This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json) Hash identifier: or5ljUPgwf/w4cCm1ogzzIHqoxbif+a0M8BTsbsjICc= Subject key identifier: CB:F4:C1:55:5D:C1:AA:C1:36:58:A6:3B:90:58:F8:8D:27:77:9A:A5 Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59 Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059 Certificate serial: 019B0F37BF5494647E867C2C60E0E826BED9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 21:01:10 +0000 Manifest this update: Thu 11 Dec 2025 21:01:10 +0000 Manifest next update: Fri 12 Dec 2025 21:01:10 +0000 Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: 49xJoJcRURYN5yDI5zAC6o1YOLLY9IMcTZZV2FwIONE=) 2: ZCwrk3DUvn-uZjo3WgvhoOWpHv0.roa (hash: AtdbQHHLI0H407seskZvbBq2HBK/6vTqf2YFUILBHxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:bf:54:94:64:7e:86:7c:2c:60:e0:e8:26:be:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059 Validity Not Before: Dec 11 21:01:10 2025 GMT Not After : Dec 12 21:01:10 2025 GMT Subject: CN=cbf4c1555dc1aac13658a63b9058f88d27779aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:09:aa:33:1d:62:1c:68:5e:00:f7:e4:fd:df: 08:44:65:d0:36:e1:eb:58:45:45:29:b7:f3:51:e0: 5e:74:07:92:98:59:a6:97:88:e7:2d:52:a6:d8:3d: e3:51:3f:d1:db:45:40:44:3f:b8:9a:1f:43:2c:cf: 99:e1:e0:37:c7:b0:0d:c7:3f:b4:d9:e8:00:47:e8: cc:d2:a8:42:ea:b3:d0:27:bd:77:b7:23:ae:b6:9b: 33:56:5d:3a:1e:fd:36:37:9a:c6:88:f2:a8:c2:b2: 64:27:1e:52:8c:55:f5:f3:a6:15:4b:85:ac:29:df: 29:21:e4:2c:6a:71:26:9a:00:70:34:65:3e:aa:bc: 82:e4:09:73:f0:ad:b2:34:d6:7e:04:97:60:7c:14: 48:77:e9:61:7a:d8:c3:e2:30:3e:57:77:49:c0:ee: 1e:8b:e0:65:38:5b:e2:92:91:d7:eb:96:43:77:59: 19:a3:7d:3a:e3:b6:18:cc:de:25:f8:f8:ee:96:bd: df:29:6d:9f:78:08:a5:70:84:9c:68:db:a9:25:2b: ef:ee:dd:45:53:40:3f:db:47:99:70:a5:39:19:97: 6d:39:de:23:5e:63:9e:f7:1a:a2:b3:ef:24:3f:74: 1a:1b:f0:fd:ae:76:4c:3a:38:89:65:71:3f:4e:f4: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F4:C1:55:5D:C1:AA:C1:36:58:A6:3B:90:58:F8:8D:27:77:9A:A5 X509v3 Authority Key Identifier: keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1e:a1:a8:24:bd:f5:0e:4d:b4:e3:ef:ba:18:da:3f:32:76: 81:b7:74:46:03:2c:67:6f:4b:b4:a0:25:21:89:86:fa:ad:f4: 97:d2:82:d8:db:e2:42:36:bd:47:18:c4:08:4d:0a:01:ee:95: 81:88:79:e8:0e:4b:52:74:55:fd:55:a2:15:5b:b8:db:71:0e: f6:b6:76:d1:9c:b7:c7:6b:f2:05:bc:3b:9e:8d:c8:fc:d1:f4: d1:0f:ac:fd:5b:f1:7e:a7:33:6a:ac:d6:13:12:13:09:a2:6e: 0e:ab:0b:f1:51:5e:5f:07:a7:cf:0c:5a:64:4a:2b:1c:23:99: cc:f7:cc:74:02:e3:7a:b3:80:7b:e0:7b:4b:64:2d:5b:ec:d4: 84:59:4a:5c:6c:4f:30:1e:15:2a:27:4a:71:3b:f3:87:db:7f: 01:54:ea:26:0d:4f:2d:e1:91:d0:57:75:99:b7:5d:3c:06:3e: 87:e8:c3:2a:2a:21:5b:6d:b1:ff:f9:cc:76:bf:29:37:6d:db: 23:62:a8:fb:6b:0d:25:d6:b7:68:14:dd:40:a2:fc:fb:5f:ce: 72:06:ef:be:e2:3d:6b:b8:42:98:99:ee:7b:22:02:e0:30:6f: 55:96:96:4b:60:1c:bf:80:32:d3:ca:04:33:df:c4:e5:cc:b4: 3f:6c:6b:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN79UlGR+hnwsYODoJr7ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjM3NmNlOTIwODdlNGM3Y2U1MzY2ODY1Mzc3NjllMmNj MzQwNTkwHhcNMjUxMjExMjEwMTEwWhcNMjUxMjEyMjEwMTEwWjAzMTEwLwYDVQQD EyhjYmY0YzE1NTVkYzFhYWMxMzY1OGE2M2I5MDU4Zjg4ZDI3Nzc5YWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QmqMx1iHGheAPfk/d8IRGXQNuHr WEVFKbfzUeBedAeSmFmml4jnLVKm2D3jUT/R20VARD+4mh9DLM+Z4eA3x7ANxz+0 2egAR+jM0qhC6rPQJ713tyOutpszVl06Hv02N5rGiPKowrJkJx5SjFX186YVS4Ws Kd8pIeQsanEmmgBwNGU+qryC5Alz8K2yNNZ+BJdgfBRId+lhetjD4jA+V3dJwO4e i+BlOFvikpHX65ZDd1kZo30647YYzN4l+Pjulr3fKW2feAilcIScaNupJSvv7t1F U0A/20eZcKU5GZdtOd4jXmOe9xqis+8kP3QaG/D9rnZMOjiJZXE/TvRC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMv0wVVdwarBNlimO5BY+I0nd5qlMB8GA1UdIwQY MBaAFEpjds6SCH5MfOU2aGU3dp4sw0BZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83Y2Y0MmUtMmFlOC00ZjEzLWEwYzQt NGUxZmI3NmM4NDdhLzEvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83Y2Y0MmUtMmFlOC00ZjEzLWEwYzQtNGUxZmI3NmM4NDdh LzEvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVR6hqCS9 9Q5NtOPvuhjaPzJ2gbd0RgMsZ29LtKAlIYmG+q30l9KC2NviQja9RxjECE0KAe6V gYh56A5LUnRV/VWiFVu423EO9rZ20Zy3x2vyBbw7no3I/NH00Q+s/VvxfqczaqzW ExITCaJuDqsL8VFeXwenzwxaZEorHCOZzPfMdALjerOAe+B7S2QtW+zUhFlKXGxP MB4VKidKcTvzh9t/AVTqJg1PLeGR0Fd1mbddPAY+h+jDKiohW22x//nMdr8pN23b I2Ko+2sNJda3aBTdQKL8+1/OcgbvvuI9a7hCmJnueyIC4DBvVZaWS2Acv4Ay08oE M9/E5cy0P2xrwQ== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:37 2025 by rpki-client