This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft File: sho_SvlKWA6557WFQqAISyHCsJs.mft (raw, json) Hash identifier: 7X31dbRvXkXrgqzRuy8dLx6zMStw0G+pZgjhONqGtzE= Subject key identifier: 34:22:13:9F:26:D1:11:E0:F0:EA:1D:44:77:7A:37:46:36:4A:94:14 Authority key identifier: B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B Certificate issuer: /CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b Certificate serial: 019B3E6D82005C100B44B6D9DACD64974CAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft Manifest number: 086A Signing time: Sun 21 Dec 2025 01:02:02 +0000 Manifest this update: Sun 21 Dec 2025 01:02:02 +0000 Manifest next update: Mon 22 Dec 2025 01:02:02 +0000 Files and hashes: 1: 1hp0FN2Zg5pDjgoZFlg4J_guib0.roa (hash: Q0hgLFUWzZKKVmCPawFvjEl4SPCELVdqx/7++z9jxEg=) 2: sho_SvlKWA6557WFQqAISyHCsJs.crl (hash: H6rcDktauCj7DV5IlqQUKC20l/AsNunp6nixxU6ae3g=) 3: ygg1jPU11rM4AgPA_fHJm1HIbDA.roa (hash: bQEdp6E9utyQGzeJGQwHEXnTvCFMaSrhkRZ3o6gqExk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:82:00:5c:10:0b:44:b6:d9:da:cd:64:97:4c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b21a3f4af94a580eb9e7b58542a0084b21c2b09b Validity Not Before: Dec 21 01:02:02 2025 GMT Not After : Dec 22 01:02:02 2025 GMT Subject: CN=3422139f26d111e0f0ea1d44777a3746364a9414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:f7:9c:54:3c:61:32:1a:72:4f:30:16:3a: 91:f1:e3:1b:c8:25:c3:0e:e1:56:b8:91:35:4c:a5: 73:b0:23:05:29:96:0a:8f:1d:f9:89:d2:26:9c:c1: 74:fb:0b:23:e9:0f:ae:39:9c:3b:49:b4:90:9d:f9: 45:f7:55:17:a0:d0:3a:6a:ba:f0:92:f6:9a:e0:a5: fd:fe:8b:1b:62:9f:d4:6f:79:9a:bd:9c:c3:4c:75: 1b:8d:95:0b:d3:b0:95:27:d6:2c:b9:27:ad:48:59: bc:f3:59:94:91:f5:87:ac:a1:55:4f:88:1c:af:5c: 74:4f:f6:52:ae:4e:70:2b:b9:24:16:a4:3f:73:2b: ed:14:ab:74:0b:67:15:0a:3c:de:6b:70:67:8b:6e: 14:0e:7a:bf:2e:9a:ba:d9:97:9b:2b:ad:dc:87:92: b5:b3:f6:bf:59:8a:e1:db:00:14:ea:bd:9c:34:ae: 1c:10:d4:59:6d:f0:b3:cf:4f:4f:d9:8a:9d:24:a7: a5:93:85:d4:96:3d:04:7e:13:2d:fa:e2:ff:a2:96: 1c:9f:b2:99:b1:61:e0:6b:6d:d0:00:31:40:9f:b9: 99:80:4b:16:74:e5:b2:26:36:50:e0:6f:0c:a0:0b: 96:f2:15:a0:0d:ed:a6:52:4a:24:30:f8:15:9b:bc: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:22:13:9F:26:D1:11:E0:F0:EA:1D:44:77:7A:37:46:36:4A:94:14 X509v3 Authority Key Identifier: