This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json) Hash identifier: vmm8FTUuqukY8kQADd5wQNTEEb1PXYcirjAio1Iv1cA= Subject key identifier: 4E:FA:86:BD:3C:19:09:81:30:5E:35:19:8A:9C:3D:39:11:D2:E1:FA Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5 Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5 Certificate serial: 019C0FDA4F4FC7A4C3BF6914B59A883ABBEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft Manifest number: 17F7 Signing time: Fri 30 Jan 2026 17:01:30 +0000 Manifest this update: Fri 30 Jan 2026 17:01:30 +0000 Manifest next update: Sat 31 Jan 2026 17:01:30 +0000 Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: d8vu3a1iShE0TqGHQTZl1/g7fK5SFUb0u6tdEVJgdUA=) 2: iNHdbLRP7lFKeWF4EQBCuIZUmbk.roa (hash: kfBL4rNKK0u89/bEx2q+SmsLTK7zFJtsazlODDq6bF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:da:4f:4f:c7:a4:c3:bf:69:14:b5:9a:88:3a:bb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5 Validity Not Before: Jan 30 17:01:30 2026 GMT Not After : Jan 31 17:01:30 2026 GMT Subject: CN=4efa86bd3c190981305e35198a9c3d3911d2e1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c3:c0:f3:d0:33:bf:2c:f6:80:14:2c:0e:f1: 2e:41:d2:de:9a:d8:4b:ab:40:05:07:1c:9e:76:c8: 43:f5:bd:4f:f4:39:37:7f:74:8a:8c:ad:a7:9e:8e: b5:0e:4e:d4:99:11:86:9f:5e:c7:d1:02:70:63:c8: 5b:50:49:15:71:de:5d:85:4c:e1:4c:4e:1e:ea:0c: 02:ea:52:21:47:37:c1:0f:dd:dc:c7:7f:02:3d:d7: 7a:1d:b7:86:98:01:c6:cb:72:cb:29:06:5b:f3:7c: 7b:66:e7:e5:52:85:3e:68:b3:bd:d2:7b:f0:86:d5: 01:ca:86:3d:dc:ad:d9:5b:14:48:fd:21:32:72:cf: 78:8b:0b:e7:f1:b3:5d:b7:ce:c0:a8:4b:13:6c:bd: 09:57:b9:80:55:b7:f9:1d:92:54:18:75:4f:77:62: 4e:7b:05:36:57:9d:b4:99:b5:c3:b1:65:df:a9:b3: fa:b2:87:df:a0:e4:bf:8c:e6:dc:27:df:69:ca:14: 7a:eb:4a:f2:28:c6:70:78:e7:7a:13:46:c1:12:8f: 9c:bf:52:ce:23:63:43:58:f3:68:52:57:7c:24:20: b5:7b:46:2a:c4:51:2c:52:63:9b:4c:43:4a:a2:3a: 09:b0:6f:61:58:de:e4:18:bf:51:87:27:bf:a1:a8: 7c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FA:86:BD:3C:19:09:81:30:5E:35:19:8A:9C:3D:39:11:D2:E1:FA X509v3 Authority Key Identifier: keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e6:99:a1:f5:30:f4:25:6b:c4:d5:f7:a9:7a:8d:dc:49:bf: 39:70:22:9f:e2:14:63:44:7e:27:12:5d:08:ff:a9:3a:55:6d: 72:28:ea:49:57:49:8c:a0:04:b6:cd:6a:71:99:a1:77:9a:37: 05:b5:1f:ef:7e:17:cf:6a:1c:05:b2:1c:fa:a6:03:56:00:34: c9:cf:e0:d2:ff:24:9f:ef:4a:60:35:34:03:b3:b9:1c:35:0b: 51:06:2f:56:58:36:e4:ab:31:8c:f0:ba:d5:7e:5c:ee:a8:db: 1e:34:b4:70:6e:02:f4:68:46:21:41:21:3f:d3:51:3a:f6:e5: 1f:90:1b:86:b7:f7:09:a5:33:fb:45:ff:45:05:ee:a5:93:45: 6d:49:6c:2f:a5:06:7d:c8:fd:23:aa:15:cb:72:d0:6c:46:2d: ff:8b:c5:ce:78:24:63:fa:d2:38:0f:95:05:f8:5c:71:0e:01: ce:94:57:d7:84:59:3e:32:80:e7:5b:70:aa:ff:cd:27:41:05: 4c:51:43:8f:36:bd:e7:38:2d:b2:22:52:60:6a:cf:f5:81:c8: fe:74:84:e0:64:a5:a7:3e:fb:5f:f9:dc:72:f5:c6:b8:7b:80: 92:8c:34:0e:ec:e8:80:2d:31:98:3f:be:f8:8f:03:65:08:75: b0:e9:40:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwP2k9Px6TDv2kUtZqIOrvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NzI0NzQyYzNmNTRlMTc5YjgyZTZhZjhlMzNlMGQ5ZDJm YmQ0ZDUwHhcNMjYwMTMwMTcwMTMwWhcNMjYwMTMxMTcwMTMwWjAzMTEwLwYDVQQD Eyg0ZWZhODZiZDNjMTkwOTgxMzA1ZTM1MTk4YTljM2QzOTExZDJlMWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cPA89Azvyz2gBQsDvEuQdLemthL q0AFBxyedshD9b1P9Dk3f3SKjK2nno61Dk7UmRGGn17H0QJwY8hbUEkVcd5dhUzh TE4e6gwC6lIhRzfBD93cx38CPdd6HbeGmAHGy3LLKQZb83x7ZuflUoU+aLO90nvw htUByoY93K3ZWxRI/SEycs94iwvn8bNdt87AqEsTbL0JV7mAVbf5HZJUGHVPd2JO ewU2V520mbXDsWXfqbP6soffoOS/jObcJ99pyhR660ryKMZweOd6E0bBEo+cv1LO I2NDWPNoUld8JCC1e0YqxFEsUmObTENKojoJsG9hWN7kGL9Rhye/oah8qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE76hr08GQmBMF41GYqcPTkR0uH6MB8GA1UdIwQY MBaAFEhyR0LD9U4Xm4Lmr44z4NnS+9TVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMt MzVlMDI3ODM2YmEzLzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMtMzVlMDI3ODM2YmEz LzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOaZofUw 9CVrxNX3qXqN3Em/OXAin+IUY0R+JxJdCP+pOlVtcijqSVdJjKAEts1qcZmhd5o3 BbUf734Xz2ocBbIc+qYDVgA0yc/g0v8kn+9KYDU0A7O5HDULUQYvVlg25KsxjPC6 1X5c7qjbHjS0cG4C9GhGIUEhP9NROvblH5Abhrf3CaUz+0X/RQXupZNFbUlsL6UG fcj9I6oVy3LQbEYt/4vFzngkY/rSOA+VBfhccQ4BzpRX14RZPjKA51twqv/NJ0EF TFFDjza95zgtsiJSYGrP9YHI/nSE4GSlpz77X/nccvXGuHuAkow0DuzogC0xmD++ +I8DZQh1sOlAkA== -----END CERTIFICATE-----Generated at Sat Jan 31 00:30:24 2026 by rpki-client