This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json) Hash identifier: zXfM2nL1fs1ZMFSpjsMQjKb3KfS29bTZEOWq4VnI9uI= Subject key identifier: 00:27:36:EA:96:7E:92:C6:DA:47:4F:41:67:50:96:24:34:26:B7:10 Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5 Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5 Certificate serial: 019B4B15748798C6A3C39E9AC2A4D21D5589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 12:00:55 +0000 Manifest this update: Tue 23 Dec 2025 12:00:55 +0000 Manifest next update: Wed 24 Dec 2025 12:00:55 +0000 Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: xveIB/SecG/adpKMxLpf3MxrCbQjrLz3S4sFSoIXNgw=) 2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:74:87:98:c6:a3:c3:9e:9a:c2:a4:d2:1d:55:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5 Validity Not Before: Dec 23 12:00:55 2025 GMT Not After : Dec 24 12:00:55 2025 GMT Subject: CN=002736ea967e92c6da474f41675096243426b710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:76:fa:e3:5b:9a:bf:a7:6f:33:1e:40:34:5e: 43:2b:70:3c:8f:3b:67:e3:06:7c:cb:14:d3:44:34: f7:dd:70:f6:b6:9b:39:84:bd:ad:52:83:45:98:79: 4d:c0:93:f2:74:bd:f8:e9:a5:5e:1b:e1:d1:4b:74: 20:3b:a1:85:24:60:f4:22:e8:51:08:f7:0e:6f:01: 3d:b2:cf:0d:31:56:8b:97:56:9e:e7:57:55:41:3b: fa:74:9d:6b:9f:2a:52:09:66:e6:22:88:d2:c2:cd: de:36:b5:76:72:93:c7:01:aa:ca:cd:88:f7:a1:5e: c7:60:33:23:2f:1c:ee:80:7d:32:f3:42:74:96:3c: 5e:f8:7c:4f:93:05:18:0b:82:83:da:64:e8:ba:91: b3:d6:a4:cc:25:83:2d:6a:a8:ae:66:c6:7a:77:83: 1f:78:07:b9:f9:03:a5:7e:1f:7e:d4:ff:da:b0:32: 7e:6d:30:4e:da:23:94:fb:42:fa:f8:1e:ae:89:44: d1:c7:08:2a:ef:bf:fd:31:d6:6a:2b:a2:6e:f5:1f: 31:03:f0:5a:2b:27:ca:d5:9f:60:42:b1:df:d7:24: 0c:55:07:c3:c2:b2:04:d9:dc:07:bd:41:15:bc:2c: c0:45:46:40:dd:dd:00:39:a5:10:0f:71:87:14:72: 5c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:27:36:EA:96:7E:92:C6:DA:47:4F:41:67:50:96:24:34:26:B7:10 X509v3 Authority Key Identifier: keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ed:ca:aa:25:e1:c3:f7:49:a0:fd:52:96:a3:91:89:dc:9f: c0:1b:58:9d:44:91:2d:e9:60:a0:bb:40:57:c4:b9:d3:22:c4: ca:e4:dd:ce:05:c3:d8:a1:06:8d:88:d6:bb:34:3a:62:e2:27: 5d:c4:ab:43:36:70:68:a0:aa:c9:2d:0d:e6:9a:e5:e4:be:77: 52:18:b1:1c:e1:76:dd:92:fd:33:8f:df:ec:79:7c:12:33:86: bc:db:19:08:1e:83:9b:3f:7e:25:41:ac:8d:c5:51:fd:c7:97: 0d:54:34:fd:90:ab:e0:1f:d8:18:fb:d5:63:93:db:58:52:bb: 44:da:c4:4a:9d:3d:fd:87:bd:18:95:1c:4f:1b:7a:fc:6c:77: 72:69:2b:8e:14:fc:99:30:59:1d:fd:d8:39:f4:3a:3f:f2:77: 08:70:1f:22:4f:e3:a9:a3:5c:39:9d:6c:48:9d:3a:1e:15:2e: 58:b9:7b:d0:c0:3d:eb:1a:5e:bc:70:4c:27:a5:9b:7f:5a:a4: 01:66:87:79:9e:0b:a5:c9:70:b6:b6:4c:af:94:21:c0:d9:c1: 42:75:3d:42:cb:97:23:c9:ee:33:b6:24:a7:65:7c:07:f4:a0: 7e:75:1b:7c:2c:29:e3:be:d5:a7:32:86:76:a8:ad:b0:36:4b: 76:4c:40:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFXSHmMajw56awqTSHVWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NzI0NzQyYzNmNTRlMTc5YjgyZTZhZjhlMzNlMGQ5ZDJm YmQ0ZDUwHhcNMjUxMjIzMTIwMDU1WhcNMjUxMjI0MTIwMDU1WjAzMTEwLwYDVQQD EygwMDI3MzZlYTk2N2U5MmM2ZGE0NzRmNDE2NzUwOTYyNDM0MjZiNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3b641uav6dvMx5ANF5DK3A8jztn 4wZ8yxTTRDT33XD2tps5hL2tUoNFmHlNwJPydL346aVeG+HRS3QgO6GFJGD0IuhR CPcObwE9ss8NMVaLl1ae51dVQTv6dJ1rnypSCWbmIojSws3eNrV2cpPHAarKzYj3 oV7HYDMjLxzugH0y80J0ljxe+HxPkwUYC4KD2mToupGz1qTMJYMtaqiuZsZ6d4Mf eAe5+QOlfh9+1P/asDJ+bTBO2iOU+0L6+B6uiUTRxwgq77/9MdZqK6Ju9R8xA/Ba KyfK1Z9gQrHf1yQMVQfDwrIE2dwHvUEVvCzARUZA3d0AOaUQD3GHFHJcowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAnNuqWfpLG2kdPQWdQliQ0JrcQMB8GA1UdIwQY MBaAFEhyR0LD9U4Xm4Lmr44z4NnS+9TVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMt MzVlMDI3ODM2YmEzLzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNGY2ZWUtMDBhOC00YTRhLTg2OGMtMzVlMDI3ODM2YmEz LzEvU0hKSFFzUDFUaGViZ3VhdmpqUGcyZEw3MU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARu3KqiXh w/dJoP1SlqORidyfwBtYnUSRLelgoLtAV8S50yLEyuTdzgXD2KEGjYjWuzQ6YuIn XcSrQzZwaKCqyS0N5prl5L53UhixHOF23ZL9M4/f7Hl8EjOGvNsZCB6Dmz9+JUGs jcVR/ceXDVQ0/ZCr4B/YGPvVY5PbWFK7RNrESp09/Ye9GJUcTxt6/Gx3cmkrjhT8 mTBZHf3YOfQ6P/J3CHAfIk/jqaNcOZ1sSJ06HhUuWLl70MA96xpevHBMJ6Wbf1qk AWaHeZ4LpclwtrZMr5QhwNnBQnU9QsuXI8nuM7Ykp2V8B/SgfnUbfCwp477VpzKG dqitsDZLdkxAaA== -----END CERTIFICATE-----Generated at Tue Dec 23 22:06:23 2025 by rpki-client