This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json) Hash identifier: +m0ghGuUm/zax6jalBNVQr49PP1JEvXWd3Spoi91BGo= Subject key identifier: 53:67:3A:79:4B:3F:3F:5B:EA:DA:BB:37:66:36:05:5B:9C:11:F4:53 Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59 Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059 Certificate serial: 019AF23FCFB0A5EEFF28B952F0A35D933E3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:59 +0000 Manifest this update: Sat 06 Dec 2025 06:00:59 +0000 Manifest next update: Sun 07 Dec 2025 06:00:59 +0000 Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: N4SQLJWN6+J5fTgy+WulkORvr08DwKYF6VgiWJXC0XI=) 2: ZCwrk3DUvn-uZjo3WgvhoOWpHv0.roa (hash: AtdbQHHLI0H407seskZvbBq2HBK/6vTqf2YFUILBHxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cf:b0:a5:ee:ff:28:b9:52:f0:a3:5d:93:3e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059 Validity Not Before: Dec 6 06:00:59 2025 GMT Not After : Dec 7 06:00:59 2025 GMT Subject: CN=53673a794b3f3f5beadabb376636055b9c11f453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:09:76:ae:6d:03:39:89:07:35:34:e7:40:43: 6e:17:63:35:5f:4e:56:b0:c5:df:67:e8:23:45:3c: 95:ca:59:b4:9b:2c:6e:3e:a8:dd:87:25:a7:d6:b8: f2:d0:93:c3:f6:ab:ee:f0:bc:a6:bc:3b:bf:6b:8d: 53:e0:5a:c7:a9:de:21:3c:6f:fe:c3:0f:41:bd:ff: 88:28:9a:41:93:de:a4:09:17:f5:23:95:62:07:51: b1:70:02:ec:68:ec:27:e5:be:40:dc:1b:66:5f:0c: 0f:75:21:b4:31:88:b7:5f:b4:f7:28:63:0e:6a:63: 80:91:fa:f2:9b:ab:46:c3:94:ed:dd:3d:0f:12:1e: 68:df:42:b8:83:66:12:e9:14:59:2b:10:ae:f2:68: 15:83:ab:6e:71:28:61:e1:d7:e6:92:6d:c3:5a:3a: e4:56:49:e0:9a:d1:09:29:bd:94:a9:06:1c:99:3f: 59:a4:cb:db:5d:ed:f8:19:8d:7f:9b:f4:ce:6b:37: aa:44:eb:e1:0d:ca:31:09:e6:24:42:7f:e2:79:18: bc:06:7e:00:8f:63:6a:c4:a3:96:d9:92:e4:7f:40: d2:7c:e9:a4:74:ec:23:c8:f1:61:13:5b:d0:bb:4b: 81:78:03:10:3f:b1:ec:95:d0:0c:2c:ec:5a:d0:46: 91:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:67:3A:79:4B:3F:3F:5B:EA:DA:BB:37:66:36:05:5B:9C:11:F4:53 X509v3 Authority Key Identifier: keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c1:c0:a9:81:4b:9d:97:1d:76:a0:c3:48:a2:26:e3:03:d4: a6:42:e7:79:aa:93:a5:30:89:91:f8:4d:7e:d6:03:17:a6:4f: 2b:c7:6d:4b:0b:4f:55:36:1f:ee:29:6d:09:85:30:37:d0:83: f0:3c:5a:63:8f:fe:54:87:cb:72:89:4d:87:d6:3c:0a:a5:62: 85:0a:88:50:9a:08:80:af:94:e4:1c:0a:6e:3e:9b:fd:7a:e2: 51:55:93:25:d4:dc:fc:ca:0b:4e:00:df:83:a0:b3:ae:62:ba: 5d:36:ef:ac:5e:ad:f4:14:fe:dd:98:00:0c:22:f4:38:a0:49: c0:62:0c:82:32:c2:8a:06:60:b8:1a:64:f4:89:62:44:13:46: ac:0c:99:6e:42:a9:93:13:ca:c3:cb:1a:4b:26:a2:d2:af:8e: 2a:4a:ae:55:58:d4:c5:31:67:de:ae:83:d6:43:00:c7:59:cb: f4:25:68:ed:f3:7c:d0:31:b5:bd:22:4f:c7:a4:49:1c:b2:8a: 9d:10:15:06:90:11:4c:ac:f3:66:49:2a:f2:e5:9a:93:f0:01: 47:75:6e:d6:2a:33:de:f6:8d:00:17:13:1d:27:1f:ae:74:85: 39:7a:6c:e6:e8:3b:4e:64:4e:10:03:f0:7f:d2:2e:c9:c3:f2: 8c:a4:b5:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8+wpe7/KLlS8KNdkz48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjM3NmNlOTIwODdlNGM3Y2U1MzY2ODY1Mzc3NjllMmNj MzQwNTkwHhcNMjUxMjA2MDYwMDU5WhcNMjUxMjA3MDYwMDU5WjAzMTEwLwYDVQQD Eyg1MzY3M2E3OTRiM2YzZjViZWFkYWJiMzc2NjM2MDU1YjljMTFmNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwl2rm0DOYkHNTTnQENuF2M1X05W sMXfZ+gjRTyVylm0myxuPqjdhyWn1rjy0JPD9qvu8LymvDu/a41T4FrHqd4hPG/+ ww9Bvf+IKJpBk96kCRf1I5ViB1GxcALsaOwn5b5A3BtmXwwPdSG0MYi3X7T3KGMO amOAkfrym6tGw5Tt3T0PEh5o30K4g2YS6RRZKxCu8mgVg6tucShh4dfmkm3DWjrk VkngmtEJKb2UqQYcmT9ZpMvbXe34GY1/m/TOazeqROvhDcoxCeYkQn/ieRi8Bn4A j2NqxKOW2ZLkf0DSfOmkdOwjyPFhE1vQu0uBeAMQP7HsldAMLOxa0EaRdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNnOnlLPz9b6tq7N2Y2BVucEfRTMB8GA1UdIwQY MBaAFEpjds6SCH5MfOU2aGU3dp4sw0BZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83Y2Y0MmUtMmFlOC00ZjEzLWEwYzQt NGUxZmI3NmM4NDdhLzEvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83Y2Y0MmUtMmFlOC00ZjEzLWEwYzQtNGUxZmI3NmM4NDdh LzEvU21OMnpwSUlma3g4NVRab1pUZDJuaXpEUUZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsHAqYFL nZcddqDDSKIm4wPUpkLneaqTpTCJkfhNftYDF6ZPK8dtSwtPVTYf7iltCYUwN9CD 8DxaY4/+VIfLcolNh9Y8CqVihQqIUJoIgK+U5BwKbj6b/XriUVWTJdTc/MoLTgDf g6CzrmK6XTbvrF6t9BT+3ZgADCL0OKBJwGIMgjLCigZguBpk9IliRBNGrAyZbkKp kxPKw8saSyai0q+OKkquVVjUxTFn3q6D1kMAx1nL9CVo7fN80DG1vSJPx6RJHLKK nRAVBpARTKzzZkkq8uWak/ABR3Vu1ioz3vaNABcTHScfrnSFOXps5ug7TmROEAPw f9IuycPyjKS16A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:04 2025 by rpki-client