This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft File: SMHp2hp4jQ511Yp1FeApE37W_o4.mft (raw, json) Hash identifier: dWON0jqbgo8SkoyC6ZkqdoD+xBW9TVYiK21xHtYbLig= Subject key identifier: 3B:E7:B7:B0:88:4C:A5:82:41:5C:29:74:A1:E3:4E:69:AC:84:BA:2D Authority key identifier: 48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E Certificate issuer: /CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e Certificate serial: 019C1C4C4415CFF31862917E9AF2866EAEA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft Manifest number: 3A Signing time: Mon 02 Feb 2026 03:01:25 +0000 Manifest this update: Mon 02 Feb 2026 03:01:25 +0000 Manifest next update: Tue 03 Feb 2026 03:01:25 +0000 Files and hashes: 1: QfXrjLJUb_JZ4_SXYspmGSo1vhU.roa (hash: VbKsZvzC9FvlIfRYrSZ78JLt37iuRlrN1qMCaWZNw9I=) 2: SMHp2hp4jQ511Yp1FeApE37W_o4.crl (hash: 5hxSlddSV9Sx2DMpdjIVqMoD4Y9NMRm+kVBgDEc7nL0=) 3: XvbscRuPqnD44ovHvZ0yezaPks0.asa (hash: uYNvUOr60t3KNGg6ZzvTHqLgdJgE2TTaGqW1+IgtAlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:4c:44:15:cf:f3:18:62:91:7e:9a:f2:86:6e:ae:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c1e9da1a788d0e75d58a7515e029137ed6fe8e Validity Not Before: Feb 2 03:01:25 2026 GMT Not After : Feb 3 03:01:25 2026 GMT Subject: CN=3be7b7b0884ca582415c2974a1e34e69ac84ba2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:24:83:77:3a:9a:24:8e:4a:5a:88:28:fb: 26:8f:98:74:bb:02:2e:ca:41:8e:f3:de:8b:61:68: ae:c4:37:3f:79:47:0c:d0:b3:d3:3e:fd:97:34:04: 39:31:90:cf:ed:56:97:0b:eb:c0:2a:49:c0:4d:5c: c9:98:c1:93:44:97:c8:31:6f:b3:9b:58:9b:cd:75: 0f:d8:4d:62:36:b1:c9:e7:47:f6:77:bb:f2:ac:d4: ab:21:c5:3e:a7:0c:ce:9f:85:28:e6:e7:40:ee:13: 25:fa:2d:90:4c:3e:10:7c:08:85:e5:f9:47:e9:e7: 17:d1:32:1c:f8:4d:3c:5f:3d:e6:be:bf:77:7d:9b: 5b:f6:02:d3:81:81:35:b8:19:39:68:9b:13:42:f7: 88:6b:a9:dd:c8:fb:2f:ad:be:3b:9b:b9:5f:fd:78: ef:b3:e4:f9:17:3c:b5:3c:ee:1e:6f:86:d8:ef:06: b8:c1:51:35:4b:a3:bf:e3:bf:7e:2f:83:9c:44:3e: 41:93:cb:a0:60:df:71:74:61:5f:b3:cb:ac:8e:91: c9:dc:7d:99:cd:c7:bd:62:00:f9:79:4a:23:97:3d: 36:dd:45:d1:ad:d0:e0:9c:b6:8d:5d:01:af:2e:ba: dd:45:d5:44:89:6a:99:17:b2:86:7d:d2:8b:de:30: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E7:B7:B0:88:4C:A5:82:41:5C:29:74:A1:E3:4E:69:AC:84:BA:2D X509v3 Authority Key Identifier: keyid:48:C1:E9:DA:1A:78:8D:0E:75:D5:8A:75:15:E0:29:13:7E:D6:FE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMHp2hp4jQ511Yp1FeApE37W_o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d8e7f5-3b7f-410e-a6d7-d9b5cc2a096f/1/SMHp2hp4jQ511Yp1FeApE37W_o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:02:08:e0:4c:64:c0:ca:fa:b8:14:3c:0a:b4:6d:d4:12:49: 