This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft File: SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json) Hash identifier: +Z3u8TQrxpw938l5ynZ3T1+R5FeRL7t8N8cf/4c1jKc= Subject key identifier: 36:81:F1:C0:E8:5D:60:1B:88:FB:8E:18:27:DC:F6:FE:8F:39:9D:BE Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3 Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3 Certificate serial: 019AF276D6CB3E3140D936A839E0233E41C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft Manifest number: 13BE Signing time: Sat 06 Dec 2025 07:01:05 +0000 Manifest this update: Sat 06 Dec 2025 07:01:05 +0000 Manifest next update: Sun 07 Dec 2025 07:01:05 +0000 Files and hashes: 1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=) 2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: PhmFJONQ/q2FCi0jWoWBYPwtTOg+1KjkwXLChRk9Iqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d6:cb:3e:31:40:d9:36:a8:39:e0:23:3e:41:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3 Validity Not Before: Dec 6 07:01:05 2025 GMT Not After : Dec 7 07:01:05 2025 GMT Subject: CN=3681f1c0e85d601b88fb8e1827dcf6fe8f399dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:2d:7e:13:05:90:e2:b5:83:6d:b3:0c:c9: bd:e7:13:4f:fd:20:3a:16:14:71:2b:c4:26:8f:47: 52:42:81:d2:2c:4d:ca:27:a9:14:ac:9c:a5:4b:3e: ec:6f:ac:19:3c:88:f7:86:55:c5:5a:bc:3b:53:cf: 8e:c5:80:86:da:1d:47:ae:91:12:c1:9b:d8:0e:43: d9:62:1d:39:c7:2f:3e:34:f1:c6:b8:6d:51:0e:bc: 24:d1:67:02:ef:44:e9:98:2f:be:e1:a8:30:43:c4: 14:2e:4c:2a:fa:56:1a:63:e4:28:15:40:4e:2d:6e: 5c:4f:70:e2:e0:27:75:6b:6c:9b:54:66:c2:25:15: 1a:21:56:a3:1e:cc:0b:56:82:60:bd:bd:40:dd:d2: 09:97:db:7d:db:40:21:e6:9a:1d:f8:77:dd:9f:7a: 09:74:ca:d9:83:d6:5b:09:d6:98:4c:fd:4b:04:b0: 6c:77:7d:e8:a8:84:51:df:f1:50:b9:1d:c8:61:a9: c7:2d:b4:27:dd:d4:81:8f:d0:5d:af:5d:db:ad:46: 94:79:de:ba:0e:c0:d7:68:44:9d:45:df:7c:df:25: c0:3b:07:7c:30:50:3d:01:9a:1f:02:52:de:cd:41: 9c:e3:15:91:7f:af:19:34:75:98:dc:0e:56:55:aa: 10:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:81:F1:C0:E8:5D:60:1B:88:FB:8E:18:27:DC:F6:FE:8F:39:9D:BE X509v3 Authority Key Identifier: keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:07:64:71:03:32:ae:22:91:86:c2:5b:64:96:aa:10:1c:46: 9f:e9:d0:36:c5:be:9c:ff:e1:3c:b0:45:cd:71:b7:27:1f:f5: 65:6c:ba:61:45:94:64:9c:51:5a:cd:c7:68:8e:bc:fa:13:30: a9:de:c9:83:29:9f:b9:28:e6:bd:0f:a7:88:20:79:7f:03:a9: a9:57:88:eb:08:f8:27:4c:eb:f5:6a:e0:2a:fe:15:ce:cb:cf: 7e:5b:a6:ee:7b:35:c5:b8:7c:da:f6:04:d8:6e:c5:dc:3b:d8: 18:e3:37:d7:70:12:99:a6:dc:37:e4:f8:0d:fc:3e:28:f9:95: ca:3a:15:30:96:46:04:30:1e:99:9d:c4:2d:19:3f:d4:7c:e1: 08:f7:04:7c:26:f0:ab:21:4f:a1:0a:3e:82:99:90:85:60:0e: e7:86:14:1b:b9:9b:4f:fc:a9:69:e7:39:db:22:a5:c3:40:30: 77:a6:18:6c:0a:24:29:80:42:ea:b8:72:8c:45:0d:46:e0:e2: 9f:9d:b1:a5:6d:f4:bf:03:a7:f2:7e:69:41:03:c9:17:47:7f: 76:dd:63:15:20:07:4f:b9:18:27:07:34:74:70:cb:4b:96:be: 5f:a5:03:f9:d6:fc:0a:91:a8:ce:ac:62:59:58:ef:e1:bf:99: 8f:04:1e:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtbLPjFA2TaoOeAjPkHJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YzM5ZGUyNWZmYTdlYWYwMmIyYTZkOGMyY2Y2ZTJjZWI1 NjJiZjMwHhcNMjUxMjA2MDcwMTA1WhcNMjUxMjA3MDcwMTA1WjAzMTEwLwYDVQQD EygzNjgxZjFjMGU4NWQ2MDFiODhmYjhlMTgyN2RjZjZmZThmMzk5ZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN4tfhMFkOK1g22zDMm95xNP/SA6 FhRxK8Qmj0dSQoHSLE3KJ6kUrJylSz7sb6wZPIj3hlXFWrw7U8+OxYCG2h1HrpES wZvYDkPZYh05xy8+NPHGuG1RDrwk0WcC70TpmC++4agwQ8QULkwq+lYaY+QoFUBO LW5cT3Di4Cd1a2ybVGbCJRUaIVajHswLVoJgvb1A3dIJl9t920Ah5pod+Hfdn3oJ dMrZg9ZbCdaYTP1LBLBsd33oqIRR3/FQuR3IYanHLbQn3dSBj9Bdr13brUaUed66 DsDXaESdRd983yXAOwd8MFA9AZofAlLezUGc4xWRf68ZNHWY3A5WVaoQWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaB8cDoXWAbiPuOGCfc9v6POZ2+MB8GA1UdIwQY MBaAFEjDneJf+n6vArKm2MLPbizrVivzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgt MDM1NWVmMTE1ODljLzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgtMDM1NWVmMTE1ODlj LzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgdkcQMy riKRhsJbZJaqEBxGn+nQNsW+nP/hPLBFzXG3Jx/1ZWy6YUWUZJxRWs3HaI68+hMw qd7JgymfuSjmvQ+niCB5fwOpqVeI6wj4J0zr9WrgKv4VzsvPflum7ns1xbh82vYE 2G7F3DvYGOM313ASmabcN+T4Dfw+KPmVyjoVMJZGBDAemZ3ELRk/1HzhCPcEfCbw qyFPoQo+gpmQhWAO54YUG7mbT/ypaec52yKlw0Awd6YYbAokKYBC6rhyjEUNRuDi n52xpW30vwOn8n5pQQPJF0d/dt1jFSAHT7kYJwc0dHDLS5a+X6UD+db8CpGozqxi WVjv4b+ZjwQe/g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:16 2025 by rpki-client