This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft File: SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json) Hash identifier: Nr2ICB2UWmOAeLtlk+5I7LFu1EEH1Gtd0U8QPSuh0mU= Subject key identifier: CC:1A:CD:13:63:B4:88:D9:7B:9B:FD:CB:5A:2E:F7:7B:47:42:96:12 Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE Certificate issuer: /CN=48faed6714f46a2b843f14e40e54e626a0c500ee Certificate serial: 019AF19BB8EF0FBCB41A9EC289471F5D49E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft Manifest number: 14B9 Signing time: Sat 06 Dec 2025 03:01:45 +0000 Manifest this update: Sat 06 Dec 2025 03:01:45 +0000 Manifest next update: Sun 07 Dec 2025 03:01:45 +0000 Files and hashes: 1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: FqS3a7w5h+5RGjqPDz9zrfWnOBH2qlwqQGmY33UBCQE=) 2: YcBJMOZnarbYkNxw905RMeZes7Q.roa (hash: FciS9wueWxFbzT7TwtYBQ+UslPbKowgQrJac0SFsxR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b8:ef:0f:bc:b4:1a:9e:c2:89:47:1f:5d:49:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee Validity Not Before: Dec 6 03:01:45 2025 GMT Not After : Dec 7 03:01:45 2025 GMT Subject: CN=cc1acd1363b488d97b9bfdcb5a2ef77b47429612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:35:3d:9b:ff:10:60:ce:96:ff:34:cb:d0:50: 12:ed:72:60:c6:56:60:5f:aa:87:c8:f2:92:18:5a: f1:f2:ab:3e:70:6f:34:af:44:4a:8d:5f:1c:12:53: 01:b7:28:b4:c4:ce:e9:6e:fa:fe:0b:64:af:5a:9d: be:36:da:03:38:f9:b5:4d:13:68:ab:37:08:c2:26: 81:bc:c4:74:da:c6:e0:3b:d6:82:89:30:56:52:a1: e3:e9:2c:05:cd:3c:b7:34:38:74:94:40:24:03:ae: 0c:da:b2:c9:ac:49:55:c2:db:25:8b:16:a8:b7:14: 31:d1:d7:61:57:7e:c8:68:63:82:fd:1f:00:5b:03: ac:1e:31:ce:56:ec:4d:88:9f:2c:90:e5:3c:6e:29: d0:2e:b8:f2:8a:de:b5:2f:97:36:01:da:93:6a:41: 94:14:db:9c:ca:37:7d:b6:6d:85:f2:6f:94:47:36: 38:21:c6:b8:86:06:ca:b0:6b:89:bd:c4:34:e0:df: f3:78:53:71:7b:83:a5:c8:36:78:8d:a7:a6:a0:88: ef:ff:82:a5:aa:9b:6a:f3:3d:b7:8f:e9:b0:00:22: f2:52:a3:cf:32:b2:8a:4c:45:c6:af:b6:a8:42:77: 24:c5:9d:0d:56:e8:24:06:8c:d3:98:b9:f3:49:be: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1A:CD:13:63:B4:88:D9:7B:9B:FD:CB:5A:2E:F7:7B:47:42:96:12 X509v3 Authority Key Identifier: keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e3:db:88:52:bd:92:12:f9:62:72:98:23:90:1c:9b:9f:a7: 3d:87:a7:06:1b:1c:ed:38:74:57:63:63:a2:b3:62:8f:92:d4: 34:d2:9f:87:41:6e:5a:d5:5f:0e:f6:21:f7:e4:67:9e:9c:78: 92:b1:ad:80:6f:dd:19:f2:ed:b9:85:25:8a:42:3c:2a:6e:11: c4:02:d2:f9:db:f7:d6:04:8e:a3:d5:b1:6f:00:11:a0:c1:31: 95:a1:c3:4d:f8:e1:87:a5:dd:99:1a:06:21:77:33:33:a3:80: c8:6f:48:be:cf:e2:45:de:de:49:fa:b1:e1:bc:13:5e:e5:57: 5b:9f:fd:e6:48:ca:20:01:3d:4b:86:ea:9a:f5:20:b7:5f:52: 9d:ca:a2:be:3e:5b:1e:bc:11:20:f8:fd:cf:15:b2:fd:1b:01: 05:81:c3:10:56:54:ae:14:a3:53:e8:9c:8a:72:eb:a5:c8:5d: 74:af:c5:b1:26:c6:6a:5f:ec:7d:43:05:e3:7e:4f:1d:75:e1: 9d:5d:a4:c9:6c:f8:df:2a:2c:3d:ce:01:75:a3:53:ed:6e:d5: 9b:f6:93:55:10:ef:0d:b4:f3:b5:03:66:ca:94:08:1a:b2:f2: 71:a6:c7:08:89:87:d0:0f:cb:47:b0:48:90:a7:20:21:b5:cb: 82:62:df:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7jvD7y0Gp7CiUcfXUnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZmFlZDY3MTRmNDZhMmI4NDNmMTRlNDBlNTRlNjI2YTBj NTAwZWUwHhcNMjUxMjA2MDMwMTQ1WhcNMjUxMjA3MDMwMTQ1WjAzMTEwLwYDVQQD EyhjYzFhY2QxMzYzYjQ4OGQ5N2I5YmZkY2I1YTJlZjc3YjQ3NDI5NjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DU9m/8QYM6W/zTL0FAS7XJgxlZg X6qHyPKSGFrx8qs+cG80r0RKjV8cElMBtyi0xM7pbvr+C2SvWp2+NtoDOPm1TRNo qzcIwiaBvMR02sbgO9aCiTBWUqHj6SwFzTy3NDh0lEAkA64M2rLJrElVwtslixao txQx0ddhV37IaGOC/R8AWwOsHjHOVuxNiJ8skOU8binQLrjyit61L5c2AdqTakGU FNucyjd9tm2F8m+URzY4Ica4hgbKsGuJvcQ04N/zeFNxe4OlyDZ4jaemoIjv/4Kl qptq8z23j+mwACLyUqPPMrKKTEXGr7aoQnckxZ0NVugkBozTmLnzSb7A2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwazRNjtIjZe5v9y1ou93tHQpYSMB8GA1UdIwQY MBaAFEj67WcU9GorhD8U5A5U5iagxQDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1BydFp4VDBhaXVFUHhUa0RsVG1KcURGQU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80ZmYzZDEtY2MyZC00ZWJhLTkxM2Ut Mjc4MjQ3N2I5ZDFlLzEvU1BydFp4VDBhaXVFUHhUa0RsVG1KcURGQU80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80ZmYzZDEtY2MyZC00ZWJhLTkxM2UtMjc4MjQ3N2I5ZDFl LzEvU1BydFp4VDBhaXVFUHhUa0RsVG1KcURGQU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOPbiFK9 khL5YnKYI5Acm5+nPYenBhsc7Th0V2NjorNij5LUNNKfh0FuWtVfDvYh9+Rnnpx4 krGtgG/dGfLtuYUlikI8Km4RxALS+dv31gSOo9WxbwARoMExlaHDTfjhh6XdmRoG IXczM6OAyG9Ivs/iRd7eSfqx4bwTXuVXW5/95kjKIAE9S4bqmvUgt19Sncqivj5b HrwRIPj9zxWy/RsBBYHDEFZUrhSjU+icinLrpchddK/FsSbGal/sfUMF435PHXXh nV2kyWz43yosPc4BdaNT7W7Vm/aTVRDvDbTztQNmypQIGrLycabHCImH0A/LR7BI kKcgIbXLgmLfwg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:19 2025 by rpki-client