This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft File: SPWbrFHUhS0vyW6LTPu5__i0qTk.mft (raw, json) Hash identifier: 24Wj+ga+A4gPA2OFc/Aq3w9cSTdj60EIRiOGtaS8mcs= Subject key identifier: 20:64:AF:5B:F4:C9:ED:B0:1E:E5:CC:DF:3F:9E:01:55:6C:E6:35:D7 Authority key identifier: 48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39 Certificate issuer: /CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939 Certificate serial: 019B36E9C123F34C0F3BBF14B2BBF63EDDA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft Manifest number: 152C Signing time: Fri 19 Dec 2025 14:00:47 +0000 Manifest this update: Fri 19 Dec 2025 14:00:47 +0000 Manifest next update: Sat 20 Dec 2025 14:00:47 +0000 Files and hashes: 1: 5nrGKW5FRerRHdO1Dy3ViuoBo2w.roa (hash: +MtkJFHMNS/IgvjNh3QorGfog9rrCct1jj019c8Teh4=) 2: SPWbrFHUhS0vyW6LTPu5__i0qTk.crl (hash: 8vzcoWQv9oYgmseSovLs7l1Kn0czbaJU6fr0Rty/d8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:c1:23:f3:4c:0f:3b:bf:14:b2:bb:f6:3e:dd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939 Validity Not Before: Dec 19 14:00:47 2025 GMT Not After : Dec 20 14:00:47 2025 GMT Subject: CN=2064af5bf4c9edb01ee5ccdf3f9e01556ce635d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4e:4b:87:74:9f:6f:60:74:e9:e1:a3:1e:76: 4c:21:8a:41:8d:7c:ac:51:a9:8b:ec:b2:ec:28:8b: 48:f5:23:05:04:80:1e:4a:1e:c9:7a:fe:86:06:2c: 81:57:78:bb:3b:e6:42:e0:aa:05:71:8b:cf:7c:e6: 23:52:47:a2:b4:9f:de:73:c2:6b:21:4b:2d:3e:ad: 5b:74:44:6a:2c:6e:f9:00:bf:63:15:69:a6:ef:da: 2c:ad:f4:2d:ab:06:aa:ca:a2:dd:7c:7a:56:33:e5: af:ed:eb:3a:1d:e2:6d:4b:15:43:ad:d4:28:d0:cf: 84:fa:9d:72:e3:0b:94:33:33:fc:9f:1a:20:9e:a1: 3e:62:79:f7:8c:6f:d0:59:d2:42:58:d0:65:f0:4a: d8:45:c8:2d:40:c1:06:2f:40:b1:ef:e1:d7:c0:58: db:3e:02:ed:04:9c:23:da:92:eb:82:3a:4c:13:e2: 0a:db:8a:2d:54:5b:ab:3f:34:68:93:b1:a5:26:22: 3f:fe:ce:74:de:7a:41:6d:6f:f8:99:ed:c1:7c:ac: b9:b2:4b:4a:36:6e:cd:42:09:a2:8b:17:7f:9a:92: 4d:9a:8b:75:01:98:94:03:07:f1:8e:6b:0a:2b:19: 29:16:4e:f1:e9:5b:69:00:62:19:ee:a3:96:c3:e9: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:64:AF:5B:F4:C9:ED:B0:1E:E5:CC:DF:3F:9E:01:55:6C:E6:35:D7 X509v3 Authority Key Identifier: keyid:48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:14:2b:f4:0b:4d:0d:2e:96:e7:e8:84:63:69:05:8c:22:e4: 3c:87:9f:35:29:db:81:c7:be:1b:04:45:f5:5d:a6:3e:39:bc: c1:52:52:f8:02:50:ae:1a:4a:c4:65:8e:a2:d5:ee:5b:f2:c3: 7a:30:3f:4a:c1:2e:3b:44:0b:25:3c:00:f2:e7:01:66:9e:2e: 49:93:fd:52:c9:ff:ab:d0:44:a2:cb:7a:16:61:40:ee:d5:b6: 0f:48:48:7f:73:74:c6:2f:58:5e:a2:6f:26:5d:6d:bf:16:7c: be:99:8e:ee:fa:a6:ad:fc:41:b9:27:97:b5:4e:a9:61:34:bc: 66:9f:26:62:18:bc:ca:aa:cc:9b:fd:30:d5:37:85:9b:52:1a: 9a:21:7d:08:4b:93:3c:bd:09:c5:74:58:a1:54:ca:8e:62:c6: 03:01:c5:24:de:e8:f1:28:82:da:57:7b:11:14:5b:9d:ee:8c: 7a:f8:d3:9a:e0:b4:84:7e:16:be:fc:f8:f7:c6:0e:9d:f0:88: 59:9e:fc:40:6b:c5:c8:84:1d:4e:90:63:f3:52:fb:9e:58:9b: 8d:68:c2:a8:1f:1a:e2:ce:c3:22:d7:fb:86:88:d6:1d:1c:c1: 38:2e:19:2b:b6:f1:36:80:2e:83:26:75:bb:d3:e6:d0:80:3a: a5:54:5d:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26cEj80wPO78Usrv2Pt2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZjU5YmFjNTFkNDg1MmQyZmM5NmU4YjRjZmJiOWZmZjhi NGE5MzkwHhcNMjUxMjE5MTQwMDQ3WhcNMjUxMjIwMTQwMDQ3WjAzMTEwLwYDVQQD EygyMDY0YWY1YmY0YzllZGIwMWVlNWNjZGYzZjllMDE1NTZjZTYzNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE5Lh3Sfb2B06eGjHnZMIYpBjXys UamL7LLsKItI9SMFBIAeSh7Jev6GBiyBV3i7O+ZC4KoFcYvPfOYjUkeitJ/ec8Jr IUstPq1bdERqLG75AL9jFWmm79osrfQtqwaqyqLdfHpWM+Wv7es6HeJtSxVDrdQo 0M+E+p1y4wuUMzP8nxognqE+Ynn3jG/QWdJCWNBl8ErYRcgtQMEGL0Cx7+HXwFjb PgLtBJwj2pLrgjpME+IK24otVFurPzRok7GlJiI//s503npBbW/4me3BfKy5sktK Nm7NQgmiixd/mpJNmot1AZiUAwfxjmsKKxkpFk7x6VtpAGIZ7qOWw+mk8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBkr1v0ye2wHuXM3z+eAVVs5jXXMB8GA1UdIwQY MBaAFEj1m6xR1IUtL8lui0z7uf/4tKk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDQ4NGMtYjk5Zi00ZGJiLWI1ZGIt OGMyZWFjMDNkZjg2LzEvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80MDQ4NGMtYjk5Zi00ZGJiLWI1ZGItOGMyZWFjMDNkZjg2 LzEvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhQr9AtN DS6W5+iEY2kFjCLkPIefNSnbgce+GwRF9V2mPjm8wVJS+AJQrhpKxGWOotXuW/LD ejA/SsEuO0QLJTwA8ucBZp4uSZP9Usn/q9BEost6FmFA7tW2D0hIf3N0xi9YXqJv Jl1tvxZ8vpmO7vqmrfxBuSeXtU6pYTS8Zp8mYhi8yqrMm/0w1TeFm1IamiF9CEuT PL0JxXRYoVTKjmLGAwHFJN7o8SiC2ld7ERRbne6MevjTmuC0hH4Wvvz498YOnfCI WZ78QGvFyIQdTpBj81L7nlibjWjCqB8a4s7DItf7hojWHRzBOC4ZK7bxNoAugyZ1 u9Pm0IA6pVRdmg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:48:19 2025 by rpki-client