This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft File: Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft (raw, json) Hash identifier: D/PvqSd1yB4mXL/y86Hkq1d6sTrA1GEQcUnJrUDEpq8= Subject key identifier: 9D:E5:B7:EE:28:A7:71:61:4C:F3:8A:90:34:5A:5C:61:0C:A6:68:99 Authority key identifier: 4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 Certificate issuer: /CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Certificate serial: 019B0F3758629EA70E8DC8301F1AA8C4C4F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft Manifest number: 1703 Signing time: Thu 11 Dec 2025 21:00:43 +0000 Manifest this update: Thu 11 Dec 2025 21:00:43 +0000 Manifest next update: Fri 12 Dec 2025 21:00:43 +0000 Files and hashes: 1: Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl (hash: /ywc6Pd/RV1PI4Ep5yxjhWQ9Pw+wMuYVHnavV95cOTQ=) 2: gljC_B2rLOcaRp9AWxqW22c-7Qo.roa (hash: NoSPrUUL8y9y3Ux1jd4/HcDTr8xF/Dw/8aDNiPAZOdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:58:62:9e:a7:0e:8d:c8:30:1f:1a:a8:c4:c4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9db00cb14a34a193f84aca144b2aeb1f3c02c8 Validity Not Before: Dec 11 21:00:43 2025 GMT Not After : Dec 12 21:00:43 2025 GMT Subject: CN=9de5b7ee28a771614cf38a90345a5c610ca66899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:24:bc:1d:7b:ea:39:9d:c0:41:65:54:ee: a0:15:7f:07:c3:cf:b3:7d:26:87:00:98:ef:a1:8a: 90:75:d0:08:99:a8:35:f5:59:a0:24:33:6e:a3:d1: 00:36:28:f8:b7:3d:b6:35:14:c6:20:86:06:3b:12: 09:e6:5d:e7:f3:7b:25:16:b6:79:19:3e:c2:09:43: d6:a9:9f:f3:c0:ed:40:a1:55:e0:c6:8a:0d:af:46: 2f:ee:e5:99:fe:9d:8a:b7:04:f5:3d:85:f6:17:43: bf:3b:c3:f6:fb:19:4c:df:0e:e3:a5:d5:78:21:f8: 07:47:b6:aa:9e:27:43:bf:1c:be:19:33:07:78:91: 3a:66:41:ab:5b:7c:7d:1b:b8:ff:d0:8c:12:40:9d: fe:91:2e:a8:f0:a6:70:3d:12:f8:d7:aa:3e:bc:f1: d6:9f:e7:78:75:90:d4:e4:ef:f4:2a:3a:c2:32:bd: f7:13:b7:aa:46:d2:26:7c:19:ca:54:02:9f:ad:64: 1c:76:79:49:bb:56:61:5c:33:fc:dd:7e:ab:ba:c0: ec:f0:39:be:24:77:64:ed:7d:7c:a9:af:f4:93:0e: d2:fa:6b:97:09:87:cc:c7:49:b5:3a:38:2c:a0:58: dc:5d:40:f6:00:a9:43:b6:f2:ac:dc:7d:9a:92:6b: 87:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E5:B7:EE:28:A7:71:61:4C:F3:8A:90:34:5A:5C:61:0C:A6:68:99 X509v3 Authority Key Identifier: keyid:4A:9D:B0:0C:B1:4A:34:A1:93:F8:4A:CA:14:4B:2A:EB:1F:3C:02:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp2wDLFKNKGT-ErKFEsq6x88Asg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7612b0-3e24-4ce7-a1ca-c1c66078e5ba/1/Sp2wDLFKNKGT-ErKFEsq6x88Asg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:7b:45:08:94:12:f7:b3:b9:cf:f4:8e:af:ec:c4:5d:71:77: 