This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft File: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft (raw, json) Hash identifier: Gz/GYlamEWIYT1uzOiFRbLPJW5EGTqYL3MCnfGUzqGk= Subject key identifier: 33:DA:BC:86:CB:7B:3E:C6:B5:3D:FE:B5:AD:95:31:6E:5F:16:FB:D7 Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c Certificate serial: 019AF19BA68B51CF90A5A6DA9C68EDA1DBB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft Manifest number: 0C24 Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl (hash: 438gUbHPJ8094XAmVmV+Bpg3z+zWG/MFvGrP7of7Y9Y=) 2: XWgrA6JE6hMs-fYR5JSr732MBIw.roa (hash: +T0dpzBRYum3dH9uf73tvrJYycbYVgdyC2zBV2vtA1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a6:8b:51:cf:90:a5:a6:da:9c:68:ed:a1:db:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=33dabc86cb7b3ec6b53dfeb5ad95316e5f16fbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:8a:18:ad:2b:1c:88:c4:b7:c5:07:9b:35: 2f:05:c3:3b:94:23:d0:fd:2b:89:0d:89:e6:e1:79: 36:53:06:f5:0a:26:13:e6:c3:d5:99:3b:2a:23:f7: 44:a5:f5:65:54:b2:49:58:be:f7:e1:ea:c1:91:7a: c2:57:73:42:c0:78:62:46:e6:eb:a2:3b:74:75:b1: 5d:c2:5f:c8:17:83:83:b7:f1:d8:57:d6:d1:6d:71: b7:2c:5c:bb:10:da:61:63:4f:13:6b:fc:17:17:d9: 5b:a0:0a:ca:c7:79:05:26:9c:9a:e8:a3:46:b2:aa: d4:6c:d3:0a:44:0e:02:4c:f3:15:d3:68:f4:5c:3e: 99:aa:78:33:fc:f4:37:c1:ce:22:4b:e7:5b:82:c3: 4f:49:22:b3:36:e8:81:d0:d4:b6:7d:d9:4d:ab:fe: e9:b5:57:6c:12:a4:87:22:42:16:5f:ce:55:8f:d2: 45:0d:0b:fb:bd:f7:de:33:fc:64:7b:84:67:f0:a6: 93:f0:7c:4f:05:08:f1:0e:33:66:7a:d9:1c:3b:93: db:41:38:5c:21:f2:0a:8f:e1:dc:3e:5b:73:04:7a: 86:54:62:8c:30:96:1e:b7:c9:63:a3:3a:34:3e:39: 98:b0:c4:7f:e9:0e:fb:e0:14:44:6d:f7:7b:6c:15: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DA:BC:86:CB:7B:3E:C6:B5:3D:FE:B5:AD:95:31:6E:5F:16:FB:D7 X509v3 Authority Key Identifier: keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:81:db:e4:c8:17:e5:17:35:62:19:ec:6d:ad:45:24:0a:ff: 78:2d:39:3d:d5:b5:bc:e2:90:fa:fa:f1:31:af:de:2b:ff:15: d2:8c:04:82:53:38:53:83:3d:90:5f:67:2c:4d:0e:af:5e:14: 74:57:8e:94:fd:26:61:e0:57:a9:2e:2d:02:e7:58:5e:ac:ed: dc:e5:b3:32:ff:2f:e8:cc:a7:a8:99:bd:e6:6c:9e:45:65:d8: fe:6f:21:39:68:8a:a8:75:f7:dc:1e:e6:c7:9b:fe:ea:df:79: 6c:9f:1e:b2:75:74:a3:0f:9c:46:57:67:1f:ae:bf:36:14:9d: 8c:7f:92:f0:58:2d:6e:d0:91:c3:51:44:6d:0d:06:72:ef:ca: 22:c7:0c:9e:b4:7f:16:29:ae:04:e4:6d:8d:50:75:a4:d4:9f: 1f:1c:d7:5f:81:cc:4b:0a:a6:a0:f4:ad:56:55:96:7b:ae:35: 56:00:91:1d:92:1a:20:8a:9b:1b:fa:94:5c:30:41:90:19:f8: ba:cc:06:4c:e7:2f:e4:78:4f:09:65:0b:7d:39:ae:25:ff:a6: 3c:17:35:5d:47:66:b8:45:1f:d7:4d:68:f5:53:56:54:db:1e: 71:96:66:d0:b4:19:bf:db:70:0f:35:37:e2:c6:32:a0:44:0c: 95:bf:65:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6aLUc+QpabanGjtodu0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNjNkYzY3NTNhOGNiZDc0Yjc0NDUyYzE1MzZmMzdkOWM0 ZGM3MGMwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD EygzM2RhYmM4NmNiN2IzZWM2YjUzZGZlYjVhZDk1MzE2ZTVmMTZmYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mSKGK0rHIjEt8UHmzUvBcM7lCPQ /SuJDYnm4Xk2Uwb1CiYT5sPVmTsqI/dEpfVlVLJJWL734erBkXrCV3NCwHhiRubr ojt0dbFdwl/IF4ODt/HYV9bRbXG3LFy7ENphY08Ta/wXF9lboArKx3kFJpya6KNG sqrUbNMKRA4CTPMV02j0XD6Zqngz/PQ3wc4iS+dbgsNPSSKzNuiB0NS2fdlNq/7p tVdsEqSHIkIWX85Vj9JFDQv7vffeM/xke4Rn8KaT8HxPBQjxDjNmetkcO5PbQThc IfIKj+HcPltzBHqGVGKMMJYet8ljozo0PjmYsMR/6Q774BREbfd7bBVfswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPavIbLez7GtT3+ta2VMW5fFvvXMB8GA1UdIwQY MBaAFEpj3GdTqMvXS3RFLBU2832cTccMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAt ZTM0MWIwZjkxNWQzLzEvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAtZTM0MWIwZjkxNWQz LzEvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYHb5MgX 5Rc1Yhnsba1FJAr/eC05PdW1vOKQ+vrxMa/eK/8V0owEglM4U4M9kF9nLE0Or14U dFeOlP0mYeBXqS4tAudYXqzt3OWzMv8v6MynqJm95myeRWXY/m8hOWiKqHX33B7m x5v+6t95bJ8esnV0ow+cRldnH66/NhSdjH+S8FgtbtCRw1FEbQ0Gcu/KIscMnrR/ FimuBORtjVB1pNSfHxzXX4HMSwqmoPStVlWWe641VgCRHZIaIIqbG/qUXDBBkBn4 uswGTOcv5HhPCWULfTmuJf+mPBc1XUdmuEUf101o9VNWVNsecZZm0LQZv9twDzU3 4sYyoEQMlb9lwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:27:26 2025 by rpki-client