This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft File: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft (raw, json) Hash identifier: aQUxRsCRwMvGt+ziykz1Bch11/3a0Hu7RusKJ3oTHkY= Subject key identifier: C7:E1:C6:27:99:39:C5:B3:39:E9:30:0A:D2:72:B4:1B:81:BE:FA:A0 Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84 Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884 Certificate serial: 019B6DA15DCF8737A15BE94F64AF91D7A751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft Manifest number: 07CD Signing time: Tue 30 Dec 2025 05:00:50 +0000 Manifest this update: Tue 30 Dec 2025 05:00:50 +0000 Manifest next update: Wed 31 Dec 2025 05:00:50 +0000 Files and hashes: 1: 5RI4SZ7klYwbXOltWz9mLe7dxD8.roa (hash: GWR45JMOb96igm8o2PgndioWHr8iBdYB9L2Wx8rR7YM=) 2: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl (hash: lfhmkOhekR5nK4xw0Ls2Hetr9AS4f/gvB8i+UmfN9Hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:5d:cf:87:37:a1:5b:e9:4f:64:af:91:d7:a7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884 Validity Not Before: Dec 30 05:00:50 2025 GMT Not After : Dec 31 05:00:50 2025 GMT Subject: CN=c7e1c6279939c5b339e9300ad272b41b81befaa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bc:3f:1b:f7:e2:1f:eb:b2:d4:30:40:ab:e5: 7e:93:0b:6b:ff:5d:cc:a6:3c:10:65:b8:ec:45:ea: 65:6d:92:94:02:29:f9:a4:0b:89:8e:be:45:b6:5f: 32:24:38:3d:da:db:c5:ae:9c:bd:a5:98:51:0d:7a: ec:57:20:97:ca:21:a1:ac:d7:7d:05:ed:f8:22:2f: 30:e1:d4:61:b4:25:ce:91:58:df:99:68:d7:5a:c6: bf:5d:f9:95:1a:ce:b0:35:f5:88:5b:19:a0:c4:dd: 37:45:3a:58:fc:37:47:9b:38:ca:9d:d0:d8:07:3e: 0b:fb:1e:a1:d8:06:d8:4d:09:96:c6:fa:6e:80:8c: 07:1a:a0:34:48:86:6d:8b:ab:a5:36:d2:ef:07:05: 85:80:78:7f:0a:50:da:9c:64:0b:8c:1b:f6:f5:83: 6d:75:3d:be:8e:a4:48:35:84:56:a9:ad:b1:3b:83: cb:22:24:5a:c4:24:f8:47:94:23:ca:eb:71:10:78: 5c:96:17:3e:7d:6e:dc:0e:9d:62:c3:84:6d:70:5c: 5c:b4:b9:39:d5:13:d6:32:b8:57:fc:ee:86:3c:6d: 64:3d:d0:89:1a:6f:09:45:2f:be:50:ef:bc:a7:24: f2:5d:52:b8:5e:a0:d9:0b:af:49:36:5b:b6:0b:c3: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E1:C6:27:99:39:C5:B3:39:E9:30:0A:D2:72:B4:1B:81:BE:FA:A0 X509v3 Authority Key Identifier: keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c0:ea:5e:8e:d4:4a:8a:20:6e:b8:4e:33:67:4e:69:c3:b0: 2e:93:98:8d:6a:01:6f:e9:52:b9:d3:fa:1a:d7:79:6a:ed:8e: 