This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft File: vSpaBrm0P86hiFQdMMbcNDCq85I.mft (raw, json) Hash identifier: fmHTQbxA/uq/0T8I2xQfAwx5tKQOCNZ9RHwAmx2oeAQ= Subject key identifier: E7:57:A8:85:D7:28:1C:FE:E9:E6:12:D6:94:DF:98:63:76:67:5B:FE Authority key identifier: BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92 Certificate issuer: /CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392 Certificate serial: 019B33B1D0CDCAB8D875B6459795FBDBD30D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft Manifest number: 1258 Signing time: Thu 18 Dec 2025 23:00:49 +0000 Manifest this update: Thu 18 Dec 2025 23:00:49 +0000 Manifest next update: Fri 19 Dec 2025 23:00:49 +0000 Files and hashes: 1: dNOXWcyjBwUcXV5oIaNhLVVvSEU.roa (hash: 4Fft0psn/kwpjVEKZgVhKcfKwufV2SXuxRSuxxvAa+k=) 2: vSpaBrm0P86hiFQdMMbcNDCq85I.crl (hash: pclVyTNtWuLecnpHyVGZ+xSBzP1wR3P38eo0T3ic1/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:d0:cd:ca:b8:d8:75:b6:45:97:95:fb:db:d3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392 Validity Not Before: Dec 18 23:00:49 2025 GMT Not After : Dec 19 23:00:49 2025 GMT Subject: CN=e757a885d7281cfee9e612d694df986376675bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:4c:85:04:40:63:a1:a6:ed:8f:8c:f3:48: 3f:32:6c:c1:52:19:ab:d3:95:93:93:63:3e:c8:eb: f8:52:2a:d6:6a:ac:c1:b8:5f:dd:56:43:d7:80:fc: 04:9c:67:c2:2d:fd:0a:7b:60:4c:7f:18:0b:9a:51: 8d:7e:7f:3c:28:ea:a9:dc:d1:ec:c9:8a:8d:1c:93: 05:f8:52:e7:b3:41:6f:b9:40:58:6a:12:d6:7f:75: e9:f3:da:b5:6e:41:3f:b2:12:1b:75:e2:b6:ec:29: 6c:d2:51:29:a2:a4:53:e7:8c:aa:56:f0:79:8c:6a: 6c:66:aa:26:46:71:f9:b4:e6:a3:66:50:4d:64:c9: 33:57:73:6f:b7:7c:02:a5:aa:3d:88:39:1a:98:05: de:09:5e:86:61:54:62:04:05:d1:9c:81:2a:9c:18: f9:82:1d:cf:19:cd:8d:a5:91:6d:2f:6a:32:d0:91: 2f:d8:c9:46:23:fc:ee:6e:60:6f:b0:b0:f1:9c:43: 43:00:e6:68:7e:4f:d0:5f:25:12:4f:bd:c4:ba:90: 42:76:91:ea:47:64:fc:f9:1c:38:58:90:f8:f6:5f: 81:c9:44:3b:7f:f8:6e:1c:f9:73:cb:5c:90:f8:b9: b6:4c:f2:8a:ef:76:42:43:fa:da:be:28:3f:39:1e: 34:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:57:A8:85:D7:28:1C:FE:E9:E6:12:D6:94:DF:98:63:76:67:5B:FE X509v3 Authority Key Identifier: keyid:BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d3:8f:7a:8d:25:b2:42:21:11:e5:b2:22:85:d8:4c:c6:74: 1d:19:2d:84:90:ed:32:4a:f2:f9:61:dc:59:df:96:7f:3f:5f: