This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft File: spK68_TAei7dR9iMKxW2Wir33q0.mft (raw, json) Hash identifier: syfnUklJnEne1x+ckm3Pz7g2SpsI8a/sgnrdyu2/NoQ= Subject key identifier: DB:38:14:4C:33:BE:8E:DF:77:82:52:BB:BA:0F:68:EE:FB:68:3E:79 Authority key identifier: B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD Certificate issuer: /CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead Certificate serial: 019AF31C9A37A803367032923B964233DDAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft Manifest number: 0DFA Signing time: Sat 06 Dec 2025 10:02:09 +0000 Manifest this update: Sat 06 Dec 2025 10:02:09 +0000 Manifest next update: Sun 07 Dec 2025 10:02:09 +0000 Files and hashes: 1: spK68_TAei7dR9iMKxW2Wir33q0.crl (hash: grj4SLaEcgwK3kin215B35l7skYE2bIxq6q3n53DgtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:9a:37:a8:03:36:70:32:92:3b:96:42:33:dd:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead Validity Not Before: Dec 6 10:02:09 2025 GMT Not After : Dec 7 10:02:09 2025 GMT Subject: CN=db38144c33be8edf778252bbba0f68eefb683e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c6:2b:6d:59:0a:87:c5:8c:35:53:7b:3a:47: 71:b9:b5:c1:7f:36:14:9d:83:ef:3c:4d:8c:88:88: b8:ef:36:a7:8a:c1:44:c3:64:f1:cd:62:60:c5:b4: 0f:a8:a2:19:74:95:eb:48:f5:27:68:3a:d7:f8:f9: 4b:c6:ac:de:86:a1:eb:ae:4c:d6:89:b3:9b:4b:4a: 22:16:32:e8:6e:e0:10:b8:3b:a1:aa:f4:b9:e7:ed: 38:ed:28:19:c7:c6:1f:9d:c9:b5:2e:96:dc:71:b8: 0b:e4:79:9d:43:8f:ae:9e:22:51:1c:ac:f5:28:da: be:0b:5c:d6:e2:18:53:84:4e:70:72:16:23:fe:b6: 36:5b:03:dc:79:1b:48:92:5a:a1:0d:90:04:d0:c4: c7:2c:39:9a:32:43:18:e2:ad:74:de:39:f8:0f:ab: f2:b6:03:6f:96:f2:1d:72:ca:48:9d:58:85:26:9d: ae:4b:68:b3:1e:a6:7f:07:f3:86:7f:25:a2:0e:9e: eb:c6:7a:24:e8:f2:ea:3e:ae:3d:80:f2:1a:6a:65: 7e:a6:fb:af:90:a9:88:31:63:f3:f2:29:93:40:9e: d9:ce:f4:21:39:ea:d0:54:12:9d:92:77:b0:17:e2: 62:ae:a9:57:c2:7d:5c:52:c0:c1:27:f6:47:92:c6: fe:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:38:14:4C:33:BE:8E:DF:77:82:52:BB:BA:0F:68:EE:FB:68:3E:79 X509v3 Authority Key Identifier: keyid:B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4a:38:10:7f:45:aa:cc:4a:2c:e8:e0:6b:1f:79:e1:93:97: 47:89:58:c3:b0:2c:11:a8:a8:a7:60:de:71:d7:63:17:4a:e7: ac:c7:bd:07:6f:07:ab:6e:4d:1b:53:66:46:d6:8e:2b:dc:51: 1f:95:0b:3d:22:63:f6:53:4e:db:42:81:3e:f1:2c:bd:62:a2: 30:49:2c:3e:71:c2:02:37:1d:f5:fa:12:01:bc:68:3c:df:6c: b5:43:69:0b:7f:c2:29:fb:27:b4:64:4e:80:b2:0a:5f:c8:02: 8d:2b:ce:ae:62:b7:f3:ac:e0:b7:b4:bc:f0:de:44:c9:35:27: ae:a0:e9:67:bb:53:c4:2a:4d:9c:ef:20:97:e2:d7:08:c6:59: 7a:fc:fe:25:be:90:7c:54:f9:a8:a3:96:08:07:43:71:00:38: 00:c0:d5:dd:f2:71:9c:f4:8a:57:66:55:0e:c5:cd:ee:0b:f4: 3d:64:65:bf:69:42:80:d7:e2:b8:2d:b4:8a:b1:ed:b6:54:7d: 92:f6:6d:32:1c:18:19:e7:03:77:c7:6a:ba:ab:55:28:80:83: 90:b2:18:12:a9:97:17:de:53:1d:0a:43:97:15:c2:93:f9:29: b1:7c:04:1b:c9:9f:d9:d3:a7:8c:fe:a5:db:60:04:7d:cf:74: d9:86:ea:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJo3qAM2cDKSO5ZCM92vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyOTJiYWYzZjRjMDdhMmVkZDQ3ZDg4YzJiMTViNjVhMmFm N2RlYWQwHhcNMjUxMjA2MTAwMjA5WhcNMjUxMjA3MTAwMjA5WjAzMTEwLwYDVQQD EyhkYjM4MTQ0YzMzYmU4ZWRmNzc4MjUyYmJiYTBmNjhlZWZiNjgzZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsYrbVkKh8WMNVN7OkdxubXBfzYU nYPvPE2MiIi47zanisFEw2TxzWJgxbQPqKIZdJXrSPUnaDrX+PlLxqzehqHrrkzW ibObS0oiFjLobuAQuDuhqvS55+047SgZx8Yfncm1LpbccbgL5HmdQ4+uniJRHKz1 KNq+C1zW4hhThE5wchYj/rY2WwPceRtIklqhDZAE0MTHLDmaMkMY4q103jn4D6vy tgNvlvIdcspInViFJp2uS2izHqZ/B/OGfyWiDp7rxnok6PLqPq49gPIaamV+pvuv kKmIMWPz8imTQJ7ZzvQhOerQVBKdknewF+JirqlXwn1cUsDBJ/ZHksb+KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNs4FEwzvo7fd4JSu7oPaO77aD55MB8GA1UdIwQY MBaAFLKSuvP0wHou3UfYjCsVtloq996tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3BLNjhfVEFlaTdkUjlpTUt4VzJXaXIzM3EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jMWY4M2EtZGZjNy00OTRkLTlhNGIt MmE3MmMyODU4YmFjLzEvc3BLNjhfVEFlaTdkUjlpTUt4VzJXaXIzM3EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jMWY4M2EtZGZjNy00OTRkLTlhNGItMmE3MmMyODU4YmFj LzEvc3BLNjhfVEFlaTdkUjlpTUt4VzJXaXIzM3EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABko4EH9F qsxKLOjgax954ZOXR4lYw7AsEaiop2DecddjF0rnrMe9B28Hq25NG1NmRtaOK9xR H5ULPSJj9lNO20KBPvEsvWKiMEksPnHCAjcd9foSAbxoPN9stUNpC3/CKfsntGRO gLIKX8gCjSvOrmK386zgt7S88N5EyTUnrqDpZ7tTxCpNnO8gl+LXCMZZevz+Jb6Q fFT5qKOWCAdDcQA4AMDV3fJxnPSKV2ZVDsXN7gv0PWRlv2lCgNfiuC20irHttlR9 kvZtMhwYGecDd8dquqtVKICDkLIYEqmXF95THQpDlxXCk/kpsXwEG8mf2dOnjP6l 22AEfc902YbqiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:26 2025 by rpki-client