This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json) Hash identifier: EcJHVuVja/m83AMSBcLT+Zd+bbqfXVOpjkgx2gYICp0= Subject key identifier: 32:87:18:E7:29:28:1F:35:75:7C:0B:E8:21:1F:E4:AE:EB:C6:AD:43 Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37 Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337 Certificate serial: 019B3E6DE9B27437983779DB3665A81B721B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft Manifest number: 0B31 Signing time: Sun 21 Dec 2025 01:02:29 +0000 Manifest this update: Sun 21 Dec 2025 01:02:29 +0000 Manifest next update: Mon 22 Dec 2025 01:02:29 +0000 Files and hashes: 1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=) 2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: ifiEPAw0/w6fPv4IkUbUvYc+nM4/qPlCzWI4qym/+jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:e9:b2:74:37:98:37:79:db:36:65:a8:1b:72:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337 Validity Not Before: Dec 21 01:02:29 2025 GMT Not After : Dec 22 01:02:29 2025 GMT Subject: CN=328718e729281f35757c0be8211fe4aeebc6ad43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:26:26:0d:81:56:62:7a:62:f6:97:de:34: de:7d:32:bc:f6:64:58:c9:fa:5c:35:e6:5b:1b:16: c4:2d:46:17:e5:d7:29:45:75:a4:13:0e:8a:b7:e9: 5a:56:99:12:71:a6:87:2f:b6:36:ac:fd:1e:b1:c9: 88:ae:7f:95:d9:b8:61:84:de:91:c9:1b:9d:65:bb: d9:51:50:27:db:ac:7e:13:1a:f0:44:ca:00:cb:47: 0b:14:af:13:d9:1c:9f:f2:5e:a6:e6:30:c4:4f:78: c1:50:58:57:5a:1f:df:f1:61:1b:fb:2f:8c:eb:c8: 1b:94:52:1e:23:17:1d:9b:0c:dc:96:71:61:4d:1f: 64:32:88:16:82:26:d7:4e:f5:57:f3:74:bf:5d:ac: 13:22:2c:6b:2c:e0:34:8f:0b:02:11:8d:8a:fd:aa: be:32:9c:2a:1d:b1:f5:3e:95:c4:05:85:7a:39:31: 1f:e4:46:85:f7:a9:73:7f:4b:11:22:fb:1a:4a:a9: ce:c0:73:42:78:af:d0:d2:14:d0:44:07:7b:39:58: 42:b4:9e:73:f5:2f:06:ad:3d:17:6b:31:64:0d:c5: 78:e8:62:93:00:4f:c8:1c:be:d1:2f:12:f4:31:a5: fc:98:25:fd:2d:f4:b0:09:af:2d:59:0a:e5:74:34: de:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:87:18:E7:29:28:1F:35:75:7C:0B:E8:21:1F:E4:AE:EB:C6:AD:43 X509v3 Authority Key Identifier: keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cf:1c:62:2d:9c:31:9d:c1:a4:c9:44:d8:19:88:b6:0e:48: 4e:ea:ea:48:30:74:2e:0a:f8:f5:fe:20:88:0f:cc:f7:57:fe: a4:09:a3:d1:cd:d2:fd:bd:b3:5d:dd:b2:f8:16:90:af:d9:a0: 41:7a:82:b7:75:16:38:9b:55:b7:59:71:b3:bc:e8:46:70:7e: e9:25:9d:f4:4d:4a:8d:71:58:b0:0b:25:9a:fd:4f:ad:1d:c2: 94:ea:13:1d:65:1d:59:1a:c2:de:3e:d7:2b:b4:b7:f8:e3:8b: ac:ac:ee:3b:a2:72:13:82:0b:ae:49:0a:75:2a:e2:cb:39:77: 3b:59:da:73:26:4f:1c:96:cc:9f:d8:04:53:19:3a:84:88:06: 74:61:25:50:b6:d2:e2:ab:8a:17:82:31:f1:82:e5:59:72:13: 9a:27:20:75:5e:d2:96:87:65:8e:ca:fc:c7:b9:80:a4:e4:25: 28:da:1a:bf:82:02:f2:91:eb:74:b6:5f:f4:84:92:ed:9a:3f: fa:49:8c:c6:3a:80:97:5d:cf:51:6b:59:34:e9:b9:99:4c:7f: 89:2f:ae:ba:bb:15:54:ca:ad:c0:6e:ce:0e:03:76:0f:71:56: 99:6e:69:ee:ba:5c:99:64:74:64:33:6f:ab:8c:25:82:96:d6: 80:b9:b9:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bemydDeYN3nbNmWoG3IbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMTdiNWFjNDY3NDEyZTI0OWM0NGUyNzM5YzI4OWViYjA0 Y2QzMzcwHhcNMjUxMjIxMDEwMjI5WhcNMjUxMjIyMDEwMjI5WjAzMTEwLwYDVQQD EygzMjg3MThlNzI5MjgxZjM1NzU3YzBiZTgyMTFmZTRhZWViYzZhZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA124mJg2BVmJ6YvaX3jTefTK89mRY yfpcNeZbGxbELUYX5dcpRXWkEw6Kt+laVpkScaaHL7Y2rP0escmIrn+V2bhhhN6R yRudZbvZUVAn26x+ExrwRMoAy0cLFK8T2Ryf8l6m5jDET3jBUFhXWh/f8WEb+y+M 68gblFIeIxcdmwzclnFhTR9kMogWgibXTvVX83S/XawTIixrLOA0jwsCEY2K/aq+ MpwqHbH1PpXEBYV6OTEf5EaF96lzf0sRIvsaSqnOwHNCeK/Q0hTQRAd7OVhCtJ5z 9S8GrT0XazFkDcV46GKTAE/IHL7RLxL0MaX8mCX9LfSwCa8tWQrldDTekQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKHGOcpKB81dXwL6CEf5K7rxq1DMB8GA1UdIwQY MBaAFLIXtaxGdBLiScROJznCieuwTNM3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOTgzMzYtNGMzZS00Nzk1LWExZjct M2RiZDMyZDY5OTJlLzEvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iOTgzMzYtNGMzZS00Nzk1LWExZjctM2RiZDMyZDY5OTJl LzEvc2hlMXJFWjBFdUpKeEU0bk9jS0o2N0JNMHpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHs8cYi2c MZ3BpMlE2BmItg5ITurqSDB0Lgr49f4giA/M91f+pAmj0c3S/b2zXd2y+BaQr9mg QXqCt3UWOJtVt1lxs7zoRnB+6SWd9E1KjXFYsAslmv1PrR3ClOoTHWUdWRrC3j7X K7S3+OOLrKzuO6JyE4ILrkkKdSriyzl3O1nacyZPHJbMn9gEUxk6hIgGdGElULbS 4quKF4Ix8YLlWXITmicgdV7Slodljsr8x7mApOQlKNoav4IC8pHrdLZf9ISS7Zo/ +kmMxjqAl13PUWtZNOm5mUx/iS+uursVVMqtwG7ODgN2D3FWmW5p7rpcmWR0ZDNv q4wlgpbWgLm5uQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:40 2025 by rpki-client