This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json) Hash identifier: YuLCoF3Ll5XTeta0wPOo1C2ykJ6s6e2tAxXLBKT31yY= Subject key identifier: BC:B0:5B:86:95:80:FE:22:C6:E8:F8:72:C1:46:2B:F1:93:F9:52:ED Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5 Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5 Certificate serial: 019B1ACDEA52285F0670CA679DB74CED6BA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 03:01:00 +0000 Manifest this update: Sun 14 Dec 2025 03:01:00 +0000 Manifest next update: Mon 15 Dec 2025 03:01:00 +0000 Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: 0ObHdb6jfCAGyMY6nHgi6lE4Y2RLEY/bznTBnvG53pk=) 2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:ea:52:28:5f:06:70:ca:67:9d:b7:4c:ed:6b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5 Validity Not Before: Dec 14 03:01:00 2025 GMT Not After : Dec 15 03:01:00 2025 GMT Subject: CN=bcb05b869580fe22c6e8f872c1462bf193f952ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:7e:1c:5f:08:c6:2a:52:31:06:85:98:a7: 55:2d:66:63:a8:38:c2:d8:3d:ee:45:47:af:19:7c: 95:b9:de:b1:29:0a:dc:16:29:05:6d:3f:d3:e7:7a: 7a:74:79:50:88:f7:c4:9f:19:4c:be:bb:cf:76:0a: f7:e0:5f:bc:1b:4f:d5:89:e7:aa:0d:3f:a4:cb:31: 9e:ca:df:fa:40:ac:97:e5:54:a2:cc:1f:2e:c5:4d: c6:e4:a4:44:d9:9a:19:a8:2d:bf:74:5f:ad:d3:8f: 09:de:bd:05:ac:ef:3c:45:84:fa:8a:14:9c:a9:83: 82:2e:e1:d5:cd:a0:9e:6e:96:92:df:c7:bc:34:ea: 72:6d:04:e7:75:80:cb:f0:74:67:ca:b3:f9:32:ba: c8:ca:39:97:1c:d6:f7:61:21:45:3c:14:a5:a7:ba: 41:48:0b:52:ed:8f:f7:51:21:93:fb:ec:62:48:2c: 76:bc:1d:d3:1e:31:1e:c8:9c:57:d4:dc:4d:ee:d2: c3:e5:c3:5c:de:b6:2a:fc:13:d1:88:1d:00:23:3a: 2c:98:24:90:3a:3c:8f:91:ba:11:85:ea:ad:b6:aa: 06:13:ce:e1:b1:37:13:86:d4:bf:f5:e1:23:e2:1b: 8f:70:f7:26:3e:e3:c5:d0:ce:27:bc:04:5a:6b:ad: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B0:5B:86:95:80:FE:22:C6:E8:F8:72:C1:46:2B:F1:93:F9:52:ED X509v3 Authority Key Identifier: keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b3:bc:06:4d:b8:d2:7d:66:91:af:a5:ef:2c:14:75:e3:8e: 02:fa:b3:e0:1b:5a:78:9b:f5:4c:bf:34:6c:da:40:5d:2a:b6: 64:8c:1c:2c:cb:f4:96:04:57:66:57:e0:25:c8:74:f4:8b:6f: 05:e8:5d:34:c7:b0:4c:a8:c2:90:c7:fb:18:24:ea:71:14:33: 4c:bd:43:b7:9f:fb:1d:58:b0:ea:52:61:bb:ef:ff:ea:3d:b4: 04:34:c1:1b:77:1d:bf:c8:f1:7f:f9:53:86:4d:9e:61:a6:dd: fc:79:d6:ea:d0:0b:37:66:f8:78:60:a0:68:9f:b1:5a:55:ff: 29:93:15:f7:54:9b:68:98:8a:3d:a7:cd:ab:79:96:a5:7e:a2: 10:de:63:67:8c:4e:0e:24:76:4a:d5:ac:89:43:53:cf:68:f8: 57:80:a8:70:6e:a4:28:21:3d:79:11:b1:4d:5f:2c:6b:57:ef: 41:0d:1a:cd:35:62:42:f7:d4:f5:4a:bf:eb:65:39:d9:f4:45: fc:32:a8:a4:0f:64:b0:55:6b:20:f6:ca:86:82:95:b3:29:9e: 40:d0:10:84:2f:3a:b7:8a:2b:ac:05:0a:08:2a:96:8c:e3:59: 8e:16:cf:02:7b:c7:33:e4:26:49:78:fa:e0:1d:0f:74:6a:0a: 92:89:a2:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazepSKF8GcMpnnbdM7WuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NzI0NzQyYzNmNTRlMTc5YjgyZTZhZjhlMzNlMGQ5ZDJm YmQ0ZDUwHhcNMjUxMjE0MDMwMTAwWhcNMjUxMjE1MDMwMTAwWjAzMTEwLwYDVQQD EyhiY2IwNWI4Njk1ODBmZTIyYzZlOGY4NzJjMTQ2MmJmMTkzZjk1MmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN5+HF8IxipSMQaFmKdVLWZjqDjC 2D3uRUevGXyVud6xKQrcFikFbT/T53p6dHlQiPfEnxlMvrvPdgr34F+8G0/Vieeq DT+kyzGeyt/6QKyX5VSizB8uxU3G5KRE2ZoZqC2/dF+t048J3r0FrO88RYT6ihSc qYOCLuHVzaCebpaS38e8NOpybQTndYDL8HRnyrP5MrrIyjmXHNb3YSFFPBSlp7pB SAtS7Y/3USGT++xiSCx2vB3THjEeyJxX1NxN7tLD5cNc3rYq/BPRiB0AIzosmCSQ OjyPkboRheqttqoGE87hsTcThtS/9eEj4huPcPcmPuPF0M4nvARaa616JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLywW4aVgP4ixuj4csFGK/GT+VLtMB8GA1UdIwQY MBaAFEhyR0LD9U4Xm4Lmr44z4NnS+9TVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMt MzVlMDI3ODM2YmEzLzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMtMzVlMDI3ODM2YmEz LzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLO8Bk24 0n1mka+l7ywUdeOOAvqz4BtaeJv1TL80bNpAXSq2ZIwcLMv0lgRXZlfgJch09Itv BehdNMewTKjCkMf7GCTqcRQzTL1Dt5/7HViw6lJhu+//6j20BDTBG3cdv8jxf/lT hk2eYabd/HnW6tALN2b4eGCgaJ+xWlX/KZMV91SbaJiKPafNq3mWpX6iEN5jZ4xO DiR2StWsiUNTz2j4V4CocG6kKCE9eRGxTV8sa1fvQQ0azTViQvfU9Uq/62U52fRF /DKopA9ksFVrIPbKhoKVsymeQNAQhC86t4orrAUKCCqWjONZjhbPAnvHM+QmSXj6 4B0PdGoKkomipw== -----END CERTIFICATE-----Generated at Sun Dec 14 11:45:00 2025 by rpki-client