This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft File: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft (raw, json) Hash identifier: mfxtuX0HhYeBLaan8rldDM3y4xoVwIEO1TVbMcGGuW4= Subject key identifier: 96:E4:BB:B6:54:A0:B6:DB:70:2A:DD:E4:FA:1E:39:2E:5D:F4:D7:D1 Authority key identifier: 49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7 Certificate issuer: /CN=492999fd50a69fd0412065490f5acc75a159deb7 Certificate serial: 019B3DC816E36825598A9593881E908A39B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft Manifest number: 16E3 Signing time: Sat 20 Dec 2025 22:01:21 +0000 Manifest this update: Sat 20 Dec 2025 22:01:21 +0000 Manifest next update: Sun 21 Dec 2025 22:01:21 +0000 Files and hashes: 1: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl (hash: Qc417ghYrTYVNqzDqbx13DvsGnJjSMuFYNOdg81yQVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:16:e3:68:25:59:8a:95:93:88:1e:90:8a:39:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=492999fd50a69fd0412065490f5acc75a159deb7 Validity Not Before: Dec 20 22:01:21 2025 GMT Not After : Dec 21 22:01:21 2025 GMT Subject: CN=96e4bbb654a0b6db702adde4fa1e392e5df4d7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:66:75:71:4a:fa:0e:e5:1c:64:f7:dc:a4: 94:55:1c:40:95:db:5e:5b:b3:f1:df:4e:29:d0:f8: a1:d8:bc:db:78:68:11:0e:99:ac:9d:b8:91:6a:aa: c4:ae:0e:5d:b7:a9:94:4d:c3:13:67:b9:c4:0c:7b: e5:3d:e7:c3:4d:a7:af:0b:3f:00:23:8c:2c:5e:6b: 6e:fe:3e:af:17:2a:97:6f:d8:20:f0:cd:c2:20:35: c9:d3:1f:9a:5a:b9:bf:33:2c:23:d6:40:48:34:eb: 80:47:eb:2a:9e:86:b3:6c:6b:c3:a6:68:ab:74:9b: 76:98:a9:ac:1c:3e:10:05:6f:c5:06:6e:1a:21:6a: 6e:6f:9a:dd:c8:47:3e:30:c4:b2:b2:29:50:ab:b0: de:2e:80:e6:34:ff:24:de:30:65:4d:d0:cf:25:0a: 67:be:b3:b6:72:96:9e:01:37:4a:0d:82:32:6e:93: ba:53:b4:39:2f:1d:5d:92:c1:f4:55:68:f6:6c:76: e7:80:18:5d:ed:01:17:dc:03:d8:3a:2f:11:06:26: b9:cc:61:44:e2:da:7e:c0:3b:9b:dc:e5:00:b4:08: 80:ed:98:00:e3:6e:65:78:41:df:68:13:30:bb:e4: d0:f6:c9:b0:23:92:d4:e8:b3:1c:b3:2d:5f:e2:f6: 0f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E4:BB:B6:54:A0:B6:DB:70:2A:DD:E4:FA:1E:39:2E:5D:F4:D7:D1 X509v3 Authority Key Identifier: keyid:49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ed:1c:78:54:87:b3:16:d1:18:92:0a:c2:94:e4:79:d2:d7: b1:e7:28:cc:ed:43:27:9c:d8:7f:16:99:2e:83:31:6d:96:3e: ba:22:55:14:0e:40:2a:19:64:40:08:49:b5:0d:2f:28:a0:e0: d3:16:49:86:e5:75:9a:35:2f:0f:e0:b0:22:46:ba:bb:ff:48: 5d:d0:f1:a7:e4:11:08:00:ea:19:b6:33:e8:fb:71:2e:fe:80: d6:e2:26:f1:52:18:f9:b8:50:f8:69:22:f6:b3:0f:4f:33:bd: ea:af:4b:ab:c4:2a:35:c5:57:ca:61:66:23:b9:d3:99:64:ed: 56:96:52:81:4d:63:62:0b:88:c7:27:ac:91:db:5b:c1:af:ff: e5:86:8b:4d:d1:da:f5:23:74:3a:63:d7:80:19:ef:22:51:b3: f3:12:00:0f:81:a2:77:5e:1b:c0:5e:b2:38:b1:7e:4b:90:7c: da:9b:22:1d:29:31:22:ac:21:1d:96:7c:35:07:c8:71:2b:e2: ba:9f:80:5e:55:6c:90:ec:90:bb:14:9d:da:4e:7c:db:18:d9: 26:e9:d9:2c:de:d2:c7:36:c8:3b:86:1e:d7:fd:b7:4e:8a:e8: 36:fb:d6:30:8f:d3:cb:cd:25:82:2e:9a:db:be:6c:4a:1e:b6: 6b:f3:ef:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBbjaCVZipWTiB6QijmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5Mjk5OWZkNTBhNjlmZDA0MTIwNjU0OTBmNWFjYzc1YTE1 OWRlYjcwHhcNMjUxMjIwMjIwMTIxWhcNMjUxMjIxMjIwMTIxWjAzMTEwLwYDVQQD Eyg5NmU0YmJiNjU0YTBiNmRiNzAyYWRkZTRmYTFlMzkyZTVkZjRkN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLpmdXFK+g7lHGT33KSUVRxAldte W7Px304p0Pih2LzbeGgRDpmsnbiRaqrErg5dt6mUTcMTZ7nEDHvlPefDTaevCz8A I4wsXmtu/j6vFyqXb9gg8M3CIDXJ0x+aWrm/Mywj1kBINOuAR+sqnoazbGvDpmir dJt2mKmsHD4QBW/FBm4aIWpub5rdyEc+MMSysilQq7DeLoDmNP8k3jBlTdDPJQpn vrO2cpaeATdKDYIybpO6U7Q5Lx1dksH0VWj2bHbngBhd7QEX3APYOi8RBia5zGFE 4tp+wDub3OUAtAiA7ZgA425leEHfaBMwu+TQ9smwI5LU6LMcsy1f4vYPyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbku7ZUoLbbcCrd5PoeOS5d9NfRMB8GA1UdIwQY MBaAFEkpmf1Qpp/QQSBlSQ9azHWhWd63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85YjE5YmUtNGI2Yy00ZGQ4LTliNjgt NDhmNjc3ZmUyNTVkLzEvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85YjE5YmUtNGI2Yy00ZGQ4LTliNjgtNDhmNjc3ZmUyNTVk LzEvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYu0ceFSH sxbRGJIKwpTkedLXsecozO1DJ5zYfxaZLoMxbZY+uiJVFA5AKhlkQAhJtQ0vKKDg 0xZJhuV1mjUvD+CwIka6u/9IXdDxp+QRCADqGbYz6PtxLv6A1uIm8VIY+bhQ+Gki 9rMPTzO96q9Lq8QqNcVXymFmI7nTmWTtVpZSgU1jYguIxyeskdtbwa//5YaLTdHa 9SN0OmPXgBnvIlGz8xIAD4Gid14bwF6yOLF+S5B82psiHSkxIqwhHZZ8NQfIcSvi up+AXlVskOyQuxSd2k582xjZJunZLN7SxzbIO4Ye1/23ToroNvvWMI/Ty80lgi6a 275sSh62a/PvQg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:36:15 2025 by rpki-client