This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json) Hash identifier: zgVqMebLpE2XPeyOQM79EzyorbLO9BInO/rimi+mGw8= Subject key identifier: 8D:15:A2:D6:B9:89:A5:22:2D:BB:EB:BD:E0:53:9C:A2:B1:F0:39:85 Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Certificate serial: 019AF23FA034D816B98241C8D65203A44A5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: Qhf3dHLGx0N6WbGB8vK6qVaTsziGAj4qsjWfux+8prY=) 2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a0:34:d8:16:b9:82:41:c8:d6:52:03:a4:4a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=8d15a2d6b989a5222dbbebbde0539ca2b1f03985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:0e:36:f9:16:6f:dd:c1:9f:2f:9c:55:ce: 4c:f6:ca:87:37:7f:7c:8f:a0:90:a9:cd:13:4e:9f: dd:75:1e:29:88:b3:f4:ec:42:4f:18:d3:08:d5:73: 6d:a3:53:62:04:a7:56:4a:e0:65:03:42:47:3e:1c: 7e:2a:61:aa:ad:c5:c4:aa:e3:53:af:51:41:da:9f: 61:ee:0f:97:54:50:b8:df:ff:9a:6c:f2:3c:1c:ff: 1d:67:b1:96:5b:3f:ea:2c:4e:5c:64:4f:f4:b4:e0: 81:ee:8a:03:b8:22:0e:54:64:1c:9c:74:05:c3:3b: 33:43:f7:c0:3f:22:ca:bc:35:24:38:54:bb:50:a7: 81:1f:f2:d6:fa:14:bf:bd:be:c2:44:89:ae:04:32: e9:94:2c:ae:34:41:11:64:66:35:a3:b1:65:08:dc: 99:f1:e6:96:9b:81:e3:45:36:32:60:98:da:e2:38: 48:9a:89:20:6e:25:80:cc:61:cd:65:16:cb:da:91: 27:5b:cc:f3:1e:64:8e:29:a7:94:68:c9:a3:2c:39: fb:3e:f7:32:3a:ce:9e:d0:db:5b:4b:b5:93:29:d0: c6:e3:75:3d:d5:fb:aa:6d:46:0f:f6:ac:4a:1f:a5: a9:98:8e:b3:31:f8:6d:90:89:39:fb:67:bb:43:76: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:15:A2:D6:B9:89:A5:22:2D:BB:EB:BD:E0:53:9C:A2:B1:F0:39:85 X509v3 Authority Key Identifier: keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ce:f7:87:02:59:dd:d4:de:a0:1e:73:93:e7:3a:94:ef:9c: ac:84:eb:4b:4a:19:cd:0c:b3:3d:0c:d1:45:ed:ac:eb:46:b2: d7:85:89:cf:f6:7a:9e:b4:7c:af:33:ff:80:d4:f7:c4:85:31: 29:e6:27:8e:ab:e0:a0:6d:e2:ad:01:0f:ea:c4:1f:8c:d2:b6: 0c:93:9f:a8:79:20:9a:4d:c2:7a:a0:d4:3c:a8:f0:d3:3b:bc: 09:37:b2:ba:29:0e:e2:53:89:00:c9:ab:ed:ad:9a:f9:2d:5b: 30:9a:ad:08:27:36:bb:bc:ce:20:24:f0:7d:4f:97:2a:7e:e7: d1:d4:9d:aa:29:86:e0:e2:83:7e:0f:1a:db:2e:d4:2c:0c:e1: 66:74:d4:67:85:7e:2a:17:bb:ec:b5:e6:03:02:c8:59:86:d2: cc:bb:78:b0:22:6c:19:bd:15:35:1a:4d:0f:c9:38:ce:9f:70: 40:0b:0b:41:d3:ac:83:9d:a3:9c:78:4b:d8:33:5a:c2:4a:c1: 2d:02:1c:36:95:28:19:2f:93:3c:0a:5f:73:15:3d:94:a7:1f: 5c:fa:25:0e:1a:56:13:a4:09:db:20:3c:7b:a0:f0:46:7e:eb: 73:92:91:f2:35:55:17:d5:46:29:bf:86:bc:cc:a7:c9:06:1c: 1c:de:f3:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6A02Ba5gkHI1lIDpEpbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWRiMDBjYjE0YTM0YTE5M2Y4NGFjYTE0NGIyYWViMWYz YzAyYzgwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD Eyg4ZDE1YTJkNmI5ODlhNTIyMmRiYmViYmRlMDUzOWNhMmIxZjAzOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqosONvkWb93Bny+cVc5M9sqHN398 j6CQqc0TTp/ddR4piLP07EJPGNMI1XNto1NiBKdWSuBlA0JHPhx+KmGqrcXEquNT r1FB2p9h7g+XVFC43/+abPI8HP8dZ7GWWz/qLE5cZE/0tOCB7ooDuCIOVGQcnHQF wzszQ/fAPyLKvDUkOFS7UKeBH/LW+hS/vb7CRImuBDLplCyuNEERZGY1o7FlCNyZ 8eaWm4HjRTYyYJja4jhImokgbiWAzGHNZRbL2pEnW8zzHmSOKaeUaMmjLDn7Pvcy Os6e0NtbS7WTKdDG43U91fuqbUYP9qxKH6WpmI6zMfhtkIk5+2e7Q3YHQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0Vota5iaUiLbvrveBTnKKx8DmFMB8GA1UdIwQY MBaAFEqdsAyxSjShk/hKyhRLKusfPALIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2Et YzFjNjYwNzhlNWJhLzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2EtYzFjNjYwNzhlNWJh LzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkM73hwJZ 3dTeoB5zk+c6lO+crITrS0oZzQyzPQzRRe2s60ay14WJz/Z6nrR8rzP/gNT3xIUx KeYnjqvgoG3irQEP6sQfjNK2DJOfqHkgmk3CeqDUPKjw0zu8CTeyuikO4lOJAMmr 7a2a+S1bMJqtCCc2u7zOICTwfU+XKn7n0dSdqimG4OKDfg8a2y7ULAzhZnTUZ4V+ Khe77LXmAwLIWYbSzLt4sCJsGb0VNRpND8k4zp9wQAsLQdOsg52jnHhL2DNawkrB LQIcNpUoGS+TPApfcxU9lKcfXPolDhpWE6QJ2yA8e6DwRn7rc5KR8jVVF9VGKb+G vMynyQYcHN7zWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:57 2025 by rpki-client