13:21:c3:cd:25:86:a9:52:85:6b:46:13:59:6f:08:33:5c:d4: 58:03:e6:f2:2e:d2:76:fd:bf:ea:55:f4:6c:6f:83:71:94:53: c4:35:be:7a:bc:37:77:68:cd:67:09:69:58:34:e9:d4:15:ec: d0:db:02:12:d6:f4:9f:40:3d:01:d5:a2:a9:8e:4e:68:c9:3d: ed:a0:ab:07:1d:d0:00:da:95:bf:2a:f2:39:5a:8b:25:0e:ff: f2:ae:98:b3:01:93:8d:4c:22:1d:9d:ac:ee:d7:9c:23:0b:29: 80:eb:e9:eb:c5:cf:f9:fe:09:60:a1:2d:88:91:33:5c:33:39: 83:72:50:83:b6:99:b5:ec:83:bb:b1:af:d7:d9:44:93:19:07: 4e:9b:90:89:08:e5:c9:8c:cf:66:92:2d:9e:45:d1:6f:96:3e: 52:3e:4d:5a:6b:e1:37:e7:c8:80:27:25:d9:50:df:83:6c:28: 94:85:4f:e6:4f:32:f5:92:2c:75:a4:0a:f1:4f:15:16:26:91: 69:00:d1:c0:77:be:5c:84:0c:e5:e3:c1:89:06:6f:8d:5a:d1: 8b:ea:99:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoV3PhzehW+lPZK+R16dRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MjFkMTAzZmM3M2U5MDc1ZGNmMWUyMmJjODI0MmI3MGY5 OGM4ODQwHhcNMjUxMjMwMDUwMDUwWhcNMjUxMjMxMDUwMDUwWjAzMTEwLwYDVQQD EyhjN2UxYzYyNzk5MzljNWIzMzllOTMwMGFkMjcyYjQxYjgxYmVmYWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLw/G/fiH+uy1DBAq+V+kwtr/13M pjwQZbjsReplbZKUAin5pAuJjr5Ftl8yJDg92tvFrpy9pZhRDXrsVyCXyiGhrNd9 Be34Ii8w4dRhtCXOkVjfmWjXWsa/XfmVGs6wNfWIWxmgxN03RTpY/DdHmzjKndDY Bz4L+x6h2AbYTQmWxvpugIwHGqA0SIZti6ulNtLvBwWFgHh/ClDanGQLjBv29YNt dT2+jqRINYRWqa2xO4PLIiRaxCT4R5QjyutxEHhclhc+fW7cDp1iw4RtcFxctLk5 1RPWMrhX/O6GPG1kPdCJGm8JRS++UO+8pyTyXVK4XqDZC69JNlu2C8PYLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfhxieZOcWzOekwCtJytBuBvvqgMB8GA1UdIwQY MBaAFIUh0QP8c+kHXc8eIryCQrcPmMiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFNIUkFfeHo2UWRkeng0aXZJSkN0dy1ZeUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMzUxZWEtN2UwOS00NWFmLWEwZWUt ZTQwZGUwODQxM2ZhLzEvaFNIUkFfeHo2UWRkeng0aXZJSkN0dy1ZeUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iMzUxZWEtN2UwOS00NWFmLWEwZWUtZTQwZGUwODQxM2Zh LzEvaFNIUkFfeHo2UWRkeng0aXZJSkN0dy1ZeUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMDqXo7U SoogbrhOM2dOacOwLpOYjWoBb+lSudP6Gtd5au2OEyHDzSWGqVKFa0YTWW8IM1zU WAPm8i7Sdv2/6lX0bG+DcZRTxDW+erw3d2jNZwlpWDTp1BXs0NsCEtb0n0A9AdWi qY5OaMk97aCrBx3QANqVvyryOVqLJQ7/8q6YswGTjUwiHZ2s7tecIwspgOvp68XP +f4JYKEtiJEzXDM5g3JQg7aZteyDu7Gv19lEkxkHTpuQiQjlyYzPZpItnkXRb5Y+ Uj5NWmvhN+fIgCcl2VDfg2wolIVP5k8y9ZIsdaQK8U8VFiaRaQDRwHe+XIQM5ePB iQZvjVrRi+qZGw== -----END CERTIFICATE-----Generated at Tue Dec 30 07:58:34 2025 by rpki-client