This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json) Hash identifier: /VMmdE7mmodlmrhplCLAfYLih7VAifSzsCgeXXSlOfU= Subject key identifier: B3:95:64:0E:C1:DE:2D:BF:29:65:64:D4:D8:1D:10:12:63:3C:C9:B3 Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8 Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8 Certificate serial: 019B0E5BB20D10EFBD9627CE18ED00F3E8CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft Manifest number: 177D Signing time: Thu 11 Dec 2025 17:00:48 +0000 Manifest this update: Thu 11 Dec 2025 17:00:48 +0000 Manifest next update: Fri 12 Dec 2025 17:00:48 +0000 Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=) 2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=) 3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=) 4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: 9pr7bN3deoBCZRdtVeV44x8p/inpHcueIHR+jyKiDRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:b2:0d:10:ef:bd:96:27:ce:18:ed:00:f3:e8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8 Validity Not Before: Dec 11 17:00:48 2025 GMT Not After : Dec 12 17:00:48 2025 GMT Subject: CN=b395640ec1de2dbf296564d4d81d1012633cc9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:46:8d:5a:31:76:d1:66:3e:59:38:52:95: c3:d3:7e:ce:74:44:1e:0f:93:4e:b0:a1:32:59:df: ac:bc:b3:a1:db:42:c8:55:5a:1e:e5:c3:d5:99:ab: 4a:12:50:43:1e:f7:c8:40:72:aa:5a:cf:c8:6a:41: 48:7d:f5:29:64:f1:af:9c:9c:82:84:83:70:02:5d: 3b:59:52:2c:78:27:00:8b:e9:57:db:4f:30:5d:12: 59:47:cc:d8:9f:a7:c4:e8:08:02:cf:90:68:0d:77: a9:58:b7:01:84:e1:fa:f6:c9:1c:41:75:42:f1:0d: 21:52:be:07:12:f8:6e:a0:fb:82:a5:42:a4:71:d1: a5:5a:eb:c3:85:c8:63:ff:01:90:d1:65:31:e6:c6: 31:04:88:a0:6c:50:7c:84:10:30:ce:6a:3e:58:2f: 7a:fb:bf:be:cf:ab:df:ac:a8:a8:b1:e6:0d:a9:5c: da:6c:6d:bf:bd:4f:b7:9c:07:ab:cf:d3:0b:29:87: e6:41:2b:2f:8e:f4:c5:22:b7:fa:e3:84:31:89:c2: 7e:b6:86:88:3a:61:bc:c6:b7:78:a0:ac:7c:27:c5: e4:5d:9c:dd:75:a8:d9:0a:a1:31:7d:67:f3:f6:84: 78:67:09:09:b3:70:91:5b:f6:3b:8c:bd:8a:57:53: de:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:95:64:0E:C1:DE:2D:BF:29:65:64:D4:D8:1D:10:12:63:3C:C9:B3 X509v3 Authority Key Identifier: keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:97:a3:f9:d5:29:73:3b:00:e3:11:dc:a6:14:14:a8:9a:24: 27:50:e2:17:70:66:7c:1b:60:a5:f4:dc:78:61:8f:7a:9d:17: e1:4d:89:4a:44:71:f4:72:f9:32:44:e5:60:d0:6d:fe:cc:a2: c1:bf:6e:41:93:e2:5f:16:f1:88:3d:b2:ee:48:ac:67:43:29: 2f:03:34:1e:e4:ef:ff:70:6e:bc:cc:97:ab:43:6c:e7:a9:f3: a9:c7:93:3d:8d:e5:50:74:8f:19:05:21:f6:a0:19:df:94:db: 3b:b3:a7:ae:1b:16:c0:9d:d2:51:1c:5e:b2:45:ff:9a:ed:f4: d6:55:4f:4b:c3:aa:45:26:4d:05:8c:aa:6a:83:27:f5:62:e4: fc:e0:e6:5a:22:40:c2:16:b5:35:9c:63:3b:6b:fc:73:24:54: c0:7b:25:b3:2b:5d:d9:9f:87:42:5f:a1:02:0b:91:39:db:1e: 82:fc:39:9f:20:18:9d:89:50:e4:31:1e:35:b4:c2:08:11:1f: ed:6e:1c:9c:ba:58:e8:59:e7:c5:48:4c:d4:8f:d7:96:30:af: f3:73:82:57:6a:7a:31:c0:4b:53:1a:a9:99:97:24:b8:97:8e: ac:e4:d7:bd:24:3f:7f:9a:d2:2e:90:e5:12:89:52:ba:0f:91: a0:54:5a:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW7INEO+9lifOGO0A8+jPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTRhNjAxY2EzNWM2YzgzNzZiODlhYWY0NDNiNjNlYTQz OWNkYjgwHhcNMjUxMjExMTcwMDQ4WhcNMjUxMjEyMTcwMDQ4WjAzMTEwLwYDVQQD EyhiMzk1NjQwZWMxZGUyZGJmMjk2NTY0ZDRkODFkMTAxMjYzM2NjOWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+NGjVoxdtFmPlk4UpXD037OdEQe D5NOsKEyWd+svLOh20LIVVoe5cPVmatKElBDHvfIQHKqWs/IakFIffUpZPGvnJyC hINwAl07WVIseCcAi+lX208wXRJZR8zYn6fE6AgCz5BoDXepWLcBhOH69skcQXVC 8Q0hUr4HEvhuoPuCpUKkcdGlWuvDhchj/wGQ0WUx5sYxBIigbFB8hBAwzmo+WC96 +7++z6vfrKioseYNqVzabG2/vU+3nAerz9MLKYfmQSsvjvTFIrf644QxicJ+toaI OmG8xrd4oKx8J8XkXZzddajZCqExfWfz9oR4ZwkJs3CRW/Y7jL2KV1PeTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOVZA7B3i2/KWVk1NgdEBJjPMmzMB8GA1UdIwQY MBaAFLGkpgHKNcbIN2uJqvRDtj6kOc24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAt M2E1NjI4Y2M4MWQ5LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAtM2E1NjI4Y2M4MWQ5 LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZej+dUp czsA4xHcphQUqJokJ1DiF3BmfBtgpfTceGGPep0X4U2JSkRx9HL5MkTlYNBt/syi wb9uQZPiXxbxiD2y7kisZ0MpLwM0HuTv/3BuvMyXq0Ns56nzqceTPY3lUHSPGQUh 9qAZ35TbO7OnrhsWwJ3SURxeskX/mu301lVPS8OqRSZNBYyqaoMn9WLk/ODmWiJA wha1NZxjO2v8cyRUwHslsytd2Z+HQl+hAguROdsegvw5nyAYnYlQ5DEeNbTCCBEf 7W4cnLpY6FnnxUhM1I/XljCv83OCV2p6McBLUxqpmZckuJeOrOTXvSQ/f5rSLpDl EolSug+RoFRagQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:55:52 2025 by rpki-client