This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json) Hash identifier: 8B24+fgXxToCbKBvR94EPTxEjKR14gWBBjJAPIDeuqI= Subject key identifier: DF:BA:AE:75:12:89:10:03:E2:5B:48:11:D1:0D:56:76:DE:D8:5E:5C Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86 Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186 Certificate serial: 019B34C5A82E1BD4249EFD87AB940F8669BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft Manifest number: 0B40 Signing time: Fri 19 Dec 2025 04:02:07 +0000 Manifest this update: Fri 19 Dec 2025 04:02:07 +0000 Manifest next update: Sat 20 Dec 2025 04:02:07 +0000 Files and hashes: 1: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: BgE5/udJ06Kp7xkTHB9jQPslIei5+QyAE1aJnRD3YY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:a8:2e:1b:d4:24:9e:fd:87:ab:94:0f:86:69:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186 Validity Not Before: Dec 19 04:02:07 2025 GMT Not After : Dec 20 04:02:07 2025 GMT Subject: CN=dfbaae7512891003e25b4811d10d5676ded85e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d6:82:ea:c1:37:f4:c9:53:34:5d:0e:79:56: 23:f6:bc:13:32:75:32:73:fd:c1:97:e8:47:ea:b5: 04:06:22:15:57:da:9e:75:f8:dc:95:00:5b:5b:5f: 64:94:37:0c:fc:f7:69:5d:e1:78:a2:a5:58:e1:10: 69:12:37:23:02:f9:65:67:06:b9:6b:d9:3b:14:e0: 88:a0:44:d8:08:6d:0b:49:ee:1d:2a:2f:ca:24:e7: 01:58:03:51:38:d3:af:ef:4e:c2:9d:8c:b9:06:de: d5:20:2c:37:b5:7e:63:3f:c8:42:32:73:2a:90:67: f8:21:a4:31:7d:ca:8e:4e:49:4f:bf:ce:d3:95:84: 31:d7:cd:d4:e8:9d:71:1b:2e:32:dc:9b:e3:49:5b: c0:9e:83:14:27:e8:33:1f:a6:a0:0d:94:c7:34:9d: b1:c3:92:be:21:63:bd:1f:c1:1e:1d:33:a0:b9:05: 6d:10:2d:85:a8:f7:af:52:95:e9:2b:1e:25:f6:f7: be:f7:9a:b3:81:c2:85:71:01:56:e7:54:80:cf:39: fe:c3:85:af:37:bb:5b:08:b1:70:88:a4:4a:4b:d8: ff:0e:70:52:a2:9f:51:b8:22:1a:2d:7c:89:94:27: 9a:83:af:52:d9:97:08:c9:33:1c:2c:c2:8e:a3:c4: 7b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BA:AE:75:12:89:10:03:E2:5B:48:11:D1:0D:56:76:DE:D8:5E:5C X509v3 Authority Key Identifier: keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:1f:25:c5:3c:64:5d:a4:11:83:0d:b8:75:03:3d:bd:4b:9f: fa:3e:b3:45:ef:17:cb:cb:57:e0:69:91:fb:95:40:ea:b6:ec: 34:3a:b9:69:cf:61:fa:46:76:ed:4b:ac:03:dd:81:00:6d:84: a2:14:7e:45:e3:52:14:6f:80:fe:36:17:09:48:f2:3d:6a:e3: cd:be:c9:04:a7:d8:b9:ed:f4:be:23:95:65:03:8a:9e:31:65: d8:ab:2c:dd:69:8a:f7:2f:de:94:ef:1a:df:2d:9c:4e:af:a0: b2:93:e8:52:c7:72:48:fd:75:2e:52:66:11:56:86:ae:5d:8b: 84:58:f2:8e:5c:22:2d:fc:b8:4e:ea:8c:36:32:be:05:92:ec: 33:2e:40:fa:0e:d3:02:7b:e5:6c:05:48:41:a2:23:15:90:ce: ff:15:af:8c:2d:a8:67:c9:cf:26:5b:f6:2e:7e:47:db:21:92: e6:64:39:4b:a5:3a:3e:52:3f:07:c9:14:ea:06:19:23:f1:15: 81:44:86:80:bd:da:18:a0:76:76:68:ad:1c:fa:2f:37:c3:f8: c2:2f:9b:01:f5:72:15:eb:f0:eb:12:c4:37:4d:e2:43:23:3f: 0c:07:df:96:0a:b0:00:cf:40:6a:5c:91:56:e5:fd:35:ea:57: a1:63:c9:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xaguG9Qknv2Hq5QPhmm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NzYyNjYzYjQ5M2YwZWE1OWZhZmRmODQ3YTAxOGJiMzhh OWExODYwHhcNMjUxMjE5MDQwMjA3WhcNMjUxMjIwMDQwMjA3WjAzMTEwLwYDVQQD EyhkZmJhYWU3NTEyODkxMDAzZTI1YjQ4MTFkMTBkNTY3NmRlZDg1ZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9aC6sE39MlTNF0OeVYj9rwTMnUy c/3Bl+hH6rUEBiIVV9qedfjclQBbW19klDcM/PdpXeF4oqVY4RBpEjcjAvllZwa5 a9k7FOCIoETYCG0LSe4dKi/KJOcBWANRONOv707CnYy5Bt7VICw3tX5jP8hCMnMq kGf4IaQxfcqOTklPv87TlYQx183U6J1xGy4y3JvjSVvAnoMUJ+gzH6agDZTHNJ2x w5K+IWO9H8EeHTOguQVtEC2FqPevUpXpKx4l9ve+95qzgcKFcQFW51SAzzn+w4Wv N7tbCLFwiKRKS9j/DnBSop9RuCIaLXyJlCeag69S2ZcIyTMcLMKOo8R7SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+6rnUSiRAD4ltIEdENVnbe2F5cMB8GA1UdIwQY MBaAFEh2JmO0k/DqWfr9+EegGLs4qaGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0hZbVk3U1Q4T3BaLXYzNFI2QVl1emlwb1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMjE4ODMtMTc3ZC00MDgzLWJmYjct NmI5ODA1Mjg2MTAwLzEvU0hZbVk3U1Q4T3BaLXYzNFI2QVl1emlwb1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9mMjE4ODMtMTc3ZC00MDgzLWJmYjctNmI5ODA1Mjg2MTAw LzEvU0hZbVk3U1Q4T3BaLXYzNFI2QVl1emlwb1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvx8lxTxk XaQRgw24dQM9vUuf+j6zRe8Xy8tX4GmR+5VA6rbsNDq5ac9h+kZ27UusA92BAG2E ohR+ReNSFG+A/jYXCUjyPWrjzb7JBKfYue30viOVZQOKnjFl2Kss3WmK9y/elO8a 3y2cTq+gspPoUsdySP11LlJmEVaGrl2LhFjyjlwiLfy4TuqMNjK+BZLsMy5A+g7T AnvlbAVIQaIjFZDO/xWvjC2oZ8nPJlv2Ln5H2yGS5mQ5S6U6PlI/B8kU6gYZI/EV gUSGgL3aGKB2dmitHPovN8P4wi+bAfVyFevw6xLEN03iQyM/DAfflgqwAM9AalyR VuX9NepXoWPJ2w== -----END CERTIFICATE-----Generated at Fri Dec 19 07:47:54 2025 by rpki-client