c5:5e:26:d2:25:6d:0b:a4:b9:1b:8d:2f:26:e6:db:ba:43:cd: f8:1e:19:67:9c:a6:8d:58:41:11:bb:97:ec:53:e7:1c:cd:35: f6:f5:0b:b2:f9:f5:e2:0c:87:d0:dd:8e:5f:8c:45:1b:fd:ae: df:e3:94:9c:2c:18:b1:c2:9f:11:d5:8d:ac:0f:fb:51:47:a8: 1e:e1:05:a6:da:0b:d7:ec:a1:af:b6:35:28:34:47:d0:58:a4: ac:85:c8:6c:04:f5:2d:6e:4b:d5:d1:13:e7:ea:41:f8:4a:36: c1:8f:bb:1c:80:7d:27:f7:fa:cf:ba:be:b4:b0:c5:eb:de:53: 42:43:6d:1f:bb:ee:90:fc:e9:93:7b:3a:89:f6:a2:a7:03:25: 7f:d6:4b:8e:a0:0e:3e:a5:04:36:9e:c0:22:d0:7b:9f:a0:3c: f2:0f:83:05:fc:e0:38:6a:53:8b:6c:a0:31:be:20:b6:0e:fe: 4b:bc:bb:1b:d2:d4:c3:69:97:fb:eb:b5:ca:5b:09:03:eb:ab: fb:8d:98:11:b3:4e:fb:56:54:77:3b:f7:cd:92:82:b3:73:ba: e7:38:46:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsdDNyrjYdbZFl5X729MNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMmE1YTA2YjliNDNmY2VhMTg4NTQxZDMwYzZkYzM0MzBh YWYzOTIwHhcNMjUxMjE4MjMwMDQ5WhcNMjUxMjE5MjMwMDQ5WjAzMTEwLwYDVQQD EyhlNzU3YTg4NWQ3MjgxY2ZlZTllNjEyZDY5NGRmOTg2Mzc2Njc1YmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pFMhQRAY6Gm7Y+M80g/MmzBUhmr 05WTk2M+yOv4UirWaqzBuF/dVkPXgPwEnGfCLf0Ke2BMfxgLmlGNfn88KOqp3NHs yYqNHJMF+FLns0FvuUBYahLWf3Xp89q1bkE/shIbdeK27Cls0lEpoqRT54yqVvB5 jGpsZqomRnH5tOajZlBNZMkzV3Nvt3wCpao9iDkamAXeCV6GYVRiBAXRnIEqnBj5 gh3PGc2NpZFtL2oy0JEv2MlGI/zubmBvsLDxnENDAOZofk/QXyUST73EupBCdpHq R2T8+Rw4WJD49l+ByUQ7f/huHPlzy1yQ+Lm2TPKK73ZCQ/ravig/OR40XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdXqIXXKBz+6eYS1pTfmGN2Z1v+MB8GA1UdIwQY MBaAFL0qWga5tD/OoYhUHTDG3DQwqvOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlNwYUJybTBQODZoaUZRZE1NYmNORENxODVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jYWYwMzQtY2JlMi00ZDJkLWEwMmIt NWQzNDcwNGI3Yzg4LzEvdlNwYUJybTBQODZoaUZRZE1NYmNORENxODVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jYWYwMzQtY2JlMi00ZDJkLWEwMmItNWQzNDcwNGI3Yzg4 LzEvdlNwYUJybTBQODZoaUZRZE1NYmNORENxODVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdOPeo0l skIhEeWyIoXYTMZ0HRkthJDtMkry+WHcWd+Wfz9fxV4m0iVtC6S5G40vJubbukPN +B4ZZ5ymjVhBEbuX7FPnHM019vULsvn14gyH0N2OX4xFG/2u3+OUnCwYscKfEdWN rA/7UUeoHuEFptoL1+yhr7Y1KDRH0FikrIXIbAT1LW5L1dET5+pB+Eo2wY+7HIB9 J/f6z7q+tLDF695TQkNtH7vukPzpk3s6ifaipwMlf9ZLjqAOPqUENp7AItB7n6A8 8g+DBfzgOGpTi2ygMb4gtg7+S7y7G9LUw2mX++u1ylsJA+ur+42YEbNO+1ZUdzv3 zZKCs3O65zhGXQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:26:04 2025 by rpki-client