This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json) Hash identifier: Tiz5nGFBHhzHhOL8KlGxY1ET0ju0c4p8vb2/GcVsOYA= Subject key identifier: 9F:E9:A0:BE:D9:32:E1:0F:9F:AE:DD:AC:B3:44:41:9C:3F:5D:64:1A Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37 Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337 Certificate serial: 019AF12E20C0813276C99C5B0649173AD13E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft Manifest number: 0B09 Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=) 2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: PAglDuYUpmQ+2Funa7PnJx1346Dw6vZSdnEy7IUD3oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:20:c0:81:32:76:c9:9c:5b:06:49:17:3a:d1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337 Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=9fe9a0bed932e10f9faeddacb344419c3f5d641a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:83:75:5a:1e:7b:a9:5e:ca:78:b7:19:58:9b: 56:2f:e5:2f:12:e9:3c:77:65:bb:6e:b1:fe:97:e1: 1f:b8:31:ed:33:92:2a:08:a6:d6:4b:26:c7:01:42: ab:e6:29:a5:7a:61:d6:7d:25:e9:b0:45:95:a4:b0: 21:86:2c:89:d9:d9:29:5c:b1:4b:dc:95:9b:e1:9e: 69:1c:0b:32:25:58:4d:8d:c3:e1:8e:0b:47:63:61: 8c:f3:df:e7:66:a8:5d:79:a0:f6:22:aa:7e:6b:de: ab:e9:ce:a3:5a:f0:2d:11:3f:84:54:73:02:53:e0: c6:5c:53:43:f7:e0:18:24:07:01:4f:e3:fc:64:da: c7:38:91:a9:bf:a9:6d:c6:7b:c8:45:ac:cc:aa:44: 30:1e:a6:35:8b:05:6f:60:1b:fa:45:da:55:94:f1: af:8a:51:6d:fa:67:de:c0:5b:27:af:d4:fa:95:2e: 9b:58:fd:99:fa:41:df:7c:d5:25:ff:7a:f5:06:17: de:b9:e4:0a:01:c3:c2:b9:1a:af:47:2f:03:0f:8b: d5:70:7b:17:ee:8c:23:6f:57:9d:c8:c7:6c:c8:e0: 3d:f1:5e:2d:80:79:22:53:65:62:6c:e2:43:da:67: c5:e5:46:be:44:1a:4b:dc:eb:a4:9a:78:fe:0a:bd: 4b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E9:A0:BE:D9:32:E1:0F:9F:AE:DD:AC:B3:44:41:9C:3F:5D:64:1A X509v3 Authority Key Identifier: keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:19:bc:bc:10:cd:ed:d4:50:c4:b7:d8:69:a3:51:10:94:fd: 6f:27:19:b4:99:d8:94:e2:38:c2:e9:88:6e:a7:f8:b5:dc:d4: 83:a5:b1:69:e5:cf:24:29:71:4f:c5:e6:02:2b:d2:85:26:c0: 22:ec:2c:47:22:8c:7e:6c:b7:b5:3e:43:e3:62:bd:7b:15:ec: 80:b1:67:9f:cf:95:a0:be:ba:b9:bd:55:7f:7b:74:64:07:09: 57:43:57:94:54:b4:5e:08:90:fd:9a:c8:0a:64:6a:81:d7:d0: 11:c4:70:3b:b0:cd:86:6d:3c:b7:a9:d9:c5:25:da:b5:1b:06: 5b:93:da:6f:4b:54:cf:7f:9a:77:50:92:60:81:0b:78:f6:98: e2:f0:02:2a:6b:bb:df:99:82:47:2c:d2:9b:17:e7:73:e7:2b: 2a:e0:5f:69:7c:61:a4:fd:17:67:cb:e1:b7:23:39:31:e0:47: af:0b:55:7d:65:e6:26:51:bc:ca:2c:ff:bc:91:66:05:88:c3: 41:5a:aa:d6:d5:e1:ed:48:35:70:40:4e:42:dd:5c:48:0e:2d: 36:a7:fb:81:a3:9f:62:19:7f:5e:ea:2f:47:9b:f6:b4:ae:bc: dc:29:4e:12:fe:7d:ef:a3:3f:48:fc:b0:ac:88:b9:53:65:b9: 28:14:c8:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiDAgTJ2yZxbBkkXOtE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMTdiNWFjNDY3NDEyZTI0OWM0NGUyNzM5YzI4OWViYjA0 Y2QzMzcwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD Eyg5ZmU5YTBiZWQ5MzJlMTBmOWZhZWRkYWNiMzQ0NDE5YzNmNWQ2NDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YN1Wh57qV7KeLcZWJtWL+UvEuk8 d2W7brH+l+EfuDHtM5IqCKbWSybHAUKr5imlemHWfSXpsEWVpLAhhiyJ2dkpXLFL 3JWb4Z5pHAsyJVhNjcPhjgtHY2GM89/nZqhdeaD2Iqp+a96r6c6jWvAtET+EVHMC U+DGXFND9+AYJAcBT+P8ZNrHOJGpv6ltxnvIRazMqkQwHqY1iwVvYBv6RdpVlPGv ilFt+mfewFsnr9T6lS6bWP2Z+kHffNUl/3r1BhfeueQKAcPCuRqvRy8DD4vVcHsX 7owjb1edyMdsyOA98V4tgHkiU2VibOJD2mfF5Ua+RBpL3Oukmnj+Cr1L5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/poL7ZMuEPn67drLNEQZw/XWQaMB8GA1UdIwQY MBaAFLIXtaxGdBLiScROJznCieuwTNM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOTgzMzYtNGMzZS00Nzk1LWExZjct M2RiZDMyZDY5OTJlLzEvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iOTgzMzYtNGMzZS00Nzk1LWExZjctM2RiZDMyZDY5OTJl LzEvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBm8vBDN 7dRQxLfYaaNREJT9bycZtJnYlOI4wumIbqf4tdzUg6WxaeXPJClxT8XmAivShSbA IuwsRyKMfmy3tT5D42K9exXsgLFnn8+VoL66ub1Vf3t0ZAcJV0NXlFS0XgiQ/ZrI CmRqgdfQEcRwO7DNhm08t6nZxSXatRsGW5Pab0tUz3+ad1CSYIELePaY4vACKmu7 35mCRyzSmxfnc+crKuBfaXxhpP0XZ8vhtyM5MeBHrwtVfWXmJlG8yiz/vJFmBYjD QVqq1tXh7Ug1cEBOQt1cSA4tNqf7gaOfYhl/XuovR5v2tK683ClOEv5976M/SPyw rIi5U2W5KBTIfg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:31 2025 by rpki-client