This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft File: Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft (raw, json) Hash identifier: Kwd6C9b2OOEoO5sgRBZSeSQ6ZjSkXkVZAByYkNXaHIQ= Subject key identifier: F3:1A:72:8C:B6:E0:5B:C6:A5:3A:E8:7C:B1:11:32:B5:4F:D7:92:9F Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26 Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26 Certificate serial: 019B0D801ACEA2E1C2E3F8A082B16439948E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft Manifest number: 0B7D Signing time: Thu 11 Dec 2025 13:00:57 +0000 Manifest this update: Thu 11 Dec 2025 13:00:57 +0000 Manifest next update: Fri 12 Dec 2025 13:00:57 +0000 Files and hashes: 1: 63RWpTzYaUMklcl62HBy6xUd3L4.roa (hash: Un1n3GmyQj6VVqYhoRSHcYh85a7qnY1jg5MCSUwKUTc=) 2: Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl (hash: wUL1eLTaJhD6Na5fA0rPlfS6JfqIZnqTZT1cfQH3VBg=) 3: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (hash: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:1a:ce:a2:e1:c2:e3:f8:a0:82:b1:64:39:94:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26 Validity Not Before: Dec 11 13:00:57 2025 GMT Not After : Dec 12 13:00:57 2025 GMT Subject: CN=f31a728cb6e05bc6a53ae87cb11132b54fd7929f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:e3:34:21:4f:e4:6a:79:ff:fc:b9:33:c5: 17:32:e4:61:1c:aa:4c:13:0f:9e:2b:8f:b1:d9:4f: d2:ca:df:d6:f8:6b:07:c3:99:61:7a:df:d5:c4:d5: 6f:6c:01:2c:ee:4d:83:6f:df:c0:a5:e5:5b:1b:f0: 2a:1d:fd:f7:74:73:1e:06:61:52:76:9b:bb:0b:eb: 73:cf:14:09:03:51:3c:1e:c6:c5:b5:59:26:64:6c: 32:55:09:e4:15:16:a8:77:ba:cf:56:ff:3d:64:45: af:93:f1:33:cb:5b:54:62:cb:18:b9:f6:41:34:a5: 72:56:e8:8d:c8:dd:4a:1a:15:bc:9f:20:39:4a:5d: 7b:ed:25:c3:ec:6e:ac:e4:f1:7f:3b:29:f3:34:c4: 00:ed:ed:0c:7c:b2:2e:52:75:fd:bd:91:20:be:40: 03:30:b6:ce:d5:19:09:a8:a3:5f:87:b9:eb:3c:08: 7f:e3:b3:8e:1e:64:81:7b:9b:61:32:ee:08:05:26: 90:93:79:f5:dc:ca:e1:28:c6:70:71:81:c7:c5:11: ee:d0:6a:0e:b4:1c:e4:c8:01:27:18:dd:b7:89:86: fd:ad:a7:9a:cd:ec:e3:65:61:0c:78:2b:31:f0:62: ec:c7:b9:cd:59:91:1c:7c:21:69:7e:1b:cf:48:a6: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1A:72:8C:B6:E0:5B:C6:A5:3A:E8:7C:B1:11:32:B5:4F:D7:92:9F X509v3 Authority Key Identifier: keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:13:39:e8:d4:9e:7e:93:80:7a:5e:0a:20:d6:78:45:42:1c: b1:c3:c4:e0:5c:22:9b:51:9d:82:7d:ab:28:83:8b:5b:8f:cd: a4:ac:d1:11:57:7b:4d:95:00:fa:6d:b0:2f:90:a8:27:d8:83: 1e:60:bc:14:74:1e:25:84:d2:4b:b8:6f:de:3f:dc:9e:c0:7d: b8:67:d9:51:4c:ea:a1:cd:80:7d:6b:5f:e7:fe:91:77:df:ba: 29:43:44:69:14:04:2f:57:9c:f5:bb:97:e5:68:04:3d:28:a0: 38:59:ff:27:2c:95:47:fd:56:93:58:da:87:34:47:16:21:80: dd:83:74:6b:d9:e3:79:76:82:1e:ed:f4:9d:5a:35:bd:7b:ca: 9e:70:63:8a:91:50:e6:60:74:cb:5c:11:d5:e6:9e:e5:2b:87: 46:bd:3e:6f:dc:dd:2c:1b:d8:b2:0f:94:55:b0:86:5f:58:35: 18:f3:c3:dc:fc:66:5f:80:48:68:3c:24:af:16:aa:b7:ac:43: 42:6d:38:6c:97:3e:e9:0a:08:21:15:8f:77:38:bf:14:96:58: f7:23:4b:37:19:28:5b:e9:2c:dd:cb:51:bc:09:b8:f9:dd:7c: 70:fd:c6:84:fe:2c:5a:0c:93:93:f6:3c:96:c5:c8:78:40:e3: 57:8a:25:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgBrOouHC4/iggrFkOZSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhOTdiYzUwNGYzMDc1ZmI0ZjM5MjM2NDA4YzFjMmQ1NDdi NDRjMjYwHhcNMjUxMjExMTMwMDU3WhcNMjUxMjEyMTMwMDU3WjAzMTEwLwYDVQQD EyhmMzFhNzI4Y2I2ZTA1YmM2YTUzYWU4N2NiMTExMzJiNTRmZDc5MjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdfjNCFP5Gp5//y5M8UXMuRhHKpM Ew+eK4+x2U/Syt/W+GsHw5lhet/VxNVvbAEs7k2Db9/ApeVbG/AqHf33dHMeBmFS dpu7C+tzzxQJA1E8HsbFtVkmZGwyVQnkFRaod7rPVv89ZEWvk/Ezy1tUYssYufZB NKVyVuiNyN1KGhW8nyA5Sl177SXD7G6s5PF/OynzNMQA7e0MfLIuUnX9vZEgvkAD MLbO1RkJqKNfh7nrPAh/47OOHmSBe5thMu4IBSaQk3n13MrhKMZwcYHHxRHu0GoO tBzkyAEnGN23iYb9raeazezjZWEMeCsx8GLsx7nNWZEcfCFpfhvPSKaySQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMacoy24FvGpTrofLERMrVP15KfMB8GA1UdIwQY MBaAFEqXvFBPMHX7TzkjZAjBwtVHtEwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQt OTMyOWY5MTc5ZmRhLzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kNDUwMWItMThlYS00MjgwLTg1YTQtOTMyOWY5MTc5ZmRh LzEvU3BlOFVFOHdkZnRQT1NOa0NNSEMxVWUwVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBM56NSe fpOAel4KINZ4RUIcscPE4Fwim1Gdgn2rKIOLW4/NpKzREVd7TZUA+m2wL5CoJ9iD HmC8FHQeJYTSS7hv3j/cnsB9uGfZUUzqoc2AfWtf5/6Rd9+6KUNEaRQEL1ec9buX 5WgEPSigOFn/JyyVR/1Wk1jahzRHFiGA3YN0a9njeXaCHu30nVo1vXvKnnBjipFQ 5mB0y1wR1eae5SuHRr0+b9zdLBvYsg+UVbCGX1g1GPPD3PxmX4BIaDwkrxaqt6xD Qm04bJc+6QoIIRWPdzi/FJZY9yNLNxkoW+ks3ctRvAm4+d18cP3GhP4sWgyTk/Y8 lsXIeEDjV4ol8A== -----END CERTIFICATE-----Generated at Thu Dec 11 20:01:50 2025 by rpki-client