This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json) Hash identifier: nmyIxf/g5lPXur+Wh+daiOT1uXTAuduhIcvZDZD0sMo= Subject key identifier: 2D:AA:FE:AC:F1:38:B9:12:F5:68:35:28:11:0D:BD:5E:2A:FC:33:C2 Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19 Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19 Certificate serial: 019B300C09D0A44AC30CE18644155A9BB30B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft Manifest number: 0E13 Signing time: Thu 18 Dec 2025 06:00:53 +0000 Manifest this update: Thu 18 Dec 2025 06:00:53 +0000 Manifest next update: Fri 19 Dec 2025 06:00:53 +0000 Files and hashes: 1: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (hash: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=) 2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: FjtdJ5o9NQy4PnR+Jt8pX2+8LeY+uz3Pi4NQNxHlmUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:09:d0:a4:4a:c3:0c:e1:86:44:15:5a:9b:b3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19 Validity Not Before: Dec 18 06:00:53 2025 GMT Not After : Dec 19 06:00:53 2025 GMT Subject: CN=2daafeacf138b912f5683528110dbd5e2afc33c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:48:68:fe:65:53:d9:5a:59:69:a5:fd:cd: 96:98:c1:e1:b3:8d:3f:b5:2c:4d:a4:80:13:9c:a9: 48:40:72:46:c8:34:31:da:9a:d4:ac:d4:73:73:3e: 24:b1:27:3d:5c:c4:be:34:eb:f3:eb:dc:2f:f8:7a: 5b:a1:aa:00:34:05:8e:32:0a:ca:85:73:35:fb:1d: e6:d6:ba:16:75:6d:87:26:bc:34:19:90:82:b4:56: 11:c4:cc:19:2f:1a:5f:f2:2a:8b:c5:ef:a0:74:2e: a2:84:ed:35:42:87:0a:10:5d:21:2e:98:9d:7f:65: c0:75:ce:89:ff:e1:ae:1a:26:eb:d3:a0:e4:94:bf: 14:58:25:09:55:56:75:47:38:25:59:61:83:ff:ba: d2:d7:0f:91:37:b2:53:da:6f:aa:9d:49:20:37:2d: 7a:93:c7:c2:f1:f0:30:e1:34:22:ed:7e:42:ce:23: da:4f:2f:3f:75:78:a1:c9:19:aa:10:09:43:e9:72: 69:4a:ac:93:fa:7d:c9:71:2c:02:63:fa:84:c3:fa: e7:bf:cc:87:50:ee:36:c5:f7:dc:95:b1:09:b6:70: eb:0a:b7:3b:07:b3:5d:8d:3f:03:f0:0c:1a:e8:e4: 89:05:30:04:e3:ee:46:3f:f1:0b:7f:9f:b4:41:12: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AA:FE:AC:F1:38:B9:12:F5:68:35:28:11:0D:BD:5E:2A:FC:33:C2 X509v3 Authority Key Identifier: keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a1:06:81:77:d1:03:ba:cc:04:b3:6b:ab:5a:71:05:60:5c: 2a:fa:55:38:43:93:ea:16:7f:d6:0b:d2:3f:e6:e1:c4:34:fc: cd:ac:74:29:9f:8d:69:2c:fd:ed:33:37:ca:e4:11:1d:18:f0: a1:bb:b9:a3:bb:15:70:fd:30:a4:38:39:31:3c:c5:13:15:9c: 7b:cd:f9:3c:05:56:69:b2:f0:b0:57:ab:52:36:6e:91:02:01: 82:41:e6:4f:00:e2:f3:9f:3b:11:2d:66:9a:21:1d:49:54:15: c5:0b:16:b4:1a:80:f0:36:0a:9c:b7:b2:41:ed:9d:a6:be:f3: 45:d6:d8:e5:5d:8c:f6:c2:93:11:f8:00:40:74:58:f0:2a:76: ba:4a:4e:7a:53:29:2e:42:f5:d6:bb:1f:fe:8f:04:0b:04:c2: cb:a7:26:a8:2a:dd:e2:07:6a:a7:92:45:ae:3e:d1:23:09:80: 6d:1d:2c:92:82:c2:7f:42:fc:89:f1:78:ed:36:59:dd:70:d9: 17:20:30:c3:2e:2f:a6:fb:02:f8:a1:73:73:07:41:2f:b3:f2: f5:6a:ea:7a:1d:11:b7:cb:93:62:1a:50:04:80:a8:2f:58:37: e0:ea:04:26:25:33:98:a0:01:4b:58:63:a7:73:8b:7b:0b:a4: bc:24:0e:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDAnQpErDDOGGRBVam7MLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzk5Yjk1MWM2YTZmNmFkY2M4NjhkODg1YTk0MGFkZjAw NTFhMTkwHhcNMjUxMjE4MDYwMDUzWhcNMjUxMjE5MDYwMDUzWjAzMTEwLwYDVQQD EygyZGFhZmVhY2YxMzhiOTEyZjU2ODM1MjgxMTBkYmQ1ZTJhZmMzM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQtIaP5lU9laWWml/c2WmMHhs40/ tSxNpIATnKlIQHJGyDQx2prUrNRzcz4ksSc9XMS+NOvz69wv+HpboaoANAWOMgrK hXM1+x3m1roWdW2HJrw0GZCCtFYRxMwZLxpf8iqLxe+gdC6ihO01QocKEF0hLpid f2XAdc6J/+GuGibr06DklL8UWCUJVVZ1RzglWWGD/7rS1w+RN7JT2m+qnUkgNy16 k8fC8fAw4TQi7X5CziPaTy8/dXihyRmqEAlD6XJpSqyT+n3JcSwCY/qEw/rnv8yH UO42xffclbEJtnDrCrc7B7NdjT8D8Awa6OSJBTAE4+5GP/ELf5+0QRIjmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2q/qzxOLkS9Wg1KBENvV4q/DPCMB8GA1UdIwQY MBaAFLDJm5Ucam9q3Mho2IWpQK3wBRoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMt M2U2OTU2ZWQyYzZhLzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMtM2U2OTU2ZWQyYzZh LzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6EGgXfR A7rMBLNrq1pxBWBcKvpVOEOT6hZ/1gvSP+bhxDT8zax0KZ+NaSz97TM3yuQRHRjw obu5o7sVcP0wpDg5MTzFExWce835PAVWabLwsFerUjZukQIBgkHmTwDi8587ES1m miEdSVQVxQsWtBqA8DYKnLeyQe2dpr7zRdbY5V2M9sKTEfgAQHRY8Cp2ukpOelMp LkL11rsf/o8ECwTCy6cmqCrd4gdqp5JFrj7RIwmAbR0skoLCf0L8ifF47TZZ3XDZ FyAwwy4vpvsC+KFzcwdBL7Py9Wrqeh0Rt8uTYhpQBICoL1g34OoEJiUzmKABS1hj p3OLewukvCQOKA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:06:20 2025 by rpki-client