This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft File: SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft (raw, json) Hash identifier: eYu3Cv5NKb0mNsdUnwmtvGxiUtVsxbxr/dbnCaqnrdU= Subject key identifier: ED:50:61:4F:13:E0:AE:AE:16:B8:B6:C6:4A:F2:E8:A2:B6:23:9D:B1 Authority key identifier: 48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63 Certificate issuer: /CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763 Certificate serial: 019AF276E2E909FE62B60690945C7FDDFD14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft Manifest number: 01D2 Signing time: Sat 06 Dec 2025 07:01:08 +0000 Manifest this update: Sat 06 Dec 2025 07:01:08 +0000 Manifest next update: Sun 07 Dec 2025 07:01:08 +0000 Files and hashes: 1: SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl (hash: yYyYr43sSwBuPXAo8rbaaF/kmCvCr2R8sLKCQZFlTM0=) 2: qZWsXw0hoWQJjbaPgRbw4RgNUcs.roa (hash: ZO3W12AHJk04EL5GeY7ebFH6eGQvrnx8GB8nEx/wAoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e2:e9:09:fe:62:b6:06:90:94:5c:7f:dd:fd:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f495e2ec9d07fd595d22b628d3756e9d8fa763 Validity Not Before: Dec 6 07:01:08 2025 GMT Not After : Dec 7 07:01:08 2025 GMT Subject: CN=ed50614f13e0aeae16b8b6c64af2e8a2b6239db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9c:bd:d3:19:ee:41:4d:34:5e:67:fa:72:62: 12:e2:8a:e4:45:b3:ec:35:1a:db:ab:be:04:56:60: a5:5b:e5:8a:e3:54:75:21:37:a1:43:ba:dd:70:b3: aa:97:24:f2:12:f8:0e:47:a6:a1:5c:4e:44:60:77: c1:99:b5:01:ba:b9:cd:c2:f5:6d:7a:cf:2f:34:3e: fa:75:31:6f:7d:89:c8:65:30:a1:94:64:95:60:ab: da:40:62:7c:1f:b3:78:7d:d2:68:f6:2f:71:1d:75: 71:4f:21:8a:a4:61:c7:ad:f4:37:f4:cc:45:66:83: fd:a7:b1:c0:df:f7:55:a0:be:c5:69:ed:68:21:11: 95:97:29:eb:a0:45:dd:a4:b2:b9:95:85:10:4e:98: bc:ac:c1:0a:af:d8:c6:05:84:75:84:b4:4e:59:7b: 76:2b:d2:c1:1b:42:eb:36:16:16:01:cb:e8:09:29: 70:03:72:fb:33:10:75:65:1e:32:53:82:70:3b:3a: 22:e9:ef:b8:84:10:37:8a:e2:24:f7:d9:78:90:0d: 89:5a:f9:52:73:05:38:25:3d:09:1f:85:74:6a:16: f7:dc:26:8e:3d:a8:f3:fa:ec:33:76:fc:4c:50:0c: b2:8e:9f:dd:18:82:b4:2a:05:b8:15:bd:63:03:0f: 47:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:50:61:4F:13:E0:AE:AE:16:B8:B6:C6:4A:F2:E8:A2:B6:23:9D:B1 X509v3 Authority Key Identifier: keyid:48:F4:95:E2:EC:9D:07:FD:59:5D:22:B6:28:D3:75:6E:9D:8F:A7:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8d8d4b-163c-4bc6-aeca-7dcabc16ebae/1/SPSV4uydB_1ZXSK2KNN1bp2Pp2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c6:2b:10:f5:9b:55:12:3f:ea:a1:b3:5a:06:84:6d:e9:76: 