This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft File: shUnDjtZdrRPOt7OVwR9HgeHunU.mft (raw, json) Hash identifier: YEkiaRyNlvnMWfYk1Ah9fRDPTt+PnTYlQPRNpGYK3y4= Subject key identifier: DC:EC:58:89:94:4C:11:1A:34:B3:E9:E8:08:4E:99:75:37:26:84:77 Authority key identifier: B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75 Certificate issuer: /CN=b215270e3b5976b44f3adece57047d1e0787ba75 Certificate serial: 019AF2766702BE597729015A8740A224220D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: shUnDjtZdrRPOt7OVwR9HgeHunU.crl (hash: 7JIPe9sSltc6MxAPLhlQkrG64l2MxQz1nHFdneuvBto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:67:02:be:59:77:29:01:5a:87:40:a2:24:22:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b215270e3b5976b44f3adece57047d1e0787ba75 Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=dcec5889944c111a34b3e9e8084e997537268477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:68:ef:6d:03:ed:fb:c8:be:05:98:e2:37:2c: a6:f5:cf:d8:2e:6f:31:19:90:7a:36:75:89:4e:af: d9:ce:ea:4e:b7:ad:e5:ef:e5:fc:cb:ed:e0:c2:cb: 36:f1:bd:cd:36:da:bf:4b:0d:3d:9e:70:83:30:01: 24:e9:8d:13:a4:d2:d3:c8:e2:22:2d:f9:6d:3d:f5: 8b:37:42:6d:59:2a:ea:06:60:73:eb:ea:de:52:d2: c0:95:30:9e:76:91:27:28:fb:0a:e2:c1:ee:4c:37: b9:5c:bd:45:b2:94:8c:0e:38:d6:48:5a:f2:44:9a: 16:c8:c0:c0:32:9e:1f:5c:51:c9:2e:78:3f:61:5e: f5:3c:9c:96:2a:91:2f:fe:cb:11:ae:1b:71:c3:b2: 4d:92:d7:c8:ba:98:f6:bd:fa:be:ed:14:83:ea:f8: 17:f6:17:c6:5c:c4:63:86:6e:2c:7c:1f:ea:28:10: 65:d7:85:1a:6f:ac:ef:3d:e0:cb:fe:e9:e0:71:22: 8d:04:7c:68:8d:6c:5b:d6:c6:5e:0a:34:61:21:a8: a3:1e:31:d5:96:db:cc:85:dc:5b:69:a6:97:b3:18: 13:84:6d:66:df:f0:d5:b5:5b:88:e4:b2:f3:0a:c4: 3b:b0:cd:8a:39:59:35:ac:fb:f1:e5:8e:4f:e2:03: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EC:58:89:94:4C:11:1A:34:B3:E9:E8:08:4E:99:75:37:26:84:77 X509v3 Authority Key Identifier: keyid:B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:67:48:7e:9f:d7:f8:5b:58:13:71:08:84:6c:2f:25:3f:28: 63:2c:71:24:a5:5c:76:be:e8:96:77:4f:c5:96:5c:c9:50:85: d1:7d:de:66:9e:4e:d9:ce:ad:c0:2e:f5:b9:4d:11:ba:94:c6: d7:9a:47:db:c0:a2:a9:2b:c3:80:d2:45:28:ac:10:9c:b1:d1: f7:45:b3:d3:e6:a4:f8:2e:41:23:c6:ce:90:b2:84:74:6e:2e: 57:3f:f1:e2:b9:fb:29:26:df:a7:9d:84:4f:b6:3a:d9:33:7f: 79:2c:ef:dc:b0:1d:52:0d:a2:71:1d:a5:4b:4c:9b:3d:c0:be: 99:c2:12:09:92:9c:8e:02:cb:3c:ac:61:09:d0:a5:d7:51:04: a4:7e:58:f4:12:7f:b3:57:b5:d5:7f:1f:96:91:0a:93:78:88: 93:e6:9f:b2:ee:e6:7c:5f:0a:57:a6:3c:84:b4:61:5c:70:eb: 30:79:a2:5d:40:ce:f6:f9:7c:ff:7f:b3:e3:f3:11:15:ce:a4: 22:94:e2:cd:42:06:b0:17:d1:63:a3:9b:1e:6e:45:6f:05:29: 97:dc:c1:18:cb:14:27:b6:ac:10:5c:d6:2e:8f:75:7f:a7:f3: 8e:38:2d:b3:75:b6:fa:72:f0:a4:d8:d1:c7:24:b6:4b:93:61: ec:9e:ac:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmcCvll3KQFah0CiJCINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMTUyNzBlM2I1OTc2YjQ0ZjNhZGVjZTU3MDQ3ZDFlMDc4 N2JhNzUwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD EyhkY2VjNTg4OTk0NGMxMTFhMzRiM2U5ZTgwODRlOTk3NTM3MjY4NDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGjvbQPt+8i+BZjiNyym9c/YLm8x GZB6NnWJTq/ZzupOt63l7+X8y+3gwss28b3NNtq/Sw09nnCDMAEk6Y0TpNLTyOIi LfltPfWLN0JtWSrqBmBz6+reUtLAlTCedpEnKPsK4sHuTDe5XL1FspSMDjjWSFry RJoWyMDAMp4fXFHJLng/YV71PJyWKpEv/ssRrhtxw7JNktfIupj2vfq+7RSD6vgX 9hfGXMRjhm4sfB/qKBBl14Uab6zvPeDL/ungcSKNBHxojWxb1sZeCjRhIaijHjHV ltvMhdxbaaaXsxgThG1m3/DVtVuI5LLzCsQ7sM2KOVk1rPvx5Y5P4gNiwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzsWImUTBEaNLPp6AhOmXU3JoR3MB8GA1UdIwQY MBaAFLIVJw47WXa0TzrezlcEfR4Hh7p1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2hVbkRqdFpkclJQT3Q3T1Z3UjlIZ2VIdW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iZDU5YWUtNWI3ZC00YzI2LThlMTQt MjRiOWU4MjExODg1LzEvc2hVbkRqdFpkclJQT3Q3T1Z3UjlIZ2VIdW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9iZDU5YWUtNWI3ZC00YzI2LThlMTQtMjRiOWU4MjExODg1 LzEvc2hVbkRqdFpkclJQT3Q3T1Z3UjlIZ2VIdW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2dIfp/X +FtYE3EIhGwvJT8oYyxxJKVcdr7olndPxZZcyVCF0X3eZp5O2c6twC71uU0RupTG 15pH28CiqSvDgNJFKKwQnLHR90Wz0+ak+C5BI8bOkLKEdG4uVz/x4rn7KSbfp52E T7Y62TN/eSzv3LAdUg2icR2lS0ybPcC+mcISCZKcjgLLPKxhCdCl11EEpH5Y9BJ/ s1e11X8flpEKk3iIk+afsu7mfF8KV6Y8hLRhXHDrMHmiXUDO9vl8/3+z4/MRFc6k IpTizUIGsBfRY6ObHm5FbwUpl9zBGMsUJ7asEFzWLo91f6fzjjgts3W2+nLwpNjR xyS2S5Nh7J6sBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:16 2025 by rpki-client