This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json) Hash identifier: PqC4g2SOu1dWmt8fLdkq6MuHxuRc14eX2jJmRwf9s1w= Subject key identifier: 43:1E:00:B9:2D:76:46:DF:B9:69:0F:A9:CA:E5:D4:A0:95:E0:3C:1C Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5 Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5 Certificate serial: 019B2C2F65304511677108FC313EF36E630A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 12:01:02 +0000 Manifest this update: Wed 17 Dec 2025 12:01:02 +0000 Manifest next update: Thu 18 Dec 2025 12:01:02 +0000 Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: YFGXRAe9rTMt8u54dqpzw7G1JDklKs4GXmp3TDVHiWA=) 2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:65:30:45:11:67:71:08:fc:31:3e:f3:6e:63:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5 Validity Not Before: Dec 17 12:01:02 2025 GMT Not After : Dec 18 12:01:02 2025 GMT Subject: CN=431e00b92d7646dfb9690fa9cae5d4a095e03c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:41:5e:a7:e7:d4:d7:e4:70:92:e7:3a:70: 0c:58:50:44:d5:b1:06:e3:9c:99:c5:39:2a:43:cd: 43:f1:7f:76:08:b0:f8:22:a2:3e:b1:1f:f8:63:07: 0f:24:14:a5:ca:e6:07:c5:95:ca:9c:6a:4c:36:f7: d4:66:7d:44:eb:7a:57:ee:14:9c:11:72:09:f9:5b: 8e:24:45:f1:22:9f:7b:1b:eb:07:eb:99:28:df:9c: f6:c1:6b:99:20:0f:51:43:0a:8e:1f:21:bf:85:c8: b3:4c:62:4f:48:8e:d8:af:45:6c:1d:9a:e5:b8:45: 58:37:53:cb:40:a5:97:93:ee:35:dd:a9:05:d8:e2: 9b:41:cf:3f:f9:60:80:f2:08:74:09:f5:57:16:da: 1d:2e:38:c5:8f:cb:0a:7b:ca:b6:8d:96:cd:68:24: 61:e2:98:dd:87:d4:f2:ab:f4:0b:70:e8:de:77:3f: b9:6f:0d:44:b0:69:2d:70:a7:e7:2b:18:f2:e3:8e: b4:90:c3:75:04:a3:db:86:68:10:dc:02:ed:2d:35: 40:4b:8a:df:a2:83:5a:71:b2:0a:c1:5c:6f:0d:e5: 62:5c:0a:7a:53:03:f7:5a:74:ce:05:a5:5c:25:cd: ff:f7:ec:a0:61:95:c7:bc:c2:cc:c2:c1:24:c3:16: 4b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1E:00:B9:2D:76:46:DF:B9:69:0F:A9:CA:E5:D4:A0:95:E0:3C:1C X509v3 Authority Key Identifier: keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:46:01:37:14:0e:7b:79:d1:3b:81:a6:c4:6a:ac:9a:a2:5b: 93:7a:7a:53:91:43:39:ce:6e:81:dd:da:b8:fc:d6:1b:9d:a0: 67:94:34:5d:ac:f5:64:3c:13:d5:d8:c1:31:9b:78:7c:87:df: a7:c5:e4:38:3a:47:53:51:94:3b:6e:78:e6:cc:58:08:fc:be: bf:f0:29:11:ae:26:da:c1:4c:e2:f0:88:c9:6d:38:ef:8d:20: 55:82:7a:5b:e5:57:2b:32:70:39:1e:16:78:ec:14:38:ab:55: 01:3b:61:29:50:68:0d:62:af:ca:c7:a6:29:d1:d5:f7:b1:e0: 58:0d:e5:89:09:c9:71:cf:4f:d2:56:7d:44:10:bd:0b:0e:aa: f1:f4:fe:f7:fa:02:eb:a1:30:fd:0f:8d:99:7c:43:1b:0c:1a: 22:11:6d:d5:29:d5:dc:f9:98:8c:04:00:34:d0:44:7c:cb:15: 96:84:49:9f:d9:df:94:a5:79:5a:f2:84:14:82:42:c4:33:ef: d8:42:b2:9d:19:cf:ec:d8:50:f3:d6:81:c7:6d:52:8a:1e:d9: 2c:1b:e6:24:52:4a:5d:fc:f5:00:7c:c8:a1:ca:4b:59:8d:72: 9f:a4:38:6a:2c:47:d2:f8:47:94:16:63:18:d0:bd:b6:98:6d: 93:42:99:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL2UwRRFncQj8MT7zbmMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NzI0NzQyYzNmNTRlMTc5YjgyZTZhZjhlMzNlMGQ5ZDJm YmQ0ZDUwHhcNMjUxMjE3MTIwMTAyWhcNMjUxMjE4MTIwMTAyWjAzMTEwLwYDVQQD Eyg0MzFlMDBiOTJkNzY0NmRmYjk2OTBmYTljYWU1ZDRhMDk1ZTAzYzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSVBXqfn1NfkcJLnOnAMWFBE1bEG 45yZxTkqQ81D8X92CLD4IqI+sR/4YwcPJBSlyuYHxZXKnGpMNvfUZn1E63pX7hSc EXIJ+VuOJEXxIp97G+sH65ko35z2wWuZIA9RQwqOHyG/hcizTGJPSI7Yr0VsHZrl uEVYN1PLQKWXk+413akF2OKbQc8/+WCA8gh0CfVXFtodLjjFj8sKe8q2jZbNaCRh 4pjdh9Tyq/QLcOjedz+5bw1EsGktcKfnKxjy4460kMN1BKPbhmgQ3ALtLTVAS4rf ooNacbIKwVxvDeViXAp6UwP3WnTOBaVcJc3/9+ygYZXHvMLMwsEkwxZLGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMeALktdkbfuWkPqcrl1KCV4DwcMB8GA1UdIwQY MBaAFEhyR0LD9U4Xm4Lmr44z4NnS+9TVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMt MzVlMDI3ODM2YmEzLzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMtMzVlMDI3ODM2YmEz LzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEYBNxQO e3nRO4GmxGqsmqJbk3p6U5FDOc5ugd3auPzWG52gZ5Q0Xaz1ZDwT1djBMZt4fIff p8XkODpHU1GUO2545sxYCPy+v/ApEa4m2sFM4vCIyW04740gVYJ6W+VXKzJwOR4W eOwUOKtVATthKVBoDWKvysemKdHV97HgWA3liQnJcc9P0lZ9RBC9Cw6q8fT+9/oC 66Ew/Q+NmXxDGwwaIhFt1SnV3PmYjAQANNBEfMsVloRJn9nflKV5WvKEFIJCxDPv 2EKynRnP7NhQ89aBx21Sih7ZLBvmJFJKXfz1AHzIocpLWY1yn6Q4aixH0vhHlBZj GNC9tphtk0KZQg== -----END CERTIFICATE-----Generated at Wed Dec 17 17:06:42 2025 by rpki-client