This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft File: smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json) Hash identifier: a822HPTN90LBmRrjjyMGLqHSlRTmim7Klq0in4pIsyU= Subject key identifier: E0:2E:B7:68:1F:97:2F:C8:E1:57:24:CD:9B:60:43:3C:43:72:BA:3B Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B Certificate issuer: /CN=b26207c32ce98a1ade9224863b463a82f8f8682b Certificate serial: 019AF49C26E99C8B808B44AD3018953FFF4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft Manifest number: 01F5 Signing time: Sat 06 Dec 2025 17:01:05 +0000 Manifest this update: Sat 06 Dec 2025 17:01:05 +0000 Manifest next update: Sun 07 Dec 2025 17:01:05 +0000 Files and hashes: 1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: JnyNu5QFG6zACYNU9YHTmp4+W5KCLH9hNEWNkiSeht0=) 2: vfgaajpx_IwIslySYTAXUF8b2bQ.roa (hash: 5BG+nyK3l0jI+maIom4ahnVVqUeZ02d+C1Q9Lbzzldo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:26:e9:9c:8b:80:8b:44:ad:30:18:95:3f:ff:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b Validity Not Before: Dec 6 17:01:05 2025 GMT Not After : Dec 7 17:01:05 2025 GMT Subject: CN=e02eb7681f972fc8e15724cd9b60433c4372ba3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:eb:3d:aa:34:ba:4e:aa:8a:14:d6:88:26: 93:e5:20:11:96:71:70:35:ee:32:58:bf:cc:36:9c: 13:93:ec:4e:90:b4:01:d3:6d:a6:21:4b:9a:93:1d: d4:3f:69:bb:6f:af:e4:0d:c6:31:67:c3:22:6b:34: 6e:c0:2f:a9:a2:3b:62:21:77:79:b8:32:94:92:0f: 79:bc:b1:51:0e:11:a6:4d:7f:fd:9f:27:95:b7:46: a0:37:99:e4:f9:73:7a:11:56:9e:50:f7:e6:7d:d7: 1f:87:8b:1b:41:89:87:e9:df:6f:1b:e7:52:59:d0: f8:d6:bc:05:a1:58:f9:8f:ce:d4:d1:bf:1e:c1:d7: 18:93:94:5c:a7:a5:a5:f9:b5:04:5d:89:23:82:32: 18:30:7e:5c:b9:96:14:d2:2d:4b:d0:ff:37:8b:50: 8d:bb:87:6e:af:58:fb:0d:fc:c2:ba:ab:08:8f:0c: d7:fc:8a:17:04:4f:2a:44:f9:dd:fd:c1:42:a5:3a: d3:4f:aa:10:cb:55:e2:c8:00:02:c9:60:18:2c:c7: 13:64:50:17:37:e2:52:bc:62:a1:90:24:9e:b9:2c: b1:30:33:41:a7:33:dd:2e:fd:ae:b6:bb:e7:31:a2: 0b:78:20:27:37:78:be:5b:1f:ff:53:c0:19:95:dd: b4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2E:B7:68:1F:97:2F:C8:E1:57:24:CD:9B:60:43:3C:43:72:BA:3B X509v3 Authority Key Identifier: keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:08:2f:1f:dc:34:15:b4:2a:2e:45:0e:91:e1:27:4f:d9:72: 8b:45:8b:c4:fa:68:56:20:9c:e0:8a:26:9c:7e:54:c0:2d:20: e1:77:6b:16:3f:3b:ab:15:8e:78:f5:60:4f:78:74:4a:80:a4: b8:3e:28:c6:79:48:29:af:c9:d0:89:d1:a1:d8:ec:4a:9a:5a: 97:3e:a6:5f:c0:eb:f2:05:9f:84:1a:db:c8:5a:f6:41:ab:c5: 15:de:c9:5e:24:f5:57:57:0a:f2:d1:02:da:da:e6:6d:ac:85: 5a:fe:9e:77:8b:66:1f:d7:06:d2:13:a9:6e:e3:de:75:0b:18: b8:db:25:9c:6b:b9:bc:9d:5a:70:7a:bb:eb:a1:c8:9d:e1:a3: 4e:7e:79:a1:16:e4:a9:19:c7:4a:e9:47:08:ce:ca:05:0d:f2: 03:40:f3:51:e6:d8:01:9b:2b:50:87:74:b5:61:24:16:2f:77: 40:a0:db:4a:2f:97:45:eb:7d:eb:49:9d:23:50:fc:d4:22:9e: 85:77:5c:7a:6b:c8:bb:38:89:dd:09:00:ac:17:cf:30:8d:86: f5:a4:b5:a2:c8:34:6c:1b:0a:f2:e4:f5:8e:2a:26:f3:03:58: cf:77:15:e3:4c:2b:aa:55:c4:4b:fe:40:0b:41:a0:99:4c:b4: 63:e9:82:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nCbpnIuAi0StMBiVP/9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNjIwN2MzMmNlOThhMWFkZTkyMjQ4NjNiNDYzYTgyZjhm ODY4MmIwHhcNMjUxMjA2MTcwMTA1WhcNMjUxMjA3MTcwMTA1WjAzMTEwLwYDVQQD EyhlMDJlYjc2ODFmOTcyZmM4ZTE1NzI0Y2Q5YjYwNDMzYzQzNzJiYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxTrPao0uk6qihTWiCaT5SARlnFw Ne4yWL/MNpwTk+xOkLQB022mIUuakx3UP2m7b6/kDcYxZ8MiazRuwC+pojtiIXd5 uDKUkg95vLFRDhGmTX/9nyeVt0agN5nk+XN6EVaeUPfmfdcfh4sbQYmH6d9vG+dS WdD41rwFoVj5j87U0b8ewdcYk5Rcp6Wl+bUEXYkjgjIYMH5cuZYU0i1L0P83i1CN u4dur1j7DfzCuqsIjwzX/IoXBE8qRPnd/cFCpTrTT6oQy1XiyAACyWAYLMcTZFAX N+JSvGKhkCSeuSyxMDNBpzPdLv2utrvnMaILeCAnN3i+Wx//U8AZld20ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAut2gfly/I4VckzZtgQzxDcro7MB8GA1UdIwQY MBaAFLJiB8Ms6Yoa3pIkhjtGOoL4+GgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc21JSHd5enBpaHJla2lTR08wWTZndmo0YUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85MDE5OWItZmI2ZC00OGY3LWI1NTAt Yjc3MzhhMGJlZmFmLzEvc21JSHd5enBpaHJla2lTR08wWTZndmo0YUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85MDE5OWItZmI2ZC00OGY3LWI1NTAtYjc3MzhhMGJlZmFm LzEvc21JSHd5enBpaHJla2lTR08wWTZndmo0YUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQgvH9w0 FbQqLkUOkeEnT9lyi0WLxPpoViCc4IomnH5UwC0g4XdrFj87qxWOePVgT3h0SoCk uD4oxnlIKa/J0InRodjsSppalz6mX8Dr8gWfhBrbyFr2QavFFd7JXiT1V1cK8tEC 2trmbayFWv6ed4tmH9cG0hOpbuPedQsYuNslnGu5vJ1acHq766HIneGjTn55oRbk qRnHSulHCM7KBQ3yA0DzUebYAZsrUId0tWEkFi93QKDbSi+XRet960mdI1D81CKe hXdcemvIuziJ3QkArBfPMI2G9aS1osg0bBsK8uT1jiom8wNYz3cV40wrqlXES/5A C0GgmUy0Y+mCrw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:22 2025 by rpki-client