This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json) Hash identifier: NEezyTjUGWEJxbKPeVHg9YRDpAZZMlg5EcUMutErHcs= Subject key identifier: 8B:2E:0A:02:67:B1:8A:96:CE:FE:62:98:2D:E9:EA:FC:76:92:39:30 Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b Certificate serial: 019B36B445E7A2A441511C196537111ADC4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft Manifest number: 0866 Signing time: Fri 19 Dec 2025 13:02:22 +0000 Manifest this update: Fri 19 Dec 2025 13:02:22 +0000 Manifest next update: Sat 20 Dec 2025 13:02:22 +0000 Files and hashes: 1: 1hp0FN2Zg5pDjgoZFlg4J_guib0.roa (hash: Q0hgLFUWzZKKVmCPawFvjEl4SPCELVdqx/7++z9jxEg=) 2: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: KKw0jcCNQYygcNZ9EK7/anM24g7pso8RawnHmHeWmk4=) 3: ygg1jPU11rM4AgPA_fHJm1HIbDA.roa (hash: bQEdp6E9utyQGzeJGQwHEXnTvCFMaSrhkRZ3o6gqExk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:45:e7:a2:a4:41:51:1c:19:65:37:11:1a:dc:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b Validity Not Before: Dec 19 13:02:22 2025 GMT Not After : Dec 20 13:02:22 2025 GMT Subject: CN=8b2e0a0267b18a96cefe62982de9eafc76923930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ec:f4:c7:a1:46:0d:94:6e:0c:2e:e2:a3:fc: 29:8c:32:b7:a3:b7:76:9a:8d:ca:16:27:b0:e8:8a: f1:a0:85:a7:d4:c1:35:bc:e9:f1:b2:bd:e7:f1:26: c9:6a:73:b0:c8:67:75:08:a8:a1:cf:53:86:7d:f2: 04:b4:f0:57:20:0b:bb:5b:c3:6c:71:81:0e:d2:74: 9e:c5:07:f9:48:21:af:72:eb:6e:20:5e:97:54:09: 3f:7a:5f:ab:07:d3:ce:b4:4f:87:53:99:ec:8c:4e: af:b4:78:8c:eb:e6:29:b0:12:64:85:89:5a:ec:5e: 3b:35:23:a3:7b:8a:11:bb:6a:ca:7d:e3:fb:c4:c6: 9f:9f:c9:20:43:a5:02:3a:85:16:81:8e:5c:df:23: d7:64:7b:5c:8d:60:f3:71:0f:20:cc:5e:fd:59:2a: ee:76:ba:66:ca:92:4a:99:68:68:6c:e9:58:8c:6a: a7:4e:12:69:4e:6e:89:e8:b7:0b:d0:00:9a:cf:e1: ae:a3:ee:8f:0c:ba:31:c3:44:d7:ad:17:ad:77:d6: 98:f0:26:6b:9d:d1:7f:11:10:24:c7:eb:dc:2c:79: ff:50:86:ef:33:b4:e1:9d:32:17:b0:e1:bd:15:fa: d1:c1:2b:7c:06:f1:89:2d:40:ca:d5:53:46:61:a3: c9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2E:0A:02:67:B1:8A:96:CE:FE:62:98:2D:E9:EA:FC:76:92:39:30 X509v3 Authority Key Identifier: keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:9b:f1:4b:a2:55:e3:4e:f3:6f:1b:cb:4f:da:b2:dc:56:53: c5:c5:a9:b8:36:c1:76:e0:fc:d9:cb:fb:2a:dc:c4:42:fa:c7: 71:64:dd:70:12:fe:07:e6:4d:40:df:a3:8e:fa:87:b6:b7:5f: 1e:3a:ef:b7:98:f0:e6:05:54:a3:fa:06:63:dd:35:cd:36:bd: 4c:11:ec:98:f4:5d:8d:6e:23:9d:6e:4f:3b:e4:bd:81:2f:84: 12:e3:bd:23:41:b7:ad:dc:3a:b8:70:ba:4b:68:77:9a:cd:bc: 36:0c:41:97:d0:ff:22:f5:3f:60:94:58:63:2a:db:2a:a7:36: 36:59:04:ff:ba:a9:03:9e:fa:fd:b3:d1:b5:8e:cb:93:97:4c: c6:e9:fb:d2:c9:5e:8e:24:b0:40:93:5e:3a:96:49:20:a1:68: 8d:8c:bd:c0:16:3b:c9:c0:6e:e2:02:8c:88:2b:98:71:5a:ec: 0d:d1:ae:74:12:c3:1b:92:86:a4:c2:73:1b:8e:69:fe:f6:ca: 82:36:39:b8:da:db:12:60:0c:f6:9f:d7:dd:f0:97:ce:7e:c9: 4d:57:85:31:5e:6b:4a:d8:34:0b:7a:1c:5c:ed:ff:5d:a0:84: 4e:54:5b:75:1e:3d:9a:09:5b:4b:9e:a5:13:3f:36:a4:91:3a: 95:f5:7e:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tEXnoqRBURwZZTcRGtxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMWEzZjRhZjk0YTU4MGViOWU3YjU4NTQyYTAwODRiMjFj MmIwOWIwHhcNMjUxMjE5MTMwMjIyWhcNMjUxMjIwMTMwMjIyWjAzMTEwLwYDVQQD Eyg4YjJlMGEwMjY3YjE4YTk2Y2VmZTYyOTgyZGU5ZWFmYzc2OTIzOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjez0x6FGDZRuDC7io/wpjDK3o7d2 mo3KFiew6IrxoIWn1ME1vOnxsr3n8SbJanOwyGd1CKihz1OGffIEtPBXIAu7W8Ns cYEO0nSexQf5SCGvcutuIF6XVAk/el+rB9POtE+HU5nsjE6vtHiM6+YpsBJkhYla 7F47NSOje4oRu2rKfeP7xMafn8kgQ6UCOoUWgY5c3yPXZHtcjWDzcQ8gzF79WSru drpmypJKmWhobOlYjGqnThJpTm6J6LcL0ACaz+Guo+6PDLoxw0TXrRetd9aY8CZr ndF/ERAkx+vcLHn/UIbvM7ThnTIXsOG9FfrRwSt8BvGJLUDK1VNGYaPJkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsuCgJnsYqWzv5imC3p6vx2kjkwMB8GA1UdIwQY MBaAFLIaP0r5SlgOuee1hUKgCEshwrCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYt NTEyOTE3MmI2OTY2LzEvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYtNTEyOTE3MmI2OTY2 LzEvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZvxS6JV 407zbxvLT9qy3FZTxcWpuDbBduD82cv7KtzEQvrHcWTdcBL+B+ZNQN+jjvqHtrdf Hjrvt5jw5gVUo/oGY901zTa9TBHsmPRdjW4jnW5PO+S9gS+EEuO9I0G3rdw6uHC6 S2h3ms28NgxBl9D/IvU/YJRYYyrbKqc2NlkE/7qpA576/bPRtY7Lk5dMxun70sle jiSwQJNeOpZJIKFojYy9wBY7ycBu4gKMiCuYcVrsDdGudBLDG5KGpMJzG45p/vbK gjY5uNrbEmAM9p/X3fCXzn7JTVeFMV5rStg0C3ocXO3/XaCETlRbdR49mglbS56l Ez82pJE6lfV+tw== -----END CERTIFICATE-----Generated at Fri Dec 19 18:17:20 2025 by rpki-client