This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json) Hash identifier: rfN5CCS37lwvJOenejwlERLmRlyOB2h4/qq+7qRFt7c= Subject key identifier: 24:35:DF:EE:09:1E:BB:51:CB:BB:EB:09:65:19:A2:06:53:FF:40:1F Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb Certificate serial: 019B4815D766C5E0990B22536A36481B6E81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 22:02:29 +0000 Manifest this update: Mon 22 Dec 2025 22:02:29 +0000 Manifest next update: Tue 23 Dec 2025 22:02:29 +0000 Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: lycuUP0bU/5SbA5Rh2rZTDgaLBRAMHDC37a3lWk2qhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:d7:66:c5:e0:99:0b:22:53:6a:36:48:1b:6e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb Validity Not Before: Dec 22 22:02:29 2025 GMT Not After : Dec 23 22:02:29 2025 GMT Subject: CN=2435dfee091ebb51cbbbeb096519a20653ff401f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:cc:ad:1a:9e:bd:73:4c:cb:5c:0e:08:93: 55:f3:4d:7b:c8:8c:9e:00:17:8b:3e:9f:b1:64:e4: 7c:e2:a9:79:27:30:c1:37:e5:aa:67:b6:78:44:65: 02:0b:f7:56:5f:c6:e0:b2:66:eb:91:34:13:63:24: 60:a0:49:42:bf:ce:ce:14:2f:79:6b:15:31:2b:14: c6:f6:9b:20:13:a5:7f:31:2e:9d:e0:9d:b6:d6:6b: 2f:eb:e3:3c:97:5a:95:53:f2:af:d9:b2:a3:55:5a: 00:6e:84:96:6d:f8:3f:37:aa:f9:80:9b:de:a9:c0: 47:63:2f:ff:a1:94:e5:74:3c:7d:d2:01:d0:8d:a9: bd:fe:12:cc:3a:5b:8a:d7:e5:b3:f4:23:31:d8:d0: 11:f7:cf:e1:ac:14:68:00:84:76:88:3b:a9:96:a5: 11:9b:af:02:fd:aa:59:d3:7e:91:b3:15:ca:80:ee: 38:96:ee:c9:93:a6:9c:67:d2:ac:92:f1:6b:be:23: 10:09:f3:d9:cf:80:fa:31:20:bd:4d:0b:e3:b5:ad: 2c:21:ca:c3:50:6c:2c:66:d5:95:2e:a7:e3:86:de: 1b:f9:41:74:1c:94:aa:dc:97:cc:96:2e:c7:42:01: 4b:57:43:ea:58:49:d3:21:3c:28:d4:92:be:89:5e: 2f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:35:DF:EE:09:1E:BB:51:CB:BB:EB:09:65:19:A2:06:53:FF:40:1F X509v3 Authority Key Identifier: keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b0:55:66:5c:3c:1b:6b:1c:39:c7:8a:48:16:41:de:85:b2: dd:73:ee:64:16:8d:90:30:94:f7:71:4c:8d:1b:b1:fe:4d:83: c3:3e:72:a9:ec:01:0e:d5:cf:ea:10:ee:a8:52:01:2a:75:90: 7c:e1:6c:30:ef:79:6a:02:e3:37:5d:56:b9:7e:65:d2:c4:41: 28:c0:eb:f9:af:0b:12:d6:75:fe:1a:95:c9:7b:94:8c:b0:be: 00:b0:dd:aa:60:07:fd:6f:87:d6:48:3c:40:0d:d0:37:2e:52: a4:85:4f:d7:aa:38:0d:89:b2:d0:86:6e:bc:f2:8c:7b:f8:83: 6d:7e:b7:3f:78:fd:ea:ab:31:37:88:89:1d:07:94:3f:a3:bb: 25:8b:7c:03:55:06:db:df:2a:7c:c1:66:c9:19:7a:09:28:a4: 16:9e:bd:13:5f:c3:c4:03:54:ff:cc:03:1b:f3:09:25:fa:86: 4b:30:14:14:da:27:19:5c:87:0f:96:d2:e9:db:7a:32:54:ac: 4c:42:83:cc:0d:2a:ee:a8:e0:02:80:cf:b5:e0:09:67:b5:9e: 6a:de:4a:fb:4d:4e:ff:89:6b:4b:88:34:a4:e1:d9:e7:90:88: 5f:c8:31:6a:25:7d:b1:1f:8a:28:46:4d:05:a3:a1:29:52:c9: da:ac:bf:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFddmxeCZCyJTajZIG26BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyOWI4ZDY4YTgyMDc1NmFhYTNmODk3OTUxZDVhZmQ2N2Zk YjNkYmIwHhcNMjUxMjIyMjIwMjI5WhcNMjUxMjIzMjIwMjI5WjAzMTEwLwYDVQQD EygyNDM1ZGZlZTA5MWViYjUxY2JiYmViMDk2NTE5YTIwNjUzZmY0MDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkPMrRqevXNMy1wOCJNV8017yIye ABeLPp+xZOR84ql5JzDBN+WqZ7Z4RGUCC/dWX8bgsmbrkTQTYyRgoElCv87OFC95 axUxKxTG9psgE6V/MS6d4J221msv6+M8l1qVU/Kv2bKjVVoAboSWbfg/N6r5gJve qcBHYy//oZTldDx90gHQjam9/hLMOluK1+Wz9CMx2NAR98/hrBRoAIR2iDuplqUR m68C/apZ036RsxXKgO44lu7Jk6acZ9KskvFrviMQCfPZz4D6MSC9TQvjta0sIcrD UGwsZtWVLqfjht4b+UF0HJSq3JfMli7HQgFLV0PqWEnTITwo1JK+iV4vCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQ13+4JHrtRy7vrCWUZogZT/0AfMB8GA1UdIwQY MBaAFLKbjWioIHVqqj+JeVHVr9Z/2z27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jOTdiMTctNjcxYi00MTAyLTkyNDEt MWMxZWIxNThiMDJkLzEvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jOTdiMTctNjcxYi00MTAyLTkyNDEtMWMxZWIxNThiMDJk LzEvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrBVZlw8 G2scOceKSBZB3oWy3XPuZBaNkDCU93FMjRux/k2Dwz5yqewBDtXP6hDuqFIBKnWQ fOFsMO95agLjN11WuX5l0sRBKMDr+a8LEtZ1/hqVyXuUjLC+ALDdqmAH/W+H1kg8 QA3QNy5SpIVP16o4DYmy0IZuvPKMe/iDbX63P3j96qsxN4iJHQeUP6O7JYt8A1UG 298qfMFmyRl6CSikFp69E1/DxANU/8wDG/MJJfqGSzAUFNonGVyHD5bS6dt6MlSs TEKDzA0q7qjgAoDPteAJZ7Weat5K+01O/4lrS4g0pOHZ55CIX8gxaiV9sR+KKEZN BaOhKVLJ2qy/0A== -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:02 2025 by rpki-client