This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json) Hash identifier: vrXSG0aquqO1vweu3PxLHGFIWoRnbPC1tKpKx8mua3Q= Subject key identifier: AB:72:C1:32:77:24:68:AB:E1:2F:BF:F3:54:8B:24:57:DF:4B:53:BD Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c Certificate serial: 019AF5E6834B01FB130786E74F8587ED3228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft Manifest number: 0ADA Signing time: Sat 06 Dec 2025 23:01:55 +0000 Manifest this update: Sat 06 Dec 2025 23:01:55 +0000 Manifest next update: Sun 07 Dec 2025 23:01:55 +0000 Files and hashes: 1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=) 2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: QbZDHhDT55uNFKTOB6W5QJfnkU1Qw46lkufQ+Rgm8mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:83:4b:01:fb:13:07:86:e7:4f:85:87:ed:32:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c Validity Not Before: Dec 6 23:01:55 2025 GMT Not After : Dec 7 23:01:55 2025 GMT Subject: CN=ab72c132772468abe12fbff3548b2457df4b53bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:81:e3:37:80:d3:97:e7:15:3a:49:81:3d: 4e:06:f2:9a:30:c1:20:bb:96:db:89:ae:77:cd:86: c0:1d:af:6d:f8:96:56:7a:60:92:fa:9a:58:b0:ae: ed:c0:0f:07:b9:24:b0:d3:a6:10:e3:81:9e:8b:74: df:96:45:69:15:4e:fb:c3:6b:68:f4:fe:a6:6f:6b: 90:32:b3:bb:b1:26:79:88:25:b7:3a:6f:cc:44:24: 40:70:cd:e3:cb:52:fe:34:71:1e:e9:06:89:8e:02: 08:4a:ef:81:1f:ad:44:72:a0:56:3d:29:34:77:af: 61:6a:d4:04:2e:7f:52:f7:82:8e:27:c6:59:00:6e: 2d:02:36:b0:ac:a6:30:f8:06:dc:e0:63:64:bf:26: b7:d3:7c:cf:79:a4:25:f5:66:9c:c4:1e:44:95:bb: 24:d9:82:2d:00:fd:a1:00:78:7d:33:6e:84:ca:30: 6a:9f:fe:ac:49:82:21:40:c5:ff:77:16:42:d4:86: 02:6f:32:a6:76:04:49:10:0e:34:c9:79:26:c7:54: d4:d4:d1:e2:1c:f3:65:8d:8d:d6:17:6a:4c:6d:d1: 24:31:99:c1:9c:1c:34:22:99:97:33:87:97:16:8e: 80:42:46:40:60:8b:d7:4b:78:77:ee:25:f4:d5:11: a1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:72:C1:32:77:24:68:AB:E1:2F:BF:F3:54:8B:24:57:DF:4B:53:BD X509v3 Authority Key Identifier: keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:0f:dd:45:8e:53:7d:31:2f:a4:46:28:96:89:18:62:8e:92: 63:c1:91:37:74:19:d4:7f:45:60:ec:f8:98:05:76:8d:d4:a5: fe:4b:3f:ba:ed:e4:c8:35:bf:d8:d2:4f:aa:db:c9:21:ed:13: 29:71:24:03:1d:e9:42:50:01:7c:52:1b:03:fa:44:4b:a7:b6: fa:f3:75:b9:ae:34:44:08:1e:62:93:0a:ce:49:b3:bf:6d:53: 7a:b7:41:73:e5:bc:72:61:14:9c:e1:2e:ec:f6:0d:09:be:42: 3e:6f:ac:72:fa:2f:dd:fc:b1:bd:a8:bb:36:cc:11:34:ae:66: bb:e3:da:7a:7b:c7:22:33:89:26:b7:de:5d:9e:c9:33:fb:41: 2d:5f:4d:56:63:1e:2c:2f:cf:19:34:c8:fb:94:28:22:eb:6f: 6c:a1:26:6f:0b:70:a9:dc:42:68:8e:9e:18:7a:76:87:3d:ed: fc:9d:04:7f:ea:fd:70:d4:bb:76:27:fc:2c:67:01:d7:7b:29: 98:d3:9b:ea:5e:db:e2:50:24:a0:eb:31:bd:ca:90:b1:01:ba: c4:1d:69:40:6d:00:56:cb:44:b0:55:de:b5:66:33:d1:ac:c8: 23:61:3e:4f:3e:48:d5:6e:96:97:76:7e:a6:de:83:b0:3d:5d: 48:41:71:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15oNLAfsTB4bnT4WH7TIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWQxNjZjNjQ4NDczODk3MmU5YjMzOTM4MTY1ZjQ0ODlh NTE2OGMwHhcNMjUxMjA2MjMwMTU1WhcNMjUxMjA3MjMwMTU1WjAzMTEwLwYDVQQD EyhhYjcyYzEzMjc3MjQ2OGFiZTEyZmJmZjM1NDhiMjQ1N2RmNGI1M2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCOB4zeA05fnFTpJgT1OBvKaMMEg u5bbia53zYbAHa9t+JZWemCS+ppYsK7twA8HuSSw06YQ44Gei3TflkVpFU77w2to 9P6mb2uQMrO7sSZ5iCW3Om/MRCRAcM3jy1L+NHEe6QaJjgIISu+BH61EcqBWPSk0 d69hatQELn9S94KOJ8ZZAG4tAjawrKYw+Abc4GNkvya303zPeaQl9WacxB5Elbsk 2YItAP2hAHh9M26EyjBqn/6sSYIhQMX/dxZC1IYCbzKmdgRJEA40yXkmx1TU1NHi HPNljY3WF2pMbdEkMZnBnBw0IpmXM4eXFo6AQkZAYIvXS3h37iX01RGhRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtywTJ3JGir4S+/81SLJFffS1O9MB8GA1UdIwQY MBaAFEqdFmxkhHOJcumzOTgWX0SJpRaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMt YmZhOTYzOTJhYzVkLzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMtYmZhOTYzOTJhYzVk LzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJA/dRY5T fTEvpEYolokYYo6SY8GRN3QZ1H9FYOz4mAV2jdSl/ks/uu3kyDW/2NJPqtvJIe0T KXEkAx3pQlABfFIbA/pES6e2+vN1ua40RAgeYpMKzkmzv21TerdBc+W8cmEUnOEu 7PYNCb5CPm+scvov3fyxvai7NswRNK5mu+PaenvHIjOJJrfeXZ7JM/tBLV9NVmMe LC/PGTTI+5QoIutvbKEmbwtwqdxCaI6eGHp2hz3t/J0Ef+r9cNS7dif8LGcB13sp mNOb6l7b4lAkoOsxvcqQsQG6xB1pQG0AVstEsFXetWYz0azII2E+Tz5I1W6Wl3Z+ pt6DsD1dSEFxQg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:41 2025 by rpki-client