This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft File: spuNaKggdWqqP4l5UdWv1n_bPbs.mft (raw, json) Hash identifier: Dep8PRmx0sm6iWkNr55k6g+HR9FyfQZQz6cdYgDwoLM= Subject key identifier: 2B:12:95:EA:66:1E:E4:D2:6B:1F:A2:38:BF:2F:87:3F:71:79:FA:1C Authority key identifier: B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB Certificate issuer: /CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb Certificate serial: 019AF12F370203A3DCEC02C58F412C954501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:03:14 +0000 Manifest this update: Sat 06 Dec 2025 01:03:14 +0000 Manifest next update: Sun 07 Dec 2025 01:03:14 +0000 Files and hashes: 1: spuNaKggdWqqP4l5UdWv1n_bPbs.crl (hash: fPHBZvIvr1lmeYy3uyZDbMRL7OZxeaIi5x+/kbutZdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:37:02:03:a3:dc:ec:02:c5:8f:41:2c:95:45:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b29b8d68a820756aaa3f897951d5afd67fdb3dbb Validity Not Before: Dec 6 01:03:14 2025 GMT Not After : Dec 7 01:03:14 2025 GMT Subject: CN=2b1295ea661ee4d26b1fa238bf2f873f7179fa1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:96:17:c8:ed:85:c7:67:49:29:b9:4c:90: 6a:e9:a0:f5:ff:06:f9:8e:53:ca:b2:ad:f7:a4:ba: 71:95:c9:be:34:3a:3f:05:35:41:bb:18:19:fe:aa: fe:36:26:f3:e4:a2:89:18:9b:22:3c:4c:f7:13:ff: 3f:9a:4a:a7:5b:59:ee:9c:ee:58:83:dd:db:a2:32: 60:97:12:7c:66:c5:51:2d:4b:27:2c:90:52:29:59: ab:9e:8b:28:e0:ab:11:41:50:d6:21:eb:87:34:fc: 73:81:a7:21:e2:69:50:39:f2:bf:ce:55:86:83:b1: 1b:c4:93:d2:5d:9b:9b:12:ff:aa:e4:68:47:8b:e5: e6:6b:62:d5:7a:7f:38:30:2f:17:0e:0c:a3:03:3f: 50:6c:9e:48:4d:7b:c5:97:7f:50:de:12:e1:3a:1e: 03:55:ae:73:5a:20:e8:c3:95:e0:7a:ae:42:77:f8: eb:d2:50:5e:83:b5:78:b3:83:53:08:fd:67:e0:ad: 36:49:8e:c3:06:c1:2d:33:8f:23:22:39:87:05:54: f5:51:cd:2a:6c:7d:de:04:21:4a:5e:f1:72:9c:de: 8c:31:c2:da:12:31:55:94:95:4e:5c:28:41:bf:b0: 67:54:a8:d8:13:c3:3a:1b:1a:13:27:c5:15:d5:ce: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:12:95:EA:66:1E:E4:D2:6B:1F:A2:38:BF:2F:87:3F:71:79:FA:1C X509v3 Authority Key Identifier: keyid:B2:9B:8D:68:A8:20:75:6A:AA:3F:89:79:51:D5:AF:D6:7F:DB:3D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spuNaKggdWqqP4l5UdWv1n_bPbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c97b17-671b-4102-9241-1c1eb158b02d/1/spuNaKggdWqqP4l5UdWv1n_bPbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f5:d0:68:e8:2c:56:c2:59:53:ca:04:9c:c7:1c:a6:14:2a: 