This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json) Hash identifier: CNTOxz/Zo4m1ZM4o4TyT8hybajscTDuqT6JwLCwzNH4= Subject key identifier: 6A:17:AF:C0:45:89:03:44:21:7D:8E:39:F4:D4:ED:28:15:5C:39:87 Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c Certificate serial: 019B3F48245DF82A551830FF3FF8C8890840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft Manifest number: 0B00 Signing time: Sun 21 Dec 2025 05:00:51 +0000 Manifest this update: Sun 21 Dec 2025 05:00:51 +0000 Manifest next update: Mon 22 Dec 2025 05:00:51 +0000 Files and hashes: 1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=) 2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: X2D1LZrY/ZQJMIj4jDXaRx0F3IIlsNTed+Ns4gJH0Gg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:24:5d:f8:2a:55:18:30:ff:3f:f8:c8:89:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c Validity Not Before: Dec 21 05:00:51 2025 GMT Not After : Dec 22 05:00:51 2025 GMT Subject: CN=6a17afc045890344217d8e39f4d4ed28155c3987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:00:e8:36:55:d1:90:94:59:fc:ab:44:e5: 2f:85:83:df:f4:6c:3f:57:f7:41:a9:95:75:77:77: 86:21:48:d5:8c:5c:8c:14:4f:95:43:4d:88:f0:df: 2d:2c:3d:60:57:e1:6f:9d:7e:9e:da:1b:6c:77:46: de:80:0b:34:f2:2f:09:e1:27:8c:9e:fb:43:6c:4e: 9c:e3:b0:67:b9:64:34:1e:5f:7f:4b:14:7f:51:73: 10:a3:08:07:23:dc:39:38:e1:2d:55:e0:cb:7a:a2: d7:c5:f5:5a:b7:0b:78:15:6d:64:e4:16:7a:64:0c: 25:2e:a1:27:b6:da:73:8d:fd:49:52:c5:3a:d5:b0: cc:f0:28:8f:87:f5:9b:70:5a:0b:e9:6b:b3:e1:92: 98:1a:04:3f:02:c1:e1:6c:60:4a:1d:c7:a3:44:ee: 2f:db:73:12:83:9c:9d:2c:ac:1d:fe:59:08:52:86: 33:1c:ed:44:8e:c0:f4:8f:ad:9d:0d:7b:d1:41:26: 22:52:1f:09:27:f9:86:4f:ea:bb:47:2e:05:d7:02: c9:65:35:43:bd:fe:34:ff:d9:2d:46:f4:fb:7f:23: 67:1c:3e:47:46:17:b0:0e:41:37:fb:c9:77:64:d5: c2:4b:de:66:b0:bc:fc:2a:51:13:7f:e5:49:a8:7e: f8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:17:AF:C0:45:89:03:44:21:7D:8E:39:F4:D4:ED:28:15:5C:39:87 X509v3 Authority Key Identifier: keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:11:73:1f:0d:86:e0:d8:07:49:31:b7:c6:c3:e0:e8:f4:a5: a5:b2:6a:0c:d3:ec:f0:ed:0f:b5:65:22:bd:8f:6f:fa:f2:f0: e9:1f:a2:53:7e:78:37:88:af:46:4f:b5:b4:12:25:0d:a5:3c: 58:fb:9e:06:4b:ab:17:ac:c3:c6:d1:b2:57:23:fd:fb:eb:be: 34:25:94:1e:88:b0:5f:3c:fa:cd:84:6c:a5:40:a3:53:de:7c: 49:c7:b1:43:e4:06:92:43:62:c6:c0:81:9a:5c:6d:09:cc:a2: b0:2d:3f:af:8f:b0:63:e8:bc:97:ad:f0:bf:30:da:41:89:fa: 44:8e:b2:03:6c:67:21:6b:11:ac:be:ee:b0:62:30:ce:ef:a4: 44:40:3f:4a:77:e9:f3:53:d5:52:06:d1:8e:a2:d7:e2:7d:04: 35:3a:74:ea:00:d6:9e:cb:9c:c9:75:2a:b5:ef:2e:6e:1e:e5: 90:82:61:af:e7:a1:51:0a:85:51:22:d5:89:b3:85:3b:31:c6: 60:07:ad:ae:48:36:0e:d6:dc:43:b8:d2:b7:3c:59:57:db:3a: 7f:a8:84:a5:0c:65:64:4a:3b:c3:94:01:23:be:0c:75:ae:fd: 0e:7f:4c:e9:82:01:b3:e1:74:94:1f:62:09:7e:58:62:9f:6f: 0f:e3:92:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SCRd+CpVGDD/P/jIiQhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWQxNjZjNjQ4NDczODk3MmU5YjMzOTM4MTY1ZjQ0ODlh NTE2OGMwHhcNMjUxMjIxMDUwMDUxWhcNMjUxMjIyMDUwMDUxWjAzMTEwLwYDVQQD Eyg2YTE3YWZjMDQ1ODkwMzQ0MjE3ZDhlMzlmNGQ0ZWQyODE1NWMzOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/IA6DZV0ZCUWfyrROUvhYPf9Gw/ V/dBqZV1d3eGIUjVjFyMFE+VQ02I8N8tLD1gV+FvnX6e2htsd0begAs08i8J4SeM nvtDbE6c47BnuWQ0Hl9/SxR/UXMQowgHI9w5OOEtVeDLeqLXxfVatwt4FW1k5BZ6 ZAwlLqEnttpzjf1JUsU61bDM8CiPh/WbcFoL6Wuz4ZKYGgQ/AsHhbGBKHcejRO4v 23MSg5ydLKwd/lkIUoYzHO1EjsD0j62dDXvRQSYiUh8JJ/mGT+q7Ry4F1wLJZTVD vf40/9ktRvT7fyNnHD5HRhewDkE3+8l3ZNXCS95msLz8KlETf+VJqH74zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoXr8BFiQNEIX2OOfTU7SgVXDmHMB8GA1UdIwQY MBaAFEqdFmxkhHOJcumzOTgWX0SJpRaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMt YmZhOTYzOTJhYzVkLzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMtYmZhOTYzOTJhYzVk LzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhFzHw2G 4NgHSTG3xsPg6PSlpbJqDNPs8O0PtWUivY9v+vLw6R+iU354N4ivRk+1tBIlDaU8 WPueBkurF6zDxtGyVyP9++u+NCWUHoiwXzz6zYRspUCjU958ScexQ+QGkkNixsCB mlxtCcyisC0/r4+wY+i8l63wvzDaQYn6RI6yA2xnIWsRrL7usGIwzu+kREA/Snfp 81PVUgbRjqLX4n0ENTp06gDWnsucyXUqte8ubh7lkIJhr+ehUQqFUSLVibOFOzHG YAetrkg2DtbcQ7jStzxZV9s6f6iEpQxlZEo7w5QBI74Mda79Dn9M6YIBs+F0lB9i CX5YYp9vD+OSYA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:58:09 2025 by rpki-client