This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft File: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json) Hash identifier: p00HiEUz210e2GIiKWs+fBM2cy+sQTRRwAxNym3GKQw= Subject key identifier: 9B:4C:94:20:11:4B:AC:74:3B:4F:FF:6C:37:38:AB:AA:14:DD:D0:72 Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9 Certificate issuer: /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9 Certificate serial: 019AF57840B5FB8BEC9A98BCC9F71529B19B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft Manifest number: 15B2 Signing time: Sat 06 Dec 2025 21:01:29 +0000 Manifest this update: Sat 06 Dec 2025 21:01:29 +0000 Manifest next update: Sun 07 Dec 2025 21:01:29 +0000 Files and hashes: 1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: XXb4lF2z0xJsVYAmwzoqUMWv+V+Lx+qtUr+JsYRKrY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:40:b5:fb:8b:ec:9a:98:bc:c9:f7:15:29:b1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9 Validity Not Before: Dec 6 21:01:29 2025 GMT Not After : Dec 7 21:01:29 2025 GMT Subject: CN=9b4c9420114bac743b4fff6c3738abaa14ddd072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:92:52:54:c7:77:23:cb:1d:5c:5b:21:d5: a7:81:79:94:ee:b2:e0:d7:f6:be:80:55:ab:aa:44: 48:ff:09:da:6a:4f:1c:4a:c3:93:1c:96:73:a1:e1: 6a:0d:11:0a:a0:62:e0:e3:51:24:7e:fa:6c:fd:bd: c9:10:78:81:81:6a:2f:23:d1:49:f9:2e:8c:46:8e: 29:de:e2:1d:fd:41:cf:a2:d6:5f:95:ff:1b:96:b3: b4:45:12:e6:ee:aa:97:c3:d0:d4:15:85:bc:03:8d: a5:2c:af:49:c7:e7:53:c3:19:17:0b:67:4b:4a:b9: 61:b6:a4:d6:f5:3d:0a:a3:fc:bf:f5:d6:e9:17:85: c9:7a:f2:9e:df:ed:dc:60:e2:f9:81:2d:49:42:06: 39:c4:3e:dc:b5:03:30:b2:ae:53:4d:4d:71:8d:f5: 1b:33:97:16:44:da:4e:e9:9d:92:3c:3f:d2:5d:d5: 3f:dc:08:b6:85:e7:3e:b8:4a:62:47:c8:c8:32:68: 07:cf:b9:f8:25:1b:62:de:de:9d:c6:b6:01:31:a8: 89:20:34:42:82:b7:67:fe:1a:d5:93:52:65:86:45: 1e:6d:71:3d:fa:13:b3:13:a4:ac:b4:d0:a6:c7:1e: cf:cd:1c:04:ae:9d:65:90:a1:c6:71:11:e0:14:6d: b3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4C:94:20:11:4B:AC:74:3B:4F:FF:6C:37:38:AB:AA:14:DD:D0:72 X509v3 Authority Key Identifier: keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a5:5e:61:df:24:f7:cf:30:f6:b8:d4:e4:e9:cb:6a:e7:a7: 99:8a:e8:bd:ab:7f:bd:4f:a3:36:50:37:4a:66:fa:37:c0:99: 86:a0:5b:1b:82:79:78:7e:b1:34:1f:02:ea:ad:68:cf:0d:ea: d2:e7:7e:38:9c:03:fa:e2:2d:ee:a8:91:be:33:f5:95:fa:47: fb:82:51:64:0c:5c:3a:e1:ac:f3:5a:16:5e:94:d3:88:1e:e8: db:75:e1:95:02:e1:99:7e:09:01:2f:3f:96:d9:d6:c1:77:47: 33:3b:b5:07:e2:fc:a2:71:71:03:dd:75:22:d0:54:58:d6:d2: 70:92:e4:0b:64:17:64:f9:e3:25:6b:a6:43:7d:34:e7:83:0b: 88:69:0c:34:fe:ec:11:b4:4b:a6:bc:b9:15:9c:f5:52:91:08: 17:0f:4a:90:a8:43:4a:1c:fa:4b:ca:e3:30:89:f2:31:f8:70: b3:a8:27:c4:23:b1:b5:7a:5a:82:9d:db:5c:dd:20:37:7e:36: 21:b2:95:ce:e8:93:47:cc:0a:ac:aa:88:ec:75:ec:dd:23:07: 44:15:bf:5b:18:43:2d:ab:4c:18:aa:c7:f1:6d:a0:5f:f4:94: f4:16:15:40:b4:45:ec:91:5b:c3:f7:85:a5:fa:b9:46:33:00: 80:7a:b4:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eEC1+4vsmpi8yfcVKbGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NzY3YjEzZDk5MDc5Y2E3MGZjMjk3OTg4ZGQ3OWVhYzQz YTlmYTkwHhcNMjUxMjA2MjEwMTI5WhcNMjUxMjA3MjEwMTI5WjAzMTEwLwYDVQQD Eyg5YjRjOTQyMDExNGJhYzc0M2I0ZmZmNmMzNzM4YWJhYTE0ZGRkMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xiSUlTHdyPLHVxbIdWngXmU7rLg 1/a+gFWrqkRI/wnaak8cSsOTHJZzoeFqDREKoGLg41Ekfvps/b3JEHiBgWovI9FJ +S6MRo4p3uId/UHPotZflf8blrO0RRLm7qqXw9DUFYW8A42lLK9Jx+dTwxkXC2dL SrlhtqTW9T0Ko/y/9dbpF4XJevKe3+3cYOL5gS1JQgY5xD7ctQMwsq5TTU1xjfUb M5cWRNpO6Z2SPD/SXdU/3Ai2hec+uEpiR8jIMmgHz7n4JRti3t6dxrYBMaiJIDRC grdn/hrVk1JlhkUebXE9+hOzE6SstNCmxx7PzRwErp1lkKHGcRHgFG2zJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtMlCARS6x0O0//bDc4q6oU3dByMB8GA1UdIwQY MBaAFOR2exPZkHnKcPwpeYjdeerEOp+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hZTMwYjAtNWU4OC00ZmI4LWIyMDgt NGIxZDk3ZGZlY2NmLzEvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9hZTMwYjAtNWU4OC00ZmI4LWIyMDgtNGIxZDk3ZGZlY2Nm LzEvNUhaN0U5bVFlY3B3X0NsNWlOMTU2c1E2bjZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqVeYd8k 988w9rjU5OnLauenmYrovat/vU+jNlA3Smb6N8CZhqBbG4J5eH6xNB8C6q1ozw3q 0ud+OJwD+uIt7qiRvjP1lfpH+4JRZAxcOuGs81oWXpTTiB7o23XhlQLhmX4JAS8/ ltnWwXdHMzu1B+L8onFxA911ItBUWNbScJLkC2QXZPnjJWumQ30054MLiGkMNP7s EbRLpry5FZz1UpEIFw9KkKhDShz6S8rjMInyMfhws6gnxCOxtXpagp3bXN0gN342 IbKVzuiTR8wKrKqI7HXs3SMHRBW/WxhDLatMGKrH8W2gX/SU9BYVQLRF7JFbw/eF pfq5RjMAgHq00Q== -----END CERTIFICATE-----Generated at Sun Dec 7 06:05:11 2025 by rpki-client