This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft File: SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json) Hash identifier: frgLfnI1yRYf0Rq5b7aDYH5zEoIYcHazlYodPkgA8mA= Subject key identifier: 91:D1:09:56:F1:6A:4C:2E:FD:CB:71:7D:85:CE:E6:6C:5F:C6:B6:2B Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3 Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3 Certificate serial: 019B304308D67F85C92C3B7431CB4821DCDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft Manifest number: 13DE Signing time: Thu 18 Dec 2025 07:00:58 +0000 Manifest this update: Thu 18 Dec 2025 07:00:58 +0000 Manifest next update: Fri 19 Dec 2025 07:00:58 +0000 Files and hashes: 1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=) 2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: ddAT6W9/LDS7RqCAYKS7VVXENDPFt1bD2bwDE4gwICk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:08:d6:7f:85:c9:2c:3b:74:31:cb:48:21:dc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3 Validity Not Before: Dec 18 07:00:58 2025 GMT Not After : Dec 19 07:00:58 2025 GMT Subject: CN=91d10956f16a4c2efdcb717d85cee66c5fc6b62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:5c:43:be:82:00:16:8b:97:33:25:9f:af: c4:fe:cc:10:2c:8b:dd:59:45:df:17:44:ee:81:35: 12:c5:d0:04:5e:e2:04:3c:97:5f:94:10:78:e6:c0: 72:30:5c:1c:db:97:ef:a0:98:81:8e:d7:63:ac:06: 23:23:5d:98:04:cf:9d:08:17:ad:dd:e6:60:9a:59: 72:ef:5b:22:88:79:ec:de:53:85:d9:45:60:83:47: 03:c7:41:e0:b0:67:8b:ea:18:a2:b3:b3:5b:40:00: cf:dc:fb:88:f6:23:7b:58:10:3d:79:12:bf:9b:dd: 04:3f:39:5a:b7:d0:f5:df:44:01:a3:56:4f:ef:18: 69:03:1a:f6:73:66:0e:a6:96:23:cd:37:75:95:c4: 4e:90:de:02:3b:32:4d:8b:aa:91:88:ce:e5:b2:ad: 26:76:22:ea:22:ab:22:d5:86:95:dd:27:2a:28:94: f1:d1:a8:cb:78:3d:72:62:7f:8c:13:9f:ba:c0:3f: f8:e0:16:82:46:2b:78:a4:f6:4b:78:11:58:7d:39: d5:2a:cb:d9:d2:f5:9f:11:64:bb:ff:b9:92:95:15: b3:89:14:8c:d2:c0:53:f2:c3:aa:b9:d3:dc:68:e0: 4d:16:c3:cc:69:72:bc:9d:1c:ff:60:d5:9c:20:41: ab:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D1:09:56:F1:6A:4C:2E:FD:CB:71:7D:85:CE:E6:6C:5F:C6:B6:2B X509v3 Authority Key Identifier: keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1f:b6:67:5b:2f:b4:33:ac:61:5a:13:ab:87:92:02:e6:25: f4:3a:44:bd:da:bb:58:c3:52:7f:47:d2:8a:76:60:bf:a2:54: 4c:90:32:a6:2f:74:b2:9e:1d:6e:83:e8:02:86:78:eb:62:6b: 10:a0:19:2e:73:35:ed:1c:5f:db:08:95:44:53:c0:b6:7b:0b: fe:7c:96:5b:31:ea:c9:ba:45:6e:79:5b:d1:ab:4b:d1:90:9b: 59:ad:36:3d:c2:26:be:1c:7c:f6:42:4e:17:4e:c3:95:c0:81: d4:31:08:56:46:a0:03:f6:a6:cc:83:2e:4d:e1:fa:55:34:8c: f3:fb:78:3f:d7:9f:50:b6:70:cc:25:2e:21:9a:8c:9f:b2:0b: 37:de:07:f7:73:57:41:53:2a:ee:2a:a6:9e:24:15:1c:96:a2: 2f:88:66:1a:22:32:2d:2f:88:d4:86:dc:1e:55:54:b0:fc:bc: 7d:55:18:22:b2:50:44:e4:0d:cd:8c:2f:21:22:bd:2a:4a:b8: b4:51:b3:6e:a8:eb:5d:11:26:61:53:61:50:68:cf:31:16:a1: 59:e1:77:08:f7:64:f7:67:15:5c:8b:f9:7a:0b:e1:58:73:13: c8:a9:9e:39:24:8f:05:1c:2b:5f:05:4b:6e:58:cf:19:8d:6d: 01:5a:9e:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQwjWf4XJLDt0MctIIdzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YzM5ZGUyNWZmYTdlYWYwMmIyYTZkOGMyY2Y2ZTJjZWI1 NjJiZjMwHhcNMjUxMjE4MDcwMDU4WhcNMjUxMjE5MDcwMDU4WjAzMTEwLwYDVQQD Eyg5MWQxMDk1NmYxNmE0YzJlZmRjYjcxN2Q4NWNlZTY2YzVmYzZiNjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMNcQ76CABaLlzMln6/E/swQLIvd WUXfF0TugTUSxdAEXuIEPJdflBB45sByMFwc25fvoJiBjtdjrAYjI12YBM+dCBet 3eZgmlly71siiHns3lOF2UVgg0cDx0HgsGeL6hiis7NbQADP3PuI9iN7WBA9eRK/ m90EPzlat9D130QBo1ZP7xhpAxr2c2YOppYjzTd1lcROkN4COzJNi6qRiM7lsq0m diLqIqsi1YaV3ScqKJTx0ajLeD1yYn+ME5+6wD/44BaCRit4pPZLeBFYfTnVKsvZ 0vWfEWS7/7mSlRWziRSM0sBT8sOqudPcaOBNFsPMaXK8nRz/YNWcIEGrgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHRCVbxakwu/ctxfYXO5mxfxrYrMB8GA1UdIwQY MBaAFEjDneJf+n6vArKm2MLPbizrVivzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgt MDM1NWVmMTE1ODljLzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgtMDM1NWVmMTE1ODlj LzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgB+2Z1sv tDOsYVoTq4eSAuYl9DpEvdq7WMNSf0fSinZgv6JUTJAypi90sp4dboPoAoZ462Jr EKAZLnM17Rxf2wiVRFPAtnsL/nyWWzHqybpFbnlb0atL0ZCbWa02PcImvhx89kJO F07DlcCB1DEIVkagA/amzIMuTeH6VTSM8/t4P9efULZwzCUuIZqMn7ILN94H93NX QVMq7iqmniQVHJaiL4hmGiIyLS+I1IbcHlVUsPy8fVUYIrJQROQNzYwvISK9Kkq4 tFGzbqjrXREmYVNhUGjPMRahWeF3CPdk92cVXIv5egvhWHMTyKmeOSSPBRwrXwVL bljPGY1tAVqelA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:19:15 2025 by rpki-client