This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft File: spvHpkk9OBeN1_XpxJDI7zqKWYs.mft (raw, json) Hash identifier: 0Hi0gEfSr1VL4JMu7smLAnfwqrN5cRlZgErG9YjG3o4= Subject key identifier: 11:6E:C5:53:5D:D7:E5:0F:F9:34:95:B6:DB:87:91:EB:17:98:3D:F8 Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b Certificate serial: 019B3231BE15BAFE08F9962D40E26E36A483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft Manifest number: 0385 Signing time: Thu 18 Dec 2025 16:01:19 +0000 Manifest this update: Thu 18 Dec 2025 16:01:19 +0000 Manifest next update: Fri 19 Dec 2025 16:01:19 +0000 Files and hashes: 1: _a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa (hash: 5gzPI03HllGyMTQY0xFdUnePky078f9CBw1LIzGaktA=) 2: spvHpkk9OBeN1_XpxJDI7zqKWYs.crl (hash: Eh1Eohn0cXVT41EfykmrTiifFGCjAk/9KE7SRjxkvJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:be:15:ba:fe:08:f9:96:2d:40:e2:6e:36:a4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b Validity Not Before: Dec 18 16:01:19 2025 GMT Not After : Dec 19 16:01:19 2025 GMT Subject: CN=116ec5535dd7e50ff93495b6db8791eb17983df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e3:ad:a5:e5:de:c9:b6:36:a0:f1:52:22:dc: b3:69:21:bb:3a:dd:f9:93:aa:e7:06:39:4f:c0:f0: 2e:56:81:13:df:7e:3b:24:26:09:7a:4b:70:ea:cb: 49:20:0a:00:eb:ba:6f:6e:1b:04:4d:cd:96:6b:c2: 1c:c2:34:ee:19:27:c9:4d:2c:55:b9:be:6c:fc:22: c7:d9:e0:5a:86:8c:57:6b:0b:2d:52:99:07:f7:4e: 31:1f:b3:0f:80:5b:da:b7:1e:b3:1f:eb:cb:20:9d: 1e:4f:30:d6:b1:70:30:16:64:84:da:61:9b:03:96: ff:49:9b:49:f6:a5:83:ff:0f:31:56:b3:d7:f0:21: fe:3b:94:46:b7:f3:ec:3e:2e:bf:06:73:41:16:07: d7:a5:62:ae:ba:9e:b9:9f:d6:af:99:fc:2d:00:6c: 5c:98:7c:68:c8:01:76:9a:ff:cf:27:df:71:08:e5: 2a:90:18:e3:18:a0:cc:a7:59:9a:ae:ad:7c:95:84: e5:a4:e8:85:96:b0:6e:ff:40:e0:5d:2e:cf:cb:f5: 16:13:c3:eb:7a:6f:96:f2:cb:86:1b:b0:b6:f1:04: 14:63:58:0c:83:b4:bd:06:c6:99:d4:57:96:54:5c: 8d:7d:92:a1:db:f7:cb:29:ad:a0:ee:33:2a:cb:46: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6E:C5:53:5D:D7:E5:0F:F9:34:95:B6:DB:87:91:EB:17:98:3D:F8 X509v3 Authority Key Identifier: keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ca:f9:38:d6:aa:b5:cd:d0:51:de:46:4c:a7:92:91:2d:5a: df:76:08:55:29:62:e9:41:d5:37:4c:6d:83:90:b2:4b:00:46: e5:c7:98:33:dd:fb:66:d8:ec:f8:71:db:53:8b:40:61:8f:9f: 1b:e0:94:d3:b2:b4:57:cb:9d:69:47:a8:02:66:53:59:cc:da: 75:c2:7e:ac:21:9a:e5:57:27:45:05:9d:60:fe:aa:cb:10:51: 86:b7:f4:89:3b:9f:55:19:b8:82:a2:35:ed:15:9e:6c:74:e2: 42:82:96:db:54:84:db:2b:67:bd:10:4d:85:17:1e:17:74:bc: ab:30:5f:6b:67:37:21:5a:fd:e7:bd:ef:2e:f9:9c:ee:80:fc: 9e:fc:78:0f:0f:69:a1:1b:c6:22:d9:2e:21:44:63:6f:1c:30: 2f:c7:de:a9:09:b0:66:c0:e7:84:37:ef:81:28:2c:1d:aa:75: 68:49:05:98:c6:d4:02:af:d8:d6:ce:92:a0:ba:ec:c8:4a:d2: 8c:11:ec:f5:cd:af:ba:31:7b:2e:b2:80:02:f3:33:ac:61:e2: d9:d0:9b:f6:0e:8b:66:0e:5e:b5:b6:62:ba:fe:1c:fb:dd:32: a8:7c:af:49:de:03:39:f4:12:e1:3f:de:df:19:19:99:27:22: a4:ef:8b:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMb4Vuv4I+ZYtQOJuNqSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyOWJjN2E2NDkzZDM4MTc4ZGQ3ZjVlOWM0OTBjOGVmM2E4 YTU5OGIwHhcNMjUxMjE4MTYwMTE5WhcNMjUxMjE5MTYwMTE5WjAzMTEwLwYDVQQD EygxMTZlYzU1MzVkZDdlNTBmZjkzNDk1YjZkYjg3OTFlYjE3OTgzZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOOtpeXeybY2oPFSItyzaSG7Ot35 k6rnBjlPwPAuVoET3347JCYJektw6stJIAoA67pvbhsETc2Wa8IcwjTuGSfJTSxV ub5s/CLH2eBahoxXawstUpkH904xH7MPgFvatx6zH+vLIJ0eTzDWsXAwFmSE2mGb A5b/SZtJ9qWD/w8xVrPX8CH+O5RGt/PsPi6/BnNBFgfXpWKuup65n9avmfwtAGxc mHxoyAF2mv/PJ99xCOUqkBjjGKDMp1marq18lYTlpOiFlrBu/0DgXS7Py/UWE8Pr em+W8suGG7C28QQUY1gMg7S9BsaZ1FeWVFyNfZKh2/fLKa2g7jMqy0b8iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFuxVNd1+UP+TSVttuHkesXmD34MB8GA1UdIwQY MBaAFLKbx6ZJPTgXjdf16cSQyO86ilmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3B2SHBrazlPQmVOMV9YcHhKREk3enFLV1lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84YWY4YWYtNTlhNC00MjBjLTllM2Ut ZDQ4MmRhOTgwNGQ3LzEvc3B2SHBrazlPQmVOMV9YcHhKREk3enFLV1lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS84YWY4YWYtNTlhNC00MjBjLTllM2UtZDQ4MmRhOTgwNGQ3 LzEvc3B2SHBrazlPQmVOMV9YcHhKREk3enFLV1lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8r5ONaq tc3QUd5GTKeSkS1a33YIVSli6UHVN0xtg5CySwBG5ceYM937Ztjs+HHbU4tAYY+f G+CU07K0V8udaUeoAmZTWczadcJ+rCGa5VcnRQWdYP6qyxBRhrf0iTufVRm4gqI1 7RWebHTiQoKW21SE2ytnvRBNhRceF3S8qzBfa2c3IVr9573vLvmc7oD8nvx4Dw9p oRvGItkuIURjbxwwL8feqQmwZsDnhDfvgSgsHap1aEkFmMbUAq/Y1s6SoLrsyErS jBHs9c2vujF7LrKAAvMzrGHi2dCb9g6LZg5etbZiuv4c+90yqHyvSd4DOfQS4T/e 3xkZmScipO+LWA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:13:54 2025 by rpki-client