This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft File: SPEmUDG2es3hHypnONAjRpnRgBc.mft (raw, json) Hash identifier: DgwTdfJBTVPQ5fv5eUAa/FVgKHwFB9ebF6/yW4HzXE0= Subject key identifier: 3A:80:F4:E6:45:8F:56:8C:6F:AA:FF:8B:9D:E5:36:A1:D4:C0:C7:54 Authority key identifier: 48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17 Certificate issuer: /CN=48f1265031b67acde11f2a6738d0234699d18017 Certificate serial: 019C4321EAEDF4636ECE198999CF49793372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft Manifest number: 0227 Signing time: Mon 09 Feb 2026 16:00:22 +0000 Manifest this update: Mon 09 Feb 2026 16:00:22 +0000 Manifest next update: Tue 10 Feb 2026 16:00:22 +0000 Files and hashes: 1: SPEmUDG2es3hHypnONAjRpnRgBc.crl (hash: VLmB9mCJqBnyeO/6DyAb/Z3Dn0D+f4+sIH45k/c9HP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:ea:ed:f4:63:6e:ce:19:89:99:cf:49:79:33:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f1265031b67acde11f2a6738d0234699d18017 Validity Not Before: Feb 9 16:00:22 2026 GMT Not After : Feb 10 16:00:22 2026 GMT Subject: CN=3a80f4e6458f568c6faaff8b9de536a1d4c0c754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:52:04:8e:25:12:db:cc:0a:06:9c:c5:63: 5f:bd:51:60:e0:02:ba:4b:f2:b5:f4:cc:6e:7c:23: 2d:30:3f:16:25:4b:5e:1b:76:66:57:31:b8:a4:7b: b2:37:84:60:89:ef:02:81:cc:a3:e0:97:a0:9e:44: de:b7:d3:60:94:29:8b:a0:57:94:44:4a:c0:5b:d4: 34:89:bf:a1:ad:dc:ab:64:3f:b6:b4:1e:38:5a:56: ef:81:1d:e4:3c:52:14:54:50:e2:0c:76:5a:4a:68: 8d:e5:69:44:33:4c:92:5a:c7:29:8a:fb:2a:b7:88: a3:3b:7e:d7:ef:12:c5:c1:16:2b:1c:34:69:4d:50: 14:a3:77:8a:1e:5f:e1:05:7e:b4:1a:1f:e1:57:9f: ad:1a:a7:f3:c4:9b:b6:a8:80:8a:9f:c5:87:d6:74: 94:b6:71:6a:b8:c7:46:50:fc:f5:67:7d:98:d1:fa: 77:0a:b7:6d:70:fe:73:d2:ed:7c:b0:78:95:8b:a3: 2a:43:a8:0d:b7:28:e7:1c:69:a0:18:e4:c2:1d:c5: d2:d3:c6:7e:8a:a7:a1:25:13:a5:a1:fc:3e:b9:e9: 37:9d:e7:28:77:25:0d:e2:87:ed:b7:cb:58:ef:8c: a8:18:9d:f7:8f:41:04:85:b7:fe:a8:fe:d7:f7:62: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:80:F4:E6:45:8F:56:8C:6F:AA:FF:8B:9D:E5:36:A1:D4:C0:C7:54 X509v3 Authority Key Identifier: keyid:48:F1:26:50:31:B6:7A:CD:E1:1F:2A:67:38:D0:23:46:99:D1:80:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPEmUDG2es3hHypnONAjRpnRgBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/30ba36-834e-4c04-a702-72ec3086f0e8/1/SPEmUDG2es3hHypnONAjRpnRgBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bc:d7:c6:10:b8:53:88:09:39:e0:f4:eb:ac:28:31:e8:87: 