This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft File: Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json) Hash identifier: iEoL452jUCBsgE4oP3gGGes9eaNVmEMsurgqkGKJXpU= Subject key identifier: AB:0E:3F:E3:32:07:F9:9E:0C:86:81:8B:4C:0B:22:FA:FF:64:B9:B0 Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D Certificate issuer: /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d Certificate serial: 019B055876A86EEF3379F117342C630B10DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft Manifest number: 176E Signing time: Tue 09 Dec 2025 23:00:42 +0000 Manifest this update: Tue 09 Dec 2025 23:00:42 +0000 Manifest next update: Wed 10 Dec 2025 23:00:42 +0000 Files and hashes: 1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: p1QJv3/riWAVk2Qvx3Z5GMUeSfsuzru+1fITwFpE5Mg=) 2: ukp1qSkbacWgh99iGDLbhVTGpfE.roa (hash: VZyI94Eyjd6/U3vi8uEiKE4SlR4D8n4H4v7qeg38d2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:58:76:a8:6e:ef:33:79:f1:17:34:2c:63:0b:10:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d Validity Not Before: Dec 9 23:00:42 2025 GMT Not After : Dec 10 23:00:42 2025 GMT Subject: CN=ab0e3fe33207f99e0c86818b4c0b22faff64b9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:75:b6:a7:aa:10:ad:83:ca:6a:bd:f2:20: fb:0f:d7:f4:bb:3a:7a:dd:a0:2f:04:09:84:7f:10: 6c:f0:57:60:10:3d:c8:41:bb:0b:7a:45:16:44:5a: ce:8e:79:16:de:84:bb:ec:d5:2d:bd:9c:17:5b:e3: a6:9c:0d:ae:9e:3d:4e:eb:fe:0b:25:7f:5f:2c:ff: 64:62:7d:db:fc:6b:04:cf:5f:c7:5c:4b:8b:a1:43: 68:f3:8f:06:5a:83:53:7c:41:59:88:fd:b3:a4:d8: 7d:dc:21:b3:6e:11:1f:82:24:24:51:fe:db:6c:93: 21:99:58:ef:9c:6c:d4:5a:71:58:28:5e:05:4c:78: c5:42:cc:05:f0:29:9a:46:51:ac:22:c8:71:6f:d6: 49:19:67:2c:f5:1d:78:12:d7:82:89:c2:2b:44:66: d5:c6:7f:69:2c:c1:21:95:31:eb:ca:95:05:9f:02: 1f:c1:2b:dc:da:5e:4b:18:8d:d7:2b:3e:2e:03:6b: d3:83:a2:e6:f1:ac:70:ec:1a:41:e1:62:9e:cc:d8: 4a:94:25:37:45:98:78:9e:32:79:e6:5b:3a:3b:41: aa:ea:de:a5:48:a6:93:29:8d:84:66:cb:c7:96:85: 43:23:f0:99:bc:29:dd:9c:29:c6:e1:9b:58:b9:e2: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0E:3F:E3:32:07:F9:9E:0C:86:81:8B:4C:0B:22:FA:FF:64:B9:B0 X509v3 Authority Key Identifier: keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:05:8d:93:f0:31:4d:8c:79:52:c1:02:27:fb:fc:e2:46:1b: a9:6c:01:f3:41:74:bc:d7:a1:ea:11:63:db:30:e8:c1:0e:ce: df:69:26:ad:b1:a0:42:22:da:a0:13:a6:35:98:f6:47:39:19: b5:e1:4f:5c:e5:45:34:3c:f1:f3:21:3c:5a:4e:db:b9:d5:87: 78:13:bb:a5:a9:0a:51:0d:a5:bc:52:b6:ca:12:7b:e2:f0:53: 9f:b3:55:eb:54:23:33:b9:9a:87:90:c8:2c:71:9b:22:bc:04: 86:a0:ab:72:37:32:0f:b3:93:41:ae:49:94:d2:a6:59:d1:29: 9a:66:4a:1a:b5:b4:fb:bb:97:2e:87:07:99:a4:68:7f:52:ca: cc:89:5c:56:77:fa:d4:1b:d8:e0:11:82:cb:91:0d:e4:1c:6c: 96:6c:98:d1:87:db:b5:07:6f:4e:59:51:d5:59:9a:54:33:05: c9:36:0c:9e:b9:38:61:44:8b:a0:bf:cd:da:0b:74:1e:6d:4a: 65:a8:b5:dc:46:eb:bf:45:98:59:78:78:8e:98:5f:ed:9c:1e: 97:9d:19:a0:99:a5:6e:3d:16:9f:26:70:99:17:37:30:c0:e1: 68:01:e9:29:51:32:22:4a:d6:23:df:2c:ba:cf:95:72:69:4e: 1e:36:ef:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFWHaobu8zefEXNCxjCxDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmYxZTAxYWYyNGQ3OTI0OTdkNzdlZDFmNzk5MGFlM2E2 MTI5MGQwHhcNMjUxMjA5MjMwMDQyWhcNMjUxMjEwMjMwMDQyWjAzMTEwLwYDVQQD EyhhYjBlM2ZlMzMyMDdmOTllMGM4NjgxOGI0YzBiMjJmYWZmNjRiOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqJ1tqeqEK2Dymq98iD7D9f0uzp6 3aAvBAmEfxBs8FdgED3IQbsLekUWRFrOjnkW3oS77NUtvZwXW+OmnA2unj1O6/4L JX9fLP9kYn3b/GsEz1/HXEuLoUNo848GWoNTfEFZiP2zpNh93CGzbhEfgiQkUf7b bJMhmVjvnGzUWnFYKF4FTHjFQswF8CmaRlGsIshxb9ZJGWcs9R14EteCicIrRGbV xn9pLMEhlTHrypUFnwIfwSvc2l5LGI3XKz4uA2vTg6Lm8axw7BpB4WKezNhKlCU3 RZh4njJ55ls6O0Gq6t6lSKaTKY2EZsvHloVDI/CZvCndnCnG4ZtYueLBxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsOP+MyB/meDIaBi0wLIvr/ZLmwMB8GA1UdIwQY MBaAFEpvHgGvJNeSSX137R95kK46YSkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQt MDRkMzYyYTI4NThkLzEvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQtMDRkMzYyYTI4NThk LzEvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAWNk/Ax TYx5UsECJ/v84kYbqWwB80F0vNeh6hFj2zDowQ7O32kmrbGgQiLaoBOmNZj2RzkZ teFPXOVFNDzx8yE8Wk7budWHeBO7pakKUQ2lvFK2yhJ74vBTn7NV61QjM7mah5DI LHGbIrwEhqCrcjcyD7OTQa5JlNKmWdEpmmZKGrW0+7uXLocHmaRof1LKzIlcVnf6 1BvY4BGCy5EN5BxslmyY0YfbtQdvTllR1VmaVDMFyTYMnrk4YUSLoL/N2gt0Hm1K Zai13Ebrv0WYWXh4jphf7Zwel50ZoJmlbj0WnyZwmRc3MMDhaAHpKVEyIkrWI98s us+VcmlOHjbv4A== -----END CERTIFICATE-----Generated at Wed Dec 10 09:16:17 2025 by rpki-client