This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json) Hash identifier: 7Vse0QrKRPg5s3mgIXt8wNXOTDxRLZsWuKNRgwClSPs= Subject key identifier: 4B:FE:B6:06:A0:67:44:1C:4B:15:16:DB:1F:41:18:2C:33:A6:64:04 Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19 Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19 Certificate serial: 019AF23F962DF0DF383DCDCFC56C7C91DE0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft Manifest number: 0DF3 Signing time: Sat 06 Dec 2025 06:00:44 +0000 Manifest this update: Sat 06 Dec 2025 06:00:44 +0000 Manifest next update: Sun 07 Dec 2025 06:00:44 +0000 Files and hashes: 1: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (hash: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=) 2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: jd77/MlCBmMtUdP0CPbCEnXEt9EgOSRcAqps89Lb4a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:96:2d:f0:df:38:3d:cd:cf:c5:6c:7c:91:de:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19 Validity Not Before: Dec 6 06:00:44 2025 GMT Not After : Dec 7 06:00:44 2025 GMT Subject: CN=4bfeb606a067441c4b1516db1f41182c33a66404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:0c:b3:56:e2:16:fa:4c:0b:9b:e8:84:0e: f3:76:35:4c:ae:42:dd:86:44:d5:57:20:c8:c1:e4: a4:b1:e7:69:70:50:2b:2a:ef:5e:ca:39:c5:d2:1f: b1:11:91:ca:cc:b4:c7:1e:32:c2:b9:1b:14:50:b2: 56:28:83:76:b6:df:4f:fc:d8:fd:be:30:83:49:6d: 3e:4e:89:be:08:22:b3:f8:ec:61:fc:3c:23:db:0a: 79:48:ad:6f:d7:00:84:22:bd:4e:8b:46:ea:14:51: 8f:6f:29:fd:11:2f:34:df:97:65:d5:cc:49:a6:88: 77:0d:06:83:c8:b8:83:67:b3:60:f2:73:4c:41:ac: 1d:0b:f6:03:fb:91:03:3e:55:f8:2f:a8:ee:96:39: b8:ca:2e:a4:f9:f4:48:64:cb:b1:de:7e:af:b1:45: 6c:a3:fa:9d:39:a4:30:74:57:fb:bc:02:fe:18:51: f3:d4:01:2c:d0:ec:98:3c:26:57:34:a8:c7:2d:22: 34:83:30:6e:9f:14:51:80:ef:62:0a:7d:89:39:ce: 2c:c9:ec:f5:32:d1:7d:a4:9d:e4:79:34:37:74:eb: d6:f8:59:69:f2:11:bd:54:31:63:33:8b:3a:8e:ef: 72:0e:73:c3:dd:6a:61:83:f2:58:70:18:8e:b8:cf: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FE:B6:06:A0:67:44:1C:4B:15:16:DB:1F:41:18:2C:33:A6:64:04 X509v3 Authority Key Identifier: keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e8:c5:4f:48:69:24:d0:8f:8d:73:1f:fa:a7:65:97:a9:01: 20:4f:33:a3:24:e0:ff:be:7a:7f:00:a7:fa:20:91:e8:96:ce: 09:da:17:5c:76:62:ad:01:2b:86:ab:f7:0f:c1:d2:05:c2:12: b3:f7:ac:36:c2:c1:fa:6e:58:fa:3e:43:ba:79:3f:c9:ce:78: 49:e1:08:ab:70:12:5b:bf:9a:72:2d:34:27:4f:1b:c9:5e:8f: f7:60:88:62:a7:9a:88:5e:ca:c0:de:bd:fc:a5:fc:f0:d0:27: e7:5f:94:2f:c7:70:12:01:8a:f5:bc:82:f5:dd:6d:51:79:22: 6f:6b:97:66:bd:3e:99:e2:76:b9:10:eb:5e:cb:a0:0d:af:99: 08:c1:57:19:bc:3a:09:0d:75:c2:ec:12:86:d8:03:72:a7:53: b8:10:36:d8:0d:a1:c5:08:89:db:9a:a7:65:d1:a0:fd:42:47: fb:f8:85:d6:5c:c0:be:37:3d:6b:3a:e0:fb:81:07:7c:47:8d: 34:d7:7e:44:4b:20:fb:90:89:2f:03:e8:ae:3e:34:1e:24:17: 94:ba:20:cf:17:10:be:e1:4d:53:82:c9:00:2f:ea:63:51:ed: a5:d5:56:09:51:37:42:2b:46:39:6e:17:f4:52:c1:0b:ed:88: f4:33:a7:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5Yt8N84Pc3PxWx8kd4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzk5Yjk1MWM2YTZmNmFkY2M4NjhkODg1YTk0MGFkZjAw NTFhMTkwHhcNMjUxMjA2MDYwMDQ0WhcNMjUxMjA3MDYwMDQ0WjAzMTEwLwYDVQQD Eyg0YmZlYjYwNmEwNjc0NDFjNGIxNTE2ZGIxZjQxMTgyYzMzYTY2NDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSQMs1biFvpMC5vohA7zdjVMrkLd hkTVVyDIweSksedpcFArKu9eyjnF0h+xEZHKzLTHHjLCuRsUULJWKIN2tt9P/Nj9 vjCDSW0+Tom+CCKz+Oxh/Dwj2wp5SK1v1wCEIr1Oi0bqFFGPbyn9ES8035dl1cxJ poh3DQaDyLiDZ7Ng8nNMQawdC/YD+5EDPlX4L6juljm4yi6k+fRIZMux3n6vsUVs o/qdOaQwdFf7vAL+GFHz1AEs0OyYPCZXNKjHLSI0gzBunxRRgO9iCn2JOc4syez1 MtF9pJ3keTQ3dOvW+Flp8hG9VDFjM4s6ju9yDnPD3Wphg/JYcBiOuM8+VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv+tgagZ0QcSxUW2x9BGCwzpmQEMB8GA1UdIwQY MBaAFLDJm5Ucam9q3Mho2IWpQK3wBRoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMt M2U2OTU2ZWQyYzZhLzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMtM2U2OTU2ZWQyYzZh LzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVejFT0hp JNCPjXMf+qdll6kBIE8zoyTg/756fwCn+iCR6JbOCdoXXHZirQErhqv3D8HSBcIS s/esNsLB+m5Y+j5Dunk/yc54SeEIq3ASW7+aci00J08byV6P92CIYqeaiF7KwN69 /KX88NAn51+UL8dwEgGK9byC9d1tUXkib2uXZr0+meJ2uRDrXsugDa+ZCMFXGbw6 CQ11wuwShtgDcqdTuBA22A2hxQiJ25qnZdGg/UJH+/iF1lzAvjc9azrg+4EHfEeN NNd+REsg+5CJLwPorj40HiQXlLogzxcQvuFNU4LJAC/qY1HtpdVWCVE3QitGOW4X 9FLBC+2I9DOn/w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:28 2025 by rpki-client