3c:0f:84:50:ef:a8:fb:53:cb:a3:92:c9:ea:4e:62:4d:a4:54: bd:64:44:c6:d8:18:ce:48:e8:f4:17:e5:53:4d:14:92:e0:65: 15:d1:62:9f:f0:b0:cc:0b:13:6f:4f:58:c5:b1:b1:e4:8d:54: 72:15:b7:18:93:d0:9c:18:c1:18:5c:ad:4d:01:57:83:b9:62: e4:9f:dc:4e:4f:2b:ed:ee:d5:f4:3f:8c:57:98:45:65:f7:08: 76:cf:13:e8:79:41:d2:30:6b:ed:18:a5:e8:d1:f6:6d:c6:6b: db:aa:d9:f0:52:81:5b:7a:44:4e:cb:b4:b2:67:f4:c5:9e:e6: fb:e1:a2:cb:75:e2:4e:79:b1:dc:a0:1c:9c:24:98:50:4d:5f: 18:36:87:b1:3e:68:94:47:18:3f:ff:3a:b0:6c:51:59:34:1f: 94:21:43:ab:61:ef:40:c1:6f:95:ae:26:0f:24:57:44:ae:40: 4e:f0:1b:4e:bf:46:ed:d6:af:5b:f0:2e:89:f7:3e:6a:7f:6c: c3:ee:54:c1:0d:4d:7c:a3:58:1d:8a:53:28:9f:82:f5:e4:c3: a6:bf:0e:66:68:10:7a:12:db:19:30:38:fe:f5:07:54:48:c7: 60:7f:12:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN1hinqcOjcgwHxqoxMTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWRiMDBjYjE0YTM0YTE5M2Y4NGFjYTE0NGIyYWViMWYz YzAyYzgwHhcNMjUxMjExMjEwMDQzWhcNMjUxMjEyMjEwMDQzWjAzMTEwLwYDVQQD Eyg5ZGU1YjdlZTI4YTc3MTYxNGNmMzhhOTAzNDVhNWM2MTBjYTY2ODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HMkvB176jmdwEFlVO6gFX8Hw8+z fSaHAJjvoYqQddAImag19VmgJDNuo9EANij4tz22NRTGIIYGOxIJ5l3n83slFrZ5 GT7CCUPWqZ/zwO1AoVXgxooNr0Yv7uWZ/p2KtwT1PYX2F0O/O8P2+xlM3w7jpdV4 IfgHR7aqnidDvxy+GTMHeJE6ZkGrW3x9G7j/0IwSQJ3+kS6o8KZwPRL416o+vPHW n+d4dZDU5O/0KjrCMr33E7eqRtImfBnKVAKfrWQcdnlJu1ZhXDP83X6rusDs8Dm+ JHdk7X18qa/0kw7S+muXCYfMx0m1OjgsoFjcXUD2AKlDtvKs3H2akmuHxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3lt+4op3FhTPOKkDRaXGEMpmiZMB8GA1UdIwQY MBaAFEqdsAyxSjShk/hKyhRLKusfPALIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2Et YzFjNjYwNzhlNWJhLzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83NjEyYjAtM2UyNC00Y2U3LWExY2EtYzFjNjYwNzhlNWJh LzEvU3Ayd0RMRktOS0dULUVyS0ZFc3E2eDg4QXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHtFCJQS 97O5z/SOr+zEXXF3PA+EUO+o+1PLo5LJ6k5iTaRUvWRExtgYzkjo9BflU00UkuBl FdFin/CwzAsTb09YxbGx5I1UchW3GJPQnBjBGFytTQFXg7li5J/cTk8r7e7V9D+M V5hFZfcIds8T6HlB0jBr7Ril6NH2bcZr26rZ8FKBW3pETsu0smf0xZ7m++Giy3Xi Tnmx3KAcnCSYUE1fGDaHsT5olEcYP/86sGxRWTQflCFDq2HvQMFvla4mDyRXRK5A TvAbTr9G7davW/Auifc+an9sw+5UwQ1NfKNYHYpTKJ+C9eTDpr8OZmgQehLbGTA4 /vUHVEjHYH8Sow== -----END CERTIFICATE-----Generated at Fri Dec 12 03:20:42 2025 by rpki-client