This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: AI/xuVmzjRnDGY0aF8X6WGUziJuhYR5IvrCeGXZVBkc= Subject key identifier: 31:48:E7:7E:F4:F4:5F:A5:18:05:50:F3:8B:99:59:27:56:AD:18:8E Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 019B13F0874E3CB516B9389EBB61BE7DFBB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 173A Signing time: Fri 12 Dec 2025 19:01:28 +0000 Manifest this update: Fri 12 Dec 2025 19:01:28 +0000 Manifest next update: Sat 13 Dec 2025 19:01:28 +0000 Files and hashes: 1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: 1hh/JU+OILG63OAyAywRBDZ8wyKJcYPbIrZtZ8ssm9I=) 2: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=) 3: U__HExLHGpl-RdMelOlBo1OYAp8.roa (hash: CCkW8XHynhFzt+WHZQ5Bq4ZudALYHpSG5/wuTKQxrjE=) 4: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=) 5: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=) 6: gURf01mi6fRhdfTo38uZuQ8ns90.roa (hash: 19sy00QGgSOlMIKX5uqSoejtSxRzajUjvtb7yMJ8G5w=) 7: hnPMD0kJyESSkpzLaNH091YhR5k.roa (hash: reehn+NC4fwGIk+sTumI22RgUJ8t2cZVaMoj+4y8WfY=) 8: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=) 9: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:f0:87:4e:3c:b5:16:b9:38:9e:bb:61:be:7d:fb:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Dec 12 19:01:28 2025 GMT Not After : Dec 13 19:01:28 2025 GMT Subject: CN=3148e77ef4f45fa5180550f38b99592756ad188e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:b4:32:22:f9:18:19:ce:43:91:f5:a2:9b: 73:b7:55:38:5f:38:a3:9c:53:35:5c:86:99:3f:c4: b8:f7:57:4b:f7:8a:76:ac:71:25:ca:91:da:3d:f1: 75:16:a1:c7:23:df:3f:74:1f:bf:0b:bb:2a:66:c6: 1d:0b:97:de:17:5f:ad:44:ee:04:dd:9d:ca:77:a1: ec:e6:0c:ef:b8:68:95:a3:61:9e:e7:78:8d:24:db: 98:e9:4e:b1:a3:a8:2a:a2:5f:3f:5c:10:b0:0a:98: 00:51:a4:f4:2e:06:57:5f:db:21:d6:5e:66:2d:fc: 1a:3d:ca:34:f8:17:76:bd:0a:6e:69:af:e5:c9:d1: 8c:61:10:58:05:a4:d6:fe:fc:5d:6e:68:b5:38:aa: f5:7a:46:31:20:75:a3:0c:b8:bb:86:8f:54:ae:3f: 82:41:32:59:eb:54:3e:fe:12:07:6c:b5:40:aa:da: 89:98:9f:d2:a5:2e:80:fa:94:2d:30:52:0d:e4:8f: 40:43:03:05:94:eb:2b:7d:4b:21:d0:5b:f9:d2:5d: 09:bc:c2:eb:68:bb:80:a0:d7:ae:e2:84:6f:09:35: a0:dd:f1:6c:e1:45:b5:c6:04:5e:3e:bc:21:29:e4: 7c:21:94:d2:e6:bf:f3:1b:f3:0d:82:13:a6:b9:15: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:48:E7:7E:F4:F4:5F:A5:18:05:50:F3:8B:99:59:27:56:AD:18:8E X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:1a:bd:63:9f:9e:09:99:ec:2a:94:10:55:a9:36:bb:46:de: c4:95:5e:8c:3c:28:d2:94:aa:1b:40:0c:e5:e0:f9:d6:d0:75: a6:b5:37:f2:17:7c:84:0f:54:64:71:2c:f5:fc:7e:12:e0:b5: fc:40:83:17:74:b2:71:7e:0b:90:9e:69:db:36:c7:66:ed:a2: 15:94:ab:ef:be:56:a3:47:9c:af:46:62:81:c0:7d:07:cd:74: 94:23:6c:97:90:dd:f7:d4:61:8e:29:fd:a7:2a:ba:ed:e5:a2: 0c:4b:36:58:b0:75:d9:cd:68:8b:cf:3e:c8:38:6a:5a:9a:3a: e4:a2:8b:67:e9:d0:c2:86:4b:e6:85:16:03:29:ca:a1:99:4b: 6e:0a:69:03:9d:5c:a0:44:95:3c:27:e6:21:58:53:98:9c:12: 32:61:a9:33:44:78:63:d2:04:f9:84:81:b5:64:55:df:fc:76: ea:69:1b:30:9a:21:53:d8:6f:dd:a6:31:94:f6:f8:bb:9c:34: dd:00:42:e8:49:11:d9:7a:1f:f9:29:1e:b2:7a:9c:1e:2e:77: f6:91:0f:07:c7:f8:80:b3:cc:28:35:d6:90:2c:06:f6:1d:86: 13:47:41:51:98:e5:9a:8f:45:40:06:4a:3d:96:d3:78:e8:49: d3:1e:a0:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsT8IdOPLUWuTieu2G+ffu0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjUxMjEyMTkwMTI4WhcNMjUxMjEzMTkwMTI4WjAzMTEwLwYDVQQD EygzMTQ4ZTc3ZWY0ZjQ1ZmE1MTgwNTUwZjM4Yjk5NTkyNzU2YWQxODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudy0MiL5GBnOQ5H1optzt1U4Xzij nFM1XIaZP8S491dL94p2rHElypHaPfF1FqHHI98/dB+/C7sqZsYdC5feF1+tRO4E 3Z3Kd6Hs5gzvuGiVo2Ge53iNJNuY6U6xo6gqol8/XBCwCpgAUaT0LgZXX9sh1l5m LfwaPco0+Bd2vQpuaa/lydGMYRBYBaTW/vxdbmi1OKr1ekYxIHWjDLi7ho9Urj+C QTJZ61Q+/hIHbLVAqtqJmJ/SpS6A+pQtMFIN5I9AQwMFlOsrfUsh0Fv50l0JvMLr aLuAoNeu4oRvCTWg3fFs4UW1xgRePrwhKeR8IZTS5r/zG/MNghOmuRUgxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFI53709F+lGAVQ84uZWSdWrRiOMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRq9Y5+e CZnsKpQQVak2u0bexJVejDwo0pSqG0AM5eD51tB1prU38hd8hA9UZHEs9fx+EuC1 /ECDF3SycX4LkJ5p2zbHZu2iFZSr775Wo0ecr0ZigcB9B810lCNsl5Dd99Rhjin9 pyq67eWiDEs2WLB12c1oi88+yDhqWpo65KKLZ+nQwoZL5oUWAynKoZlLbgppA51c oESVPCfmIVhTmJwSMmGpM0R4Y9IE+YSBtWRV3/x26mkbMJohU9hv3aYxlPb4u5w0 3QBC6EkR2Xof+SkesnqcHi539pEPB8f4gLPMKDXWkCwG9h2GE0dBUZjlmo9FQAZK PZbTeOhJ0x6gQg== -----END CERTIFICATE-----Generated at Fri Dec 12 21:54:18 2025 by rpki-client