This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft File: SMdByd9bLkiZO5GDt5_zRrQxk4E.mft (raw, json) Hash identifier: GkDqKRYAEaCIRUEav0osfbraX55VFX2NxI0vppccGxM= Subject key identifier: 15:5B:33:D0:FF:9F:6A:01:58:02:63:A9:E7:F1:14:F2:E1:57:65:D3 Authority key identifier: 48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81 Certificate issuer: /CN=48c741c9df5b2e48993b9183b79ff346b4319381 Certificate serial: 019B40C8AF032C0906340BA712D8E2C96EE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 12:00:52 +0000 Manifest this update: Sun 21 Dec 2025 12:00:52 +0000 Manifest next update: Mon 22 Dec 2025 12:00:52 +0000 Files and hashes: 1: SMdByd9bLkiZO5GDt5_zRrQxk4E.crl (hash: CIDu0GIq/OKcld0Xwjp4DF35U94e9tVKdNnBZiWmkPs=) 2: joaFEW-NdPhZyszfRS8lbScgqm0.roa (hash: 0utj+sPXgGZYWSm41u/aEZLOVRC1lSd5e6cU8LiAr60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:af:03:2c:09:06:34:0b:a7:12:d8:e2:c9:6e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c741c9df5b2e48993b9183b79ff346b4319381 Validity Not Before: Dec 21 12:00:52 2025 GMT Not After : Dec 22 12:00:52 2025 GMT Subject: CN=155b33d0ff9f6a01580263a9e7f114f2e15765d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:d3:17:d2:ec:81:07:52:2e:19:bb:05:da: 5f:a2:24:72:88:88:9f:7e:52:46:1c:d0:97:19:57: af:be:ec:75:98:eb:65:ae:1d:5a:f5:68:17:f5:6e: 7a:a3:4d:3f:08:36:67:2b:ed:62:d4:05:79:c6:b4: 33:d4:ba:d4:d1:7a:03:f5:0f:97:99:ec:07:ee:7c: 66:36:9d:5c:ce:af:1b:21:b8:87:cb:14:7c:e8:aa: 99:9c:f0:c2:d3:f8:16:f0:a8:7a:83:0e:4c:80:95: fe:4e:db:07:e6:97:f7:9a:b7:43:ce:c3:2c:4c:83: c4:11:5b:55:d0:46:5b:77:80:67:cd:d6:19:37:cf: c6:b8:bf:6d:32:ae:ee:49:08:80:2d:c1:aa:ee:b0: 92:16:7a:3e:7c:fe:cc:f1:4b:90:5b:2c:20:ec:bf: 01:8a:36:62:ef:c7:87:a6:27:64:1c:12:48:54:b5: 89:3d:2d:c7:f4:84:fe:05:85:e6:d3:58:33:15:f6: ab:19:c8:5b:d5:bc:e8:30:a5:32:1b:c0:ef:46:5d: ca:a7:2b:05:c9:3d:8d:df:dc:a7:82:ab:ec:79:2b: 6a:c1:96:ba:d5:7e:90:12:23:2b:e3:b0:30:31:74: 46:5d:1b:3d:da:9b:a2:0d:81:10:12:33:a8:bb:25: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5B:33:D0:FF:9F:6A:01:58:02:63:A9:E7:F1:14:F2:E1:57:65:D3 X509v3 Authority Key Identifier: keyid:48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b2:a7:cb:e2:6d:74:b3:90:05:a5:5a:0a:cd:30:06:a6:67: f1:ae:63:9e:25:70:7f:fe:38:63:d1:ab:c9:ef:93:00:07:05: bf:be:45:43:3b:6a:78:0e:99:a8:8e:a7:34:9b:97:a0:ff:40: bc:63:15:5c:c9:d7:96:42:b6:8d:6b:4e:7b:31:d9:24:9f:ce: af:47:d1:12:d0:84:55:60:dd:0f:c5:79:c9:7c:e7:7f:ae:2a: 7c:79:2c:73:ff:88:cb:0a:55:cd:9c:55:0a:0e:03:e4:2a:18: 55:86:0b:6d:98:c7:fe:30:46:01:37:a4:d3:1b:18:98:a1:bc: 62:82:af:51:35:52:43:18:1b:23:01:0d:16:b6:6d:80:da:91: 35:a2:dc:63:db:32:18:53:99:61:64:20:55:90:4d:e0:6f:31: c6:af:e5:9e:3f:c8:89:f8:b6:61:f8:ef:28:62:36:94:52:60: 4e:71:7a:eb:f8:fd:77:ec:53:4a:07:8e:44:49:76:82:b3:d1: 4d:5c:27:2f:27:be:79:24:49:6a:ad:3d:a0:ba:e9:4e:cc:7a: df:08:52:0d:f0:db:2c:09:6c:9d:74:4b:ce:93:45:8d:df:52: 37:19:16:19:24:ab:1c:d8:df:a7:37:80:54:73:c5:79:80:23: b5:37:a9:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyK8DLAkGNAunEtjiyW7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Yzc0MWM5ZGY1YjJlNDg5OTNiOTE4M2I3OWZmMzQ2YjQz MTkzODEwHhcNMjUxMjIxMTIwMDUyWhcNMjUxMjIyMTIwMDUyWjAzMTEwLwYDVQQD EygxNTViMzNkMGZmOWY2YTAxNTgwMjYzYTllN2YxMTRmMmUxNTc2NWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/jTF9LsgQdSLhm7BdpfoiRyiIif flJGHNCXGVevvux1mOtlrh1a9WgX9W56o00/CDZnK+1i1AV5xrQz1LrU0XoD9Q+X mewH7nxmNp1czq8bIbiHyxR86KqZnPDC0/gW8Kh6gw5MgJX+TtsH5pf3mrdDzsMs TIPEEVtV0EZbd4BnzdYZN8/GuL9tMq7uSQiALcGq7rCSFno+fP7M8UuQWywg7L8B ijZi78eHpidkHBJIVLWJPS3H9IT+BYXm01gzFfarGchb1bzoMKUyG8DvRl3KpysF yT2N39yngqvseStqwZa61X6QEiMr47AwMXRGXRs92puiDYEQEjOouyVfzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVbM9D/n2oBWAJjqefxFPLhV2XTMB8GA1UdIwQY MBaAFEjHQcnfWy5ImTuRg7ef80a0MZOBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80NTgyODItNTQwNS00YjE3LTk5N2Qt N2NkNTk2MTljMGQ2LzEvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80NTgyODItNTQwNS00YjE3LTk5N2QtN2NkNTk2MTljMGQ2 LzEvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbKny+Jt dLOQBaVaCs0wBqZn8a5jniVwf/44Y9Grye+TAAcFv75FQztqeA6ZqI6nNJuXoP9A vGMVXMnXlkK2jWtOezHZJJ/Or0fREtCEVWDdD8V5yXznf64qfHksc/+IywpVzZxV Cg4D5CoYVYYLbZjH/jBGATek0xsYmKG8YoKvUTVSQxgbIwENFrZtgNqRNaLcY9sy GFOZYWQgVZBN4G8xxq/lnj/Iifi2YfjvKGI2lFJgTnF66/j9d+xTSgeOREl2grPR TVwnLye+eSRJaq09oLrpTsx63whSDfDbLAlsnXRLzpNFjd9SNxkWGSSrHNjfpzeA VHPFeYAjtTep5Q== -----END CERTIFICATE-----Generated at Sun Dec 21 15:34:39 2025 by rpki-client