This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft File: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft (raw, json) Hash identifier: HcabSnMPbac83FkEbOO/9oqRkZFHVanZxK6GXyGbdHw= Subject key identifier: 8D:6C:9C:F2:AB:EC:40:0B:38:8C:F0:0E:67:F2:78:B4:B1:8C:35:10 Authority key identifier: 48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89 Certificate issuer: /CN=48cf96aa5eb0774f0d7b426b327435a8788eb189 Certificate serial: 019AF12D82D2C01FB2545FE86E2940BC67CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:22 +0000 Manifest this update: Sat 06 Dec 2025 01:01:22 +0000 Manifest next update: Sun 07 Dec 2025 01:01:22 +0000 Files and hashes: 1: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl (hash: QD94Vv+a5Z33+kKiBKcxlpXmQDViQ67DTODU2Sjgk3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:82:d2:c0:1f:b2:54:5f:e8:6e:29:40:bc:67:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48cf96aa5eb0774f0d7b426b327435a8788eb189 Validity Not Before: Dec 6 01:01:22 2025 GMT Not After : Dec 7 01:01:22 2025 GMT Subject: CN=8d6c9cf2abec400b388cf00e67f278b4b18c3510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:30:46:8e:d5:f2:33:0f:63:1d:d4:1a:3c: 2b:fc:6a:e9:ff:35:b7:51:4c:cc:3b:33:8a:c4:cd: a4:99:eb:c1:c3:5d:88:21:71:64:b8:10:4d:d4:09: b2:e5:a3:fb:d0:8c:33:b3:88:7c:4f:8d:02:54:00: 06:26:20:73:e1:da:16:93:d3:4f:e6:fd:33:9d:5b: 42:89:b8:36:f5:36:63:1e:17:85:98:b6:4d:75:a2: fd:e0:98:07:cd:a7:32:1c:5d:f2:18:c8:c5:2f:85: 07:43:ca:e4:22:1d:ff:26:91:1f:fd:0c:71:68:ba: 0e:4c:87:57:fa:00:43:00:45:a8:8a:5a:99:8b:dd: 54:53:42:73:36:2f:70:54:09:0b:a5:37:8f:6e:ef: 3d:04:6a:42:20:f7:12:19:ff:92:f7:7e:29:80:05: 8c:02:c3:b3:3e:23:e3:ce:22:80:83:51:1f:0d:c5: a9:2d:3c:b6:f5:49:fe:64:20:d7:bd:e8:c5:a2:ed: 04:f8:fb:8d:cb:39:8c:cc:11:ef:b6:c5:da:76:99: 89:25:61:79:f3:01:cc:d2:7c:7c:72:89:8c:79:e4: e6:ef:5c:70:55:7b:52:44:54:82:24:a7:b3:e5:0d: b0:0f:1a:d1:ed:27:e7:f3:1a:6f:5c:b5:ae:60:91: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6C:9C:F2:AB:EC:40:0B:38:8C:F0:0E:67:F2:78:B4:B1:8C:35:10 X509v3 Authority Key Identifier: keyid:48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f1:1e:91:6d:0f:33:b7:06:1b:64:a1:38:0d:7e:a8:ce:8f: 18:1e:41:8d:73:95:1a:b4:e6:34:fd:a2:a4:7e:8c:26:33:9d: 11:c4:b7:96:ec:c8:4a:d4:68:31:89:31:79:28:a1:93:36:fd: 92:7d:ed:50:f4:1d:23:50:6d:58:87:4c:ca:dc:92:81:4d:6a: 99:ac:0b:eb:d2:df:a6:95:fb:25:14:1e:b7:90:a5:49:63:80: 97:86:de:89:a3:50:47:40:d1:53:c2:9e:9e:3d:b2:41:93:16: 8a:a1:8d:be:53:fc:12:27:91:89:85:13:a2:7a:f7:60:a9:ce: 79:f4:b6:e3:75:9d:e9:ac:32:13:4c:b2:e1:d0:43:ae:c1:ef: f3:2d:7b:25:d2:0f:7e:80:5f:c3:1b:e4:61:e9:50:02:49:16: dc:72:9c:73:2f:94:a0:fd:54:b6:7b:9e:8c:98:3e:fb:05:8c: bd:87:1b:40:1e:c4:7c:2e:e3:4f:31:60:74:38:72:2f:94:67: 9a:70:85:68:92:81:fd:be:d3:da:c2:a7:5e:e7:d0:56:87:6f: e9:1d:9c:80:b7:9f:70:1f:fd:5f:b2:01:3d:b0:1e:33:5c:f5: 20:b8:90:a6:14:51:0c:c8:1c:ed:b3:df:d0:d2:80:9d:d3:4b: 92:83:ff:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYLSwB+yVF/obilAvGfPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Y2Y5NmFhNWViMDc3NGYwZDdiNDI2YjMyNzQzNWE4Nzg4 ZWIxODkwHhcNMjUxMjA2MDEwMTIyWhcNMjUxMjA3MDEwMTIyWjAzMTEwLwYDVQQD Eyg4ZDZjOWNmMmFiZWM0MDBiMzg4Y2YwMGU2N2YyNzhiNGIxOGMzNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRcwRo7V8jMPYx3UGjwr/Grp/zW3 UUzMOzOKxM2kmevBw12IIXFkuBBN1Amy5aP70Iwzs4h8T40CVAAGJiBz4doWk9NP 5v0znVtCibg29TZjHheFmLZNdaL94JgHzacyHF3yGMjFL4UHQ8rkIh3/JpEf/Qxx aLoOTIdX+gBDAEWoilqZi91UU0JzNi9wVAkLpTePbu89BGpCIPcSGf+S934pgAWM AsOzPiPjziKAg1EfDcWpLTy29Un+ZCDXvejFou0E+PuNyzmMzBHvtsXadpmJJWF5 8wHM0nx8comMeeTm71xwVXtSRFSCJKez5Q2wDxrR7Sfn8xpvXLWuYJHPMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1snPKr7EALOIzwDmfyeLSxjDUQMB8GA1UdIwQY MBaAFEjPlqpesHdPDXtCazJ0Nah4jrGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU00tV3FsNndkMDhOZTBKck1uUTFxSGlPc1lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hNjJmMDYtZDE2ZC00ZWI5LWI1Y2Yt NDBhNGNmYzk2MjJjLzEvU00tV3FsNndkMDhOZTBKck1uUTFxSGlPc1lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hNjJmMDYtZDE2ZC00ZWI5LWI1Y2YtNDBhNGNmYzk2MjJj LzEvU00tV3FsNndkMDhOZTBKck1uUTFxSGlPc1lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfEekW0P M7cGG2ShOA1+qM6PGB5BjXOVGrTmNP2ipH6MJjOdEcS3luzIStRoMYkxeSihkzb9 kn3tUPQdI1BtWIdMytySgU1qmawL69LfppX7JRQet5ClSWOAl4beiaNQR0DRU8Ke nj2yQZMWiqGNvlP8EieRiYUTonr3YKnOefS243Wd6awyE0yy4dBDrsHv8y17JdIP foBfwxvkYelQAkkW3HKccy+UoP1UtnuejJg++wWMvYcbQB7EfC7jTzFgdDhyL5Rn mnCFaJKB/b7T2sKnXufQVodv6R2cgLefcB/9X7IBPbAeM1z1ILiQphRRDMgc7bPf 0NKAndNLkoP/Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:27 2025 by rpki-client