This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json) Hash identifier: KZCMz5alrx9GGFeLgevrtzOXXyZ7bV/7OUW4aKHJ1Q0= Subject key identifier: 38:D9:AD:B3:18:41:E9:74:E3:33:0B:05:88:7E:8E:AA:13:21:4B:98 Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c Certificate serial: 019B5A51BC67F3FE4E89BCFC42D58494B2D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft Manifest number: 0B0E Signing time: Fri 26 Dec 2025 11:01:04 +0000 Manifest this update: Fri 26 Dec 2025 11:01:04 +0000 Manifest next update: Sat 27 Dec 2025 11:01:04 +0000 Files and hashes: 1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=) 2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: cw9C9PRLN9H7O+vungern7RsiEseHb3bGjRXFUjvcOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:bc:67:f3:fe:4e:89:bc:fc:42:d5:84:94:b2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c Validity Not Before: Dec 26 11:01:04 2025 GMT Not After : Dec 27 11:01:04 2025 GMT Subject: CN=38d9adb31841e974e3330b05887e8eaa13214b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:c6:68:90:77:fd:84:d8:d6:22:82:85:43: ce:74:6a:65:c9:d0:a7:c7:59:be:03:a1:55:c9:dc: 24:54:f9:d5:16:16:65:42:22:e4:67:64:53:f5:0a: 9e:c1:61:df:1d:97:01:e7:66:b4:5e:b7:00:50:d8: 86:af:d6:35:4f:9c:56:c5:5a:cc:fb:f5:17:67:37: 76:55:42:16:d3:f1:33:76:26:d6:d8:ed:e5:97:ac: 48:59:a3:42:44:a9:77:b2:ee:83:5c:2e:04:5c:c3: a5:92:55:71:20:25:04:a3:ce:06:5f:ae:dd:a5:41: f3:7d:95:c9:8b:41:b1:e6:99:9a:04:43:8f:2e:95: 3f:9f:7c:46:2f:1f:db:75:2c:18:fe:b5:db:53:0b: a9:82:96:c9:f4:ed:fb:40:40:fb:e5:ef:8c:db:9e: ca:f4:e8:95:ba:d7:3c:67:e1:23:5b:ec:f5:b3:28: 26:9e:44:28:c8:7c:63:08:a6:4b:1d:63:2d:99:54: 9a:ec:8a:85:e1:a9:14:89:bf:18:fa:c8:17:ef:bb: c5:21:50:d6:cc:18:a8:53:ad:ec:48:30:80:83:60: a4:d4:09:19:91:2c:8c:42:e9:91:5b:8d:62:04:43: ec:b7:dd:56:a1:ce:f9:9e:13:f8:e6:a5:a3:f7:2b: 8c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D9:AD:B3:18:41:E9:74:E3:33:0B:05:88:7E:8E:AA:13:21:4B:98 X509v3 Authority Key Identifier: keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:50:3d:0f:b2:38:01:9a:1f:ad:58:53:c6:02:1c:1c:da:ff: 20:7d:90:91:a0:b4:8a:2a:7b:26:27:3e:a7:de:f5:89:db:e5: fd:bc:bb:90:d1:bc:66:1d:db:e0:44:44:e5:12:c2:d7:82:b0: 96:ea:dc:43:26:32:a7:c9:b6:0d:3f:5e:d2:b4:c5:a9:49:b9: a8:0c:6c:e1:72:e6:5e:3e:95:19:4b:b7:d6:01:b3:dc:4b:04: 9d:56:27:4c:c1:fc:95:a2:94:e7:d9:6a:dc:cb:20:5b:b5:ca: 4d:a3:05:ab:af:1a:31:c1:66:62:5b:e8:38:af:86:fc:7e:08: fb:aa:e4:4b:58:f7:02:d2:71:00:a1:c6:26:4e:57:df:28:32: 1c:42:7e:ee:dc:0b:74:f4:8e:4f:f3:b5:54:10:fd:7e:37:c9: e4:d6:57:51:2c:ae:4e:c1:90:cd:a9:1f:b2:53:7c:6f:41:a1: 8f:71:ef:ed:17:7a:22:f9:85:d4:2a:66:98:12:8c:f9:e1:b6: d4:d3:e7:ad:62:4b:6a:f5:52:cc:39:64:36:31:6f:64:5f:ee: 9b:46:07:6b:a7:45:81:f8:6c:3f:1a:ff:e7:61:89:ed:92:ee: 69:41:72:59:80:6f:92:53:f4:08:6d:59:ac:18:9c:34:31:c9: 98:8f:e4:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUbxn8/5Oibz8QtWElLLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOWQxNjZjNjQ4NDczODk3MmU5YjMzOTM4MTY1ZjQ0ODlh NTE2OGMwHhcNMjUxMjI2MTEwMTA0WhcNMjUxMjI3MTEwMTA0WjAzMTEwLwYDVQQD EygzOGQ5YWRiMzE4NDFlOTc0ZTMzMzBiMDU4ODdlOGVhYTEzMjE0Yjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskLGaJB3/YTY1iKChUPOdGplydCn x1m+A6FVydwkVPnVFhZlQiLkZ2RT9QqewWHfHZcB52a0XrcAUNiGr9Y1T5xWxVrM +/UXZzd2VUIW0/EzdibW2O3ll6xIWaNCRKl3su6DXC4EXMOlklVxICUEo84GX67d pUHzfZXJi0Gx5pmaBEOPLpU/n3xGLx/bdSwY/rXbUwupgpbJ9O37QED75e+M257K 9OiVutc8Z+EjW+z1sygmnkQoyHxjCKZLHWMtmVSa7IqF4akUib8Y+sgX77vFIVDW zBioU63sSDCAg2Ck1AkZkSyMQumRW41iBEPst91Woc75nhP45qWj9yuMHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjZrbMYQel04zMLBYh+jqoTIUuYMB8GA1UdIwQY MBaAFEqdFmxkhHOJcumzOTgWX0SJpRaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMt YmZhOTYzOTJhYzVkLzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMtYmZhOTYzOTJhYzVk LzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxlA9D7I4 AZofrVhTxgIcHNr/IH2QkaC0iip7Jic+p971idvl/by7kNG8Zh3b4ERE5RLC14Kw lurcQyYyp8m2DT9e0rTFqUm5qAxs4XLmXj6VGUu31gGz3EsEnVYnTMH8laKU59lq 3MsgW7XKTaMFq68aMcFmYlvoOK+G/H4I+6rkS1j3AtJxAKHGJk5X3ygyHEJ+7twL dPSOT/O1VBD9fjfJ5NZXUSyuTsGQzakfslN8b0Ghj3Hv7Rd6IvmF1CpmmBKM+eG2 1NPnrWJLavVSzDlkNjFvZF/um0YHa6dFgfhsPxr/52GJ7ZLuaUFyWYBvklP0CG1Z rBicNDHJmI/kwQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:27 2025 by rpki-client