This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft File: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json) Hash identifier: YpuXGmX+LY8gxM+J/5GLV+Q+Ygv3pOFLmv+zwqrcyBY= Subject key identifier: 15:B2:D8:CC:08:C5:9A:C2:E0:DC:85:22:54:3C:E9:EC:F5:A6:AD:B8 Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1 Certificate issuer: /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1 Certificate serial: 019ACA566090F40B8E8C6B50D0905BBB6411 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft Manifest number: 16B5 Signing time: Fri 28 Nov 2025 12:00:49 +0000 Manifest this update: Fri 28 Nov 2025 12:00:49 +0000 Manifest next update: Sat 29 Nov 2025 12:00:49 +0000 Files and hashes: 1: UkWKB7R6wSYKBpsuiwwV880UfCk.roa (hash: pQhrMKgkx/zqcMJYjMVoXY14ZtF5KkWfSepRK8YAXxs=) 2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: hcxbRLq+yXTWLp6ndet51JG53cQjyKs61GvCRXfpTtY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:56:60:90:f4:0b:8e:8c:6b:50:d0:90:5b:bb:64:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1 Validity Not Before: Nov 28 12:00:49 2025 GMT Not After : Nov 29 12:00:49 2025 GMT Subject: CN=15b2d8cc08c59ac2e0dc8522543ce9ecf5a6adb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:b8:dc:db:32:14:b8:64:a6:b8:64:eb:cb: be:59:8b:db:66:b7:78:cc:79:26:e4:61:90:da:54: a7:25:eb:33:b5:4d:ad:ad:59:86:9e:c2:08:a9:55: 17:a4:9d:6c:f9:5d:50:66:59:ec:35:de:24:6f:e1: fe:f4:d7:b2:2f:87:63:b6:1d:83:63:55:e3:70:46: 0f:15:31:4d:a4:e1:5f:f3:b1:31:e1:7f:92:bb:1a: 27:5e:87:a4:08:c4:24:4e:21:c1:f2:e4:cc:82:48: db:97:e2:42:fc:69:62:4a:f8:5b:b5:b1:4e:60:21: 6d:2a:23:cb:b0:a0:7c:26:10:61:1c:f4:ef:22:da: 5f:2f:40:a9:93:91:8d:6c:ec:ba:21:bd:39:a3:01: b4:4b:d8:70:4b:87:81:55:ce:91:83:e0:91:4e:4a: ae:5e:6a:57:7f:d7:de:6c:6a:83:cd:41:5a:80:a6: 69:47:c2:13:85:a6:a8:1e:f1:b7:66:e0:f2:9b:06: 7c:fb:ec:aa:4b:76:e9:37:c8:46:f2:cf:ef:5c:41: 11:33:d4:7e:b9:8d:d3:a6:89:d5:47:5f:9b:6f:9d: 45:c2:37:cb:16:6d:1f:8e:c1:74:5b:98:e1:4d:00: be:f2:8a:8a:ec:b7:4e:12:d6:10:6e:2f:c9:aa:c2: 3b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B2:D8:CC:08:C5:9A:C2:E0:DC:85:22:54:3C:E9:EC:F5:A6:AD:B8 X509v3 Authority Key Identifier: keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f3:af:50:74:91:21:52:c6:2c:fd:f1:e2:e7:b6:60:c9:fc: f0:1a:53:93:54:0b:18:7c:73:21:5c:23:a7:d5:b2:f3:cf:36: 63:cb:77:b8:ed:0c:ef:dc:b3:07:94:b5:74:fa:46:45:e3:60: 8a:93:f6:2f:48:5c:09:bd:44:05:5d:9a:cd:2f:7d:dc:1a:13: 5e:bc:5b:ef:ce:14:ca:2e:f8:60:1b:6f:02:d0:10:5a:f5:58: eb:e3:1d:58:4b:3c:e6:5f:4d:4a:39:9f:55:95:ee:22:68:4b: 50:9e:ef:96:fa:f6:cd:a7:d0:4c:59:44:30:71:71:17:69:b6: 81:40:ff:82:f8:29:f0:a8:4a:4a:d5:9d:ff:87:62:63:15:e5: 3a:0a:5d:ff:50:f1:7d:4b:8a:91:fd:4e:ce:97:36:a7:fc:cb: 66:b7:4a:e9:4a:1b:70:b7:bf:d2:8c:27:a1:10:b2:58:72:15: 1e:cd:c6:e1:51:9d:e4:26:f3:fc:6f:90:ba:e6:55:47:d0:59: 80:e6:7e:61:25:08:8f:e1:f7:bc:1a:bb:8f:cc:fd:2b:39:8e: f5:7b:15:d5:48:16:75:2e:30:de:11:26:7b:e9:6f:37:96:bd: 5c:a8:3f:d3:17:08:d4:fc:0c:01:e6:47:ba:70:45:3d:9f:a0: a8:3e:42:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrKVmCQ9AuOjGtQ0JBbu2QRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMTVjZDhlNmRiMzU0NDE5ODRkOWM3ZGZjOWFmYjY1M2U1 NWRmZjEwHhcNMjUxMTI4MTIwMDQ5WhcNMjUxMTI5MTIwMDQ5WjAzMTEwLwYDVQQD EygxNWIyZDhjYzA4YzU5YWMyZTBkYzg1MjI1NDNjZTllY2Y1YTZhZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXm43NsyFLhkprhk68u+WYvbZrd4 zHkm5GGQ2lSnJesztU2trVmGnsIIqVUXpJ1s+V1QZlnsNd4kb+H+9NeyL4djth2D Y1XjcEYPFTFNpOFf87Ex4X+SuxonXoekCMQkTiHB8uTMgkjbl+JC/GliSvhbtbFO YCFtKiPLsKB8JhBhHPTvItpfL0Cpk5GNbOy6Ib05owG0S9hwS4eBVc6Rg+CRTkqu XmpXf9febGqDzUFagKZpR8IThaaoHvG3ZuDymwZ8++yqS3bpN8hG8s/vXEERM9R+ uY3TponVR1+bb51FwjfLFm0fjsF0W5jhTQC+8oqK7LdOEtYQbi/JqsI7sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWy2MwIxZrC4NyFIlQ86ez1pq24MB8GA1UdIwQY MBaAFLIVzY5ts1RBmE2cffya+2U+Vd/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGI3OTItMThmYi00YmVkLTk5MGMt ZTk1MGQ4N2Y4ZTI1LzEvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zOGI3OTItMThmYi00YmVkLTk5MGMtZTk1MGQ4N2Y4ZTI1 LzEvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfOvUHSR IVLGLP3x4ue2YMn88BpTk1QLGHxzIVwjp9Wy8882Y8t3uO0M79yzB5S1dPpGReNg ipP2L0hcCb1EBV2azS993BoTXrxb784Uyi74YBtvAtAQWvVY6+MdWEs85l9NSjmf VZXuImhLUJ7vlvr2zafQTFlEMHFxF2m2gUD/gvgp8KhKStWd/4diYxXlOgpd/1Dx fUuKkf1Ozpc2p/zLZrdK6UobcLe/0ownoRCyWHIVHs3G4VGd5Cbz/G+QuuZVR9BZ gOZ+YSUIj+H3vBq7j8z9KzmO9XsV1UgWdS4w3hEme+lvN5a9XKg/0xcI1PwMAeZH unBFPZ+gqD5C6w== -----END CERTIFICATE-----Generated at Fri Nov 28 14:42:44 2025 by rpki-client