7:5b:63:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6 Validity Not Before: Dec 21 23:00:52 2025 GMT Not After : Dec 22 23:00:52 2025 GMT Subject: CN=30c7045c7f8c6a8d1fe11d6be8e0127fd69a0544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:49:e1:a3:dc:da:92:be:07:a8:80:1d:f3: 7f:71:3f:40:9c:a7:fe:d1:76:1e:a7:63:b9:b9:49: 82:8d:db:01:04:82:37:86:84:6a:4d:97:8f:36:27: cf:08:3a:6f:e8:88:f8:97:b0:3a:49:72:b3:03:b1: 76:27:fe:0d:80:27:81:c9:36:f0:a5:95:24:09:d6: 44:c5:61:15:22:55:9c:4b:c2:92:39:cd:b8:86:99: 97:98:c2:74:14:4b:59:29:2b:56:63:6c:57:cf:60: 14:f1:e3:2e:58:da:57:d3:50:a0:97:0e:4d:7b:95: 7c:da:09:51:f2:e4:9e:52:55:e5:c2:3f:8a:da:6e: 35:96:ee:87:70:53:e0:9c:6d:de:e3:92:d9:0c:b1: 19:c7:6e:7f:f0:06:e6:a2:e9:dd:40:b7:6f:d7:c7: b3:d0:82:0f:ca:64:9a:2d:f1:51:7d:64:be:55:72: c4:8d:14:f5:48:d9:89:65:36:3e:9a:fe:56:a5:f2: 8d:6d:b4:97:92:e4:4d:e0:dc:73:75:97:1d:59:8e: 1e:ce:2c:db:14:56:2a:d3:a9:0f:cb:39:b9:4f:d9: 73:8c:9d:55:02:2f:90:b5:c1:b1:c6:fc:8b:b0:15: e4:76:33:86:39:80:2e:ea:1c:1c:24:06:76:5d:3c: 58:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C7:04:5C:7F:8C:6A:8D:1F:E1:1D:6B:E8:E0:12:7F:D6:9A:05:44 X509v3 Authority Key Identifier: keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ff:fd:0b:05:7a:80:91:cd:17:93:12:8e:2a:56:1a:f8:8f: ef:10:0a:4a:45:51:21:a5:81:a0:64:fa:2c:57:73:90:f2:7a: ba:fc:c5:8e:fe:d9:23:f1:3d:c7:46:11:ea:e8:f8:07:79:2a: b9:3f:c4:59:d2:9c:1a:92:5a:5c:be:2e:11:16:e9:80:56:77: cd:40:b9:94:28:71:cb:25:f2:85:51:b8:9c:26:04:59:c8:70: e8:bf:61:09:1c:d8:6e:55:61:12:b1:51:34:38:11:e4:55:c7: 6d:13:ff:9b:d2:81:17:72:0c:d8:83:82:ab:4a:d6:fb:e2:f1: 83:5e:07:08:3f:e1:f4:24:ca:93:5c:1b:af:2e:70:43:1b:30: 86:25:20:f6:86:80:cb:da:5d:c7:b5:73:af:87:22:44:24:6d: 43:06:50:28:4a:41:ad:53:08:86:fd:18:ec:26:d2:20:b8:4c: b4:55:b2:e0:2a:ff:b3:81:75:1f:eb:79:a7:31:24:7b:75:97: c7:89:ba:fd:e9:7c:a2:58:49:20:f1:cf:87:0f:42:a6:94:71: 89:32:de:09:d4:c3:46:8e:5e:93:96:f2:6d:53:1c:57:b0:81: de:11:a1:cc:3e:b0:14:08:7c:34:97:d4:1b:fe:09:72:47:a8: 37:49:02:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJO4lmPoMgsSYkIT3W2OKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZmRmODFmYmYzYWY0MzA2NzJhNGJmNjQyNzczYjk1OWM0 NTA4YTYwHhcNMjUxMjIxMjMwMDUyWhcNMjUxMjIyMjMwMDUyWjAzMTEwLwYDVQQD EygzMGM3MDQ1YzdmOGM2YThkMWZlMTFkNmJlOGUwMTI3ZmQ2OWEwNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssVJ4aPc2pK+B6iAHfN/cT9AnKf+ 0XYep2O5uUmCjdsBBII3hoRqTZePNifPCDpv6Ij4l7A6SXKzA7F2J/4NgCeByTbw pZUkCdZExWEVIlWcS8KSOc24hpmXmMJ0FEtZKStWY2xXz2AU8eMuWNpX01Cglw5N e5V82glR8uSeUlXlwj+K2m41lu6HcFPgnG3e45LZDLEZx25/8AbmoundQLdv18ez 0IIPymSaLfFRfWS+VXLEjRT1SNmJZTY+mv5WpfKNbbSXkuRN4NxzdZcdWY4ezizb FFYq06kPyzm5T9lzjJ1VAi+QtcGxxvyLsBXkdjOGOYAu6hwcJAZ2XTxYpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDHBFx/jGqNH+Eda+jgEn/WmgVEMB8GA1UdIwQY MBaAFEj9+B+/OvQwZypL9kJ3O5WcRQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTIt MDgxZDEyMTQ2ZmEzLzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTItMDgxZDEyMTQ2ZmEz LzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARv/9CwV6 gJHNF5MSjipWGviP7xAKSkVRIaWBoGT6LFdzkPJ6uvzFjv7ZI/E9x0YR6uj4B3kq uT/EWdKcGpJaXL4uERbpgFZ3zUC5lChxyyXyhVG4nCYEWchw6L9hCRzYblVhErFR NDgR5FXHbRP/m9KBF3IM2IOCq0rW++Lxg14HCD/h9CTKk1wbry5wQxswhiUg9oaA y9pdx7Vzr4ciRCRtQwZQKEpBrVMIhv0Y7CbSILhMtFWy4Cr/s4F1H+t5pzEke3WX x4m6/el8olhJIPHPhw9CppRxiTLeCdTDRo5ek5bybVMcV7CB3hGhzD6wFAh8NJfU G/4JckeoN0kCbg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:55:04 2025 by rpki-client