This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft File: smbm5NXff4olZUFEdV172ZLnNTk.mft (raw, json) Hash identifier: Fb/m8WxbZo4N5EezfqVdCVyAoM0pRfkz0iFB9ZCEgr8= Subject key identifier: 53:33:60:E6:41:57:6E:2D:BA:48:AE:24:6F:E8:F4:1B:71:71:91:6C Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39 Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539 Certificate serial: 019AF12E8D9B418C0978E12053552520FCB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft Manifest number: 0A6A Signing time: Sat 06 Dec 2025 01:02:31 +0000 Manifest this update: Sat 06 Dec 2025 01:02:31 +0000 Manifest next update: Sun 07 Dec 2025 01:02:31 +0000 Files and hashes: 1: 4UxBywVcvcMsb-HDJGoMszIr0uA.roa (hash: CPNjg2b32CAKEDe5pmcVPP+MsVRB7Gy+EYi43k44UBQ=) 2: smbm5NXff4olZUFEdV172ZLnNTk.crl (hash: NjAirmgsGB4mOT/AxKmW/Tyg4w8laFRBiF6KZXmbJRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:8d:9b:41:8c:09:78:e1:20:53:55:25:20:fc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539 Validity Not Before: Dec 6 01:02:31 2025 GMT Not After : Dec 7 01:02:31 2025 GMT Subject: CN=533360e641576e2dba48ae246fe8f41b7171916c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:f6:91:48:ee:87:7b:12:67:e8:2b:c3:f6: 86:a1:21:45:8c:a6:ab:b8:4f:b0:81:33:22:36:fa: 47:45:e0:26:c6:c0:3f:a6:8e:61:cf:33:05:75:0e: 46:f2:c6:24:1a:7f:3c:da:11:d4:cc:76:6b:bf:41: f1:3f:58:be:93:d3:34:0e:43:7c:54:cd:f7:b4:56: 31:c5:ec:c4:20:49:75:0a:9f:3d:41:01:54:56:ec: 4e:22:e6:06:5a:7b:54:fa:2f:b7:b0:90:d9:76:24: b5:74:8a:2e:f3:1d:45:fc:09:86:8e:6a:15:d1:b6: b8:fe:5f:70:21:ce:1e:e9:1f:91:11:ca:5d:89:4f: 16:5e:7e:75:d9:75:6e:44:5d:59:e4:d6:83:1f:f0: b9:99:28:49:1f:b2:1e:27:9b:3e:74:d9:2a:f9:f3: 64:e0:9d:df:73:14:d2:3f:9e:85:4f:20:4b:72:f0: f9:88:55:0e:35:b7:bb:45:03:64:d9:f0:af:f7:40: c7:72:7c:d8:19:41:42:d6:ae:9f:0f:f5:e9:42:41: 85:4f:8d:c3:9e:a7:17:0e:99:37:9c:b4:6a:43:ba: 70:68:42:a2:17:0e:12:6a:be:bb:77:66:e2:38:7d: 7f:2f:65:8b:37:1b:33:6e:d7:72:5a:f0:ee:aa:de: 82:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:33:60:E6:41:57:6E:2D:BA:48:AE:24:6F:E8:F4:1B:71:71:91:6C X509v3 Authority Key Identifier: keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ce:aa:97:6c:4b:c2:33:24:ba:6b:f5:e7:0b:1f:95:51:05: 1a:c8:e1:de:eb:a2:a6:e8:42:69:ce:85:0a:7e:6d:e1:71:4b: fc:6e:5b:67:7d:32:8d:0b:fe:6d:88:b5:26:90:1c:95:4d:ea: 