This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json) Hash identifier: eOxEa+Pe3HHEzwL9Qs63EwMlz85pzwBxyGtNXGUZwn8= Subject key identifier: 80:C6:C4:11:15:69:D1:CB:FC:06:E1:2E:6F:95:18:DA:43:31:93:37 Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c Certificate serial: 019B50A9E1E240B0E958C700D3A49E6F2C76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft Manifest number: 0B09 Signing time: Wed 24 Dec 2025 14:01:09 +0000 Manifest this update: Wed 24 Dec 2025 14:01:09 +0000 Manifest next update: Thu 25 Dec 2025 14:01:09 +0000 Files and hashes: 1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=) 2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: QMnfR0qwqz+TfeP5enKtt6mZdcUJBG35DFkfbZCgOBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a9:e1:e2:40:b0:e9:58:c7:00:d3:a4:9e:6f:2c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c Validity Not Before: Dec 24 14:01:09 2025 GMT Not After : Dec 25 14:01:09 2025 GMT Subject: CN=80c6c4111569d1cbfc06e12e6f9518da43319337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:b9:a0:85:1f:2b:0b:b8:ce:67:e5:3f:2f: 39:1b:a9:cb:aa:ec:c9:53:dc:9f:d7:b6:f7:c9:f7: b9:cf:60:e8:45:66:43:4a:ff:b2:5c:59:48:e5:63: 60:55:9c:94:fc:54:a7:80:04:f6:61:31:39:4f:98: fc:85:2c:99:a9:54:99:10:60:98:d3:1a:b5:a2:c1: e0:1c:76:a8:4e:44:18:5b:ec:80:5b:25:d5:c6:4a: e0:32:c4:c1:df:4f:b3:cb:8c:93:98:d6:e5:a8:4b: b9:63:6e:e8:32:f3:11:85:b0:cb:72:de:e4:25:c4: c3:75:26:8a:f0:1a:68:a6:15:8e:a9:11:2b:23:20: 40:c6:eb:ce:03:82:6d:bd:7f:fb:02:98:50:f1:5a: af:66:44:6e:3f:55:ab:eb:03:0f:6f:33:d7:0a:ae: ad:8b:57:f2:39:7b:50:7e:70:90:9b:82:cf:f7:30: 59:41:2e:00:e2:c6:f7:cb:46:d3:09:0f:d8:67:2f: 77:5f:02:51:e0:4a:87:c8:b5:88:c2:2d:05:f6:34: 84:9a:75:55:29:0d:f5:a2:f3:b2:63:aa:cc:21:1a: e7:6f:cb:d0:c4:36:92:ca:e7:50:9d:7f:c2:86:c2: b9:8e:b6:4c:be:0f:0d:95:6b:6c:24:c0:62:93:1e: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C6:C4:11:15:69:D1:CB:FC:06:E1:2E:6F:95:18:DA:43:31:93:37 X509v3 Authority Key Identifier: keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2c:45:fe:39:3a:17:f7:7b:84:3a:43:ee:11:7d:49:cf:22: 35:b2:dd:54:11:01:ea:99:72:18:44:9d:f2:aa:ee:83:51:4e: 3e:d2:16:af:93:a6:3c:85:34:e7:78:89:d5:40:f5:63:00:0c: 03:fc:65:87:58:10:a7:e7:27:8e:83:df:f9:20:9d:53:d5:4c: ee:80:bc:6c:75:99:4d:1b:f3:18:d2:ff:07:08:59:f8:7a:4d: 3b:60:24:f4:5f:01:2f:53:77:03:89:40:8f:f1:bc:f1:94:c9: a8:87:58:8a:72:33:9f:3e:b2:9b:af:d1:ff:f9:96:62:32:d4: ff:c6:99:27:82:fd:a9:03:d1:5b:5f:d0:3d:d5:4e:ea:0c:99: c2:c0:5f:35:3d:f3:d9:be:48:3d:67:ff:46:88:b4:ea:72:f1: 52:af:d2:14:77:74:2a:89:df:14:bc:b9:e3:93:f3:85:a7:be: bf:db:74:aa:fd:b0:a5:04:c7:7b:b2:78:0d:c1:49:74:5a:15: 35:88:27:d7:fb:f9:3a:e2:cf:8f:29:f6:8b:a3:f6:00:37:fc: 26:a0:d8:77:8d:22:22:ea:1e:69:78:d7:01:e6:8c:87:3e:cc: cd:5a:74:70:0e:17:11:10:51:4d:ee:a7:cb:a3:84:08:5f:6c: 14:fc:35:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqeHiQLDpWMcA06Sebyx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWQxNjZjNjQ4NDczODk3MmU5YjMzOTM4MTY1ZjQ0ODlh NTE2OGMwHhcNMjUxMjI0MTQwMTA5WhcNMjUxMjI1MTQwMTA5WjAzMTEwLwYDVQQD Eyg4MGM2YzQxMTE1NjlkMWNiZmMwNmUxMmU2Zjk1MThkYTQzMzE5MzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcK5oIUfKwu4zmflPy85G6nLquzJ U9yf17b3yfe5z2DoRWZDSv+yXFlI5WNgVZyU/FSngAT2YTE5T5j8hSyZqVSZEGCY 0xq1osHgHHaoTkQYW+yAWyXVxkrgMsTB30+zy4yTmNblqEu5Y27oMvMRhbDLct7k JcTDdSaK8BpophWOqRErIyBAxuvOA4JtvX/7AphQ8VqvZkRuP1Wr6wMPbzPXCq6t i1fyOXtQfnCQm4LP9zBZQS4A4sb3y0bTCQ/YZy93XwJR4EqHyLWIwi0F9jSEmnVV KQ31ovOyY6rMIRrnb8vQxDaSyudQnX/ChsK5jrZMvg8NlWtsJMBikx4VkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDGxBEVadHL/AbhLm+VGNpDMZM3MB8GA1UdIwQY MBaAFEqdFmxkhHOJcumzOTgWX0SJpRaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMt YmZhOTYzOTJhYzVkLzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMtYmZhOTYzOTJhYzVk LzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJixF/jk6 F/d7hDpD7hF9Sc8iNbLdVBEB6plyGESd8qrug1FOPtIWr5OmPIU053iJ1UD1YwAM A/xlh1gQp+cnjoPf+SCdU9VM7oC8bHWZTRvzGNL/BwhZ+HpNO2Ak9F8BL1N3A4lA j/G88ZTJqIdYinIznz6ym6/R//mWYjLU/8aZJ4L9qQPRW1/QPdVO6gyZwsBfNT3z 2b5IPWf/Roi06nLxUq/SFHd0KonfFLy545Pzhae+v9t0qv2wpQTHe7J4DcFJdFoV NYgn1/v5OuLPjyn2i6P2ADf8JqDYd40iIuoeaXjXAeaMhz7MzVp0cA4XERBRTe6n y6OECF9sFPw1Ng== -----END CERTIFICATE-----Generated at Wed Dec 24 18:03:18 2025 by rpki-client