This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft File: smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json) Hash identifier: /N1cUxJxiQu4pzuznpYheO9cpFe67YUQ4PoKtHflHhs= Subject key identifier: CD:9B:68:9B:D9:49:93:4A:57:64:42:99:82:C4:87:9B:60:90:6B:C7 Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B Certificate issuer: /CN=b26207c32ce98a1ade9224863b463a82f8f8682b Certificate serial: 019BFC1CCEAB85479B103787A4EB3834688C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft Manifest number: 027E Signing time: Mon 26 Jan 2026 21:01:44 +0000 Manifest this update: Mon 26 Jan 2026 21:01:44 +0000 Manifest next update: Tue 27 Jan 2026 21:01:44 +0000 Files and hashes: 1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: bl4HrUuS8qs/Q+SU8AyGXFm0VRopFpKXMbMkzyI3t6A=) 2: us0cCXgOVilyc_-btAWVQ_9HSm0.roa (hash: FpuhhqsWI6lqjf12zy/aTBMSr3k50lCdEcAaN9Dak/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:ce:ab:85:47:9b:10:37:87:a4:eb:38:34:68:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b Validity Not Before: Jan 26 21:01:44 2026 GMT Not After : Jan 27 21:01:44 2026 GMT Subject: CN=cd9b689bd949934a5764429982c4879b60906bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e5:52:65:0d:22:f4:ac:23:41:8d:19:f0:94: aa:a7:30:d9:32:66:a3:f6:30:89:71:4f:8e:ac:25: 0e:9c:72:56:25:a8:38:ed:1c:41:1a:e8:bb:e7:8f: 4a:e4:11:87:94:27:1e:67:d3:40:6c:37:c9:41:d3: d8:a1:65:21:f9:ab:b9:b4:f9:08:bd:d4:d9:8e:8e: e7:b3:2a:7e:49:26:ef:03:aa:1d:27:8d:74:38:a8: e2:7f:d6:91:9e:10:5b:12:aa:05:04:00:d2:59:31: 26:64:62:b2:12:33:72:10:28:4e:90:26:15:d5:a0: ce:16:87:63:d7:b5:03:21:ef:ca:42:fd:34:0f:77: 9f:cd:b5:88:45:5c:5e:5b:e0:39:0a:0f:e9:71:c0: db:f3:7e:71:1e:2f:1e:ed:91:96:a0:e8:04:d8:51: 89:d4:e6:52:d3:99:aa:f8:b7:f9:48:f8:c8:b8:17: 6c:32:80:e5:93:31:8e:c3:6e:3b:85:dc:d2:77:53: 8b:05:04:3b:d9:cc:ef:5e:1a:39:c8:df:af:9a:e9: 5b:26:63:96:31:ae:24:2e:50:24:e3:94:4b:15:30: c8:5c:49:24:49:0d:97:3e:c3:b5:e9:ed:fd:63:45: 04:09:9c:10:2a:7f:eb:7f:ee:6d:6c:ca:68:33:3c: bd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9B:68:9B:D9:49:93:4A:57:64:42:99:82:C4:87:9B:60:90:6B:C7 X509v3 Authority Key Identifier: keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d1:e8:15:df:d4:af:13:a4:47:dd:0b:00:d9:69:f4:e5:dd: 5f:32:2b:78:39:d1:7b:53:c4:df:04:e5:90:2c:47:9d:37:0d: 77:cc:25:27:67:3f:e4:78:b3:09:c4:af:89:ef:20:81:d0:ca: a7:9f:1e:80:9b:0f:8f:f7:29:6b:96:2d:d0:59:7c:86:eb:96: a6:cf:54:70:b0:ae:8a:c9:e8:0d:c8:c3:63:c3:f4:95:63:1e: 79:64:43:25:4c:57:74:18:45:ae:ff:c9:b2:b8:fc:c5:25:3c: ef:5b:e3:74:b8:d1:30:a0:00:c7:bc:dd:80:62:70:92:91:38: 39:81:47:c7:a5:01:14:be:e6:56:9e:c7:ae:33:ee:6e:97:8f: 91:05:4e:c2:1c:94:66:e5:db:59:60:3b:68:32:19:04:1e:3a: d1:fe:40:3d:44:2e:dc:df:1e:a4:cf:aa:1c:f1:6a:12:c8:b5: 81:6d:dc:72:09:0a:2d:3e:66:0a:14:24:72:3f:0f:94:4a:fe: d9:cc:6b:e9:31:b7:0b:46:ab:90:7a:9c:09:1b:64:52:34:ac: ce:b9:69:d0:76:51:2e:11:df:33:6e:8f:2c:aa:ca:45:d4:6b: d8:f5:f4:7a:38:9e:f3:9b:cf:c9:57:f2:db:a6:22:a4:8a:9c: 5c:05:b4:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HM6rhUebEDeHpOs4NGiMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNjIwN2MzMmNlOThhMWFkZTkyMjQ4NjNiNDYzYTgyZjhm ODY4MmIwHhcNMjYwMTI2MjEwMTQ0WhcNMjYwMTI3MjEwMTQ0WjAzMTEwLwYDVQQD EyhjZDliNjg5YmQ5NDk5MzRhNTc2NDQyOTk4MmM0ODc5YjYwOTA2YmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+VSZQ0i9KwjQY0Z8JSqpzDZMmaj 9jCJcU+OrCUOnHJWJag47RxBGui7549K5BGHlCceZ9NAbDfJQdPYoWUh+au5tPkI vdTZjo7nsyp+SSbvA6odJ410OKjif9aRnhBbEqoFBADSWTEmZGKyEjNyEChOkCYV 1aDOFodj17UDIe/KQv00D3efzbWIRVxeW+A5Cg/pccDb835xHi8e7ZGWoOgE2FGJ 1OZS05mq+Lf5SPjIuBdsMoDlkzGOw247hdzSd1OLBQQ72czvXho5yN+vmulbJmOW Ma4kLlAk45RLFTDIXEkkSQ2XPsO16e39Y0UECZwQKn/rf+5tbMpoMzy9KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2baJvZSZNKV2RCmYLEh5tgkGvHMB8GA1UdIwQY MBaAFLJiB8Ms6Yoa3pIkhjtGOoL4+GgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc21JSHd5enBpaHJla2lTR08wWTZndmo0YUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85MDE5OWItZmI2ZC00OGY3LWI1NTAt Yjc3MzhhMGJlZmFmLzEvc21JSHd5enBpaHJla2lTR08wWTZndmo0YUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85MDE5OWItZmI2ZC00OGY3LWI1NTAtYjc3MzhhMGJlZmFm LzEvc21JSHd5enBpaHJla2lTR08wWTZndmo0YUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9HoFd/U rxOkR90LANlp9OXdXzIreDnRe1PE3wTlkCxHnTcNd8wlJ2c/5HizCcSvie8ggdDK p58egJsPj/cpa5Yt0Fl8huuWps9UcLCuisnoDcjDY8P0lWMeeWRDJUxXdBhFrv/J srj8xSU871vjdLjRMKAAx7zdgGJwkpE4OYFHx6UBFL7mVp7HrjPubpePkQVOwhyU ZuXbWWA7aDIZBB460f5APUQu3N8epM+qHPFqEsi1gW3ccgkKLT5mChQkcj8PlEr+ 2cxr6TG3C0arkHqcCRtkUjSszrlp0HZRLhHfM26PLKrKRdRr2PX0ejie85vPyVfy 26YipIqcXAW0eA== -----END CERTIFICATE-----Generated at Tue Jan 27 06:09:39 2026 by rpki-client