This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json) Hash identifier: WXuUb7QW7ylR51l3fhdlUWJr0zGu4GFK+YNFH1ZXSpA= Subject key identifier: 13:CD:C7:76:EE:FF:00:6F:14:59:65:15:04:62:DF:86:C9:17:65:AA Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a Certificate serial: 019C41A24427DA914193DDEFDCA74333AF9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft Manifest number: 08F9 Signing time: Mon 09 Feb 2026 09:01:18 +0000 Manifest this update: Mon 09 Feb 2026 09:01:18 +0000 Manifest next update: Tue 10 Feb 2026 09:01:18 +0000 Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: Px56uOZDVz/hgjTfYvhN2YsdBtyXGTIWknU9to0hXRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:44:27:da:91:41:93:dd:ef:dc:a7:43:33:af:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a Validity Not Before: Feb 9 09:01:18 2026 GMT Not After : Feb 10 09:01:18 2026 GMT Subject: CN=13cdc776eeff006f145965150462df86c91765aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:fd:0d:72:cc:82:74:e1:93:01:17:57:a7: 31:95:d1:df:e8:33:09:97:6d:01:54:68:36:b0:3c: cf:a9:72:4a:6d:1c:e9:9a:34:9d:81:ff:b3:a9:3e: a9:fa:7f:88:08:0a:1c:60:b7:f6:61:b2:0b:06:60: de:3f:f7:de:27:8e:9b:b0:13:62:33:18:5f:b8:e6: ed:74:e6:1b:4b:11:8e:ec:f0:3f:6f:09:47:a6:5e: f1:cb:63:5f:04:f9:2e:19:1f:01:6a:71:42:c1:96: 3d:73:3d:69:37:f1:54:6c:ad:c0:c1:7f:8d:2e:5f: 6c:38:34:c6:31:6c:fd:4a:ca:83:9e:45:01:1d:f3: 70:80:d1:5d:d0:94:e3:12:54:59:55:53:b4:bd:95: 44:73:22:83:bf:3c:e0:72:d6:2b:e9:06:2a:2c:5e: 1e:71:bb:1f:41:9f:77:c8:66:a4:9a:cc:9c:bf:8b: 65:cd:ce:1b:19:86:fc:10:4d:a3:72:01:2b:a4:dc: 73:ab:76:de:1c:a4:f1:67:56:45:e1:fa:65:b9:7c: 78:5d:2d:c5:0a:c0:73:b6:52:67:9c:86:f7:a8:65: ec:99:62:df:96:c2:e2:eb:b9:6d:98:7b:d5:8d:4e: 8a:6f:ef:b3:3a:45:9f:ca:01:82:55:7d:7f:ea:b4: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CD:C7:76:EE:FF:00:6F:14:59:65:15:04:62:DF:86:C9:17:65:AA X509v3 Authority Key Identifier: keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:73:57:a5:f0:4d:96:8e:ea:ce:6b:67:d9:5f:1c:fd:08:78: d1:1c:fe:87:73:fa:9c:3e:ae:ea:5f:83:9e:f6:c9:c3:93:77: 73:13:e7:79:71:30:7a:47:4d:c1:c1:3e:93:c2:62:fd:3f:49: 19:3a:e3:79:0d:24:cb:39:02:1d:06:c8:ec:3c:e1:76:37:8f: 29:9a:12:53:29:6e:79:17:c9:ef:40:bb:46:8c:b0:83:80:ef: 7d:d2:8e:5e:52:59:6c:94:56:5b:9b:aa:25:08:7b:18:03:e2: 9e:57:bf:ec:b3:cc:f4:5e:46:5e:18:10:91:81:19:67:4b:41: bc:69:60:79:4e:e7:55:78:19:55:79:89:61:76:3c:f9:5a:f7: ea:ff:25:ad:86:14:5e:f1:1e:b0:26:b8:21:ed:c0:09:e3:bb: 7f:e4:7f:a4:53:95:6e:cf:a4:bd:4f:db:65:98:c2:d7:20:34: 9c:52:47:4e:d1:62:6a:e0:29:a6:f0:af:2e:35:52:a1:c5:ac: c9:97:05:39:cc:34:32:0a:04:12:43:34:ec:64:7e:02:dc:5d: 1b:a2:e4:c5:d5:2e:79:e1:90:64:4d:87:7f:0c:fd:0e:35:68: 61:95:1d:81:4a:2a:f4:20:d0:44:6b:10:c5:13:84:d4:22:4c: 47:41:20:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBokQn2pFBk93v3KdDM6+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YzMxMWVkZTI4YjkyZjVjNjFhOTEyYmUwNjAzOTQ5OGIy MzQyMmEwHhcNMjYwMjA5MDkwMTE4WhcNMjYwMjEwMDkwMTE4WjAzMTEwLwYDVQQD EygxM2NkYzc3NmVlZmYwMDZmMTQ1OTY1MTUwNDYyZGY4NmM5MTc2NWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE39DXLMgnThkwEXV6cxldHf6DMJ l20BVGg2sDzPqXJKbRzpmjSdgf+zqT6p+n+ICAocYLf2YbILBmDeP/feJ46bsBNi MxhfuObtdOYbSxGO7PA/bwlHpl7xy2NfBPkuGR8BanFCwZY9cz1pN/FUbK3AwX+N Ll9sODTGMWz9SsqDnkUBHfNwgNFd0JTjElRZVVO0vZVEcyKDvzzgctYr6QYqLF4e cbsfQZ93yGakmsycv4tlzc4bGYb8EE2jcgErpNxzq3beHKTxZ1ZF4fpluXx4XS3F CsBztlJnnIb3qGXsmWLflsLi67ltmHvVjU6Kb++zOkWfygGCVX1/6rQOuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPNx3bu/wBvFFllFQRi34bJF2WqMB8GA1UdIwQY MBaAFEjDEe3ii5L1xhqRK+BgOUmLI0IqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGIt N2FlOGI3MDY2NzE5LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGItN2FlOGI3MDY2NzE5 LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3NXpfBN lo7qzmtn2V8c/Qh40Rz+h3P6nD6u6l+DnvbJw5N3cxPneXEwekdNwcE+k8Ji/T9J GTrjeQ0kyzkCHQbI7DzhdjePKZoSUylueRfJ70C7Roywg4DvfdKOXlJZbJRWW5uq JQh7GAPinle/7LPM9F5GXhgQkYEZZ0tBvGlgeU7nVXgZVXmJYXY8+Vr36v8lrYYU XvEesCa4Ie3ACeO7f+R/pFOVbs+kvU/bZZjC1yA0nFJHTtFiauAppvCvLjVSocWs yZcFOcw0MgoEEkM07GR+AtxdG6LkxdUueeGQZE2Hfwz9DjVoYZUdgUoq9CDQRGsQ xROE1CJMR0EgVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:40 2026 by rpki-client