This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json) Hash identifier: wCIv2PRHhxd+Z9lytu0yphGxWXs0vEOKksJKIEKNubg= Subject key identifier: 94:58:B9:D3:2A:7B:52:B8:B2:85:D4:62:A0:E6:15:7E:A9:79:20:AC Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42 Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42 Certificate serial: 019AF19B33E8C07AA1083666EF6F71409F7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft Manifest number: 1219 Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: F_5jyI70I8rVjTf2ep027mY2RmU.roa (hash: P/CUUf/qaBdESN8cQx3ZzCN3CEChdcz8YXHGB8DZwPM=) 2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: S676MOyRByi/NN2HnwunxDlR4W9lRBiTsUqU6WjRGhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:33:e8:c0:7a:a1:08:36:66:ef:6f:71:40:9f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42 Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=9458b9d32a7b52b8b285d462a0e6157ea97920ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f2:48:89:59:30:83:a1:22:f9:ea:29:60:7a: f8:30:e8:94:69:fb:57:cc:bc:36:2d:e4:8a:08:34: 40:df:6e:44:e5:6a:2e:5c:fd:31:48:d2:39:41:b2: 46:98:d3:93:9f:e4:21:84:7a:ef:67:b2:75:21:d8: 1a:e8:76:7b:2c:96:ca:66:0a:07:6f:c2:e3:1d:71: 71:2f:54:6b:42:3e:ff:34:98:5c:e6:aa:40:c1:a1: f6:70:20:12:df:30:c7:94:8d:41:f6:0e:9a:d5:65: f9:89:25:aa:b0:ac:6d:38:1c:97:47:a5:a2:13:21: 1f:ef:08:1a:58:aa:95:55:73:c8:e9:25:f6:f8:d9: d2:8b:b2:83:58:e0:64:09:fa:13:52:51:fe:62:b3: 36:55:c0:29:30:60:c8:ec:dc:d0:07:a0:0f:36:96: e6:b6:41:74:56:3e:c1:db:4d:12:fd:a6:d0:8d:bf: e6:0e:75:aa:2f:5d:1f:ed:1b:c0:bf:8c:45:f5:34: d9:af:2e:a7:d4:a8:4b:3b:cf:34:68:96:a0:00:3a: ab:24:a3:b4:8f:88:44:91:ee:4f:10:f7:05:d3:7e: e5:8b:0a:df:2d:38:42:4a:49:b1:0d:6d:f5:b0:7f: b6:7b:13:cd:b0:62:29:d1:61:d9:55:11:4c:32:7e: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:58:B9:D3:2A:7B:52:B8:B2:85:D4:62:A0:E6:15:7E:A9:79:20:AC X509v3 Authority Key Identifier: keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:63:4c:b9:8f:88:fd:91:50:ff:9c:48:86:d0:39:8a:f9:4c: 8b:76:e7:03:fa:ce:c4:11:18:9d:03:52:ca:4b:19:ab:cc:b6: 3f:f4:75:37:9c:92:4f:2d:d8:f5:08:4f:ff:92:e9:04:31:f4: be:37:19:a8:75:dd:c9:34:7f:5d:3f:5b:a1:af:bb:6c:fb:61: 20:f9:27:80:51:dc:6e:19:4d:70:1d:ef:d1:05:6f:34:91:b5: 30:05:3b:38:2a:9f:60:f6:88:3c:ea:d8:48:31:9a:27:52:72: 84:e7:bc:14:c4:a0:34:73:31:e0:bd:fc:4d:1a:84:9c:dd:37: 71:a8:b2:51:f8:8d:41:a0:db:4f:52:42:0b:db:0a:31:84:bb: e3:10:a9:a5:3f:75:96:00:91:7b:f4:6e:17:ee:3a:a6:75:aa: b8:31:5d:43:1e:58:a6:b7:45:b4:5b:98:87:ff:da:20:73:30: ed:d7:9e:47:98:6b:1e:94:05:44:ee:71:ba:05:cf:90:09:e0: 97:05:54:83:35:46:24:62:7a:16:1f:28:b1:5a:bf:df:30:69: 11:7d:08:61:23:81:60:0b:45:a2:a5:65:08:d0:e6:55:97:52: 8e:4e:da:c7:eb:14:6a:f8:9b:82:bc:35:0f:8d:67:0d:fd:63: e9:a8:2b:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzPowHqhCDZm729xQJ96MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNmJiNDMzM2VmZTllMTRjNDgzMWIwNTgyMTQxNmU1YzU1 YmRmNDIwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD Eyg5NDU4YjlkMzJhN2I1MmI4YjI4NWQ0NjJhMGU2MTU3ZWE5NzkyMGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfJIiVkwg6Ei+eopYHr4MOiUaftX zLw2LeSKCDRA325E5WouXP0xSNI5QbJGmNOTn+QhhHrvZ7J1Idga6HZ7LJbKZgoH b8LjHXFxL1RrQj7/NJhc5qpAwaH2cCAS3zDHlI1B9g6a1WX5iSWqsKxtOByXR6Wi EyEf7wgaWKqVVXPI6SX2+NnSi7KDWOBkCfoTUlH+YrM2VcApMGDI7NzQB6APNpbm tkF0Vj7B200S/abQjb/mDnWqL10f7RvAv4xF9TTZry6n1KhLO880aJagADqrJKO0 j4hEke5PEPcF037liwrfLThCSkmxDW31sH+2exPNsGIp0WHZVRFMMn5fJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRYudMqe1K4soXUYqDmFX6peSCsMB8GA1UdIwQY MBaAFLJrtDM+/p4UxIMbBYIUFuXFW99CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMt NDQ2YTg5MTNkNGI4LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMtNDQ2YTg5MTNkNGI4 LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWNMuY+I /ZFQ/5xIhtA5ivlMi3bnA/rOxBEYnQNSyksZq8y2P/R1N5ySTy3Y9QhP/5LpBDH0 vjcZqHXdyTR/XT9boa+7bPthIPkngFHcbhlNcB3v0QVvNJG1MAU7OCqfYPaIPOrY SDGaJ1JyhOe8FMSgNHMx4L38TRqEnN03caiyUfiNQaDbT1JCC9sKMYS74xCppT91 lgCRe/RuF+46pnWquDFdQx5YprdFtFuYh//aIHMw7deeR5hrHpQFRO5xugXPkAng lwVUgzVGJGJ6Fh8osVq/3zBpEX0IYSOBYAtFoqVlCNDmVZdSjk7ax+sUavibgrw1 D41nDf1j6agr+g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:55 2025 by rpki-client