This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft File: SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft (raw, json) Hash identifier: J7iNyUaHCt1tKm7YdpMN+gguf1L+HuygnEyXXp3TSTk= Subject key identifier: CA:7C:7C:55:3C:2D:46:A0:04:89:02:84:DD:D3:5F:19:90:95:78:7E Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6 Certificate issuer: /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6 Certificate serial: 019B18715413AD9FA525047B26141FCAC0A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft Manifest number: 1240 Signing time: Sat 13 Dec 2025 16:00:38 +0000 Manifest this update: Sat 13 Dec 2025 16:00:38 +0000 Manifest next update: Sun 14 Dec 2025 16:00:38 +0000 Files and hashes: 1: 0mjmbcUYcJdUwsZqfFXQurt0QGs.roa (hash: vj/D2huTe28PQZ9MOq6LRDgSeNcaiaat155ny9UZvt0=) 2: 5JznkOHDsnezLypnW6QUHIz_JqI.roa (hash: uAlkr8hXMWL34v9FNVsgW8wHLyGgQu70yPukhjP+1nM=) 3: SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl (hash: N5x4S4Xgt9Z6YUkCUGBVcdA1Vd7DNfIqxWRIG1xsOZw=) 4: T94PGq-eWjYniItYGztzb3OiEUY.roa (hash: fT3XH8Nt967S/av07WJbsq9vvvGHm5IDc+ITdZ2PmQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:54:13:ad:9f:a5:25:04:7b:26:14:1f:ca:c0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6 Validity Not Before: Dec 13 16:00:38 2025 GMT Not After : Dec 14 16:00:38 2025 GMT Subject: CN=ca7c7c553c2d46a004890284ddd35f199095787e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2e:0e:8d:c7:ac:9e:da:23:4b:a3:42:05:a1: 5b:15:50:59:0a:57:a2:70:3d:8b:08:21:0d:dc:37: c4:7f:c5:52:5c:0e:bf:75:19:90:cb:28:51:61:21: 5c:73:6c:16:f5:44:7e:dd:73:11:53:c8:3b:14:22: 5e:93:b1:0c:0a:c7:9c:d4:c8:2e:a4:00:c9:bf:49: 96:4b:d0:be:e6:ea:f5:b8:50:21:da:55:b1:e3:95: d6:57:61:f2:06:d0:3b:9c:92:0e:ad:3e:2d:ab:85: 25:97:4f:2b:af:28:35:a6:72:5b:ce:7d:e4:60:69: 47:a9:4f:3d:4a:8d:88:d8:bb:f2:46:a7:38:e9:3a: 60:52:3d:2f:57:67:81:55:ca:b8:79:b8:4e:9c:f9: 9e:75:9a:15:dc:7b:d1:21:9c:d8:a7:9b:fa:55:13: a0:f8:f7:5c:84:b6:53:b5:ce:cf:f5:d3:52:d4:86: ce:e4:24:31:c2:e6:f5:20:44:24:bd:ea:03:6c:3d: f2:2a:eb:dc:fa:b4:88:58:d9:cd:00:b6:d3:98:78: af:8c:02:b8:b1:70:30:2f:12:15:eb:e4:c2:a4:dd: 11:4d:00:88:da:5a:7d:06:23:33:ed:fb:c2:ea:c6: 8f:ce:18:cd:16:d0:36:63:f2:86:b9:35:e6:c5:fd: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7C:7C:55:3C:2D:46:A0:04:89:02:84:DD:D3:5F:19:90:95:78:7E X509v3 Authority Key