keyid:B2:1A:3F:4A:F9:4A:58:0E:B9:E7:B5:85:42:A0:08:4B:21:C2:B0:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sho_SvlKWA6557WFQqAISyHCsJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/991f1c-999b-4f75-b0bf-5129172b6966/1/sho_SvlKWA6557WFQqAISyHCsJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:0b:45:e1:58:6a:22:32:6c:ce:92:33:f2:ce:dc:27:93:e9: 6d:cb:59:af:fe:f0:1a:07:7a:b0:0c:34:51:94:15:b1:5d:c2: 64:0f:d5:49:6b:66:e6:47:9c:65:15:82:41:27:a3:4a:66:74: 05:ed:45:4f:d1:5c:4c:08:90:ef:22:0c:fc:3d:cd:54:5f:d9: a5:1c:e6:51:64:03:2b:c7:20:8e:cf:2a:92:07:b6:2a:2f:57: b2:82:55:71:fe:87:11:64:79:9b:0f:f6:da:2b:cb:52:45:d9: d4:f7:9e:f8:ae:47:f8:c7:a6:dc:2f:cf:0a:ef:9c:77:30:d5: 6e:e3:cb:47:31:ea:40:31:08:f9:5d:a1:59:d2:c2:d3:85:f6: 1e:93:97:32:f2:90:55:b7:84:05:ce:09:69:b7:19:56:54:4f: 92:9a:9c:79:f5:8b:45:fe:09:cd:4f:43:cd:b4:9c:7b:ee:be: 24:a6:c1:28:bc:c1:71:82:39:5b:95:e6:4b:fe:0d:9c:fe:a8: 92:c0:c2:48:2f:03:aa:61:de:0b:f0:f9:4d:c5:e9:f5:90:fe: 32:df:ad:c1:59:a7:1b:72:0b:36:a3:fc:a2:4d:50:af:61:3d: 71:c0:58:be:b9:16:a4:0a:ce:18:a8:14:27:85:86:6b:f6:fa: 2f:da:27:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bYIAXBALRLbZ2s1kl0yvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMWEzZjRhZjk0YTU4MGViOWU3YjU4NTQyYTAwODRiMjFj MmIwOWIwHhcNMjUxMjIxMDEwMjAyWhcNMjUxMjIyMDEwMjAyWjAzMTEwLwYDVQQD EygzNDIyMTM5ZjI2ZDExMWUwZjBlYTFkNDQ3NzdhMzc0NjM2NGE5NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjX3nFQ8YTIack8wFjqR8eMbyCXD DuFWuJE1TKVzsCMFKZYKjx35idImnMF0+wsj6Q+uOZw7SbSQnflF91UXoNA6arrw kvaa4KX9/osbYp/Ub3mavZzDTHUbjZUL07CVJ9YsuSetSFm881mUkfWHrKFVT4gc r1x0T/ZSrk5wK7kkFqQ/cyvtFKt0C2cVCjzea3Bni24UDnq/Lpq62ZebK63ch5K1 s/a/WYrh2wAU6r2cNK4cENRZbfCzz09P2YqdJKelk4XUlj0EfhMt+uL/opYcn7KZ sWHga23QADFAn7mZgEsWdOWyJjZQ4G8MoAuW8hWgDe2mUkokMPgVm7yYmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQiE58m0RHg8OodRHd6N0Y2SpQUMB8GA1UdIwQY MBaAFLIaP0r5SlgOuee1hUKgCEshwrCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYt NTEyOTE3MmI2OTY2LzEvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS85OTFmMWMtOTk5Yi00Zjc1LWIwYmYtNTEyOTE3MmI2OTY2 LzEvc2hvX1N2bEtXQTY1NTdXRlFxQUlTeUhDc0pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgtF4Vhq IjJszpIz8s7cJ5PpbctZr/7wGgd6sAw0UZQVsV3CZA/VSWtm5kecZRWCQSejSmZ0 Be1FT9FcTAiQ7yIM/D3NVF/ZpRzmUWQDK8cgjs8qkge2Ki9XsoJVcf6HEWR5mw/2 2ivLUkXZ1Pee+K5H+Mem3C/PCu+cdzDVbuPLRzHqQDEI+V2hWdLC04X2HpOXMvKQ VbeEBc4JabcZVlRPkpqcefWLRf4JzU9DzbSce+6+JKbBKLzBcYI5W5XmS/4NnP6o ksDCSC8DqmHeC/D5TcXp9ZD+Mt+twVmnG3ILNqP8ok1Qr2E9ccBYvrkWpArOGKgU J4WGa/b6L9onEg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:54:14 2025 by rpki-client