This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json) Hash identifier: UuYpsVCrYEpdWNyOvV6ePfF/nmERMqbRX5RXMcCQLnA= Subject key identifier: 10:C6:F0:3D:52:53:26:18:9E:5F:53:83:AC:48:3D:68:0D:24:59:AB Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42 Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42 Certificate serial: 019B9EC52639FDC42CEB301CBE89F72BF2DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft Manifest number: 1273 Signing time: Thu 08 Jan 2026 18:01:18 +0000 Manifest this update: Thu 08 Jan 2026 18:01:18 +0000 Manifest next update: Fri 09 Jan 2026 18:01:18 +0000 Files and hashes: 1: lqO9jU_e1mf7RUCHwc_uBeQO6NY.roa (hash: X2Z+xq+OY7HU64r5ulluhPikVE1SCZldf84hSoy01Vk=) 2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: VuhsDWhxTg5YAfsmAcS+kGpgw3qjHGBIYJf5eGQ71NE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:c5:26:39:fd:c4:2c:eb:30:1c:be:89:f7:2b:f2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42 Validity Not Before: Jan 8 18:01:18 2026 GMT Not After : Jan 9 18:01:18 2026 GMT Subject: CN=10c6f03d525326189e5f5383ac483d680d2459ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:43:4a:4b:e4:48:35:47:50:96:86:b9:f3:22: d2:5f:fc:ac:1e:fa:fe:96:4e:10:b4:b3:a4:c6:7a: 0c:9e:b3:a9:22:33:3c:36:e3:f7:0c:89:4b:31:7a: 74:2a:4f:91:67:d4:e6:67:e5:13:90:13:bf:d6:4e: b1:45:56:a6:7d:01:fd:f6:5e:8e:37:49:74:b1:80: 61:e1:4d:0c:f5:a7:84:50:93:bd:ce:3b:a4:da:e4: ee:3f:0d:22:64:7d:93:9d:7e:19:ff:25:27:bc:0f: 91:12:d9:51:00:19:5e:84:9a:69:6a:06:55:35:dc: 98:3f:2a:8a:4c:d0:a0:d7:54:7f:5a:19:bf:b1:a8: 67:18:68:e4:43:d8:2e:a6:32:4d:06:af:45:ba:2e: 00:9c:2d:9b:ce:61:e5:03:8e:68:10:6c:37:74:c0: 69:f6:d2:90:1c:e2:e7:b6:54:8d:14:c7:2a:cd:8c: fc:a3:49:5e:de:f0:a1:fd:67:60:f8:bc:6e:80:8f: 3c:5e:ff:45:7d:0b:7e:b4:f8:5e:33:3e:9e:c8:e2: 68:2d:25:00:51:b3:d0:74:b0:de:71:77:b1:54:d8: 75:65:5b:32:d9:7d:0a:4d:aa:1c:25:42:f7:bd:d4: 59:ce:35:1e:04:a5:48:f4:a9:77:85:b5:8e:46:53: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C6:F0:3D:52:53:26:18:9E:5F:53:83:AC:48:3D:68:0D:24:59:AB X509v3 Authority Key Identifier: keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:55:35:b7:ca:4b:a4:50:a6:23:b6:a5:f5:51:16:2f:0c:7a: b9:38:21:49:2c:f6:27:f7:e7:14:8e:be:8c:3c:3a:8b:b8:11: 36:21:53:d8:ba:5e:ca:fd:a7:16:a8:4d:12:1d:6b:72:bd:24: 51:db:9a:0d:a3:be:d5:7e:a9:cf:0d:32:a1:34:78:4c:47:89: 67:6b:6a:ba:60:74:ff:ea:0b:a5:02:d2:03:60:9f:8b:7d:d0: d6:f3:f2:3f:91:e5:e7:56:92:e8:e9:ed:f9:e6:16:0c:74:66: 34:eb:8a:e8:49:de:65:1c:04:89:0d:5d:72:63:3a:8e:db:d1: af:e4:50:91:5a:e2:63:9c:a3:e4:ff:ea:a0:ff:29:79:f6:2c: 3c:e6:cd:d2:14:38:74:94:a8:1e:e2:24:0b:13:4c:60:fa:16: 33:3b:3e:d2:0f:38:56:9e:e9:49:29:3c:59:cb:8b:66:72:6c: cc:21:e1:0f:04:e3:b6:11:77:b7:6e:9c:df:d7:bf:22:e4:d5: fd:3d:f7:e3:15:86:6f:22:64:b0:38:eb:24:ba:6e:69:2c:b3: 67:66:85:0f:4d:0d:60:3e:cf:57:99:9a:d9:ba:62:a1:35:8a: 0c:38:f5:26:60:27:20:38:b3:84:16:f4:23:56:95:3a:3f:cf: f2:13:d2:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuexSY5/cQs6zAcvon3K/LdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNmJiNDMzM2VmZTllMTRjNDgzMWIwNTgyMTQxNmU1YzU1 YmRmNDIwHhcNMjYwMTA4MTgwMTE4WhcNMjYwMTA5MTgwMTE4WjAzMTEwLwYDVQQD EygxMGM2ZjAzZDUyNTMyNjE4OWU1ZjUzODNhYzQ4M2Q2ODBkMjQ1OWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkNKS+RINUdQloa58yLSX/ysHvr+ lk4QtLOkxnoMnrOpIjM8NuP3DIlLMXp0Kk+RZ9TmZ+UTkBO/1k6xRVamfQH99l6O N0l0sYBh4U0M9aeEUJO9zjuk2uTuPw0iZH2TnX4Z/yUnvA+REtlRABlehJppagZV NdyYPyqKTNCg11R/Whm/sahnGGjkQ9gupjJNBq9Fui4AnC2bzmHlA45oEGw3dMBp 9tKQHOLntlSNFMcqzYz8o0le3vCh/Wdg+LxugI88Xv9FfQt+tPheMz6eyOJoLSUA UbPQdLDecXexVNh1ZVsy2X0KTaocJUL3vdRZzjUeBKVI9Kl3hbWORlPnGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDG8D1SUyYYnl9Tg6xIPWgNJFmrMB8GA1UdIwQY MBaAFLJrtDM+/p4UxIMbBYIUFuXFW99CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMt NDQ2YTg5MTNkNGI4LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMtNDQ2YTg5MTNkNGI4 LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFU1t8pL pFCmI7al9VEWLwx6uTghSSz2J/fnFI6+jDw6i7gRNiFT2Lpeyv2nFqhNEh1rcr0k UduaDaO+1X6pzw0yoTR4TEeJZ2tqumB0/+oLpQLSA2Cfi33Q1vPyP5Hl51aS6Ont +eYWDHRmNOuK6EneZRwEiQ1dcmM6jtvRr+RQkVriY5yj5P/qoP8pefYsPObN0hQ4 dJSoHuIkCxNMYPoWMzs+0g84Vp7pSSk8WcuLZnJszCHhDwTjthF3t26c39e/IuTV /T334xWGbyJksDjrJLpuaSyzZ2aFD00NYD7PV5ma2bpioTWKDDj1JmAnIDizhBb0 I1aVOj/P8hPS8g== -----END CERTIFICATE-----Generated at Fri Jan 9 01:13:22 2026 by rpki-client