42:29:a1:9e:39:d9:6c:70:96:8b:b5:ad:39:b9:2d:4e:83:fc: f4:f3:b8:1f:7c:5d:58:79:81:26:94:13:6e:4c:8f:8b:88:94: 7b:9f:45:86:10:04:e3:f2:a1:3b:86:26:d1:cd:ef:58:65:3b: 87:2c:d9:eb:5b:14:28:b5:2d:db:a2:1c:e7:7c:2f:b3:38:e7: b8:af:78:a3:0b:c2:b2:09:3e:db:2a:fd:64:fa:5b:cf:78:bb: 8f:fc:5b:09:ab:a3:6e:52:fa:4d:c4:d9:b9:b5:8a:ce:81:df: 4d:b5:7e:5b:73:2a:5c:49:0c:de:0d:8a:43:8f:69:51:9c:d1: d9:03:2a:bf:f3:24:01:d7:cd:a0:2a:ab:ec:fe:d8:e4:c2:94: fd:a8:59:c7:f7:73:67:2d:3e:fa:84:2a:1b:fd:eb:9a:d2:45: b2:10:0c:95:3a:6a:4c:53:0a:48:d1:7d:10:6c:a6:c0:f2:33: e2:88:82:2f:bb:d2:c6:b8:1c:79:30:df:96:68:51:72:23:8c: 30:8d:9a:a5:c2:8a:61:e6:86:a2:7a:a7:e7:d7:a2:63:db:05: 32:66:fa:2e:09:1d:49:de:6a:36:70:61:a7:1e:5c:d2:c1:43: 97:4b:1a:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIert9GNuzhmJmc9JeTNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZjEyNjUwMzFiNjdhY2RlMTFmMmE2NzM4ZDAyMzQ2OTlk MTgwMTcwHhcNMjYwMjA5MTYwMDIyWhcNMjYwMjEwMTYwMDIyWjAzMTEwLwYDVQQD EygzYTgwZjRlNjQ1OGY1NjhjNmZhYWZmOGI5ZGU1MzZhMWQ0YzBjNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy1SBI4lEtvMCgacxWNfvVFg4AK6 S/K19MxufCMtMD8WJUteG3ZmVzG4pHuyN4Rgie8Cgcyj4JegnkTet9NglCmLoFeU RErAW9Q0ib+hrdyrZD+2tB44WlbvgR3kPFIUVFDiDHZaSmiN5WlEM0ySWscpivsq t4ijO37X7xLFwRYrHDRpTVAUo3eKHl/hBX60Gh/hV5+tGqfzxJu2qICKn8WH1nSU tnFquMdGUPz1Z32Y0fp3CrdtcP5z0u18sHiVi6MqQ6gNtyjnHGmgGOTCHcXS08Z+ iqehJROlofw+uek3necodyUN4oftt8tY74yoGJ33j0EEhbf+qP7X92ITrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqA9OZFj1aMb6r/i53lNqHUwMdUMB8GA1UdIwQY MBaAFEjxJlAxtnrN4R8qZzjQI0aZ0YAXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1BFbVVERzJlczNoSHlwbk9OQWpScG5SZ0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zMGJhMzYtODM0ZS00YzA0LWE3MDIt NzJlYzMwODZmMGU4LzEvU1BFbVVERzJlczNoSHlwbk9OQWpScG5SZ0JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zMGJhMzYtODM0ZS00YzA0LWE3MDItNzJlYzMwODZmMGU4 LzEvU1BFbVVERzJlczNoSHlwbk9OQWpScG5SZ0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLzXxhC4 U4gJOeD066woMeiHQimhnjnZbHCWi7WtObktToP89PO4H3xdWHmBJpQTbkyPi4iU e59FhhAE4/KhO4Ym0c3vWGU7hyzZ61sUKLUt26Ic53wvszjnuK94owvCsgk+2yr9 ZPpbz3i7j/xbCaujblL6TcTZubWKzoHfTbV+W3MqXEkM3g2KQ49pUZzR2QMqv/Mk AdfNoCqr7P7Y5MKU/ahZx/dzZy0++oQqG/3rmtJFshAMlTpqTFMKSNF9EGymwPIz 4oiCL7vSxrgceTDflmhRciOMMI2apcKKYeaGonqn59eiY9sFMmb6LgkdSd5qNnBh px5c0sFDl0saOQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:26 2026 by rpki-client