This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json) Hash identifier: o6vXvTtuX+wSNBTNNpmOXT1nj8wEKdMRsZuYusZtcbg= Subject key identifier: EE:B5:94:D1:23:C1:6C:83:D3:80:53:F5:A4:63:05:0C:46:11:C4:41 Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5 Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5 Certificate serial: 019AF051854F8CB881B515AEEEF2B46A74B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 21:01:05 +0000 Manifest this update: Fri 05 Dec 2025 21:01:05 +0000 Manifest next update: Sat 06 Dec 2025 21:01:05 +0000 Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: 2zTq3xcnHYdOwfBc57JAme1jW+mkh/xL21cBgoYSg9Y=) 2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:85:4f:8c:b8:81:b5:15:ae:ee:f2:b4:6a:74:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5 Validity Not Before: Dec 5 21:01:05 2025 GMT Not After : Dec 6 21:01:05 2025 GMT Subject: CN=eeb594d123c16c83d38053f5a463050c4611c441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:1f:b3:d9:a0:aa:c8:bd:51:3a:a9:63:10: 95:f6:91:71:53:e2:c8:22:fb:85:a1:06:2d:52:83: 14:cf:ec:ae:34:90:7b:0c:e6:3f:4d:dd:a4:73:b5: 50:f3:72:9c:ae:ab:24:d3:f1:a2:de:cd:67:6e:ac: 23:b0:03:e3:bb:51:9b:30:5c:e3:a8:f6:1d:5f:57: 48:0d:6d:de:39:35:38:4f:0d:a6:89:32:01:64:bb: e0:dc:4a:d5:32:f5:12:66:04:27:97:31:70:15:55: 32:b3:78:27:ef:a0:44:44:7f:40:0b:ea:de:65:0f: 96:27:e6:65:86:04:b8:7e:e4:a7:79:81:4d:48:5e: 61:24:1e:16:6a:1d:74:e8:f3:eb:41:4e:a1:b5:41: a0:e2:58:9a:a0:57:09:2e:d3:4c:fa:29:ba:5e:e0: ed:8d:4f:77:13:c2:ad:0e:04:f5:8d:7c:e0:ff:71: 9a:fd:47:28:93:a1:aa:38:9f:5f:26:c8:a7:df:86: a8:69:a6:49:fb:ca:7c:2e:a0:90:d6:f2:96:9a:60: bc:40:ec:61:ea:63:ba:ff:e6:13:31:b8:ae:7a:93: 9c:51:00:51:4c:b3:d5:4c:63:44:f9:9f:d3:96:3e: fd:ea:97:12:18:d2:60:2e:ca:5f:70:03:42:92:9f: 50:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B5:94:D1:23:C1:6C:83:D3:80:53:F5:A4:63:05:0C:46:11:C4:41 X509v3 Authority Key Identifier: keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:34:b6:ad:43:74:07:69:b0:8d:42:7c:26:26:97:4e:98:42: 39:a8:0a:72:ae:6d:95:df:06:5e:e0:5e:d8:ac:b5:f7:66:81: b7:ec:b6:8b:48:7c:a7:02:2a:d7:23:a7:29:78:28:a1:7c:a4: 0a:cc:19:68:d3:db:0b:72:87:b4:41:54:70:5e:90:f8:c0:32: ac:68:7b:1d:93:72:8f:09:b2:b1:b5:ac:00:e8:a2:73:65:b7: 48:22:94:ce:c6:ca:d0:49:d0:99:28:f4:07:e8:5f:90:59:e4: bf:97:3c:67:33:6c:2a:dd:28:43:b0:70:7e:a5:13:27:5f:8e: 0b:c0:bb:48:41:80:bd:ec:fd:40:93:02:bf:a6:92:e1:a4:4f: 84:68:67:a0:04:5f:d5:8b:75:87:2d:74:99:5f:5c:81:40:44: 2d:e9:e0:eb:c8:e6:65:ad:a9:25:61:f0:40:8d:84:8a:7e:b7: 70:f6:11:d9:6b:ce:3b:a6:ac:ab:05:a5:72:1f:dd:87:8c:57: f3:70:22:39:c9:bc:fb:ea:98:37:e4:c8:e7:9c:65:2c:33:31: eb:33:79:a0:ba:ee:8e:50:7b:4e:d0:fc:74:60:f2:37:af:1a: c7:f9:11:e7:85:ff:e8:74:89:c7:78:9f:23:2c:fe:02:6f:9e: 32:9b:69:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUYVPjLiBtRWu7vK0anS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NzI0NzQyYzNmNTRlMTc5YjgyZTZhZjhlMzNlMGQ5ZDJm YmQ0ZDUwHhcNMjUxMjA1MjEwMTA1WhcNMjUxMjA2MjEwMTA1WjAzMTEwLwYDVQQD EyhlZWI1OTRkMTIzYzE2YzgzZDM4MDUzZjVhNDYzMDUwYzQ2MTFjNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofAfs9mgqsi9UTqpYxCV9pFxU+LI IvuFoQYtUoMUz+yuNJB7DOY/Td2kc7VQ83Kcrqsk0/Gi3s1nbqwjsAPju1GbMFzj qPYdX1dIDW3eOTU4Tw2miTIBZLvg3ErVMvUSZgQnlzFwFVUys3gn76BERH9AC+re ZQ+WJ+ZlhgS4fuSneYFNSF5hJB4Wah106PPrQU6htUGg4liaoFcJLtNM+im6XuDt jU93E8KtDgT1jXzg/3Ga/Ucok6GqOJ9fJsin34aoaaZJ+8p8LqCQ1vKWmmC8QOxh 6mO6/+YTMbiuepOcUQBRTLPVTGNE+Z/Tlj796pcSGNJgLspfcANCkp9QeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO61lNEjwWyD04BT9aRjBQxGEcRBMB8GA1UdIwQY MBaAFEhyR0LD9U4Xm4Lmr44z4NnS+9TVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMt MzVlMDI3ODM2YmEzLzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMtMzVlMDI3ODM2YmEz LzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjS2rUN0 B2mwjUJ8JiaXTphCOagKcq5tld8GXuBe2Ky192aBt+y2i0h8pwIq1yOnKXgooXyk CswZaNPbC3KHtEFUcF6Q+MAyrGh7HZNyjwmysbWsAOiic2W3SCKUzsbK0EnQmSj0 B+hfkFnkv5c8ZzNsKt0oQ7BwfqUTJ1+OC8C7SEGAvez9QJMCv6aS4aRPhGhnoARf 1Yt1hy10mV9cgUBELeng68jmZa2pJWHwQI2Ein63cPYR2WvOO6asqwWlch/dh4xX 83AiOcm8++qYN+TI55xlLDMx6zN5oLrujlB7TtD8dGDyN68ax/kR54X/6HSJx3if Iyz+Am+eMptpVA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:57 2025 by rpki-client