This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft File: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json) Hash identifier: dzzHtiCgRnMwnjGFLVsznpYiyWLQ7d15VXwe+noN6zM= Subject key identifier: A1:E8:81:25:70:77:20:E1:FA:D9:4C:91:FA:29:E3:51:2E:2A:DA:27 Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4 Certificate issuer: /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4 Certificate serial: 019AF19ACF197CEF4F4F23379D3233BB0F45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft Manifest number: 1272 Signing time: Sat 06 Dec 2025 03:00:45 +0000 Manifest this update: Sat 06 Dec 2025 03:00:45 +0000 Manifest next update: Sun 07 Dec 2025 03:00:45 +0000 Files and hashes: 1: 5ZcLxiewB6SlgnkXrkL_qV-6c70.roa (hash: GbaGUbv69G2XGzJlZWZreb/2hT1CRKa032XRQqRiLc0=) 2: I1O4inp7HBvWNe9o3Cdiqxo24PI.roa (hash: w0+4BIRKhD7XUvL36J282b0/EXDqyGM8URO+oQQ/ReM=) 3: QUq_as-wJbivzxLijTmqQSzAeeM.roa (hash: Obggdbq+FXYocjRAbiQV6ufwU9548OHhlSGKsE0Fnq0=) 4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: zGsLiwJjwRj+JzTIlna1KVXDbpgiEpXtL5uGTiKV16I=) 5: fUAyjzobbYqY4LtTx9KW62S7ym8.roa (hash: IdzdGJHWpk15Q0jGSrpbWLOfiHsRudIY06wcbYibU3s=) 6: rSVe0qwmHRmRSbc-BqRXWgwo8xg.roa (hash: r3p05wO+xtEje8UL55zhFJYQg8/aaGUGyXfpX1tlFYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:cf:19:7c:ef:4f:4f:23:37:9d:32:33:bb:0f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4 Validity Not Before: Dec 6 03:00:45 2025 GMT Not After : Dec 7 03:00:45 2025 GMT Subject: CN=a1e88125707720e1fad94c91fa29e3512e2ada27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:aa:c7:33:4f:6a:27:bc:55:3c:aa:97:8f: 42:7d:a9:e9:1c:10:5c:26:af:f1:55:40:a2:d4:82: 95:e4:9b:aa:34:19:70:c9:49:4b:14:f8:8b:44:64: a7:c9:f4:d0:b8:6a:37:16:3c:1e:c5:58:01:68:4d: b0:35:87:c8:98:94:55:8a:9c:81:00:98:07:9e:dd: 06:7e:89:49:ae:72:04:a5:de:4f:c7:14:bc:53:78: 5f:5a:37:88:89:cd:03:b8:bb:49:74:28:4b:2e:7e: 84:98:b2:da:c7:43:5a:4c:d0:d2:be:62:61:59:62: fc:88:0c:ff:0b:24:2b:6e:f7:af:de:a2:17:ad:2f: cd:b1:c6:17:40:c9:5e:74:6b:27:0b:fc:2e:c9:b3: 2c:af:15:00:a0:97:65:8c:0e:1e:1f:4a:b8:ee:7d: 21:ce:cd:85:8d:e8:cc:8a:9c:1e:e9:b4:71:61:fa: 58:2e:6a:81:be:8a:15:ed:c5:4f:8d:e3:06:5d:2f: e6:61:81:66:fb:be:65:ff:1a:b9:41:7f:3f:17:55: 13:4c:89:b6:c7:fe:e2:d8:1a:67:68:c6:68:8c:a1: f7:ad:00:a8:aa:3d:ec:0a:3c:56:18:97:8a:7c:32: 03:61:2e:e3:af:d6:99:81:8c:cf:9a:e7:55:8a:31: e8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E8:81:25:70:77:20:E1:FA:D9:4C:91:FA:29:E3:51:2E:2A:DA:27 