This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
File: smbm5NXff4olZUFEdV172ZLnNTk.mft (raw, json)
Hash identifier: lbgt9UQbxQTVuRN2L0q4tw/MI2xrV9OnWsBXL6fd4co=
Subject key identifier: F6:16:8F:B7:56:77:8B:D7:BF:5A:C2:2D:B1:17:EA:2E:BD:EE:FC:4A
Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Certificate serial: 019C43FE1754C40D49B6D0FD18F588FFA53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
Manifest number: 0B1A
Signing time: Mon 09 Feb 2026 20:00:51 +0000
Manifest this update: Mon 09 Feb 2026 20:00:51 +0000
Manifest next update: Tue 10 Feb 2026 20:00:51 +0000
Files and hashes: 1: JlEL__d65JQ_tfOKiJmQEWtDYCM.roa (hash: GgRAVhQTIpXTw8lHuxPoRTh/pEuAXi31/QuDq0oYfZA=)
2: smbm5NXff4olZUFEdV172ZLnNTk.crl (hash: 1LNAYK2lsKPkqfXN+neYByyiXLxZetn2Fqe4rZrEQ6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:17:54:c4:0d:49:b6:d0:fd:18:f5:88:ff:a5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Validity
Not Before: Feb 9 20:00:51 2026 GMT
Not After : Feb 10 20:00:51 2026 GMT
Subject: CN=f6168fb756778bd7bf5ac22db117ea2ebdeefc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:e7:50:6b:af:f4:75:84:61:92:24:dc:cc:
64:d6:67:e7:c3:d9:d9:db:7b:77:fb:83:14:e4:93:
e9:be:08:be:c0:f5:0e:36:17:07:f3:42:0c:b6:00:
cf:dd:5b:8d:19:cd:c1:99:75:74:a8:d4:ed:13:e8:
ab:dc:3c:64:20:1b:ba:5c:30:ac:8e:41:86:e5:c9:
7f:f7:2a:dc:ef:10:f6:f6:71:3a:0c:72:4b:f2:ad:
7d:a0:2a:6f:64:4a:02:25:dd:bd:8d:c2:1c:8b:e0:
38:a6:f5:42:26:95:c1:23:81:a4:05:1d:a3:ae:13:
cd:61:57:52:65:d2:1c:c2:4b:d8:2b:a1:3b:45:39:
ff:de:f9:4e:18:ab:97:45:92:57:32:e1:7a:af:47:
ae:a5:c4:77:e8:54:7a:ad:16:21:aa:42:18:fe:3a:
56:c0:8b:72:85:5c:ec:5d:ff:0e:bc:46:0b:14:a2:
57:bc:5d:93:3d:a0:64:d4:38:08:97:a6:40:45:6b:
c5:7d:37:34:95:c5:eb:48:fd:58:66:ef:27:1b:cc:
2f:d1:ab:e8:eb:36:e2:b0:57:57:6e:e8:83:bf:64:
8f:a3:de:93:6d:ac:38:ae:66:d6:12:d3:e4:3b:68:
48:df:ec:f8:f8:b1:10:99:d4:78:f7:5d:84:3e:38:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:8F:B7:56:77:8B:D7:BF:5A:C2:2D:B1:17:EA:2E:BD:EE:FC:4A
X509v3 Authority Key Identifier:
keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:25:eb:ef:ee:8e:66:4f:86:83:c4:62:10:08:36:e5:ba:41:
6e:ad:5e:91:45:6c:98:67:7b:13:cc:bf:8d:e7:a6:06:d7:07:
58:5d:e7:e6:32:7b:f9:5b:1c:98:61:79:0e:92:5a:a0:8f:f0:
28:f0:60:30:b1:36:bf:71:cc:28:3b:cb:16:bc:29:1e:93:8a:
87:fe:55:bf:bd:6e:f8:d9:ba:16:9e:0b:2a:42:04:cc:eb:0a:
3b:60:22:9f:d9:63:28:db:6d:75:7b:ae:48:28:44:e8:25:0d:
a2:69:76:54:15:56:e9:eb:53:33:d3:e6:e1:39:26:e0:96:e3:
75:41:9e:16:5f:84:26:0a:f2:4a:53:da:27:b3:e1:e2:59:4f:
96:4e:60:b6:0c:ad:7e:e1:0a:92:1a:85:00:dd:ee:b3:f4:ab:
c7:b0:b8:60:d3:d2:08:18:58:cb:14:5f:c4:14:07:3a:8b:31:
65:54:08:bb:12:57:5d:e9:65:7e:46:4d:53:75:a3:fe:69:54:
f6:e0:33:0f:c9:91:6b:1f:b5:19:55:b6:8d:ec:4c:80:68:1e:
d5:7d:ee:18:cf:40:43:52:08:ac:96:c1:84:d1:a6:3d:25:6d:
cc:27:d1:e0:29:6b:d5:e3:f1:22:01:bb:24:2c:16:c5:d7:e4:
e6:07:dc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:27 2026 by rpki-client