23:2a:b8:2c:e3:b5:21:8e:31:c9:55:21:23:ef:b7:9a:a6:41: 29:38:75:e5:17:61:82:f8:4b:9d:9b:30:69:ae:d2:f1:38:6e: 9b:23:78:11:a1:6c:69:f6:4c:97:35:b0:33:11:8d:37:31:d2: 78:1c:66:2e:9e:67:52:01:d5:1e:91:82:c6:d3:7e:55:23:61: 26:9a:af:86:17:23:bf:b9:7e:e4:93:ba:c2:f9:bf:ec:41:b4: 41:80:6c:a3:de:1c:0f:29:7f:63:a5:41:63:a9:a7:ed:3e:31: 3e:50:02:3d:5f:0b:71:c3:8f:b4:84:13:87:06:3a:53:40:43: 6e:52:c3:d1:cb:45:7c:c0:c7:0c:c3:f8:ce:ef:83:1e:16:30: aa:0f:94:2e:8d:a2:fb:75:7b:75:19:59:bc:7b:2a:51:88:6b: 94:5a:48:a8:31:b2:5c:1f:8a:f5:3e:c7:e8:4a:d2:b2:f5:c6: 6f:a3:7d:4c:5d:9b:94:81:73:a2:ec:42:05:ff:ab:a9:50:a6: 35:6e:f4:97:c0:5a:f3:7a:11:78:80:5c:3c:b9:98:dd:d4:16: 90:02:8e:22:ee:d9:f8:a3:e5:48:33:ee:72:22:c5:43:58:13: e2:ef:76:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLzcCA6Pc7ALFj0EslUUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyOWI4ZDY4YTgyMDc1NmFhYTNmODk3OTUxZDVhZmQ2N2Zk YjNkYmIwHhcNMjUxMjA2MDEwMzE0WhcNMjUxMjA3MDEwMzE0WjAzMTEwLwYDVQQD EygyYjEyOTVlYTY2MWVlNGQyNmIxZmEyMzhiZjJmODczZjcxNzlmYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0+WF8jthcdnSSm5TJBq6aD1/wb5 jlPKsq33pLpxlcm+NDo/BTVBuxgZ/qr+Nibz5KKJGJsiPEz3E/8/mkqnW1nunO5Y g93bojJglxJ8ZsVRLUsnLJBSKVmrnoso4KsRQVDWIeuHNPxzgach4mlQOfK/zlWG g7EbxJPSXZubEv+q5GhHi+Xma2LVen84MC8XDgyjAz9QbJ5ITXvFl39Q3hLhOh4D Va5zWiDow5Xgeq5Cd/jr0lBeg7V4s4NTCP1n4K02SY7DBsEtM48jIjmHBVT1Uc0q bH3eBCFKXvFynN6MMcLaEjFVlJVOXChBv7BnVKjYE8M6GxoTJ8UV1c6E5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsSlepmHuTSax+iOL8vhz9xefocMB8GA1UdIwQY MBaAFLKbjWioIHVqqj+JeVHVr9Z/2z27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jOTdiMTctNjcxYi00MTAyLTkyNDEt MWMxZWIxNThiMDJkLzEvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jOTdiMTctNjcxYi00MTAyLTkyNDEtMWMxZWIxNThiMDJk LzEvc3B1TmFLZ2dkV3FxUDRsNVVkV3Yxbl9iUGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPXQaOgs VsJZU8oEnMccphQqIyq4LOO1IY4xyVUhI++3mqZBKTh15RdhgvhLnZswaa7S8Thu myN4EaFsafZMlzWwMxGNNzHSeBxmLp5nUgHVHpGCxtN+VSNhJpqvhhcjv7l+5JO6 wvm/7EG0QYBso94cDyl/Y6VBY6mn7T4xPlACPV8LccOPtIQThwY6U0BDblLD0ctF fMDHDMP4zu+DHhYwqg+ULo2i+3V7dRlZvHsqUYhrlFpIqDGyXB+K9T7H6ErSsvXG b6N9TF2blIFzouxCBf+rqVCmNW70l8Ba83oReIBcPLmY3dQWkAKOIu7Z+KPlSDPu ciLFQ1gT4u92mA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:20 2025 by rpki-client