This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft File: SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json) Hash identifier: O3+Fvbzorkjr49A6uhnGb0XUqTCpTVa4JHPFwVfK/fg= Subject key identifier: 38:24:7F:CF:AE:BD:30:37:C1:A4:07:3D:BA:5F:CC:6F:F2:B4:8C:CD Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3 Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3 Certificate serial: 019B58D159C7945458CBD5BBC0F703BB9A37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft Manifest number: 13F3 Signing time: Fri 26 Dec 2025 04:01:13 +0000 Manifest this update: Fri 26 Dec 2025 04:01:13 +0000 Manifest next update: Sat 27 Dec 2025 04:01:13 +0000 Files and hashes: 1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=) 2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: 0kcuvvKAaBko8x4Iebux/rPXsTQixuTwK3cYOCC9zTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:59:c7:94:54:58:cb:d5:bb:c0:f7:03:bb:9a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3 Validity Not Before: Dec 26 04:01:13 2025 GMT Not After : Dec 27 04:01:13 2025 GMT Subject: CN=38247fcfaebd3037c1a4073dba5fcc6ff2b48ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:49:10:76:95:06:89:85:0a:37:e4:ad:15: 57:f8:a5:f9:96:00:8f:c7:f6:69:d6:7d:54:c2:61: b8:3e:64:22:4c:f7:8a:9a:46:fb:c3:5d:47:4b:fc: 34:46:2d:b7:6f:22:27:97:59:4b:79:85:7b:90:77: 26:c8:4e:e4:e9:a5:6b:85:31:4c:e4:4b:51:01:d3: 8a:8a:83:0c:61:45:0c:07:86:3f:da:b2:dc:41:3b: c1:56:c2:79:a9:3c:4f:8c:e9:6e:08:68:01:d3:dd: f1:d6:fb:9a:05:8e:19:27:96:00:0c:d6:98:cf:28: ac:f0:0d:2d:19:01:8d:d1:51:f2:e5:57:97:15:19: a6:25:e3:25:b7:35:76:30:5c:be:1a:3d:57:2c:99: 37:ea:a2:3d:1a:fd:d4:d6:d4:0d:7e:62:42:7b:dd: 97:2a:8c:42:40:f8:c9:88:cf:5b:22:e0:e6:5f:b6: db:a5:ac:25:a8:8b:8d:ec:e8:d5:bd:4e:69:dd:87: 4b:7a:da:af:01:bf:77:c6:e8:97:b1:41:23:5e:28: b6:c8:32:6c:e6:2b:b8:33:e5:6d:35:26:6f:78:8c: 87:70:52:7c:8c:19:94:46:0a:93:a6:c6:1a:0d:cf: 80:39:7b:87:77:f8:e7:31:5a:ab:41:0e:d0:74:5c: 06:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:24:7F:CF:AE:BD:30:37:C1:A4:07:3D:BA:5F:CC:6F:F2:B4:8C:CD X509v3 Authority Key Identifier: keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:82:dd:1b:d2:fd:45:6b:2f:8f:e8:0b:19:68:56:7e:f0:2e: e0:cc:f2:44:ed:7b:e3:1c:0a:cd:d7:fc:3e:41:e6:e9:35:1c: 76:07:43:0e:bc:5e:50:09:9a:2e:c5:88:5c:b7:7d:35:84:05: 15:fd:c3:26:13:30:29:21:04:38:71:be:9d:2d:67:f3:2a:2b: 3a:5c:5d:d4:5b:40:f6:8d:27:e1:42:05:ad:b3:f4:8e:b2:43: 21:a0:e5:cd:47:3d:b9:2f:4f:19:1c:2d:bc:e0:7a:78:ba:c0: 66:e6:90:3b:6a:49:d7:03:e1:41:30:39:96:d6:05:83:f9:cd: cc:64:8e:6c:7b:ad:6b:d1:a2:69:3c:ab:f3:96:2a:f7:80:aa: bf:d0:eb:1d:62:bc:1f:a6:3b:3e:5d:76:2e:a5:af:a6:63:3e: c6:97:60:a5:ea:fd:47:5b:a9:14:81:c4:15:fd:b5:74:01:6e: 8a:64:10:51:d4:4a:9c:e4:24:c5:54:e6:9c:6a:0f:1c:6c:4c: 75:77:45:38:07:c8:32:8f:ed:c2:0b:e9:0a:c3:bd:f2:70:ba: 4e:56:3a:37:a7:3f:de:d9:c6:b1:e6:26:1b:d6:72:1f:0b:64: fd:8b:51:c9:f9:f4:b4:d8:c5:b6:5b:4d:a1:23:eb:33:05:47: 04:b9:f2:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0VnHlFRYy9W7wPcDu5o3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YzM5ZGUyNWZmYTdlYWYwMmIyYTZkOGMyY2Y2ZTJjZWI1 NjJiZjMwHhcNMjUxMjI2MDQwMTEzWhcNMjUxMjI3MDQwMTEzWjAzMTEwLwYDVQQD EygzODI0N2ZjZmFlYmQzMDM3YzFhNDA3M2RiYTVmY2M2ZmYyYjQ4Y2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwNJEHaVBomFCjfkrRVX+KX5lgCP x/Zp1n1UwmG4PmQiTPeKmkb7w11HS/w0Ri23byInl1lLeYV7kHcmyE7k6aVrhTFM 5EtRAdOKioMMYUUMB4Y/2rLcQTvBVsJ5qTxPjOluCGgB093x1vuaBY4ZJ5YADNaY zyis8A0tGQGN0VHy5VeXFRmmJeMltzV2MFy+Gj1XLJk36qI9Gv3U1tQNfmJCe92X KoxCQPjJiM9bIuDmX7bbpawlqIuN7OjVvU5p3YdLetqvAb93xuiXsUEjXii2yDJs 5iu4M+VtNSZveIyHcFJ8jBmURgqTpsYaDc+AOXuHd/jnMVqrQQ7QdFwG1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgkf8+uvTA3waQHPbpfzG/ytIzNMB8GA1UdIwQY MBaAFEjDneJf+n6vArKm2MLPbizrVivzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgt MDM1NWVmMTE1ODljLzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgtMDM1NWVmMTE1ODlj LzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYLdG9L9 RWsvj+gLGWhWfvAu4MzyRO174xwKzdf8PkHm6TUcdgdDDrxeUAmaLsWIXLd9NYQF Ff3DJhMwKSEEOHG+nS1n8yorOlxd1FtA9o0n4UIFrbP0jrJDIaDlzUc9uS9PGRwt vOB6eLrAZuaQO2pJ1wPhQTA5ltYFg/nNzGSObHuta9GiaTyr85Yq94Cqv9DrHWK8 H6Y7Pl12LqWvpmM+xpdgper9R1upFIHEFf21dAFuimQQUdRKnOQkxVTmnGoPHGxM dXdFOAfIMo/twgvpCsO98nC6TlY6N6c/3tnGseYmG9ZyHwtk/YtRyfn0tNjFtltN oSPrMwVHBLnyyw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:23 2025 by rpki-client