47:25:4b:37:e4:72:c9:c4:f7:27:5c:9f:e2:92:a1:83:6f:1e: 78:5a:85:30:77:2a:2b:4b:3f:f9:2c:48:65:ae:af:0a:a1:c5: 09:0c:01:94:8f:94:af:41:c2:6f:77:26:ea:97:e9:00:bd:93: cf:95:15:a1:6b:dd:31:ae:65:b7:a6:79:89:ba:c7:0c:f7:ab: c5:aa:38:86:70:d1:40:39:c7:c2:9a:69:95:dd:cc:25:a5:71: ac:36:27:fe:a1:f2:4b:f7:92:7a:ac:2d:ba:a4:4d:e6:3e:f5: 60:aa:ed:0e:cb:b4:e1:a1:a4:32:50:9d:d5:28:8f:95:32:bd: 9d:18:e4:5b:c2:47:f3:21:16:23:5b:fe:f0:5f:c5:f4:b3:37: 7a:9d:da:4b:cd:76:73:83:6b:86:d1:d3:a0:70:16:b0:3a:f8: 31:78:eb:8b:e6:39:cc:bf:1f:61:c7:68:45:f1:81:12:68:14: c3:97:99:37:7a:85:07:ff:7b:f2:62:70:82:68:9e:72:8d:19: 11:e8:6b:0f:82:59:01:cc:a1:16:87:4e:00:10:e9:d8:7b:39: 84:08:a5:3e:c9:4f:57:8e:bb:ed:ff:f2:a8:42:ea:cf:4d:f2: 01:30:3e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduLpCf5itgaQlFx/3f0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZjQ5NWUyZWM5ZDA3ZmQ1OTVkMjJiNjI4ZDM3NTZlOWQ4 ZmE3NjMwHhcNMjUxMjA2MDcwMTA4WhcNMjUxMjA3MDcwMTA4WjAzMTEwLwYDVQQD EyhlZDUwNjE0ZjEzZTBhZWFlMTZiOGI2YzY0YWYyZThhMmI2MjM5ZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25y90xnuQU00Xmf6cmIS4orkRbPs NRrbq74EVmClW+WK41R1ITehQ7rdcLOqlyTyEvgOR6ahXE5EYHfBmbUBurnNwvVt es8vND76dTFvfYnIZTChlGSVYKvaQGJ8H7N4fdJo9i9xHXVxTyGKpGHHrfQ39MxF ZoP9p7HA3/dVoL7Fae1oIRGVlynroEXdpLK5lYUQTpi8rMEKr9jGBYR1hLROWXt2 K9LBG0LrNhYWAcvoCSlwA3L7MxB1ZR4yU4JwOzoi6e+4hBA3iuIk99l4kA2JWvlS cwU4JT0JH4V0ahb33CaOPajz+uwzdvxMUAyyjp/dGIK0KgW4Fb1jAw9HhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1QYU8T4K6uFri2xkry6KK2I52xMB8GA1UdIwQY MBaAFEj0leLsnQf9WV0itijTdW6dj6djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1BTVjR1eWRCXzFaWFNLMktOTjFicDJQcDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84ZDhkNGItMTYzYy00YmM2LWFlY2Et N2RjYWJjMTZlYmFlLzEvU1BTVjR1eWRCXzFaWFNLMktOTjFicDJQcDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84ZDhkNGItMTYzYy00YmM2LWFlY2EtN2RjYWJjMTZlYmFl LzEvU1BTVjR1eWRCXzFaWFNLMktOTjFicDJQcDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8YrEPWb VRI/6qGzWgaEbel2RyVLN+RyycT3J1yf4pKhg28eeFqFMHcqK0s/+SxIZa6vCqHF CQwBlI+Ur0HCb3cm6pfpAL2Tz5UVoWvdMa5lt6Z5ibrHDPerxao4hnDRQDnHwppp ld3MJaVxrDYn/qHyS/eSeqwtuqRN5j71YKrtDsu04aGkMlCd1SiPlTK9nRjkW8JH 8yEWI1v+8F/F9LM3ep3aS812c4NrhtHToHAWsDr4MXjri+Y5zL8fYcdoRfGBEmgU w5eZN3qFB/978mJwgmieco0ZEehrD4JZAcyhFodOABDp2Hs5hAilPslPV4677f/y qELqz03yATA+bA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:22:00 2025 by rpki-client