This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft File: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft (raw, json) Hash identifier: Y6xCT8tQXFYDUnCH1B/QkWZQ7Qw0JsHGvFBqYu8FGWw= Subject key identifier: 9D:A4:E5:2D:B6:08:97:56:B8:60:2C:57:AE:75:73:1E:AF:C6:15:81 Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c Certificate serial: 019B4A7196C00121A535042D6A2B4B9D12EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft Manifest number: 0C52 Signing time: Tue 23 Dec 2025 09:01:56 +0000 Manifest this update: Tue 23 Dec 2025 09:01:56 +0000 Manifest next update: Wed 24 Dec 2025 09:01:56 +0000 Files and hashes: 1: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl (hash: H12ptAuHX8S0taEiq52vH5nlHn8zXku5PloFg/DZ9Kg=) 2: XWgrA6JE6hMs-fYR5JSr732MBIw.roa (hash: +T0dpzBRYum3dH9uf73tvrJYycbYVgdyC2zBV2vtA1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:96:c0:01:21:a5:35:04:2d:6a:2b:4b:9d:12:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c Validity Not Before: Dec 23 09:01:56 2025 GMT Not After : Dec 24 09:01:56 2025 GMT Subject: CN=9da4e52db6089756b8602c57ae75731eafc61581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:d4:53:12:fa:ab:90:07:43:7f:60:4b:db: 9c:ca:b5:3d:ba:f8:33:a1:1e:97:43:16:6b:a2:57: 09:83:3d:62:d9:1b:72:a1:33:8a:76:7d:45:2a:3f: 0b:df:97:f3:80:8c:fb:ef:8b:83:f8:de:e5:25:f8: 9b:60:23:72:3a:b3:78:62:a9:d6:b7:8f:6a:ca:22: 80:e9:71:2f:96:c5:4a:de:97:57:a6:c6:b0:05:45: 62:8a:8b:f5:03:4b:6b:bd:eb:f2:ad:45:5c:17:cc: 22:e4:8f:fc:d8:1f:f6:1c:e2:b9:c7:7e:bc:eb:fd: 2e:4f:d8:5b:3a:80:4a:9f:41:07:be:df:c4:05:3c: c6:bd:eb:62:b4:5c:8c:ef:f2:6a:32:c6:3d:32:43: 71:9c:fb:e1:76:5c:9d:8e:b2:69:a9:e7:20:8e:bd: 84:73:ea:86:8d:9d:69:e7:df:0a:53:cc:79:f6:06: 2f:96:4e:bb:5d:23:16:e6:61:d7:c9:bd:b7:65:7e: 45:e7:e1:24:40:af:c2:f1:0c:b1:2c:13:83:3b:5a: c2:24:29:f2:22:3c:6f:ff:a3:91:d8:63:50:b5:ac: 79:dd:c7:62:82:d9:af:4d:82:7c:54:96:c2:15:83: 81:ec:05:b5:cb:3b:f2:46:78:5d:e0:eb:d3:6b:6e: ed:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A4:E5:2D:B6:08:97:56:B8:60:2C:57:AE:75:73:1E:AF:C6:15:81 X509v3 Authority Key Identifier: keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7b:20:44:34:c4:46:bd:1b:5b:a6:34:04:bf:16:3b:cd:b0: d5:8f:6e:2d:b7:ba:7e:bd:03:ec:22:42:ee:2a:08:a6:c2:be: dc:de:fc:15:ae:a7:da:cc:07:e3:d3:e7:63:26:09:be:d4:7b: 0e:22:2c:b9:a6:5f:62:f6:e3:d5:b8:fb:95:fa:8f:8b:f0:97: 65:ae:eb:9b:53:09:87:8d:95:e8:38:9a:10:3b:23:fa:85:e6: 04:c8:49:9b:ea:f6:a6:9e:d5:99:f7:da:31:89:21:24:d9:c7: 30:ce:c4:03:fa:38:b3:0d:51:34:1c:b8:e3:70:be:5f:a0:9b: a0:c9:1e:55:39:fc:1e:23:75:b5:1e:1d:bb:3d:43:2e:3d:d6: 50:56:f3:4c:f0:c3:c9:2d:cf:13:90:94:ea:ce:2a:ba:de:27: c2:16:57:c2:c1:2d:24:60:4f:6f:ce:fb:81:42:5e:fe:35:19: b7:f3:cb:8d:ab:c4:9a:e9:78:ba:46:3e:0a:7e:22:a3:1e:25: a1:86:64:19:3d:93:8c:a1:b5:f8:14:72:e1:a2:8b:9a:f4:d0: b1:40:25:fb:3e:12:37:fe:4f:e7:9f:5e:75:fe:51:f8:7a:ef: 99:98:f1:41:b4:a2:9d:65:c0:75:ed:42:b0:54:71:a2:be:31: 96:7b:a4:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcZbAASGlNQQtaitLnRLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjNkYzY3NTNhOGNiZDc0Yjc0NDUyYzE1MzZmMzdkOWM0 ZGM3MGMwHhcNMjUxMjIzMDkwMTU2WhcNMjUxMjI0MDkwMTU2WjAzMTEwLwYDVQQD Eyg5ZGE0ZTUyZGI2MDg5NzU2Yjg2MDJjNTdhZTc1NzMxZWFmYzYxNTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe7UUxL6q5AHQ39gS9ucyrU9uvgz oR6XQxZrolcJgz1i2RtyoTOKdn1FKj8L35fzgIz774uD+N7lJfibYCNyOrN4YqnW t49qyiKA6XEvlsVK3pdXpsawBUViiov1A0trvevyrUVcF8wi5I/82B/2HOK5x368 6/0uT9hbOoBKn0EHvt/EBTzGvetitFyM7/JqMsY9MkNxnPvhdlydjrJpqecgjr2E c+qGjZ1p598KU8x59gYvlk67XSMW5mHXyb23ZX5F5+EkQK/C8QyxLBODO1rCJCny Ijxv/6OR2GNQtax53cdigtmvTYJ8VJbCFYOB7AW1yzvyRnhd4OvTa27tHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2k5S22CJdWuGAsV651cx6vxhWBMB8GA1UdIwQY MBaAFEpj3GdTqMvXS3RFLBU2832cTccMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAt ZTM0MWIwZjkxNWQzLzEvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAtZTM0MWIwZjkxNWQz LzEvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3sgRDTE Rr0bW6Y0BL8WO82w1Y9uLbe6fr0D7CJC7ioIpsK+3N78Fa6n2swH49PnYyYJvtR7 DiIsuaZfYvbj1bj7lfqPi/CXZa7rm1MJh42V6DiaEDsj+oXmBMhJm+r2pp7Vmffa MYkhJNnHMM7EA/o4sw1RNBy443C+X6CboMkeVTn8HiN1tR4duz1DLj3WUFbzTPDD yS3PE5CU6s4qut4nwhZXwsEtJGBPb877gUJe/jUZt/PLjavEmul4ukY+Cn4iox4l oYZkGT2TjKG1+BRy4aKLmvTQsUAl+z4SN/5P559edf5R+HrvmZjxQbSinWXAde1C sFRxor4xlnuklg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:15:26 2025 by rpki-client