This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: ss9cP01oQHTyh5VyDarrZMAuI5YHNjGsgSTKJIdQu+s= Subject key identifier: 46:95:A3:0C:F3:83:13:E9:7B:E8:04:73:84:5A:1B:E9:29:A0:61:44 Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 019B3A90B566D44D21CD7F32392DD810A493 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 174E Signing time: Sat 20 Dec 2025 07:02:00 +0000 Manifest this update: Sat 20 Dec 2025 07:02:00 +0000 Manifest next update: Sun 21 Dec 2025 07:02:00 +0000 Files and hashes: 1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: bHXiCr9q/1EjewpsLDaUrIyXdhW/s+/GUfdfuepPQ/M=) 2: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=) 3: U__HExLHGpl-RdMelOlBo1OYAp8.roa (hash: CCkW8XHynhFzt+WHZQ5Bq4ZudALYHpSG5/wuTKQxrjE=) 4: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=) 5: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=) 6: gURf01mi6fRhdfTo38uZuQ8ns90.roa (hash: 19sy00QGgSOlMIKX5uqSoejtSxRzajUjvtb7yMJ8G5w=) 7: hnPMD0kJyESSkpzLaNH091YhR5k.roa (hash: reehn+NC4fwGIk+sTumI22RgUJ8t2cZVaMoj+4y8WfY=) 8: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=) 9: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:b5:66:d4:4d:21:cd:7f:32:39:2d:d8:10:a4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Dec 20 07:02:00 2025 GMT Not After : Dec 21 07:02:00 2025 GMT Subject: CN=4695a30cf38313e97be80473845a1be929a06144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:8c:8f:6e:e7:89:b6:60:42:fc:20:9d:2d: 04:5f:16:72:40:3c:fd:4f:a3:f7:1a:d6:5c:f0:c2: c2:3a:3f:3c:df:d9:5e:cc:60:b3:08:4f:43:d4:f0: 84:31:a0:72:c6:bb:1e:94:2f:39:99:81:f8:8e:9f: d8:44:0a:ac:fc:7d:d9:70:73:28:7b:d0:aa:20:ef: 04:a5:03:a5:11:a3:71:7e:60:07:06:ad:97:39:00: 8f:32:98:dc:64:64:0f:94:76:52:46:ef:70:4f:5a: 4f:d3:c9:2a:4c:bd:c6:0e:76:00:e5:c9:a4:36:a2: fa:f3:ef:dd:05:34:35:f0:cf:ff:b5:68:5c:9f:ac: c8:ba:43:31:3a:2c:2b:ee:f4:db:33:aa:81:e7:98: e0:28:f6:59:ac:97:99:b0:5b:a3:d4:45:ca:ea:ba: c9:ad:c3:81:de:1e:40:4a:98:41:c8:95:b4:ff:09: 8d:59:3e:ab:8d:47:18:05:d2:29:d1:e2:3e:5e:6c: 22:b3:1c:fd:94:c0:67:82:70:2c:5e:4e:1d:c1:e1: 1d:9d:b5:29:3b:a4:c1:df:5d:54:c8:68:e4:b1:e1: 2d:f7:f9:8b:3f:4f:70:02:fd:81:99:1c:86:22:8c: a5:9f:68:6d:7f:14:80:65:ee:de:c7:d8:94:50:de: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:95:A3:0C:F3:83:13:E9:7B:E8:04:73:84:5A:1B:E9:29:A0:61:44 X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7a:3f:de:9b:8d:1f:06:25:80:15:85:c5:b3:0a:43:d8:4c: df:7d:c3:43:b8:9f:f4:18:bf:f6:3d:7e:12:96:a4:bf:46:af: e4:1b:94:67:84:d9:25:d7:6f:f3:7c:2a:94:1b:30:6f:e3:fb: d5:12:00:be:69:d4:bf:89:9b:74:97:28:fa:c3:23:93:f9:62: 17:69:20:0d:2b:33:91:96:89:1b:63:3e:58:6b:63:46:70:68: 66:20:60:c7:ad:b9:f7:3c:80:38:c2:cd:44:8f:06:61:d0:3d: 92:9a:c6:fd:45:ed:61:78:48:52:ee:a3:0d:f1:39:25:c3:9a: c2:9b:dc:86:ee:1b:5a:c6:2c:59:e4:4e:ac:6c:9c:49:6e:0f: dd:95:b7:c7:6b:71:58:17:c1:54:5d:d0:0f:ba:29:7a:a2:27: 5d:c1:84:2c:1b:c8:d1:39:e6:c2:8a:1b:ff:8e:0e:44:45:38: 00:a5:e8:76:0a:09:52:e5:42:3a:4c:cf:e3:22:99:27:b5:74: 5b:90:cd:f3:bc:8a:be:75:e9:16:df:c9:58:b0:0a:2d:7e:e3: 42:75:51:40:c2:4f:2b:45:b5:04:7b:e7:1e:e8:8f:d7:3a:7a: ea:06:21:e6:77:19:2e:56:05:62:4e:ce:65:7e:62:8c:c5:ce: 3e:9f:97:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kLVm1E0hzX8yOS3YEKSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjUxMjIwMDcwMjAwWhcNMjUxMjIxMDcwMjAwWjAzMTEwLwYDVQQD Eyg0Njk1YTMwY2YzODMxM2U5N2JlODA0NzM4NDVhMWJlOTI5YTA2MTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxeMj27nibZgQvwgnS0EXxZyQDz9 T6P3GtZc8MLCOj8839lezGCzCE9D1PCEMaByxrselC85mYH4jp/YRAqs/H3ZcHMo e9CqIO8EpQOlEaNxfmAHBq2XOQCPMpjcZGQPlHZSRu9wT1pP08kqTL3GDnYA5cmk NqL68+/dBTQ18M//tWhcn6zIukMxOiwr7vTbM6qB55jgKPZZrJeZsFuj1EXK6rrJ rcOB3h5ASphByJW0/wmNWT6rjUcYBdIp0eI+Xmwisxz9lMBngnAsXk4dweEdnbUp O6TB311UyGjkseEt9/mLP09wAv2BmRyGIoyln2htfxSAZe7ex9iUUN63ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaVowzzgxPpe+gEc4RaG+kpoGFEMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHo/3puN HwYlgBWFxbMKQ9hM333DQ7if9Bi/9j1+Epakv0av5BuUZ4TZJddv83wqlBswb+P7 1RIAvmnUv4mbdJco+sMjk/liF2kgDSszkZaJG2M+WGtjRnBoZiBgx6259zyAOMLN RI8GYdA9kprG/UXtYXhIUu6jDfE5JcOawpvchu4bWsYsWeROrGycSW4P3ZW3x2tx WBfBVF3QD7opeqInXcGELBvI0Tnmwoob/44OREU4AKXodgoJUuVCOkzP4yKZJ7V0 W5DN87yKvnXpFt/JWLAKLX7jQnVRQMJPK0W1BHvnHuiP1zp66gYh5ncZLlYFYk7O ZX5ijMXOPp+XvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:17:56 2025 by rpki-client