This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json) Hash identifier: rhLCOsoQ7wyjzbHmCR6160r6ah562oJohKUp5KhnzJI= Subject key identifier: 3A:88:5E:91:D0:DF:7B:AE:E5:7E:92:0A:E1:5B:1B:E4:89:73:AC:55 Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f Certificate serial: 019C42EB217A1F9DD2BC9B81BE619FD0DD31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft Manifest number: 17A9 Signing time: Mon 09 Feb 2026 15:00:31 +0000 Manifest this update: Mon 09 Feb 2026 15:00:31 +0000 Manifest next update: Tue 10 Feb 2026 15:00:31 +0000 Files and hashes: 1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=) 2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: V2mERCcannbLNKVY5zQHQMFD4pklnERdLZsHBxrbDII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:21:7a:1f:9d:d2:bc:9b:81:be:61:9f:d0:dd:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f Validity Not Before: Feb 9 15:00:31 2026 GMT Not After : Feb 10 15:00:31 2026 GMT Subject: CN=3a885e91d0df7baee57e920ae15b1be48973ac55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:91:84:41:11:83:7f:6a:57:59:ac:f2:75: f8:fc:98:d9:ef:d5:9b:8d:57:94:e4:84:1e:37:ea: 04:59:99:ee:a9:ed:0b:cb:eb:44:dd:19:6a:1d:2e: 92:b7:3c:30:d8:b9:ab:76:0d:ed:6b:a6:a4:95:64: 57:59:e2:e5:23:a4:f6:9b:5a:2d:a1:0d:7f:e3:2e: 43:a4:e5:7e:fb:9f:27:f1:63:d5:86:f4:76:ac:9b: 2f:d4:12:cb:1e:3a:c1:62:94:de:85:06:ab:68:2f: 21:dc:a2:5d:91:42:f2:e0:42:96:5e:ba:35:df:f8: 2c:9c:1e:1d:1b:19:5b:4c:00:c4:5b:4e:ec:20:e0: 21:41:1f:ce:98:ea:41:81:3a:59:c7:ff:9e:8c:53: 04:c7:29:f7:59:07:93:45:2a:79:8e:93:3f:f3:0c: f2:f1:76:b7:86:a7:eb:d9:66:8e:2f:4c:c6:af:22: 06:5a:55:4b:9f:2f:ac:9f:2a:b3:c1:d2:e8:95:5e: b6:ee:0f:d0:bd:76:9a:97:6b:93:d6:1d:8d:52:15: 63:eb:dc:2b:a8:dd:b1:a5:14:1e:53:05:a2:00:e7: 72:4d:46:ce:d5:6f:65:e5:77:9c:90:7c:57:af:56: 6b:df:eb:10:4f:56:1c:1a:70:9e:c9:a2:1d:aa:71: 80:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:88:5E:91:D0:DF:7B:AE:E5:7E:92:0A:E1:5B:1B:E4:89:73:AC:55 X509v3 Authority Key Identifier: keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2f:5f:a5:2d:f1:23:c2:58:59:5a:db:3a:ab:7f:0f:ed:56: 6e:ed:c8:55:a1:09:49:ae:5b:03:fd:ef:39:b2:b6:6b:44:df: 67:4f:ef:b2:32:c0:9b:d4:8a:c0:35:2d:41:3a:52:e8:ee:a4: 29:d4:e7:c8:28:2b:e1:01:a2:01:97:1e:dc:92:6e:e8:a4:af: a3:26:45:9b:58:80:d5:51:bd:7b:27:67:d3:24:c3:90:40:5a: 2e:6c:a0:4a:3e:e7:9d:b3:f0:1e:ea:55:1f:f2:a9:41:05:b4: 96:17:3e:78:ea:78:23:42:15:58:23:f7:bd:f4:87:c6:a6:4f: 17:da:f7:7f:70:ba:c6:e6:80:22:7e:e3:10:e9:e9:11:6f:94: 04:59:df:05:59:b6:1f:29:ed:7f:d0:12:f6:dc:0a:96:00:89: 4f:d5:9c:90:b9:6e:7d:5d:e4:8f:0b:21:d0:ec:96:34:b5:35: 01:81:6d:4b:d1:38:15:48:43:cc:7a:d2:21:b3:be:a0:3f:c4: 9a:10:96:6b:81:d6:a4:b5:08:ae:26:ac:63:65:6f:7b:41:9c: 0d:de:62:c8:0f:ce:d6:e4:15:55:01:88:b5:17:9c:4c:fe:36: 07:96:d0:4b:eb:46:55:9f:a4:9c:68:10:32:e9:77:12:de:9a: 34:13:e4:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6yF6H53SvJuBvmGf0N0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Y2YzN2IzNjQ2ZmRhOTNjYmRkMGI4YWFjY2ZmZjMxM2E2 ZjcxOGYwHhcNMjYwMjA5MTUwMDMxWhcNMjYwMjEwMTUwMDMxWjAzMTEwLwYDVQQD EygzYTg4NWU5MWQwZGY3YmFlZTU3ZTkyMGFlMTViMWJlNDg5NzNhYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS6RhEERg39qV1ms8nX4/JjZ79Wb jVeU5IQeN+oEWZnuqe0Ly+tE3RlqHS6Stzww2Lmrdg3ta6aklWRXWeLlI6T2m1ot oQ1/4y5DpOV++58n8WPVhvR2rJsv1BLLHjrBYpTehQaraC8h3KJdkULy4EKWXro1 3/gsnB4dGxlbTADEW07sIOAhQR/OmOpBgTpZx/+ejFMExyn3WQeTRSp5jpM/8wzy 8Xa3hqfr2WaOL0zGryIGWlVLny+snyqzwdLolV627g/QvXaal2uT1h2NUhVj69wr qN2xpRQeUwWiAOdyTUbO1W9l5XeckHxXr1Zr3+sQT1YcGnCeyaIdqnGAAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqIXpHQ33uu5X6SCuFbG+SJc6xVMB8GA1UdIwQY MBaAFEjPN7Nkb9qTy90LiqzP/zE6b3GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQt MTdlMzE1ODk1NGRhLzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQtMTdlMzE1ODk1NGRh LzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAly9fpS3x I8JYWVrbOqt/D+1Wbu3IVaEJSa5bA/3vObK2a0TfZ0/vsjLAm9SKwDUtQTpS6O6k KdTnyCgr4QGiAZce3JJu6KSvoyZFm1iA1VG9eydn0yTDkEBaLmygSj7nnbPwHupV H/KpQQW0lhc+eOp4I0IVWCP3vfSHxqZPF9r3f3C6xuaAIn7jEOnpEW+UBFnfBVm2 Hyntf9AS9twKlgCJT9WckLlufV3kjwsh0OyWNLU1AYFtS9E4FUhDzHrSIbO+oD/E mhCWa4HWpLUIriasY2Vve0GcDd5iyA/O1uQVVQGItRecTP42B5bQS+tGVZ+knGgQ Mul3Et6aNBPkkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:25 2026 by rpki-client