This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft File: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json) Hash identifier: LWqNoJSmhec/MIFn7cTAKhzVMGjpTszKhQsY/xsNTLU= Subject key identifier: EF:D4:38:D0:95:35:A8:DD:7C:B3:C0:01:68:D8:2C:8A:33:17:9C:A6 Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1 Certificate issuer: /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1 Certificate serial: 019BD0FB055CBA21FDF7DEB9B0DC93DB332B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft Manifest number: 173E Signing time: Sun 18 Jan 2026 12:01:10 +0000 Manifest this update: Sun 18 Jan 2026 12:01:10 +0000 Manifest next update: Mon 19 Jan 2026 12:01:10 +0000 Files and hashes: 1: p64_xVoksOfjBTpAEK-sqxOtfyo.roa (hash: Mpzgzqkjd9r2rYbbw0eBHseWMwAwQ2eJtwJ2+TbcIMI=) 2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: 6ajpDO6DT0erAatFb4AD8o8onhI1veUINnmPKL3LGos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:fb:05:5c:ba:21:fd:f7:de:b9:b0:dc:93:db:33:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1 Validity Not Before: Jan 18 12:01:10 2026 GMT Not After : Jan 19 12:01:10 2026 GMT Subject: CN=efd438d09535a8dd7cb3c00168d82c8a33179ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:5e:04:a5:10:7b:22:f8:3a:5a:a0:e1:f6: 6d:ca:15:90:9e:8a:5a:a1:d2:e0:39:5a:08:ee:86: 4c:3d:f0:5f:d6:7a:d4:86:92:0b:1d:32:41:eb:93: 01:e0:1d:03:a4:04:08:77:fe:86:37:37:25:68:74: 2a:aa:2a:31:9e:77:09:04:44:b8:ef:8e:74:d8:4a: 9b:6d:bc:c0:2a:48:12:a0:33:08:ab:2b:9b:31:86: 48:1e:54:ba:45:98:33:95:e3:5c:15:22:ca:c9:4c: e0:85:34:bb:f9:cb:33:92:50:92:52:62:b8:3f:7d: 7b:71:3f:ad:de:86:1b:5e:2d:e7:10:f0:67:07:d6: a7:2d:50:4c:a2:d6:e0:58:1c:08:e4:8c:29:b5:a8: 4e:10:70:bd:59:ce:d4:a9:ea:1f:c5:98:d7:aa:d9: 9b:31:b6:76:83:c2:b0:d4:0b:a9:e1:0c:e1:b1:d2: 57:dd:85:02:ee:5b:d8:75:86:c2:0c:5d:74:d6:0e: 10:20:58:e2:34:09:7f:33:bd:c8:3b:61:41:00:2b: 02:64:76:b5:5a:8d:a9:2f:71:ff:8f:14:4a:28:61: d9:48:cb:d5:79:fc:39:db:23:26:55:c0:7e:3c:7e: 56:87:8f:73:b3:a6:fc:3d:92:f7:aa:d5:0b:03:ae: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:38:D0:95:35:A8:DD:7C:B3:C0:01:68:D8:2C:8A:33:17:9C:A6 X509v3 Authority Key Identifier: keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e2:22:1a:21:cc:2c:3b:46:df:3e:9f:09:6f:12:a7:54:31: ed:b5:72:cc:b9:7c:8c:dc:61:38:25:b1:5a:a5:d7:88:4b:0b: 69:ba:44:ff:0d:12:ca:e1:55:0e:8a:ba:87:fe:19:ba:d4:08: a1:14:15:16:fb:f3:1d:54:f7:15:41:7d:ba:cf:51:74:ca:66: 1b:07:f3:92:89:24:89:45:42:b5:13:da:ba:71:52:93:dd:5a: db:97:44:1a:73:f5:5e:ac:f7:ad:0f:c6:0b:bc:e5:de:63:29: 96:05:04:ea:c7:38:71:44:40:fa:54:5f:2f:07:d8:c2:48:45: 91:62:cf:b5:49:4d:e0:c4:91:a5:d6:14:da:7a:eb:83:fe:1a: ed:3a:cf:93:56:58:08:7a:57:2a:16:b7:51:45:bd:6e:38:1a: 1b:ff:79:9a:ab:d1:f5:1d:8d:13:45:36:19:79:0f:2c:29:68: e2:50:4d:b3:95:d6:ab:b1:48:23:c9:b0:db:37:98:f5:ab:c9: e3:1d:e5:f6:85:e1:5e:7b:27:99:22:7c:e4:23:02:f7:ff:c9: c7:0b:6f:4c:07:b1:9f:aa:a1:43:0d:e8:99:9b:b6:17:e8:cb: d6:2c:91:1c:3a:3a:8f:d8:41:e9:0b:de:d2:d6:7b:10:9c:1e: 4a:f6:86:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQ+wVcuiH99965sNyT2zMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMTVjZDhlNmRiMzU0NDE5ODRkOWM3ZGZjOWFmYjY1M2U1 NWRmZjEwHhcNMjYwMTE4MTIwMTEwWhcNMjYwMTE5MTIwMTEwWjAzMTEwLwYDVQQD EyhlZmQ0MzhkMDk1MzVhOGRkN2NiM2MwMDE2OGQ4MmM4YTMzMTc5Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpleBKUQeyL4Olqg4fZtyhWQnopa odLgOVoI7oZMPfBf1nrUhpILHTJB65MB4B0DpAQId/6GNzclaHQqqioxnncJBES4 74502EqbbbzAKkgSoDMIqyubMYZIHlS6RZgzleNcFSLKyUzghTS7+cszklCSUmK4 P317cT+t3oYbXi3nEPBnB9anLVBMotbgWBwI5IwptahOEHC9Wc7UqeofxZjXqtmb MbZ2g8Kw1Aup4QzhsdJX3YUC7lvYdYbCDF101g4QIFjiNAl/M73IO2FBACsCZHa1 Wo2pL3H/jxRKKGHZSMvVefw52yMmVcB+PH5Wh49zs6b8PZL3qtULA65ZTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/UONCVNajdfLPAAWjYLIozF5ymMB8GA1UdIwQY MBaAFLIVzY5ts1RBmE2cffya+2U+Vd/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGI3OTItMThmYi00YmVkLTk5MGMt ZTk1MGQ4N2Y4ZTI1LzEvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zOGI3OTItMThmYi00YmVkLTk5MGMtZTk1MGQ4N2Y4ZTI1 LzEvc2hYTmptMnpWRUdZVFp4OV9KcjdaVDVWM19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeIiGiHM LDtG3z6fCW8Sp1Qx7bVyzLl8jNxhOCWxWqXXiEsLabpE/w0SyuFVDoq6h/4ZutQI oRQVFvvzHVT3FUF9us9RdMpmGwfzkokkiUVCtRPaunFSk91a25dEGnP1Xqz3rQ/G C7zl3mMplgUE6sc4cURA+lRfLwfYwkhFkWLPtUlN4MSRpdYU2nrrg/4a7TrPk1ZY CHpXKha3UUW9bjgaG/95mqvR9R2NE0U2GXkPLClo4lBNs5XWq7FII8mw2zeY9avJ 4x3l9oXhXnsnmSJ85CMC9//JxwtvTAexn6qhQw3omZu2F+jL1iyRHDo6j9hB6Qve 0tZ7EJweSvaG5Q== -----END CERTIFICATE-----Generated at Sun Jan 18 22:17:32 2026 by rpki-client