This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json) Hash identifier: sVpJ+PDKOKukWOx/yivuVWZnOMpQEgzJ/POEIQuSRwo= Subject key identifier: A0:AF:F1:9C:D3:54:D1:B4:99:A1:10:6B:3B:26:A8:4D:9E:94:38:E4 Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac Certificate serial: 019AF12E433BF8BD171B9C67D758D6E7122C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft Manifest number: 157E Signing time: Sat 06 Dec 2025 01:02:12 +0000 Manifest this update: Sat 06 Dec 2025 01:02:12 +0000 Manifest next update: Sun 07 Dec 2025 01:02:12 +0000 Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: kcasqXoyQBwerwt0jGXv9j5xNw4FjemmMSf+3clpApM=) 2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:43:3b:f8:bd:17:1b:9c:67:d7:58:d6:e7:12:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac Validity Not Before: Dec 6 01:02:12 2025 GMT Not After : Dec 7 01:02:12 2025 GMT Subject: CN=a0aff19cd354d1b499a1106b3b26a84d9e9438e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cf:2d:f5:5d:bb:c5:c0:5c:0f:dc:4b:c9:f7: ee:8f:7f:ac:d0:b8:76:1d:bb:dc:36:07:ac:91:2f: 3b:a0:dc:94:34:d0:5e:52:fc:f3:09:0d:f2:b6:40: b7:66:c6:10:ce:6d:d6:34:4f:35:6b:ff:47:b4:37: 86:c6:59:5b:08:83:36:87:8c:3c:a5:31:6e:96:ff: ff:f1:d8:55:78:8e:40:71:bc:94:e8:11:c0:9c:f7: 96:64:93:22:5c:94:7d:69:2e:2b:6b:45:1b:65:86: bd:93:19:6c:34:4f:53:f1:60:61:34:54:39:be:a5: 4f:23:bc:77:1c:b9:f6:ef:d0:cd:97:ca:f3:79:a5: dd:f5:14:ca:93:f5:03:06:f8:94:b7:d5:ac:8f:45: 38:41:6c:62:5e:af:11:ad:b1:7a:af:fd:b5:ab:56: 5a:db:92:03:b4:be:e4:f2:5f:02:0a:73:f3:99:d3: 70:41:0e:74:f2:1e:c4:8a:05:41:30:af:e4:b2:81: 33:f3:65:22:31:c6:cd:10:63:89:ac:35:c5:1c:45: 54:bd:29:c3:d2:23:d8:fb:a0:6c:1a:6a:6c:01:c4: dd:9f:30:78:e5:8b:b1:16:89:8d:e4:77:fe:e8:26: 73:eb:87:50:f1:c1:f1:b7:64:40:a5:dd:93:92:a2: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AF:F1:9C:D3:54:D1:B4:99:A1:10:6B:3B:26:A8:4D:9E:94:38:E4 X509v3 Authority Key Identifier: keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f0:be:11:63:6c:e2:93:e7:23:29:73:59:c6:e6:f9:43:d9: 06:23:26:d2:92:4e:12:70:a4:40:30:a2:76:ad:95:92:68:3e: f9:79:67:4e:23:be:c3:76:1e:29:4f:73:24:1e:bc:57:f0:28: 68:93:4b:ce:56:bf:da:13:70:54:46:7a:53:f8:6d:84:01:43: 98:db:3c:30:2f:2d:6f:71:dc:15:85:98:23:b3:0a:be:27:6e: 27:37:1a:13:4c:f2:5b:0f:42:23:b5:cb:60:30:51:89:44:98: be:e1:30:71:8b:d0:55:8f:60:3c:30:3e:fb:49:48:fa:98:cd: bc:42:0e:06:a2:8f:65:05:32:1b:e2:86:28:62:66:7e:d9:be: 14:20:ce:7c:eb:4a:53:47:6b:53:8e:7c:4f:bc:e5:95:88:3b: a3:fb:17:63:94:39:51:1c:42:9e:9c:b1:02:b3:fc:69:a1:37: f8:86:d5:c1:c6:96:5d:fd:b2:b0:b7:89:80:35:e6:0c:8b:c9: bc:74:fd:3e:65:de:8a:0b:da:b3:b5:25:bd:bf:0a:dc:6a:9c: 79:7c:a2:63:f7:59:d3:57:a1:5f:8b:15:de:8f:50:63:63:7d: 1b:8a:ae:d3:8f:87:44:c8:c9:4f:4a:df:ce:52:3a:85:63:ef: f8:3e:9e:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkM7+L0XG5xn11jW5xIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NzY4OTAyNGYxNmU3YmMyZTkwOTcwNmMwNmQ5MTkwM2M1 YzdkYWMwHhcNMjUxMjA2MDEwMjEyWhcNMjUxMjA3MDEwMjEyWjAzMTEwLwYDVQQD EyhhMGFmZjE5Y2QzNTRkMWI0OTlhMTEwNmIzYjI2YTg0ZDllOTQzOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs8t9V27xcBcD9xLyffuj3+s0Lh2 HbvcNgeskS87oNyUNNBeUvzzCQ3ytkC3ZsYQzm3WNE81a/9HtDeGxllbCIM2h4w8 pTFulv//8dhVeI5AcbyU6BHAnPeWZJMiXJR9aS4ra0UbZYa9kxlsNE9T8WBhNFQ5 vqVPI7x3HLn279DNl8rzeaXd9RTKk/UDBviUt9Wsj0U4QWxiXq8RrbF6r/21q1Za 25IDtL7k8l8CCnPzmdNwQQ508h7EigVBMK/ksoEz82UiMcbNEGOJrDXFHEVUvSnD 0iPY+6BsGmpsAcTdnzB45YuxFomN5Hf+6CZz64dQ8cHxt2RApd2TkqI4LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCv8ZzTVNG0maEQazsmqE2elDjkMB8GA1UdIwQY MBaAFEh2iQJPFue8LpCXBsBtkZA8XH2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEt NmU2MzYxYmVhOTg5LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEtNmU2MzYxYmVhOTg5 LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/C+EWNs 4pPnIylzWcbm+UPZBiMm0pJOEnCkQDCidq2Vkmg++XlnTiO+w3YeKU9zJB68V/Ao aJNLzla/2hNwVEZ6U/hthAFDmNs8MC8tb3HcFYWYI7MKviduJzcaE0zyWw9CI7XL YDBRiUSYvuEwcYvQVY9gPDA++0lI+pjNvEIOBqKPZQUyG+KGKGJmftm+FCDOfOtK U0drU458T7zllYg7o/sXY5Q5URxCnpyxArP8aaE3+IbVwcaWXf2ysLeJgDXmDIvJ vHT9PmXeigvas7Ulvb8K3GqceXyiY/dZ01ehX4sV3o9QY2N9G4qu04+HRMjJT0rf zlI6hWPv+D6e2w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:55 2025 by rpki-client