This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft File: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft (raw, json) Hash identifier: bVfm9ZN+OY5ZY7ePeUu3m/hM79/2WOFkeI4jJPQ38Y8= Subject key identifier: A3:3E:00:82:B3:85:C1:23:72:25:94:96:14:A8:9B:F5:3E:F8:C4:06 Authority key identifier: 49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7 Certificate issuer: /CN=492999fd50a69fd0412065490f5acc75a159deb7 Certificate serial: 019AF0882BD7EAB7D2A465560053A4A7F79F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft Manifest number: 16BB Signing time: Fri 05 Dec 2025 22:00:47 +0000 Manifest this update: Fri 05 Dec 2025 22:00:47 +0000 Manifest next update: Sat 06 Dec 2025 22:00:47 +0000 Files and hashes: 1: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl (hash: /Lt9h0OYeasZNBTQahnS64ShIMSOG/CU+yttbqJq9Qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:2b:d7:ea:b7:d2:a4:65:56:00:53:a4:a7:f7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=492999fd50a69fd0412065490f5acc75a159deb7 Validity Not Before: Dec 5 22:00:47 2025 GMT Not After : Dec 6 22:00:47 2025 GMT Subject: CN=a33e0082b385c1237225949614a89bf53ef8c406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:d1:8c:a2:81:dc:3a:d0:18:44:81:92:3e: 7d:80:3f:39:e7:7d:a7:92:7d:87:8b:1d:7c:bf:00: d4:14:33:fe:85:4c:92:2d:e3:82:7a:bd:75:7a:a0: 4a:bf:7a:a5:49:f9:36:79:3d:ea:04:d4:32:69:ac: 6d:e1:fe:b3:7b:cf:04:bc:19:a0:11:2d:9e:fc:8a: 76:33:22:82:08:ed:ca:09:09:b2:a3:f9:5b:fb:8c: 4f:58:71:1d:ee:8f:ac:4b:c7:47:68:5c:5d:f7:0a: da:db:0d:6a:8b:d8:e4:47:f9:6f:ff:e3:4d:f4:d6: d0:f8:73:32:59:d4:0a:78:6b:67:fb:72:e3:14:15: 8f:1d:a2:77:8a:5e:d4:e0:4f:8f:43:b8:df:98:4c: 7c:51:33:13:25:0d:9c:58:f0:3e:95:92:34:f3:1e: f7:b2:f0:07:9f:71:f4:ee:12:e6:e8:e7:22:f2:56: 32:70:55:9f:4e:32:0d:e1:9f:26:d3:cf:e3:95:33: 04:8e:52:74:48:28:50:3d:60:dd:06:39:2b:55:88: 7b:24:44:11:4a:ed:33:f8:99:11:27:57:b7:66:28: e4:6f:0c:1d:70:37:5b:c7:27:82:e0:8a:e2:3f:9f: 01:4d:fa:d8:7a:5c:57:d1:a0:1b:7b:4b:46:fa:37: bc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3E:00:82:B3:85:C1:23:72:25:94:96:14:A8:9B:F5:3E:F8:C4:06 X509v3 Authority Key Identifier: keyid:49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4c:98:92:51:c8:a1:28:45:1f:36:c5:13:49:42:9a:48:4b: 7b:60:2e:6b:ae:ac:94:29:1f:59:48:69:a1:84:1e:e9:28:e2: 65:81:22:d5:c6:cc:70:d7:cc:f0:d9:fd:14:90:d4:c4:d2:c5: 64:90:52:41:b7:37:5a:19:a6:5a:86:93:1d:1a:c0:8e:07:a9: 29:fa:13:31:a4:97:42:a2:41:76:ef:7c:8f:c3:99:7c:f8:9a: d6:c4:fc:92:ab:69:03:13:bf:c8:46:d6:b3:b1:ff:d8:e0:ba: f0:b6:8d:28:1c:5c:11:88:8e:45:0f:4a:c5:6d:98:2c:1f:17: 7c:c4:76:bd:d4:34:ab:83:2f:de:32:44:ba:07:e8:3b:1f:e2: 6e:d3:7e:32:41:f2:82:ed:fd:f5:ce:df:6e:b3:51:15:cc:b1: c9:76:f5:3f:f6:ed:5c:7f:ce:3b:45:11:c7:14:1f:b6:c0:e4: 01:bd:1d:47:49:cf:45:af:1e:0b:05:ed:44:8c:70:55:a1:49: a8:e0:5b:9d:0c:03:28:e1:69:51:8a:8b:57:f5:10:3e:9a:91: ef:83:3a:ce:9b:da:61:c5:ff:df:98:1e:fb:de:67:94:32:a7: 91:c8:70:2c:82:e9:8c:6f:02:67:06:d7:22:80:e1:dd:62:f9: 0e:87:54:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiCvX6rfSpGVWAFOkp/efMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5Mjk5OWZkNTBhNjlmZDA0MTIwNjU0OTBmNWFjYzc1YTE1 OWRlYjcwHhcNMjUxMjA1MjIwMDQ3WhcNMjUxMjA2MjIwMDQ3WjAzMTEwLwYDVQQD EyhhMzNlMDA4MmIzODVjMTIzNzIyNTk0OTYxNGE4OWJmNTNlZjhjNDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqPRjKKB3DrQGESBkj59gD85532n kn2Hix18vwDUFDP+hUySLeOCer11eqBKv3qlSfk2eT3qBNQyaaxt4f6ze88EvBmg ES2e/Ip2MyKCCO3KCQmyo/lb+4xPWHEd7o+sS8dHaFxd9wra2w1qi9jkR/lv/+NN 9NbQ+HMyWdQKeGtn+3LjFBWPHaJ3il7U4E+PQ7jfmEx8UTMTJQ2cWPA+lZI08x73 svAHn3H07hLm6Oci8lYycFWfTjIN4Z8m08/jlTMEjlJ0SChQPWDdBjkrVYh7JEQR Su0z+JkRJ1e3ZijkbwwdcDdbxyeC4IriP58BTfrYelxX0aAbe0tG+je8jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKM+AIKzhcEjciWUlhSom/U++MQGMB8GA1UdIwQY MBaAFEkpmf1Qpp/QQSBlSQ9azHWhWd63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85YjE5YmUtNGI2Yy00ZGQ4LTliNjgt NDhmNjc3ZmUyNTVkLzEvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85YjE5YmUtNGI2Yy00ZGQ4LTliNjgtNDhmNjc3ZmUyNTVk LzEvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEyYklHI oShFHzbFE0lCmkhLe2Aua66slCkfWUhpoYQe6SjiZYEi1cbMcNfM8Nn9FJDUxNLF ZJBSQbc3WhmmWoaTHRrAjgepKfoTMaSXQqJBdu98j8OZfPia1sT8kqtpAxO/yEbW s7H/2OC68LaNKBxcEYiORQ9KxW2YLB8XfMR2vdQ0q4Mv3jJEugfoOx/ibtN+MkHy gu399c7fbrNRFcyxyXb1P/btXH/OO0URxxQftsDkAb0dR0nPRa8eCwXtRIxwVaFJ qOBbnQwDKOFpUYqLV/UQPpqR74M6zpvaYcX/35ge+95nlDKnkchwLILpjG8CZwbX IoDh3WL5DodUuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:58 2025 by rpki-client