X509v3 Authority Key Identifier: keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6e:f0:1a:2a:f4:07:4a:f3:1f:ae:74:b2:c6:2e:c9:3c:96: 1e:69:53:fc:52:dd:40:dd:6c:c8:13:da:24:ba:93:79:01:2c: c3:e7:6d:7c:d3:91:d2:fa:23:db:08:6c:33:fe:a6:6b:d6:2c: ed:77:01:d1:76:32:9e:ec:d7:4b:c1:82:f4:68:3b:30:ce:ee: a7:a7:ff:b7:0e:47:3c:36:47:cd:bb:9d:f8:ad:5d:35:ab:3e: e1:25:a2:c4:d5:ad:36:2a:76:26:cd:cc:dc:d5:8b:84:fb:38: f2:cd:bd:e5:2c:65:9a:06:5f:87:1c:15:16:95:10:ba:51:1c: de:42:d6:8a:63:43:55:03:38:d5:73:3d:4d:c7:2f:5d:fd:05: 4e:1e:d5:68:32:08:dd:39:1f:3f:48:90:97:fe:4e:0a:3d:59: 88:b7:f9:60:ff:c9:06:62:95:60:6e:f0:05:5c:2b:0e:55:17: 7b:8c:46:1c:47:ab:bc:72:ac:65:e0:44:32:72:ee:29:7a:d2: a3:69:0a:77:b6:9b:98:ca:f4:66:e9:57:2d:a4:4a:9f:86:21: c6:53:b8:93:f7:34:3d:3d:4b:ba:93:0b:84:a4:7f:d3:1b:7b: 22:c9:52:13:59:ab:80:4b:56:fb:32:09:24:59:f3:af:74:3d: 90:a6:ab:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxms8ZfO9PTyM3nTIzuw9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMjFjYjRiYWExNTg2MmQxYjU3NzNiZjJiZTYwY2E1ZjRm YzI0ZDQwHhcNMjUxMjA2MDMwMDQ1WhcNMjUxMjA3MDMwMDQ1WjAzMTEwLwYDVQQD EyhhMWU4ODEyNTcwNzcyMGUxZmFkOTRjOTFmYTI5ZTM1MTJlMmFkYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF+qxzNPaie8VTyql49CfanpHBBc Jq/xVUCi1IKV5JuqNBlwyUlLFPiLRGSnyfTQuGo3FjwexVgBaE2wNYfImJRVipyB AJgHnt0GfolJrnIEpd5PxxS8U3hfWjeIic0DuLtJdChLLn6EmLLax0NaTNDSvmJh WWL8iAz/CyQrbvev3qIXrS/NscYXQMledGsnC/wuybMsrxUAoJdljA4eH0q47n0h zs2FjejMipwe6bRxYfpYLmqBvooV7cVPjeMGXS/mYYFm+75l/xq5QX8/F1UTTIm2 x/7i2BpnaMZojKH3rQCoqj3sCjxWGJeKfDIDYS7jr9aZgYzPmudVijHoQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHogSVwdyDh+tlMkfop41EuKtonMB8GA1UdIwQY MBaAFP0hy0uqFYYtG1dzvyvmDKX0/CTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUt YmU1NTIwYTVjODIxLzEvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8zMjY2MDYtMTRiYS00NDM2LTk5ODUtYmU1NTIwYTVjODIx LzEvX1NITFM2b1ZoaTBiVjNPX0stWU1wZlQ4Sk5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaG7wGir0 B0rzH650ssYuyTyWHmlT/FLdQN1syBPaJLqTeQEsw+dtfNOR0voj2whsM/6ma9Ys 7XcB0XYynuzXS8GC9Gg7MM7up6f/tw5HPDZHzbud+K1dNas+4SWixNWtNip2Js3M 3NWLhPs48s295SxlmgZfhxwVFpUQulEc3kLWimNDVQM41XM9TccvXf0FTh7VaDII 3TkfP0iQl/5OCj1ZiLf5YP/JBmKVYG7wBVwrDlUXe4xGHEervHKsZeBEMnLuKXrS o2kKd7abmMr0ZulXLaRKn4YhxlO4k/c0PT1LupMLhKR/0xt7IslSE1mrgEtW+zIJ JFnzr3Q9kKarpg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:46:23 2025 by rpki-client