This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft File: SPWbrFHUhS0vyW6LTPu5__i0qTk.mft (raw, json) Hash identifier: ovqwSL3dScL8GvsZKOcwrQTP16c/rE0XLadfsGFmdho= Subject key identifier: 22:3B:26:AC:76:21:03:CA:34:25:30:78:C2:B6:02:FE:E8:38:84:80 Authority key identifier: 48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39 Certificate issuer: /CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939 Certificate serial: 019B19F24DF32A4D58DA20EB8BE24CADE32C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft Manifest number: 151D Signing time: Sat 13 Dec 2025 23:01:08 +0000 Manifest this update: Sat 13 Dec 2025 23:01:08 +0000 Manifest next update: Sun 14 Dec 2025 23:01:08 +0000 Files and hashes: 1: 5nrGKW5FRerRHdO1Dy3ViuoBo2w.roa (hash: +MtkJFHMNS/IgvjNh3QorGfog9rrCct1jj019c8Teh4=) 2: SPWbrFHUhS0vyW6LTPu5__i0qTk.crl (hash: e46LMXRke2jfa+R38/LbUX0lqICc/2dO+vnYPZfsM0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f2:4d:f3:2a:4d:58:da:20:eb:8b:e2:4c:ad:e3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939 Validity Not Before: Dec 13 23:01:08 2025 GMT Not After : Dec 14 23:01:08 2025 GMT Subject: CN=223b26ac762103ca34253078c2b602fee8388480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:47:8b:3f:18:62:67:92:48:ff:f4:f7:56: 37:7c:56:eb:75:a8:07:8a:95:22:30:e3:ff:62:10: cb:9c:f8:53:ef:82:9e:bc:aa:d8:cf:6e:a3:7d:f0: c1:38:66:86:d0:f2:cd:f5:84:6e:76:4e:ea:d3:7f: e2:6d:a2:df:4a:39:a3:32:bd:f8:a9:42:2c:21:56: e8:63:a9:7d:cc:22:2f:63:c7:50:70:a1:c2:55:1b: 23:6e:9c:e4:aa:fb:2f:40:6e:24:e2:fc:7e:3d:fe: d6:7a:98:fb:f1:4c:c8:8f:7e:ee:65:64:07:00:94: 71:30:da:a3:0e:9e:6a:81:93:f2:31:05:ac:98:dc: a7:40:3a:8c:ea:e9:8d:23:fb:67:1c:3e:55:26:d0: 93:52:42:b7:d5:ba:c8:93:da:38:07:36:d5:1d:28: 2f:0c:57:65:ba:ba:3b:c5:72:73:92:2a:26:25:59: 77:c0:ac:02:58:d6:19:b7:45:5b:2a:1f:c7:3d:07: f1:e5:94:3a:bf:29:6f:7e:4e:de:08:e8:17:91:01: c1:9f:49:3d:65:d4:f1:e8:3a:e9:94:f5:4b:c2:ff: 04:50:c9:eb:fb:b7:7a:84:fa:f0:87:8b:89:b6:72: 8f:b5:22:ad:d9:ad:37:2e:03:52:3e:2a:52:fe:f0: 80:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3B:26:AC:76:21:03:CA:34:25:30:78:C2:B6:02:FE:E8:38:84:80 X509v3 Authority Key Identifier: keyid:48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4c:1d:11:02:89:58:f4:7a:5a:fe:ca:9f:6a:2e:ba:80:1d: 51:aa:6f:ab:54:e2:fb:d5:44:bd:18:10:c5:44:dc:a2:5b:f6: cf:9c:29:83:e0:74:36:9e:3b:b0:68:01:02:1a:91:07:86:c0: a5:d8:51:b2:37:b7:01:19:67:6c:b7:9f:62:d7:48:d5:9e:1e: 42:0c:06:e4:b7:90:ab:80:7d:4f:d7:44:a5:78:89:0f:92:42: 82:9d:7d:3e:86:82:e2:b0:2c:17:4e:0e:2c:ef:29:7f:94:ac: 27:e4:27:a1:11:0d:97:37:19:ee:85:56:a8:2a:52:5d:78:81: 29:ba:d1:5b:1d:3d:95:76:fb:92:79:0c:2d:90:71:a9:b7:04: ba:14:8a:7f:1d:1e:a9:7c:90:cd:97:ff:73:6b:1f:8a:5e:35: 03:01:4e:e5:fc:e3:dc:0c:6d:0c:0e:ff:34:27:f0:49:97:45: 30:09:0d:03:e0:b9:b6:8e:7c:eb:97:5e:0f:62:6a:82:8f:ee: 96:d6:e5:5a:09:a4:a2:ab:53:b9:3e:76:64:95:9e:0c:88:cf: ac:80:b9:a7:91:14:10:ba:d9:7b:a8:ac:80:fb:93:5c:2d:8e: f1:46:32:e9:97:c3:eb:98:25:08:6d:be:3f:66:3c:e2:30:58: 59:8b:6b:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8k3zKk1Y2iDri+JMreMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZjU5YmFjNTFkNDg1MmQyZmM5NmU4YjRjZmJiOWZmZjhi NGE5MzkwHhcNMjUxMjEzMjMwMTA4WhcNMjUxMjE0MjMwMTA4WjAzMTEwLwYDVQQD EygyMjNiMjZhYzc2MjEwM2NhMzQyNTMwNzhjMmI2MDJmZWU4Mzg4NDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVVHiz8YYmeSSP/091Y3fFbrdagH ipUiMOP/YhDLnPhT74KevKrYz26jffDBOGaG0PLN9YRudk7q03/ibaLfSjmjMr34 qUIsIVboY6l9zCIvY8dQcKHCVRsjbpzkqvsvQG4k4vx+Pf7Wepj78UzIj37uZWQH AJRxMNqjDp5qgZPyMQWsmNynQDqM6umNI/tnHD5VJtCTUkK31brIk9o4BzbVHSgv DFdluro7xXJzkiomJVl3wKwCWNYZt0VbKh/HPQfx5ZQ6vylvfk7eCOgXkQHBn0k9 ZdTx6DrplPVLwv8EUMnr+7d6hPrwh4uJtnKPtSKt2a03LgNSPipS/vCAUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI7Jqx2IQPKNCUweMK2Av7oOISAMB8GA1UdIwQY MBaAFEj1m6xR1IUtL8lui0z7uf/4tKk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDQ4NGMtYjk5Zi00ZGJiLWI1ZGIt OGMyZWFjMDNkZjg2LzEvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80MDQ4NGMtYjk5Zi00ZGJiLWI1ZGItOGMyZWFjMDNkZjg2 LzEvU1BXYnJGSFVoUzB2eVc2TFRQdTVfX2kwcVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0wdEQKJ WPR6Wv7Kn2ouuoAdUapvq1Ti+9VEvRgQxUTcolv2z5wpg+B0Np47sGgBAhqRB4bA pdhRsje3ARlnbLefYtdI1Z4eQgwG5LeQq4B9T9dEpXiJD5JCgp19PoaC4rAsF04O LO8pf5SsJ+QnoRENlzcZ7oVWqCpSXXiBKbrRWx09lXb7knkMLZBxqbcEuhSKfx0e qXyQzZf/c2sfil41AwFO5fzj3AxtDA7/NCfwSZdFMAkNA+C5to5865deD2Jqgo/u ltblWgmkoqtTuT52ZJWeDIjPrIC5p5EUELrZe6isgPuTXC2O8UYy6ZfD65glCG2+ P2Y84jBYWYtr8g== -----END CERTIFICATE-----Generated at Sun Dec 14 01:46:22 2025 by rpki-client