This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json) Hash identifier: AFTAmBAsY3XNl+049r1DLAlIpFKIs5cA3dw/6GQqCmU= Subject key identifier: 38:1F:88:BB:85:75:80:17:5B:18:46:67:6E:25:5F:86:3D:E0:BF:81 Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26 Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26 Certificate serial: 019B39EA92C41D9672508D513505A625E2B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft Manifest number: 0B94 Signing time: Sat 20 Dec 2025 04:00:32 +0000 Manifest this update: Sat 20 Dec 2025 04:00:32 +0000 Manifest next update: Sun 21 Dec 2025 04:00:32 +0000 Files and hashes: 1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=) 2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: p9pV7wNzUvAJDk4RgwNq7uQ+JYm1JQsW8Izg+s42/9c=) 3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:92:c4:1d:96:72:50:8d:51:35:05:a6:25:e2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26 Validity Not Before: Dec 20 04:00:32 2025 GMT Not After : Dec 21 04:00:32 2025 GMT Subject: CN=381f88bb857580175b1846676e255f863de0bf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:b0:0e:a3:85:26:c2:4d:cf:34:a8:36:ab: 7f:7b:e2:78:20:88:1e:89:44:12:fd:91:65:da:5c: 69:4c:d6:c3:e0:40:a8:c1:4d:1a:e1:c8:fe:97:82: 43:68:55:56:6d:dc:54:15:04:1e:bf:03:57:3b:18: d8:c6:0f:18:86:0d:85:75:94:44:ad:9d:0b:cd:9f: 72:10:4e:26:5e:f7:45:f9:b1:09:aa:d6:ca:ae:2f: 56:bf:62:ab:7c:9c:85:31:d4:71:5f:3e:38:cf:81: 3c:62:c6:42:b8:60:c0:4b:44:54:47:8f:f5:d3:56: ff:c0:12:00:43:b1:c9:41:b9:a6:11:9a:ed:da:17: 5f:54:a0:23:d6:ce:d8:de:76:0e:06:80:2c:28:a8: 8c:f3:25:f2:91:4a:8d:f7:d2:b3:9b:14:26:90:68: 56:a0:4f:1a:24:ef:92:62:a4:fa:30:29:57:ac:1d: 50:ef:72:7c:11:9d:fb:cf:2f:31:15:5e:f5:34:aa: 41:ba:09:4f:8c:e0:21:46:46:01:08:23:03:6e:89: 7a:4a:4b:73:e6:7d:b6:42:40:23:85:93:79:2c:43: bd:65:7b:b5:c1:45:a9:8f:92:e3:d4:39:5e:e0:3a: 42:be:d7:ad:f7:51:f1:f2:e6:ba:cb:5c:82:1f:64: 33:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1F:88:BB:85:75:80:17:5B:18:46:67:6E:25:5F:86:3D:E0:BF:81 X509v3 Authority Key Identifier: keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:34:c0:8f:e3:e7:0d:bd:27:08:73:35:35:a9:69:f7:ae:ea: fe:bc:4a:80:48:0d:c4:d9:15:58:fb:f1:83:14:88:b3:10:f2: fc:21:35:d7:14:51:06:0f:d6:96:46:8e:98:46:4c:c0:aa:22: 57:54:3d:8c:9a:42:85:de:97:83:46:01:05:f5:85:2a:4e:fc: 4e:95:04:d3:74:1e:bb:82:be:9d:57:a4:a2:4b:06:5f:39:ba: 14:02:bf:38:e6:39:15:b2:c6:d7:96:40:8b:10:5b:84:0e:1a: 0c:33:37:2e:5b:62:e2:73:93:33:f1:d8:b9:ba:d8:e1:ad:52: 3a:fd:e8:63:3f:f8:1e:a6:83:29:52:34:84:5c:86:02:4e:b2: 9d:7e:d3:03:d0:f7:e7:90:4f:c1:c0:33:37:60:5d:b4:40:f9: 24:5d:6f:d8:56:c2:a8:55:ce:c0:ba:69:a1:e0:57:05:ff:b3: 15:db:a4:7c:21:fb:b6:bc:63:f5:70:64:c8:52:da:0a:ff:ed: 18:ca:fb:7c:46:84:f5:f5:f4:88:b2:38:e8:30:a0:58:16:34: 5a:74:ed:8a:42:0e:19:16:20:c3:49:1e:0d:3b:e8:0a:e2:a7: 1e:9e:53:32:aa:eb:4f:9e:8d:bb:7a:a0:8c:6b:af:04:86:fc: b9:17:36:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56pLEHZZyUI1RNQWmJeK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOTdiYzUwNGYzMDc1ZmI0ZjM5MjM2NDA4YzFjMmQ1NDdi NDRjMjYwHhcNMjUxMjIwMDQwMDMyWhcNMjUxMjIxMDQwMDMyWjAzMTEwLwYDVQQD EygzODFmODhiYjg1NzU4MDE3NWIxODQ2Njc2ZTI1NWY4NjNkZTBiZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXSwDqOFJsJNzzSoNqt/e+J4IIge iUQS/ZFl2lxpTNbD4ECowU0a4cj+l4JDaFVWbdxUFQQevwNXOxjYxg8Yhg2FdZRE rZ0LzZ9yEE4mXvdF+bEJqtbKri9Wv2KrfJyFMdRxXz44z4E8YsZCuGDAS0RUR4/1 01b/wBIAQ7HJQbmmEZrt2hdfVKAj1s7Y3nYOBoAsKKiM8yXykUqN99KzmxQmkGhW oE8aJO+SYqT6MClXrB1Q73J8EZ37zy8xFV71NKpBuglPjOAhRkYBCCMDbol6Sktz 5n22QkAjhZN5LEO9ZXu1wUWpj5Lj1Dle4DpCvtet91Hx8ua6y1yCH2QzSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgfiLuFdYAXWxhGZ24lX4Y94L+BMB8GA1UdIwQY MBaAFEqXvFBPMHX7TzkjZAjBwtVHtEwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQt OTMyOWY5MTc5ZmRhLzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQtOTMyOWY5MTc5ZmRh LzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDTAj+Pn Db0nCHM1Nalp967q/rxKgEgNxNkVWPvxgxSIsxDy/CE11xRRBg/WlkaOmEZMwKoi V1Q9jJpChd6Xg0YBBfWFKk78TpUE03Qeu4K+nVekoksGXzm6FAK/OOY5FbLG15ZA ixBbhA4aDDM3Llti4nOTM/HYubrY4a1SOv3oYz/4HqaDKVI0hFyGAk6ynX7TA9D3 55BPwcAzN2BdtED5JF1v2FbCqFXOwLppoeBXBf+zFdukfCH7trxj9XBkyFLaCv/t GMr7fEaE9fX0iLI46DCgWBY0WnTtikIOGRYgw0keDTvoCuKnHp5TMqrrT56Nu3qg jGuvBIb8uRc2/Q== -----END CERTIFICATE-----Generated at Sat Dec 20 12:21:15 2025 by rpki-client