This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft File: SPWbrFHUhS0vyW6LTPu5__i0qTk.mft (raw, json) Hash identifier: u2Y43FZH7vHx7vSBU9BEQRye+ROG967L70vGQR15MsY= Subject key identifier: 2D:E5:FB:A0:DF:DB:5E:26:79:91:96:53:1F:78:DD:09:63:4F:9B:BA Authority key identifier: 48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39 Certificate issuer: /CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939 Certificate serial: 019AF54120E806B320713DACCA1CF63E1DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft Manifest number: 150A Signing time: Sat 06 Dec 2025 20:01:17 +0000 Manifest this update: Sat 06 Dec 2025 20:01:17 +0000 Manifest next update: Sun 07 Dec 2025 20:01:17 +0000 Files and hashes: 1: 5nrGKW5FRerRHdO1Dy3ViuoBo2w.roa (hash: +MtkJFHMNS/IgvjNh3QorGfog9rrCct1jj019c8Teh4=) 2: SPWbrFHUhS0vyW6LTPu5__i0qTk.crl (hash: OyYl2QlYXcZytrYC2/kJHnEHdxNZQvRUS6BtJtITi8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:20:e8:06:b3:20:71:3d:ac:ca:1c:f6:3e:1d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939 Validity Not Before: Dec 6 20:01:17 2025 GMT Not After : Dec 7 20:01:17 2025 GMT Subject: CN=2de5fba0dfdb5e26799196531f78dd09634f9bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b3:8a:f2:95:69:2a:97:77:8a:d7:12:e2:14: 32:50:d9:a9:9f:15:3a:e3:93:95:8e:f6:95:c2:02: 5c:5a:34:64:26:c9:fb:50:8a:06:a1:79:d2:fe:fc: fe:53:1b:70:11:55:8e:20:e6:cf:eb:2d:61:41:ba: f7:ff:b3:06:56:3c:af:1f:e6:0f:81:70:db:fa:6f: 81:8a:bd:f8:9f:4d:a2:d4:39:78:b7:ec:2e:e4:d5: fd:3b:e6:87:23:d7:fb:b8:a0:31:bd:7c:96:42:c6: 8d:16:fd:e1:67:a2:81:25:61:93:8c:26:ff:e4:f8: e4:68:de:ca:fd:62:27:28:df:78:76:ca:c4:b5:b9: 5b:54:18:1c:d4:d4:55:72:67:2a:c2:f5:5d:24:2a: b1:c8:97:9a:60:c7:d0:08:cc:71:14:f6:7e:1d:18: 01:e1:34:be:fc:66:83:21:c9:5d:24:d3:2e:d3:71: c0:6b:22:87:bf:d7:4f:62:e8:60:a9:cb:db:5b:19: a3:20:36:d9:5c:20:77:7b:37:18:58:d9:6b:fd:bd: d3:77:dc:ac:21:14:51:7f:15:50:05:40:76:6a:29: 83:a7:73:5b:21:b7:7a:86:cc:2e:1d:d1:90:11:73: be:32:c4:33:12:55:b3:ba:c4:23:90:a2:aa:da:59: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E5:FB:A0:DF:DB:5E:26:79:91:96:53:1F:78:DD:09:63:4F:9B:BA X509v3 Authority Key Identifier: keyid:48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9a:78:d3:41:0e:f6:80:90:bf:7d:08:fb:89:95:4c:a3:4e: 5d:9e:fd:72:f5:4f:d3:ec:ed:d1:5f:1b:84:b6:4c:01:80:ad: 25:f6:33:1a:ad:66:ff:35:2f:e5:ed:6a:58:35:33:1a:4e:0d: 53:cc:35:d0:f1:52:e1:a6:ce:b0:b0:b6:29:11:af:a8:ed:3a: 2b:2b:bf:12:de:8f:51:62:cd:15:c6:d9:a5:cb:11:9e:de:cf: 30:aa:92:69:21:ec:a8:f5:d5:b9:07:a2:d7:25:c1:ea:19:40: 9b:39:81:da:2e:6b:5d:af:81:bf:6f:80:c5:fa:3b:af:63:1e: e7:92:cf:23:41:c2:56:a1:26:e7:4f:0a:42:89:b4:a1:c8:40: b2:b2:c5:a2:b5:72:4d:d5:1a:96:61:1a:59:d2:05:a4:e9:69: af:4a:3e:9e:40:9b:86:70:12:43:5e:6d:85:d2:51:db:a9:b8: c2:d2:e8:75:f5:58:f9:ab:34:70:68:a3:5c:ea:79:76:87:b3: 33:2f:29:8d:86:91:f2:05:c7:ee:5a:af:ad:36:6a:26:dd:de: 42:45:9d:b5:9f:1f:83:25:92:19:51:60:56:ca:30:29:82:0c: 83:96:3c:ef:49:f9:3e:70:f4:0d:e7:99:28:a8:73:55:59:f1: a5:d2:ed:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QSDoBrMgcT2syhz2Ph29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZjU5YmFjNTFkNDg1MmQyZmM5NmU4YjRjZmJiOWZmZjhi NGE5MzkwHhcNMjUxMjA2MjAwMTE3WhcNMjUxMjA3MjAwMTE3WjAzMTEwLwYDVQQD EygyZGU1ZmJhMGRmZGI1ZTI2Nzk5MTk2NTMxZjc4ZGQwOTYzNGY5YmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbOK8pVpKpd3itcS4hQyUNmpnxU6 45OVjvaVwgJcWjRkJsn7UIoGoXnS/vz+UxtwEVWOIObP6y1hQbr3/7MGVjyvH+YP gXDb+m+Bir34n02i1Dl4t+wu5NX9O+aHI9f7uKAxvXyWQsaNFv3hZ6KBJWGTjCb/ 5PjkaN7K/WInKN94dsrEtblbVBgc1NRVcmcqwvVdJCqxyJeaYMfQCMxxFPZ+HRgB 4TS+/GaDIcldJNMu03HAayKHv9dPYuhgqcvbWxmjIDbZXCB3ezcYWNlr/b3Td9ys IRRRfxVQBUB2aimDp3NbIbd6hswuHdGQEXO+MsQzElWzusQjkKKq2lkYIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3l+6Df214meZGWUx943QljT5u6MB8GA1UdIwQY MBaAFEj1m6xR1IUtL8lui0z7uf/4tKk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDQ4NGMtYjk5Zi00ZGJiLWI1ZGIt OGMyZWFjMDNkZjg2LzEvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80MDQ4NGMtYjk5Zi00ZGJiLWI1ZGItOGMyZWFjMDNkZjg2 LzEvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZp400EO 9oCQv30I+4mVTKNOXZ79cvVP0+zt0V8bhLZMAYCtJfYzGq1m/zUv5e1qWDUzGk4N U8w10PFS4abOsLC2KRGvqO06Kyu/Et6PUWLNFcbZpcsRnt7PMKqSaSHsqPXVuQei 1yXB6hlAmzmB2i5rXa+Bv2+Axfo7r2Me55LPI0HCVqEm508KQom0ochAsrLForVy TdUalmEaWdIFpOlpr0o+nkCbhnASQ15thdJR26m4wtLodfVY+as0cGijXOp5doez My8pjYaR8gXH7lqvrTZqJt3eQkWdtZ8fgyWSGVFgVsowKYIMg5Y870n5PnD0DeeZ KKhzVVnxpdLt3A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:51 2025 by rpki-client