This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json) Hash identifier: PYItqBtXaLt0PxSBkKtMWFilFEkFc9TEr500Uwamdqo= Subject key identifier: 14:9A:ED:C9:7D:FD:24:2B:0A:ED:05:0F:98:B6:CD:87:6D:83:C6:94 Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f Certificate serial: 019BF79ACFD9B0DD1FD6B13A8CED0813FA48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft Manifest number: 1782 Signing time: Mon 26 Jan 2026 00:01:16 +0000 Manifest this update: Mon 26 Jan 2026 00:01:16 +0000 Manifest next update: Tue 27 Jan 2026 00:01:16 +0000 Files and hashes: 1: JA6DG47aKcr2L7Ska7dQW2hz0OQ.roa (hash: SZmqmdymrljO2hpbQb1uMliK1C8iABzhCOgMWLG7xTw=) 2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: X5wJgCtT0eGvXID03JXCns1PJl/AubEoTczEiO4NLYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:cf:d9:b0:dd:1f:d6:b1:3a:8c:ed:08:13:fa:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f Validity Not Before: Jan 26 00:01:16 2026 GMT Not After : Jan 27 00:01:16 2026 GMT Subject: CN=149aedc97dfd242b0aed050f98b6cd876d83c694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:9c:dd:52:30:c0:f1:46:f7:77:70:14:86: 1c:cf:bb:90:e9:73:86:75:23:87:ee:3e:1e:27:a9: 9a:40:0b:76:0b:14:e8:0d:3f:83:45:36:57:88:e8: 79:cb:e2:03:b1:d3:d0:83:06:1b:93:54:1b:1b:cd: 35:b7:0b:80:5c:c1:3c:3c:00:62:8a:1c:75:e6:d2: 81:56:b8:b1:50:1b:ba:d9:4d:34:ad:ba:8d:6e:4a: 43:5a:1f:31:44:d7:c3:97:93:a1:12:56:4a:e3:cf: af:a6:46:7c:cb:56:e8:7a:4c:a7:c7:b9:ad:75:6e: fa:79:d3:21:40:8b:8b:50:d4:18:82:91:fa:02:33: 88:24:db:07:1f:ac:a5:75:af:92:89:be:61:50:63: 32:e8:3c:f1:4b:f4:4b:80:e3:65:72:7a:5d:82:f2: 32:66:55:fe:d5:00:42:59:74:2a:4f:20:4b:9f:0e: 8f:df:f1:a7:ea:bb:47:ee:54:3f:50:1f:3f:bd:0f: c0:cb:85:e3:72:e0:56:7a:75:bd:75:e6:87:83:9f: 19:83:99:ac:90:50:59:82:b7:a5:71:98:5b:b9:70: 00:8a:0d:71:49:20:ea:6c:a0:04:4f:1d:4b:ae:e7: ae:25:0d:57:ad:73:a1:fd:0a:48:4c:a6:d0:8f:09: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9A:ED:C9:7D:FD:24:2B:0A:ED:05:0F:98:B6:CD:87:6D:83:C6:94 X509v3 Authority Key Identifier: keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f4:69:07:81:d3:0f:e7:d3:00:0d:e7:d8:c3:d4:30:c5:bf: 6d:c1:e2:f3:34:49:f3:64:40:69:b9:de:71:a0:44:24:de:7b: 5a:43:c7:2a:82:db:24:93:e8:43:e2:1a:f2:ab:0e:92:d9:5d: f7:b9:99:61:95:74:f3:9c:8b:11:8a:ff:30:9f:fc:1c:09:87: 5a:65:5c:ef:bc:7e:1f:9e:b7:63:ee:67:19:5e:0d:f2:ed:c1: ab:0b:03:92:d6:f5:6f:32:fe:57:fd:1c:c4:bb:18:67:4b:e1: 0d:9b:bc:c8:09:cf:e4:b7:77:26:9d:ed:64:4f:de:0c:84:f6: 35:c7:30:5f:c4:03:f7:26:c8:b1:96:42:22:b9:25:90:81:5d: 2c:60:86:bd:8d:e7:6a:da:7c:af:7f:65:a9:c9:53:7c:82:cd: 82:53:b2:96:cc:8f:9f:df:7f:8c:4e:bf:fd:5b:96:11:ce:64: 55:2c:c9:62:3e:be:f3:36:e3:ca:53:03:84:39:b5:dd:30:ec: 72:bc:77:22:8a:c2:2f:b6:dd:e2:fb:c1:8f:37:b8:8f:3f:9f: ca:83:97:9e:26:c5:a4:49:9f:2c:48:f5:30:90:c8:03:c8:f8: 7b:de:eb:0e:6c:80:86:03:a5:89:3f:31:6f:4d:37:67:76:aa: 6b:28:b8:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3ms/ZsN0f1rE6jO0IE/pIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Y2YzN2IzNjQ2ZmRhOTNjYmRkMGI4YWFjY2ZmZjMxM2E2 ZjcxOGYwHhcNMjYwMTI2MDAwMTE2WhcNMjYwMTI3MDAwMTE2WjAzMTEwLwYDVQQD EygxNDlhZWRjOTdkZmQyNDJiMGFlZDA1MGY5OGI2Y2Q4NzZkODNjNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHCc3VIwwPFG93dwFIYcz7uQ6XOG dSOH7j4eJ6maQAt2CxToDT+DRTZXiOh5y+IDsdPQgwYbk1QbG801twuAXME8PABi ihx15tKBVrixUBu62U00rbqNbkpDWh8xRNfDl5OhElZK48+vpkZ8y1boekynx7mt dW76edMhQIuLUNQYgpH6AjOIJNsHH6ylda+Sib5hUGMy6DzxS/RLgONlcnpdgvIy ZlX+1QBCWXQqTyBLnw6P3/Gn6rtH7lQ/UB8/vQ/Ay4XjcuBWenW9deaHg58Zg5ms kFBZgrelcZhbuXAAig1xSSDqbKAETx1LrueuJQ1XrXOh/QpITKbQjwlNUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSa7cl9/SQrCu0FD5i2zYdtg8aUMB8GA1UdIwQY MBaAFEjPN7Nkb9qTy90LiqzP/zE6b3GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQt MTdlMzE1ODk1NGRhLzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQtMTdlMzE1ODk1NGRh LzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/RpB4HT D+fTAA3n2MPUMMW/bcHi8zRJ82RAabnecaBEJN57WkPHKoLbJJPoQ+Ia8qsOktld 97mZYZV085yLEYr/MJ/8HAmHWmVc77x+H563Y+5nGV4N8u3BqwsDktb1bzL+V/0c xLsYZ0vhDZu8yAnP5Ld3Jp3tZE/eDIT2NccwX8QD9ybIsZZCIrklkIFdLGCGvY3n atp8r39lqclTfILNglOylsyPn99/jE6//VuWEc5kVSzJYj6+8zbjylMDhDm13TDs crx3IorCL7bd4vvBjze4jz+fyoOXnibFpEmfLEj1MJDIA8j4e97rDmyAhgOliT8x b003Z3aqayi4ZA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:08 2026 by rpki-client