This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json) Hash identifier: OyXeg9r0tSy042KgRrL/i2+xwDoRQN2TrqULcJKx+rE= Subject key identifier: 61:05:B1:75:84:94:08:CE:E2:DF:59:99:69:70:0B:90:54:73:07:21 Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19 Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19 Certificate serial: 019B33E8D0B7B21A51B2BF65CFDFCD112393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft Manifest number: 0E15 Signing time: Fri 19 Dec 2025 00:00:54 +0000 Manifest this update: Fri 19 Dec 2025 00:00:54 +0000 Manifest next update: Sat 20 Dec 2025 00:00:54 +0000 Files and hashes: 1: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (hash: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=) 2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: /21S6SbqqqvNOWaLkjkR4LuGa/Q8hcc72HXwCO2y4JE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:d0:b7:b2:1a:51:b2:bf:65:cf:df:cd:11:23:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19 Validity Not Before: Dec 19 00:00:54 2025 GMT Not After : Dec 20 00:00:54 2025 GMT Subject: CN=6105b175849408cee2df599969700b9054730721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:22:1a:82:13:f8:9d:7d:cb:4e:d6:17:d8:c2: 78:7b:67:3b:52:cc:e1:fa:23:5a:e0:3f:83:14:f9: a3:09:51:5e:13:7a:b6:e2:26:ed:b1:d4:b5:45:a5: 3c:f4:af:11:4a:9e:15:1e:8f:21:d1:b3:31:21:4c: 51:01:55:e6:9c:76:bc:c6:59:39:05:bd:ec:b0:76: c6:30:75:c4:b1:4d:0c:f1:89:47:37:35:7e:76:5b: f2:a7:bd:7e:71:3f:ca:96:bd:c6:42:aa:d9:07:af: f6:50:de:88:11:f3:61:4b:62:b2:a2:d3:29:41:32: 8b:ed:51:ca:0d:a4:10:1b:bd:95:e3:cc:19:7a:04: 17:b7:a8:16:88:5e:f1:cc:47:cc:bc:34:3d:60:2b: b3:06:06:71:ff:2b:6f:c7:6a:dc:e4:2b:c1:42:0e: 91:4b:c3:f7:43:dc:a2:a2:d7:4e:7e:94:15:b2:ca: 3b:7d:e7:c9:0a:b2:78:d7:3c:26:9e:b0:f8:54:ad: 54:c7:4a:47:f6:49:1f:bf:c1:be:d5:9a:13:7c:1c: 5e:b8:b6:f1:9f:1d:a4:6a:64:ac:23:e7:8b:93:a1: f2:ab:88:46:e5:4b:b1:9d:cd:d2:10:0d:1f:11:da: f6:ec:f3:5e:66:a3:dc:b2:11:eb:78:16:df:2c:3d: 40:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:05:B1:75:84:94:08:CE:E2:DF:59:99:69:70:0B:90:54:73:07:21 X509v3 Authority Key Identifier: keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5a:54:1d:69:2b:11:8c:e2:fd:48:1f:fd:58:f8:27:5b:9b: 30:26:f9:11:13:86:eb:72:3b:97:3a:06:aa:a0:28:99:48:16: 74:65:ee:c9:a5:63:14:f2:cb:c5:34:ae:37:79:57:d5:8c:52: 23:19:2c:46:2e:b7:18:7c:ea:93:b2:24:3b:02:2f:04:33:6c: d8:7d:75:c2:08:8b:65:4e:54:c6:34:bb:78:b8:38:66:3d:e1: 04:d6:6e:a7:e5:2f:fb:ae:79:50:ec:e8:96:c5:60:b1:1c:d5: d8:51:75:52:3c:c7:3d:13:39:d6:02:eb:61:36:38:75:60:83: 09:ce:4e:66:43:54:9c:5e:19:8a:d8:48:3e:be:5a:e2:a5:5c: 8c:aa:7c:9d:81:d2:28:5f:81:99:ad:a4:47:5c:35:37:69:68: 95:ea:fb:81:8a:2b:02:52:83:d4:49:c3:97:b8:91:5b:2b:e9: d8:8a:db:7b:7c:10:1e:2e:02:d6:03:a0:55:ef:01:af:fa:1a: 8a:a2:ea:c0:07:3a:5d:d5:e9:be:f9:8c:22:dc:d6:ed:26:fd: 97:da:35:51:eb:c1:74:3c:a6:cb:2a:e8:6e:12:a8:97:d1:20: dd:b3:96:80:c6:39:6c:bd:bc:d8:e8:4d:cf:7f:ba:af:95:81: 8a:5a:8a:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6NC3shpRsr9lz9/NESOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzk5Yjk1MWM2YTZmNmFkY2M4NjhkODg1YTk0MGFkZjAw NTFhMTkwHhcNMjUxMjE5MDAwMDU0WhcNMjUxMjIwMDAwMDU0WjAzMTEwLwYDVQQD Eyg2MTA1YjE3NTg0OTQwOGNlZTJkZjU5OTk2OTcwMGI5MDU0NzMwNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9iIaghP4nX3LTtYX2MJ4e2c7Uszh +iNa4D+DFPmjCVFeE3q24ibtsdS1RaU89K8RSp4VHo8h0bMxIUxRAVXmnHa8xlk5 Bb3ssHbGMHXEsU0M8YlHNzV+dlvyp71+cT/Klr3GQqrZB6/2UN6IEfNhS2KyotMp QTKL7VHKDaQQG72V48wZegQXt6gWiF7xzEfMvDQ9YCuzBgZx/ytvx2rc5CvBQg6R S8P3Q9yiotdOfpQVsso7fefJCrJ41zwmnrD4VK1Ux0pH9kkfv8G+1ZoTfBxeuLbx nx2kamSsI+eLk6Hyq4hG5Uuxnc3SEA0fEdr27PNeZqPcshHreBbfLD1AqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEFsXWElAjO4t9ZmWlwC5BUcwchMB8GA1UdIwQY MBaAFLDJm5Ucam9q3Mho2IWpQK3wBRoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMt M2U2OTU2ZWQyYzZhLzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMtM2U2OTU2ZWQyYzZh LzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFpUHWkr EYzi/Ugf/Vj4J1ubMCb5EROG63I7lzoGqqAomUgWdGXuyaVjFPLLxTSuN3lX1YxS IxksRi63GHzqk7IkOwIvBDNs2H11wgiLZU5UxjS7eLg4Zj3hBNZup+Uv+655UOzo lsVgsRzV2FF1UjzHPRM51gLrYTY4dWCDCc5OZkNUnF4ZithIPr5a4qVcjKp8nYHS KF+Bma2kR1w1N2loler7gYorAlKD1EnDl7iRWyvp2Irbe3wQHi4C1gOgVe8Br/oa iqLqwAc6XdXpvvmMItzW7Sb9l9o1UevBdDymyyrobhKol9Eg3bOWgMY5bL282OhN z3+6r5WBilqKMg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:57:23 2025 by rpki-client