90:ce:85:6c:be:92:af:9a:51:1c:97:a8:d7:0e:5f:cd:1a:a8: c6:85:b1:1f:d5:32:5e:e3:3f:0c:33:11:fa:7e:56:9f:56:51: 72:c8:19:34:1b:cb:1b:f1:6b:73:0b:2f:04:c8:9a:a8:65:02: 74:9f:b3:a8:dc:68:a9:8e:10:64:2f:6e:a4:57:71:88:5d:fb: 3d:7a:44:74:a2:80:0c:e6:16:da:40:af:88:d5:88:6a:38:ee: 47:e8:a0:8d:23:65:6d:08:d5:f9:23:55:ef:cc:56:22:02:91: f9:17:a0:ee:56:9d:33:09:56:d1:a6:08:18:f8:af:cc:66:03: 76:44:5d:50:8b:ed:6d:2b:ef:bf:e9:e5:8e:22:06:0a:95:f4: a3:5c:fa:3a:7e:87:52:ef:3e:90:e8:04:4f:8d:4f:22:d7:9d: e8:e3:c7:63:32:6a:8b:e6:17:72:4b:89:56:f5:bc:da:ce:d5: e6:5f:20:7d:6d:10:a3:1b:9e:f2:4e:48:c5:7b:c6:17:2a:da: 1b:22:b7:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLo2bQYwJeOEgU1UlIPy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNjZlNmU0ZDVkZjdmOGEyNTY1NDE0NDc1NWQ3YmQ5OTJl NzM1MzkwHhcNMjUxMjA2MDEwMjMxWhcNMjUxMjA3MDEwMjMxWjAzMTEwLwYDVQQD Eyg1MzMzNjBlNjQxNTc2ZTJkYmE0OGFlMjQ2ZmU4ZjQxYjcxNzE5MTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscf2kUjuh3sSZ+grw/aGoSFFjKar uE+wgTMiNvpHReAmxsA/po5hzzMFdQ5G8sYkGn882hHUzHZrv0HxP1i+k9M0DkN8 VM33tFYxxezEIEl1Cp89QQFUVuxOIuYGWntU+i+3sJDZdiS1dIou8x1F/AmGjmoV 0ba4/l9wIc4e6R+REcpdiU8WXn512XVuRF1Z5NaDH/C5mShJH7IeJ5s+dNkq+fNk 4J3fcxTSP56FTyBLcvD5iFUONbe7RQNk2fCv90DHcnzYGUFC1q6fD/XpQkGFT43D nqcXDpk3nLRqQ7pwaEKiFw4Sar67d2biOH1/L2WLNxszbtdyWvDuqt6C/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMzYOZBV24tukiuJG/o9BtxcZFsMB8GA1UdIwQY MBaAFLJm5uTV33+KJWVBRHVde9mS5zU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc21ibTVOWGZmNG9sWlVGRWRWMTcyWkxuTlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lYzg4MDEtMGE3Yy00ODdlLWExMDMt NTI1ZDdlMjJjNzg4LzEvc21ibTVOWGZmNG9sWlVGRWRWMTcyWkxuTlRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lYzg4MDEtMGE3Yy00ODdlLWExMDMtNTI1ZDdlMjJjNzg4 LzEvc21ibTVOWGZmNG9sWlVGRWRWMTcyWkxuTlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAas6ql2xL wjMkumv15wsflVEFGsjh3uuipuhCac6FCn5t4XFL/G5bZ30yjQv+bYi1JpAclU3q kM6FbL6Sr5pRHJeo1w5fzRqoxoWxH9UyXuM/DDMR+n5Wn1ZRcsgZNBvLG/Frcwsv BMiaqGUCdJ+zqNxoqY4QZC9upFdxiF37PXpEdKKADOYW2kCviNWIajjuR+igjSNl bQjV+SNV78xWIgKR+Reg7ladMwlW0aYIGPivzGYDdkRdUIvtbSvvv+nljiIGCpX0 o1z6On6HUu8+kOgET41PIted6OPHYzJqi+YXckuJVvW82s7V5l8gfW0Qoxue8k5I xXvGFyraGyK3SQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:14 2025 by rpki-client