This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft File: sMeY09W2CWzTnliSWiihffthznU.mft (raw, json) Hash identifier: dMo/lIuqzFPH/BmXXlJjc/Y8Xx1Z54cAcgPe89SB/uA= Subject key identifier: D1:13:78:20:26:F0:66:B4:4B:FE:52:27:11:3D:3C:0D:90:41:F6:DB Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75 Certificate issuer: /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75 Certificate serial: 019B6354BC00AEB3BF0124BC97EBA43A6236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft Manifest number: 0CF5 Signing time: Sun 28 Dec 2025 05:00:56 +0000 Manifest this update: Sun 28 Dec 2025 05:00:56 +0000 Manifest next update: Mon 29 Dec 2025 05:00:56 +0000 Files and hashes: 1: lAlkLc1CavmRfvnNM-ldOwGYoR8.roa (hash: 0wroejPoBcULff3nhQGRj0gl288xNtfnDJXaFr+mf24=) 2: sMeY09W2CWzTnliSWiihffthznU.crl (hash: x1ADbSwOzVau8XTwlQaAvAWGYkZjTupGLEXe6YW0siQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:54:bc:00:ae:b3:bf:01:24:bc:97:eb:a4:3a:62:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75 Validity Not Before: Dec 28 05:00:56 2025 GMT Not After : Dec 29 05:00:56 2025 GMT Subject: CN=d113782026f066b44bfe5227113d3c0d9041f6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:d4:dd:57:a9:4d:0e:4b:25:e4:6f:32:14: fe:ce:36:ce:55:94:57:5c:68:4e:02:25:c1:51:e7: b8:2a:68:30:74:b9:f5:81:95:68:70:b2:a5:0d:9c: 8a:da:a1:6e:50:d9:b6:00:6d:0f:ca:8a:f5:fa:98: 30:c9:ac:40:df:ef:b9:91:f6:09:94:85:57:36:88: bc:03:57:7a:d3:ee:43:b3:c0:d1:81:6c:78:c5:96: 6d:e6:dc:a2:68:83:9d:27:58:fe:4a:e9:3f:40:0c: 74:0b:90:01:1a:2d:f7:9a:7c:e0:a7:9e:01:b9:9e: fa:ec:e6:6b:d0:64:db:37:34:6c:34:c9:af:c5:5c: 15:c9:30:53:51:b3:99:fa:29:d1:60:2c:e2:a7:3a: 46:c2:5a:f6:f5:ff:b1:b4:d6:89:1c:a6:60:54:5a: 9b:e1:50:1b:74:42:17:2a:28:6e:5f:9f:4d:21:a5: 68:0a:23:33:a0:22:16:df:24:1e:ea:2b:cf:49:10: 77:d2:74:46:59:93:10:cf:b5:c0:09:e7:83:9b:32: 79:8c:dc:b5:96:bc:ef:9e:fa:28:2a:aa:56:e1:5c: 59:f2:5b:2f:bf:96:66:4f:ba:32:5c:36:79:55:f1: 93:13:36:0a:0c:ce:81:e7:d4:6d:04:2b:2a:73:fd: b3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:13:78:20:26:F0:66:B4:4B:FE:52:27:11:3D:3C:0D:90:41:F6:DB X509v3 Authority Key Identifier: keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7b:db:18:66:99:d4:b9:36:c7:59:80:4e:fd:ec:e7:14:58: 0e:b8:ad:5a:b0:c4:32:98:da:0c:4e:d9:4b:6b:ba:88:c0:79: bd:40:fc:b0:e9:be:57:0d:1e:4d:cf:cb:a4:91:ab:ce:62:f1: a5:6e:93:dc:c8:b0:66:3d:1b:72:db:b5:b6:43:3f:3b:e2:26: 5c:3d:26:89:18:26:a8:1c:b2:10:18:56:d2:ee:03:84:db:87: 49:c8:f2:2b:cc:02:cd:e7:9a:8a:a1:54:10:3b:35:82:6d:df: ac:36:64:73:aa:c5:20:60:a4:62:18:7a:6f:67:9c:e7:cc:ce: d0:e1:bb:b5:e0:1a:ca:e1:d6:06:7d:d6:5f:57:6c:2f:10:c7: 16:cd:4d:47:42:c7:a8:55:17:ec:be:eb:6b:64:d0:29:05:fd: 5f:6d:68:8c:8e:42:71:ba:cb:2e:de:2b:dc:9b:be:fd:c0:d7: 80:13:92:74:c9:ad:98:2b:3f:07:21:1e:ac:b5:89:4e:a6:4b: 74:af:4c:63:4e:53:50:0b:f6:0d:18:38:a0:a1:7d:24:56:77: b3:e3:64:45:1e:f5:ad:15:b3:36:ae:b5:0f:97:e1:c0:54:40: 8b:64:02:d3:10:43:13:98:4f:ac:30:bb:0c:b0:ce:8a:24:c5: 22:0e:f0:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjVLwArrO/ASS8l+ukOmI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzc5OGQzZDViNjA5NmNkMzllNTg5MjVhMjhhMTdkZmI2 MWNlNzUwHhcNMjUxMjI4MDUwMDU2WhcNMjUxMjI5MDUwMDU2WjAzMTEwLwYDVQQD EyhkMTEzNzgyMDI2ZjA2NmI0NGJmZTUyMjcxMTNkM2MwZDkwNDFmNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZLU3VepTQ5LJeRvMhT+zjbOVZRX XGhOAiXBUee4KmgwdLn1gZVocLKlDZyK2qFuUNm2AG0Pyor1+pgwyaxA3++5kfYJ lIVXNoi8A1d60+5Ds8DRgWx4xZZt5tyiaIOdJ1j+Suk/QAx0C5ABGi33mnzgp54B uZ767OZr0GTbNzRsNMmvxVwVyTBTUbOZ+inRYCzipzpGwlr29f+xtNaJHKZgVFqb 4VAbdEIXKihuX59NIaVoCiMzoCIW3yQe6ivPSRB30nRGWZMQz7XACeeDmzJ5jNy1 lrzvnvooKqpW4VxZ8lsvv5ZmT7oyXDZ5VfGTEzYKDM6B59RtBCsqc/2zBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNETeCAm8Ga0S/5SJxE9PA2QQfbbMB8GA1UdIwQY MBaAFLDHmNPVtgls055YkloooX37Yc51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01lWTA5VzJDV3pUbmxpU1dpaWhmZnRoem5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82NWUwMDYtYzc2Mi00YzdkLTk2ZmYt ZjlmMzExOGUxOTg1LzEvc01lWTA5VzJDV3pUbmxpU1dpaWhmZnRoem5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82NWUwMDYtYzc2Mi00YzdkLTk2ZmYtZjlmMzExOGUxOTg1 LzEvc01lWTA5VzJDV3pUbmxpU1dpaWhmZnRoem5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHvbGGaZ 1Lk2x1mATv3s5xRYDritWrDEMpjaDE7ZS2u6iMB5vUD8sOm+Vw0eTc/LpJGrzmLx pW6T3MiwZj0bctu1tkM/O+ImXD0miRgmqByyEBhW0u4DhNuHScjyK8wCzeeaiqFU EDs1gm3frDZkc6rFIGCkYhh6b2ec58zO0OG7teAayuHWBn3WX1dsLxDHFs1NR0LH qFUX7L7ra2TQKQX9X21ojI5CcbrLLt4r3Ju+/cDXgBOSdMmtmCs/ByEerLWJTqZL dK9MY05TUAv2DRg4oKF9JFZ3s+NkRR71rRWzNq61D5fhwFRAi2QC0xBDE5hPrDC7 DLDOiiTFIg7wsQ== -----END CERTIFICATE-----Generated at Sun Dec 28 09:42:10 2025 by rpki-client