This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json) Hash identifier: blKoCTLsRffhjZePtcGet7XtNO5KvM+Gu5JWDUEJJb4= Subject key identifier: 7B:FB:6D:58:DB:6B:C4:DE:B3:53:DB:17:AB:94:60:66:7D:FC:23:6E Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a Certificate serial: 019B59E4328D8575E041DDD0A593F64415C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft Manifest number: 0881 Signing time: Fri 26 Dec 2025 09:01:25 +0000 Manifest this update: Fri 26 Dec 2025 09:01:25 +0000 Manifest next update: Sat 27 Dec 2025 09:01:25 +0000 Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: U4PIJAHofRxZ5ZjYNxJTYoFLs9dPhzlzxaU/JvJSSUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:32:8d:85:75:e0:41:dd:d0:a5:93:f6:44:15:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a Validity Not Before: Dec 26 09:01:25 2025 GMT Not After : Dec 27 09:01:25 2025 GMT Subject: CN=7bfb6d58db6bc4deb353db17ab9460667dfc236e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:36:77:02:d8:18:62:01:79:79:f7:61:47:3c: d2:44:59:89:19:46:d3:ee:0e:3a:2f:d3:88:9d:b1: 61:db:9f:ae:6a:c3:16:f7:ac:77:84:af:8b:1c:d5: 85:fe:c0:1b:20:87:41:45:9a:27:21:e5:d5:48:71: cb:2e:a2:4e:49:8d:29:bd:fb:ad:5b:a4:f0:6c:9b: 81:f3:d9:f0:66:c0:74:5b:34:84:16:90:b5:d1:e4: de:84:df:28:eb:06:50:bb:a6:4b:60:7f:79:d9:29: 63:0d:14:3c:d6:da:a2:7f:d3:7f:0b:6d:35:26:df: 16:d1:b3:98:05:a4:90:e1:e1:9a:73:ea:fa:26:0e: 3c:f8:6e:18:55:7f:4e:14:73:9f:21:9e:fb:fe:da: 3b:d2:92:ca:69:d5:09:6a:a3:47:b8:7c:85:3a:00: e1:5e:32:81:8c:5e:21:d1:4a:ed:2b:9c:cb:aa:04: 39:d5:51:6c:60:71:ca:ad:29:1d:06:64:77:43:fe: f6:90:c4:fc:d3:07:01:74:71:57:f6:3e:0f:f0:9f: e7:4d:55:ef:91:12:82:e9:97:3e:f0:e9:b4:2f:00: 1e:c9:c4:84:2c:82:95:6c:f8:08:1f:98:4b:54:6e: c0:cb:3b:4d:11:8c:b4:8c:fb:eb:43:47:f5:cb:35: 88:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FB:6D:58:DB:6B:C4:DE:B3:53:DB:17:AB:94:60:66:7D:FC:23:6E X509v3 Authority Key Identifier: keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:83:71:3a:ab:d0:6d:8b:f5:d0:b0:6f:a0:7f:89:5c:9d:3e: 2a:8d:ee:3e:89:ea:fc:d5:bc:ed:7e:e0:bf:e8:23:06:48:99: cd:21:87:23:c9:9e:1a:3f:58:fd:9b:08:95:c6:05:69:a6:e3: 26:be:4a:4c:91:65:56:68:ee:c2:6a:2f:a2:08:71:f4:ad:a9: f9:6b:1b:f1:ed:6c:a1:c8:48:d2:d8:6c:7f:cb:21:70:2c:d4: 18:06:f9:99:4d:61:81:0e:d9:9f:53:3f:18:43:15:99:be:1a: 40:f7:a1:b9:7d:72:0e:2a:ed:c4:3a:28:f8:ff:59:d2:28:fa: 66:5b:68:c2:93:66:7f:fd:2d:d0:f9:16:9e:14:84:05:e6:35: a0:e9:02:89:c2:3c:42:cb:80:38:2c:59:f1:56:bc:47:0e:61: b5:27:21:35:dd:7e:a0:75:89:04:ef:38:66:f4:28:9f:dd:e0: c2:52:7b:88:e4:5e:d2:88:22:71:3f:a2:5a:3a:fe:d1:ab:8d: 6c:fd:d7:f5:64:24:12:d5:93:f1:b9:6d:67:01:59:f9:ad:13: 12:78:7e:11:49:1e:1a:45:47:9e:39:1c:a5:35:16:a8:72:2c: 4f:e3:e3:c7:db:a5:72:15:3e:81:cc:90:31:52:d0:74:fc:47: cc:3c:16:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5DKNhXXgQd3QpZP2RBXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YzMxMWVkZTI4YjkyZjVjNjFhOTEyYmUwNjAzOTQ5OGIy MzQyMmEwHhcNMjUxMjI2MDkwMTI1WhcNMjUxMjI3MDkwMTI1WjAzMTEwLwYDVQQD Eyg3YmZiNmQ1OGRiNmJjNGRlYjM1M2RiMTdhYjk0NjA2NjdkZmMyMzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jZ3AtgYYgF5efdhRzzSRFmJGUbT 7g46L9OInbFh25+uasMW96x3hK+LHNWF/sAbIIdBRZonIeXVSHHLLqJOSY0pvfut W6TwbJuB89nwZsB0WzSEFpC10eTehN8o6wZQu6ZLYH952SljDRQ81tqif9N/C201 Jt8W0bOYBaSQ4eGac+r6Jg48+G4YVX9OFHOfIZ77/to70pLKadUJaqNHuHyFOgDh XjKBjF4h0UrtK5zLqgQ51VFsYHHKrSkdBmR3Q/72kMT80wcBdHFX9j4P8J/nTVXv kRKC6Zc+8Om0LwAeycSELIKVbPgIH5hLVG7AyztNEYy0jPvrQ0f1yzWILwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHv7bVjba8Tes1PbF6uUYGZ9/CNuMB8GA1UdIwQY MBaAFEjDEe3ii5L1xhqRK+BgOUmLI0IqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGIt N2FlOGI3MDY2NzE5LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGItN2FlOGI3MDY2NzE5 LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoNxOqvQ bYv10LBvoH+JXJ0+Ko3uPonq/NW87X7gv+gjBkiZzSGHI8meGj9Y/ZsIlcYFaabj Jr5KTJFlVmjuwmovoghx9K2p+Wsb8e1sochI0thsf8shcCzUGAb5mU1hgQ7Zn1M/ GEMVmb4aQPehuX1yDirtxDoo+P9Z0ij6ZltowpNmf/0t0PkWnhSEBeY1oOkCicI8 QsuAOCxZ8Va8Rw5htSchNd1+oHWJBO84ZvQon93gwlJ7iORe0ogicT+iWjr+0auN bP3X9WQkEtWT8bltZwFZ+a0TEnh+EUkeGkVHnjkcpTUWqHIsT+Pjx9ulchU+gcyQ MVLQdPxHzDwWsg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:11 2025 by rpki-client