This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft File: smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json) Hash identifier: CyZpumuy73MIoVuTwfvpJID8uqn4opsdUe9x20bU8ZQ= Subject key identifier: 14:E9:C0:07:55:EF:2D:29:6C:B2:F1:78:3C:95:FD:F7:8F:1B:C0:01 Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B Certificate issuer: /CN=b26207c32ce98a1ade9224863b463a82f8f8682b Certificate serial: 019B3FECE7EC042E002079E94074A2EC68E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft Manifest number: 021C Signing time: Sun 21 Dec 2025 08:00:49 +0000 Manifest this update: Sun 21 Dec 2025 08:00:49 +0000 Manifest next update: Mon 22 Dec 2025 08:00:49 +0000 Files and hashes: 1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: MmqUdg4eKsYFlFnFe0kPwfZhGhS8yX6dpdnJig8XaWk=) 2: vfgaajpx_IwIslySYTAXUF8b2bQ.roa (hash: 5BG+nyK3l0jI+maIom4ahnVVqUeZ02d+C1Q9Lbzzldo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:e7:ec:04:2e:00:20:79:e9:40:74:a2:ec:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b Validity Not Before: Dec 21 08:00:49 2025 GMT Not After : Dec 22 08:00:49 2025 GMT Subject: CN=14e9c00755ef2d296cb2f1783c95fdf78f1bc001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ca:0f:1c:d4:90:ae:77:51:43:22:54:72:9d: 6e:8e:ae:f8:8d:2f:d7:cc:3b:de:8c:dc:86:c9:3d: 82:75:d0:34:db:cd:6d:67:44:01:0b:ee:ca:90:34: 04:b8:ce:8d:93:6a:cd:15:85:6c:85:bc:ea:1b:98: 66:97:f1:ba:51:15:10:1b:d6:73:e4:7f:a4:f0:f3: 4c:52:2b:28:25:fb:13:7b:b3:fc:65:92:69:14:19: 6c:f3:f3:2f:ee:34:83:07:81:ac:9c:e8:50:74:d6: 23:34:55:cd:fd:ab:86:43:5d:c1:f5:19:c6:24:c6: a3:6b:c2:0b:fc:02:4a:87:78:77:80:6e:32:74:7e: ae:95:35:2b:88:86:55:12:96:da:76:78:14:b0:da: 46:20:0a:aa:32:79:67:6d:ad:eb:53:cd:c7:a6:66: 04:c5:24:18:6b:69:5a:30:48:33:1e:f2:62:92:4e: 3a:f7:7a:54:d9:e9:06:2d:19:99:e9:ba:73:9b:68: c2:12:01:e2:62:37:8a:f4:31:e4:58:cf:81:0f:2b: 3f:e6:b2:c0:60:60:46:5c:dd:50:f8:cf:41:a6:3c: 69:70:e8:6d:5a:9e:f0:95:eb:89:c6:70:ca:74:06: c4:a3:a9:a4:e9:df:be:15:c8:6e:95:16:4a:5c:3e: 84:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E9:C0:07:55:EF:2D:29:6C:B2:F1:78:3C:95:FD:F7:8F:1B:C0:01 X509v3 Authority Key Identifier: keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a6:d1:39:b9:c9:e6:33:26:84:92:14:a2:89:8e:b3:58:e2: 58:55:bc:8f:17:13:c2:bc:50:77:14:6b:26:79:ea:a9:82:a9: a3:20:f4:8e:03:6d:4f:7a:ac:f7:91:e7:82:88:38:72:7d:a9: 88:b6:b9:c5:0d:e8:d8:fb:65:0d:28:c3:3c:49:93:93:71:31: dd:ce:19:e4:74:c8:fa:7e:0c:77:0a:f2:ff:50:ae:2f:6a:b2: 3e:76:ef:b4:47:54:a1:4c:cc:7b:78:09:e6:be:2d:62:57:27: 70:d3:26:e0:6d:ca:4a:65:d0:42:cb:c0:31:ed:a7:aa:81:d3: bf:57:3e:8b:01:ad:4e:8c:41:51:64:85:6a:55:79:c9:8a:01: 61:51:ed:2e:0b:4f:0b:73:5e:16:88:18:1f:1a:d5:3a:11:f0: 11:3a:63:55:fe:ee:50:2e:99:39:75:16:66:e5:97:d6:d2:d9: d7:d7:a6:11:57:90:fd:74:1f:ec:5c:d7:d8:a0:62:94:85:19: 6c:56:97:1f:2e:f7:51:2b:34:f2:17:11:9c:d0:0a:a7:ee:59: 02:04:58:9f:fa:0e:be:10:b6:a9:ba:26:4a:12:2a:3a:2f:63: a6:ac:d1:d2:36:62:57:52:e2:c0:47:3d:9b:c9:78:ce:24:1a: dc:bc:df:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7OfsBC4AIHnpQHSi7GjgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNjIwN2MzMmNlOThhMWFkZTkyMjQ4NjNiNDYzYTgyZjhm ODY4MmIwHhcNMjUxMjIxMDgwMDQ5WhcNMjUxMjIyMDgwMDQ5WjAzMTEwLwYDVQQD EygxNGU5YzAwNzU1ZWYyZDI5NmNiMmYxNzgzYzk1ZmRmNzhmMWJjMDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08oPHNSQrndRQyJUcp1ujq74jS/X zDvejNyGyT2CddA0281tZ0QBC+7KkDQEuM6Nk2rNFYVshbzqG5hml/G6URUQG9Zz 5H+k8PNMUisoJfsTe7P8ZZJpFBls8/Mv7jSDB4GsnOhQdNYjNFXN/auGQ13B9RnG JMaja8IL/AJKh3h3gG4ydH6ulTUriIZVEpbadngUsNpGIAqqMnlnba3rU83HpmYE xSQYa2laMEgzHvJikk4693pU2ekGLRmZ6bpzm2jCEgHiYjeK9DHkWM+BDys/5rLA YGBGXN1Q+M9BpjxpcOhtWp7wleuJxnDKdAbEo6mk6d++FchulRZKXD6EWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTpwAdV7y0pbLLxeDyV/fePG8ABMB8GA1UdIwQY MBaAFLJiB8Ms6Yoa3pIkhjtGOoL4+GgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc21JSHd5enBpaHJla2lTR08wWTZndmo0YUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85MDE5OWItZmI2ZC00OGY3LWI1NTAt Yjc3MzhhMGJlZmFmLzEvc21JSHd5enBpaHJla2lTR08wWTZndmo0YUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85MDE5OWItZmI2ZC00OGY3LWI1NTAtYjc3MzhhMGJlZmFm LzEvc21JSHd5enBpaHJla2lTR08wWTZndmo0YUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqbRObnJ 5jMmhJIUoomOs1jiWFW8jxcTwrxQdxRrJnnqqYKpoyD0jgNtT3qs95Hngog4cn2p iLa5xQ3o2PtlDSjDPEmTk3Ex3c4Z5HTI+n4Mdwry/1CuL2qyPnbvtEdUoUzMe3gJ 5r4tYlcncNMm4G3KSmXQQsvAMe2nqoHTv1c+iwGtToxBUWSFalV5yYoBYVHtLgtP C3NeFogYHxrVOhHwETpjVf7uUC6ZOXUWZuWX1tLZ19emEVeQ/XQf7FzX2KBilIUZ bFaXHy73USs08hcRnNAKp+5ZAgRYn/oOvhC2qbomShIqOi9jpqzR0jZiV1LiwEc9 m8l4ziQa3Lzfmg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:51 2025 by rpki-client