This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft File: Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json) Hash identifier: 0RRGvUS9r1fc3MfqNhhwyVuHDvB1pI2vKKDlyEnBFh8= Subject key identifier: 29:3D:42:A7:27:89:6E:3C:32:9F:76:A5:96:B6:78:CD:D9:E1:59:E1 Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D Certificate issuer: /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d Certificate serial: 019B2BF85419295DA13D517B9FDBED4BCC8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 11:00:53 +0000 Manifest this update: Wed 17 Dec 2025 11:00:53 +0000 Manifest next update: Thu 18 Dec 2025 11:00:53 +0000 Files and hashes: 1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: tUQJrDztIivktKEUHsybAyGCtnbJAhtJU0i3Sa0nisQ=) 2: ukp1qSkbacWgh99iGDLbhVTGpfE.roa (hash: VZyI94Eyjd6/U3vi8uEiKE4SlR4D8n4H4v7qeg38d2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:54:19:29:5d:a1:3d:51:7b:9f:db:ed:4b:cc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d Validity Not Before: Dec 17 11:00:53 2025 GMT Not After : Dec 18 11:00:53 2025 GMT Subject: CN=293d42a727896e3c329f76a596b678cdd9e159e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:6e:a5:4d:c7:2f:22:4c:08:23:c9:96:58: fe:32:23:16:61:4a:40:db:13:63:f4:d8:8a:ff:12: cb:03:2a:e1:98:7b:2d:7e:2d:ed:84:90:d6:7a:69: 4d:7a:bb:ec:b7:1e:d3:de:c1:24:ca:9b:1e:58:9d: 98:09:d9:e1:18:66:7b:f5:e5:4c:52:0e:85:20:45: 87:02:a0:3c:71:2f:78:2f:86:d5:50:be:a8:ba:ad: c6:82:f7:16:27:7e:db:bc:8c:5e:f2:8e:20:d6:2d: 86:f1:11:05:44:85:32:f2:cf:d8:c0:e0:06:60:94: 50:24:25:57:26:b6:89:ba:6e:ee:02:e1:1a:fb:65: d1:2b:35:a9:70:2e:61:02:d8:33:36:a4:c7:ed:5f: ec:9a:bf:07:98:0f:84:bc:58:e8:d2:89:9a:43:f8: 10:bf:72:97:0e:69:4e:12:6a:29:70:01:4d:40:f7: 5c:82:40:85:d6:4f:d8:8e:2f:b3:a2:36:c0:55:75: 0b:68:e8:d4:1c:36:1d:5a:67:57:8c:fe:34:73:37: 40:f0:70:93:60:24:b3:d9:37:d9:28:fd:3d:d4:63: 27:4d:0b:a9:57:89:8b:82:4f:46:11:e2:54:d9:bb: 16:f8:75:75:96:aa:97:d8:2c:b3:76:a4:79:83:1a: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3D:42:A7:27:89:6E:3C:32:9F:76:A5:96:B6:78:CD:D9:E1:59:E1 X509v3 Authority Key Identifier: keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f2:49:04:9a:eb:fc:9b:90:97:20:f2:a8:a9:aa:8e:f7:a2: 61:60:30:86:fd:60:7f:74:36:96:2a:0a:b1:d9:32:12:ed:38: 19:01:0d:9a:59:05:e1:2d:62:3d:6f:e0:3d:02:b6:61:aa:16: 96:bd:23:3d:ec:c3:25:15:4e:37:76:48:f8:1f:db:59:58:b9: 52:f8:76:06:11:9c:26:cf:6c:f0:76:1e:e7:2f:07:f5:34:c8: bd:1f:7f:f7:20:cf:16:2f:25:90:cf:b4:d2:d9:df:17:e4:3a: e6:06:df:27:5c:f0:40:92:19:bd:87:6f:17:e1:7b:ea:4b:53: 1d:7b:0f:d8:a3:53:63:f3:66:ea:32:ef:d3:26:a1:8d:5a:d8: a0:8e:31:42:8b:0b:73:6a:ff:4f:af:f1:31:e5:11:61:86:0a: c1:63:56:04:5d:29:e2:e1:17:ec:0e:13:75:29:0f:c7:0a:97: 73:08:b9:b4:5e:f6:b7:7f:ea:78:fb:ab:16:5c:f0:d2:7d:0a: dc:cb:ca:9c:c6:06:9d:8a:f2:07:12:cf:d8:45:9a:5a:30:0f: 0e:ea:38:be:0a:76:cd:25:05:d6:1c:a6:bc:5f:3a:b3:5e:c4: c6:da:80:86:98:bc:3b:ab:13:56:eb:fa:f5:a0:d0:21:8c:b9: b5:0f:cc:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+FQZKV2hPVF7n9vtS8yPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmYxZTAxYWYyNGQ3OTI0OTdkNzdlZDFmNzk5MGFlM2E2 MTI5MGQwHhcNMjUxMjE3MTEwMDUzWhcNMjUxMjE4MTEwMDUzWjAzMTEwLwYDVQQD EygyOTNkNDJhNzI3ODk2ZTNjMzI5Zjc2YTU5NmI2NzhjZGQ5ZTE1OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+RupU3HLyJMCCPJllj+MiMWYUpA 2xNj9NiK/xLLAyrhmHstfi3thJDWemlNervstx7T3sEkypseWJ2YCdnhGGZ79eVM Ug6FIEWHAqA8cS94L4bVUL6ouq3GgvcWJ37bvIxe8o4g1i2G8REFRIUy8s/YwOAG YJRQJCVXJraJum7uAuEa+2XRKzWpcC5hAtgzNqTH7V/smr8HmA+EvFjo0omaQ/gQ v3KXDmlOEmopcAFNQPdcgkCF1k/Yji+zojbAVXULaOjUHDYdWmdXjP40czdA8HCT YCSz2TfZKP091GMnTQupV4mLgk9GEeJU2bsW+HV1lqqX2CyzdqR5gxotSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCk9QqcniW48Mp92pZa2eM3Z4VnhMB8GA1UdIwQY MBaAFEpvHgGvJNeSSX137R95kK46YSkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQt MDRkMzYyYTI4NThkLzEvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mYzFhZGMtY2NkOC00YWE2LWI1NGQtMDRkMzYyYTI4NThk LzEvU204ZUFhOGsxNUpKZlhmdEgzbVFyanBoS1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfJJBJrr /JuQlyDyqKmqjveiYWAwhv1gf3Q2lioKsdkyEu04GQENmlkF4S1iPW/gPQK2YaoW lr0jPezDJRVON3ZI+B/bWVi5Uvh2BhGcJs9s8HYe5y8H9TTIvR9/9yDPFi8lkM+0 0tnfF+Q65gbfJ1zwQJIZvYdvF+F76ktTHXsP2KNTY/Nm6jLv0yahjVrYoI4xQosL c2r/T6/xMeURYYYKwWNWBF0p4uEX7A4TdSkPxwqXcwi5tF72t3/qePurFlzw0n0K 3MvKnMYGnYryBxLP2EWaWjAPDuo4vgp2zSUF1hymvF86s17ExtqAhpi8O6sTVuv6 9aDQIYy5tQ/M/w== -----END CERTIFICATE-----Generated at Wed Dec 17 18:36:32 2025 by rpki-client