Identifier: keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d6:df:97:de:e2:29:7c:7a:73:4a:94:61:14:62:62:9c:0a: 7d:57:40:bd:b3:e3:5f:66:2e:73:e5:fd:8c:85:4f:67:41:dc: 73:71:ac:12:09:04:98:d7:6e:c7:8d:8b:48:0d:34:50:41:14: e4:05:e7:a4:00:20:8d:02:20:f9:fb:9c:d5:d4:93:91:91:0c: 91:60:d6:37:fc:5a:5b:ad:12:11:08:8d:2d:17:58:76:60:62: 9f:2b:8a:4a:cb:2d:ed:62:39:7b:8f:6e:d4:88:ae:c0:f1:a8: ce:cb:38:3f:16:2c:ea:f1:21:8c:4b:bb:84:16:05:c1:c1:07: bd:1a:84:30:ff:af:01:d1:17:89:59:74:3f:2d:a2:75:1d:ee: d3:44:14:97:f9:29:47:e6:f3:6a:31:06:7c:fa:66:a1:79:ec: 71:b9:82:9b:f1:a6:a0:89:ed:d3:81:ca:52:43:94:d6:0e:96: 27:60:ec:dc:a3:41:d9:13:82:12:21:25:bc:aa:22:1c:db:63: 19:17:7c:b4:61:bc:cd:0b:dc:15:ec:20:de:ff:1f:c8:0c:c5: a0:1e:0e:d7:b6:83:fc:9e:0b:40:f7:94:3b:93:67:fe:46:d8: b1:c3:e0:08:d0:84:78:3f:dd:85:fe:1a:95:e2:75:27:cc:98: 03:1d:3b:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcVQTrZ+lJQR7JhQfysCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWM1ZTU2YWFjZDAxZmZiMjgyNWE5MzFlZDVlZGU0MWMz ZjkyZTYwHhcNMjUxMjEzMTYwMDM4WhcNMjUxMjE0MTYwMDM4WjAzMTEwLwYDVQQD EyhjYTdjN2M1NTNjMmQ0NmEwMDQ4OTAyODRkZGQzNWYxOTkwOTU3ODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi4OjcesntojS6NCBaFbFVBZClei cD2LCCEN3DfEf8VSXA6/dRmQyyhRYSFcc2wW9UR+3XMRU8g7FCJek7EMCsec1Mgu pADJv0mWS9C+5ur1uFAh2lWx45XWV2HyBtA7nJIOrT4tq4Ull08rryg1pnJbzn3k YGlHqU89So2I2LvyRqc46TpgUj0vV2eBVcq4ebhOnPmedZoV3HvRIZzYp5v6VROg +PdchLZTtc7P9dNS1IbO5CQxwub1IEQkveoDbD3yKuvc+rSIWNnNALbTmHivjAK4 sXAwLxIV6+TCpN0RTQCI2lp9BiMz7fvC6saPzhjNFtA2Y/KGuTXmxf33qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMp8fFU8LUagBIkChN3TXxmQlXh+MB8GA1UdIwQY MBaAFEqcXlaqzQH/soJakx7V7eQcP5LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMDEwZGMtMDkxMC00MzQxLThiMzMt MmU2OTRiMzM5OTMzLzEvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jMDEwZGMtMDkxMC00MzQxLThiMzMtMmU2OTRiMzM5OTMz LzEvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNbfl97i KXx6c0qUYRRiYpwKfVdAvbPjX2Yuc+X9jIVPZ0Hcc3GsEgkEmNdux42LSA00UEEU 5AXnpAAgjQIg+fuc1dSTkZEMkWDWN/xaW60SEQiNLRdYdmBinyuKSsst7WI5e49u 1IiuwPGozss4PxYs6vEhjEu7hBYFwcEHvRqEMP+vAdEXiVl0Py2idR3u00QUl/kp R+bzajEGfPpmoXnscbmCm/GmoInt04HKUkOU1g6WJ2Ds3KNB2ROCEiElvKoiHNtj GRd8tGG8zQvcFewg3v8fyAzFoB4O17aD/J4LQPeUO5Nn/kbYscPgCNCEeD/dhf4a leJ1J8yYAx07Yg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:06:30 2025 by rpki-client