This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft File: spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json) Hash identifier: zK4NCNxX+4PHy+PO+VFyVlXuhUqb4k+SZI8z6tZ3RkI= Subject key identifier: 43:06:F4:D7:F4:91:99:00:55:BA:74:55:13:34:F5:21:22:45:CC:36 Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92 Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692 Certificate serial: 019AF12EEB650B9E92511E6473DC122BEF1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft Manifest number: 1666 Signing time: Sat 06 Dec 2025 01:02:55 +0000 Manifest this update: Sat 06 Dec 2025 01:02:55 +0000 Manifest next update: Sun 07 Dec 2025 01:02:55 +0000 Files and hashes: 1: OmeM_n0y_6-zOQ1ggpf3SAaIYGM.roa (hash: nPLGIcarXsWhg9mWE06KhP99Y61Hg7uEiGrRbDzptwU=) 2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: twuzDlzIGc0DCRFxnHULGBmS8lrmG41Trqv+i6SdM+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:eb:65:0b:9e:92:51:1e:64:73:dc:12:2b:ef:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692 Validity Not Before: Dec 6 01:02:55 2025 GMT Not After : Dec 7 01:02:55 2025 GMT Subject: CN=4306f4d7f491990055ba74551334f5212245cc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:21:a6:48:fc:ee:eb:cd:34:27:8b:b7:89: 75:40:fd:8f:36:fc:46:5c:2d:88:3d:e6:a4:1d:64: 6f:e2:84:42:d8:32:f6:62:7f:9d:97:60:58:46:a9: 6f:61:fa:a2:92:59:36:07:68:ca:e4:a3:39:44:0d: c4:b5:1f:ff:ce:fc:d7:18:9b:be:a7:04:33:0a:1a: 80:be:34:d8:14:3d:03:76:96:7a:b7:4f:0e:6e:d5: a4:9b:c4:fe:f4:a7:cc:cd:be:f4:c2:6c:47:9b:e1: 62:54:2b:5a:6e:97:8a:17:55:be:b6:37:00:bf:d2: b4:91:ff:50:01:45:c0:70:b7:6d:2f:89:1a:55:d1: 6a:70:b6:09:68:9e:e6:d1:0e:f8:ac:24:c0:5b:5f: dc:4e:24:28:d1:bd:5c:fb:32:b6:ac:44:7b:82:a6: 4e:27:ba:0a:f0:c9:35:a3:f3:eb:ff:50:c6:ff:35: 10:91:02:fb:6c:cd:73:52:df:ae:9a:ba:33:13:f2: ed:4e:5d:38:23:24:9f:42:0b:e5:21:48:28:10:6d: 78:d4:d5:24:66:bc:dd:41:94:df:97:30:42:c2:6f: d0:01:4b:83:ea:f5:a9:25:90:fe:bd:4a:26:22:19: 38:c7:89:7f:8a:b1:ca:52:fe:65:a6:28:82:30:01: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:06:F4:D7:F4:91:99:00:55:BA:74:55:13:34:F5:21:22:45:CC:36 X509v3 Authority Key Identifier: keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:16:d1:df:8c:61:be:88:fa:0f:01:85:7d:02:3a:48:1a:b6: 0e:a3:de:fa:47:ee:e5:91:2d:4c:74:06:d1:a3:d3:2f:53:94: 94:20:38:07:77:7d:da:c3:36:c8:2e:64:09:95:e1:18:b7:a4: 55:d6:33:3e:8f:6d:8e:ae:a0:6c:08:7b:03:13:e7:8c:42:86: ef:f2:ef:ff:15:26:98:45:3e:77:63:24:99:db:a4:5e:24:f5: e6:1a:a1:a3:2e:d3:2d:72:d1:51:a7:19:1d:ea:10:0e:c8:70: 03:02:6c:ab:d5:9a:38:c2:30:47:4c:c7:0c:37:7a:f6:5e:46: 71:9c:f7:b1:eb:32:57:19:6d:4e:f0:c1:0a:4d:f0:c9:60:42: 66:15:30:26:57:f1:97:67:3b:d1:6e:72:95:6d:0a:bc:69:b1: 69:80:aa:c7:cb:48:3e:38:81:af:87:5e:82:52:60:b9:8d:db: 6c:b0:3e:fb:f7:01:72:dc:da:9b:5e:ec:96:b6:c1:c0:b3:60: 95:de:6f:fb:d8:4b:9a:4c:33:7f:ad:21:ff:84:c8:84:de:f5: ef:c2:3b:24:77:d7:58:c0:4b:c6:c4:60:72:e7:43:43:c9:c5: b6:51:c0:04:13:ff:db:e0:bb:30:d8:66:e0:82:49:de:ab:2f: 4d:a4:4a:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLutlC56SUR5kc9wSK+8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyOTIwOTRkNjkxZGY0YTdjMzhmMTZiNzU1NTdlOWMyNmQ0 YWM2OTIwHhcNMjUxMjA2MDEwMjU1WhcNMjUxMjA3MDEwMjU1WjAzMTEwLwYDVQQD Eyg0MzA2ZjRkN2Y0OTE5OTAwNTViYTc0NTUxMzM0ZjUyMTIyNDVjYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny4hpkj87uvNNCeLt4l1QP2PNvxG XC2IPeakHWRv4oRC2DL2Yn+dl2BYRqlvYfqiklk2B2jK5KM5RA3EtR//zvzXGJu+ pwQzChqAvjTYFD0DdpZ6t08ObtWkm8T+9KfMzb70wmxHm+FiVCtabpeKF1W+tjcA v9K0kf9QAUXAcLdtL4kaVdFqcLYJaJ7m0Q74rCTAW1/cTiQo0b1c+zK2rER7gqZO J7oK8Mk1o/Pr/1DG/zUQkQL7bM1zUt+umrozE/LtTl04IySfQgvlIUgoEG141NUk ZrzdQZTflzBCwm/QAUuD6vWpJZD+vUomIhk4x4l/irHKUv5lpiiCMAEj+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMG9Nf0kZkAVbp0VRM09SEiRcw2MB8GA1UdIwQY MBaAFLKSCU1pHfSnw48Wt1VX6cJtSsaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAt MTVhMDkzZTJiYjhmLzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lN2I5MzItZmMyMS00YTYxLWFlZjAtMTVhMDkzZTJiYjhm LzEvc3BJSlRXa2Q5S2ZEanhhM1ZWZnB3bTFLeHBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBbR34xh voj6DwGFfQI6SBq2DqPe+kfu5ZEtTHQG0aPTL1OUlCA4B3d92sM2yC5kCZXhGLek VdYzPo9tjq6gbAh7AxPnjEKG7/Lv/xUmmEU+d2MkmdukXiT15hqhoy7TLXLRUacZ HeoQDshwAwJsq9WaOMIwR0zHDDd69l5GcZz3sesyVxltTvDBCk3wyWBCZhUwJlfx l2c70W5ylW0KvGmxaYCqx8tIPjiBr4deglJguY3bbLA++/cBctzam17slrbBwLNg ld5v+9hLmkwzf60h/4TIhN7178I7JHfXWMBLxsRgcudDQ8nFtlHABBP/2+C7MNhm 4IJJ3qsvTaRKpg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:53 2025 by rpki-client