84:9f:94:12:c0:55:1f:80:e0:1a:85:41:12:b7:72:62:20:1a: 55:8e:19:64:14:a6:86:75:39:cd:4a:9b:30:3f:dd:ee:ab:c0: d8:fa:66:e0:15:41:ed:6b:03:d1:2a:d6:cc:d1:3e:9c:b5:fa: 06:2e:fa:b1:31:f4:3e:60:94:7f:ed:1a:66:c1:c5:be:79:c5: 6c:45:99:7b:54:eb:82:8a:3b:fd:d9:0e:0c:dd:67:53:af:38: a4:84:bf:34:b2:50:6b:1a:91:85:d4:78:e3:9b:cf:b5:cd:d3: 9a:23:17:1e:04:ae:0f:db:fb:74:b6:25:e2:0f:96:6a:e4:97: e0:54:f3:b6:29:61:5a:58:d8:52:2f:28:b8:e4:c4:b4:f6:2c: 93:2f:26:e5:c8:31:a0:e2:ba:0e:20:3b:22:df:99:54:11:bb: 5a:69:bd:e5:c3:ba:fc:29:1b:90:b9:68:4b:3e:6f:ab:22:81: 50:97:1e:5b:f2:2f:59:80:e4:8e:40:9f:c0:1b:ca:fe:fe:c7: bb:75:b3:d0:55:53:a3:28:8a:2b:e2:69:ec:e3:a4:0b:75:e3: aa:32:39:41:ce:ac:7b:89:ad:df:dd:26:e4:32:9a:b5:b2:7f: 31:c0:67:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcTEQVz/MYYpF+mvKGbq6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YzFlOWRhMWE3ODhkMGU3NWQ1OGE3NTE1ZTAyOTEzN2Vk NmZlOGUwHhcNMjYwMjAyMDMwMTI1WhcNMjYwMjAzMDMwMTI1WjAzMTEwLwYDVQQD EygzYmU3YjdiMDg4NGNhNTgyNDE1YzI5NzRhMWUzNGU2OWFjODRiYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS4kg3c6miSOSlqIKPsmj5h0uwIu ykGO896LYWiuxDc/eUcM0LPTPv2XNAQ5MZDP7VaXC+vAKknATVzJmMGTRJfIMW+z m1ibzXUP2E1iNrHJ50f2d7vyrNSrIcU+pwzOn4Uo5udA7hMl+i2QTD4QfAiF5flH 6ecX0TIc+E08Xz3mvr93fZtb9gLTgYE1uBk5aJsTQveIa6ndyPsvrb47m7lf/Xjv s+T5Fzy1PO4eb4bY7wa4wVE1S6O/479+L4OcRD5Bk8ugYN9xdGFfs8usjpHJ3H2Z zce9YgD5eUojlz023UXRrdDgnLaNXQGvLrrdRdVEiWqZF7KGfdKL3jALqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvnt7CITKWCQVwpdKHjTmmshLotMB8GA1UdIwQY MBaAFEjB6doaeI0OddWKdRXgKRN+1v6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU01IcDJocDRqUTUxMVlwMUZlQXBFMzdXX280LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kOGU3ZjUtM2I3Zi00MTBlLWE2ZDct ZDliNWNjMmEwOTZmLzEvU01IcDJocDRqUTUxMVlwMUZlQXBFMzdXX280Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9kOGU3ZjUtM2I3Zi00MTBlLWE2ZDctZDliNWNjMmEwOTZm LzEvU01IcDJocDRqUTUxMVlwMUZlQXBFMzdXX280LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgII4Exk wMr6uBQ8CrRt1BJJhJ+UEsBVH4DgGoVBErdyYiAaVY4ZZBSmhnU5zUqbMD/d7qvA 2Ppm4BVB7WsD0SrWzNE+nLX6Bi76sTH0PmCUf+0aZsHFvnnFbEWZe1Trgoo7/dkO DN1nU684pIS/NLJQaxqRhdR445vPtc3TmiMXHgSuD9v7dLYl4g+WauSX4FTztilh WljYUi8ouOTEtPYsky8m5cgxoOK6DiA7It+ZVBG7Wmm95cO6/CkbkLloSz5vqyKB UJceW/IvWYDkjkCfwBvK/v7Hu3Wz0FVToyiKK+Jp7OOkC3XjqjI5Qc6se4mt390m 5DKatbJ/McBneA== -----END CERTIFICATE-----Generated at Mon Feb 2 07:53:49 2026 by rpki-client