This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft File: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json) Hash identifier: aHos7qKQsr+OLZ26dGER2q5fIiUg6B2NVLGuz+fPWoU= Subject key identifier: F8:89:A5:A1:0F:D4:58:46:42:4A:33:A3:55:69:39:75:E3:0B:65:6A Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9 Certificate issuer: /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9 Certificate serial: 019B48829DD542DFA32936B979A8AD2BB8D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft Manifest number: 15DD Signing time: Tue 23 Dec 2025 00:01:17 +0000 Manifest this update: Tue 23 Dec 2025 00:01:17 +0000 Manifest next update: Wed 24 Dec 2025 00:01:17 +0000 Files and hashes: 1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: lmjNnz1YKcfYJ5h7wp+1Xj9rgptqOWYojt534rry2gg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:9d:d5:42:df:a3:29:36:b9:79:a8:ad:2b:b8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9 Validity Not Before: Dec 23 00:01:17 2025 GMT Not After : Dec 24 00:01:17 2025 GMT Subject: CN=f889a5a10fd45846424a33a355693975e30b656a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:71:52:07:d2:ce:c0:15:0c:59:cc:26:f8: 1a:8c:b8:16:33:9d:d5:d0:bd:b8:88:4e:0a:0a:36: ac:8a:18:07:9a:6a:f6:28:ee:6f:9c:04:9f:b9:a4: a8:7f:65:ca:eb:dc:8e:3a:fb:f6:f7:a3:d7:2a:9f: ad:05:08:66:5b:be:24:cc:13:53:73:c7:16:f8:e9: 77:d0:df:b0:85:df:59:69:0c:f2:57:24:dd:c0:90: 3e:96:10:1b:5c:0a:8e:4c:3c:5a:11:9c:08:31:af: 4a:51:7e:cb:47:4a:34:ba:4d:4a:76:5f:ee:61:a4: 52:b0:87:67:d0:03:e2:e5:96:a3:26:5e:5a:ea:98: 94:14:c9:e3:09:5b:fc:b4:a7:90:c2:35:37:ea:73: d5:6d:29:83:9c:c3:bb:ff:89:82:1c:e6:47:e9:f8: f0:23:6d:f6:60:6f:1e:40:dc:37:90:06:03:67:20: 5c:65:1b:5d:aa:d0:82:e2:cb:71:1a:c0:4d:44:8b: 99:d2:58:8b:32:6d:a6:86:78:a7:f9:35:59:82:2a: 6c:0c:93:05:9f:6d:8b:05:ea:94:57:4b:87:98:8e: b5:01:17:af:f8:d6:03:60:29:37:ba:26:a6:45:c8: de:f2:b5:aa:6d:16:09:d2:5d:40:0a:ba:c6:a9:bd: 9b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:89:A5:A1:0F:D4:58:46:42:4A:33:A3:55:69:39:75:E3:0B:65:6A X509v3 Authority Key Identifier: keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:4a:32:cf:87:2a:ab:61:d3:9b:f5:51:26:f8:a3:11:4e:36: 00:a4:fc:99:ed:c1:6d:cc:2a:92:6e:04:55:0c:c0:c8:9e:4b: 4e:17:74:c3:74:7f:6f:47:c7:85:c9:9d:bc:f9:bc:8f:cd:51: ad:94:73:fe:3a:d3:99:2c:1a:1c:76:f8:80:c6:4e:37:89:31: 83:69:53:48:8e:ee:eb:70:a1:6b:fa:d2:bb:ee:73:0c:b3:d8: 05:64:fb:df:48:b1:84:d1:36:56:7d:fc:d7:9e:2e:03:cd:0e: de:33:b6:68:80:62:75:2c:c0:2b:5d:5c:5d:13:f9:c5:64:2d: 67:c3:0c:76:79:01:dc:56:3a:9d:fd:95:ed:c7:20:4c:10:2d: 8c:67:26:89:dd:90:64:ec:11:42:e4:17:6e:e7:1c:1d:03:4e: dc:2e:5b:b7:25:92:c6:cd:14:d3:99:04:86:27:7e:04:c5:12: c6:cd:35:8d:e8:23:da:81:52:c8:b9:89:44:7a:a5:e7:d0:f7: 29:74:7d:16:e8:1e:bf:3a:06:25:39:e3:ac:64:d2:78:78:3f: bd:ce:c7:71:05:ae:30:0f:fe:76:30:56:c9:f8:c7:64:9f:73: 09:a0:7a:d3:db:01:07:2b:60:83:32:07:41:1f:4c:36:c2:3b: 46:bf:2e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgp3VQt+jKTa5eaitK7jUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NzY3YjEzZDk5MDc5Y2E3MGZjMjk3OTg4ZGQ3OWVhYzQz YTlmYTkwHhcNMjUxMjIzMDAwMTE3WhcNMjUxMjI0MDAwMTE3WjAzMTEwLwYDVQQD EyhmODg5YTVhMTBmZDQ1ODQ2NDI0YTMzYTM1NTY5Mzk3NWUzMGI2NTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSZxUgfSzsAVDFnMJvgajLgWM53V 0L24iE4KCjasihgHmmr2KO5vnASfuaSof2XK69yOOvv296PXKp+tBQhmW74kzBNT c8cW+Ol30N+whd9ZaQzyVyTdwJA+lhAbXAqOTDxaEZwIMa9KUX7LR0o0uk1Kdl/u YaRSsIdn0APi5ZajJl5a6piUFMnjCVv8tKeQwjU36nPVbSmDnMO7/4mCHOZH6fjw I232YG8eQNw3kAYDZyBcZRtdqtCC4stxGsBNRIuZ0liLMm2mhnin+TVZgipsDJMF n22LBeqUV0uHmI61ARev+NYDYCk3uiamRcje8rWqbRYJ0l1ACrrGqb2bUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiJpaEP1FhGQkozo1VpOXXjC2VqMB8GA1UdIwQY MBaAFOR2exPZkHnKcPwpeYjdeerEOp+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hZTMwYjAtNWU4OC00ZmI4LWIyMDgt NGIxZDk3ZGZlY2NmLzEvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hZTMwYjAtNWU4OC00ZmI4LWIyMDgtNGIxZDk3ZGZlY2Nm LzEvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckoyz4cq q2HTm/VRJvijEU42AKT8me3Bbcwqkm4EVQzAyJ5LThd0w3R/b0fHhcmdvPm8j81R rZRz/jrTmSwaHHb4gMZON4kxg2lTSI7u63Cha/rSu+5zDLPYBWT730ixhNE2Vn38 154uA80O3jO2aIBidSzAK11cXRP5xWQtZ8MMdnkB3FY6nf2V7ccgTBAtjGcmid2Q ZOwRQuQXbuccHQNO3C5btyWSxs0U05kEhid+BMUSxs01jegj2oFSyLmJRHql59D3 KXR9FugevzoGJTnjrGTSeHg/vc7HcQWuMA/+djBWyfjHZJ9zCaB609sBBytggzIH QR9MNsI7Rr8uIg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:16:31 2025 by rpki-client