This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json) Hash identifier: 8BpIO5+Ad8sPUudiAp6ACGsW1G69NCaKF7K1RPWrww8= Subject key identifier: 31:30:DE:40:D7:A8:91:59:12:99:9E:05:EF:76:E4:55:F8:11:79:78 Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1 Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1 Certificate serial: 019B51BCDCE55FDBCBDDDC69EF80C53604B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 19:01:30 +0000 Manifest this update: Wed 24 Dec 2025 19:01:30 +0000 Manifest next update: Thu 25 Dec 2025 19:01:30 +0000 Files and hashes: 1: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: JmUGuiEBZBp4N2/8as5Pin3LkiXB+NGhyOxjRmAqMMs=) 2: r_pXvYOMh3gSQPYuo_0x5LIDY1s.roa (hash: bQrJT1cr1jHVeYHOeCbVvQ+uUO5ecYBMkZwEAtD6RHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:dc:e5:5f:db:cb:dd:dc:69:ef:80:c5:36:04:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1 Validity Not Before: Dec 24 19:01:30 2025 GMT Not After : Dec 25 19:01:30 2025 GMT Subject: CN=3130de40d7a8915912999e05ef76e455f8117978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:14:71:11:18:0a:59:94:57:c3:20:fb:c5: f8:17:90:a3:df:9e:c4:9a:97:27:db:7f:8c:10:09: dc:00:31:fb:1c:c0:55:42:5c:99:af:44:a0:f6:03: 65:95:80:7a:8f:b8:2d:16:ee:69:3d:6f:73:ac:fd: 0b:cc:09:15:cb:66:2a:13:be:6b:a5:e4:d4:ea:1d: ec:ea:64:11:6f:2c:44:e2:0f:ed:69:f0:3a:ba:db: ad:95:72:bb:9e:50:2d:e6:af:65:7e:ed:71:2d:80: e7:5c:07:8a:de:ed:77:c3:1b:ad:3b:53:10:27:8a: f2:f1:65:03:53:eb:91:52:97:2e:42:48:9a:a7:cc: 5b:78:c8:ae:18:df:f5:54:b7:9b:f1:cd:2d:ba:cd: 55:69:36:a5:b7:98:cf:3e:9f:67:db:43:39:8a:69: 2f:df:bc:02:0c:4b:bf:95:78:64:a3:51:b1:0c:3e: 23:aa:01:d2:81:1d:df:12:2b:dd:9e:97:64:be:37: 0e:27:57:d5:24:7e:a0:44:6e:e8:eb:c6:27:ef:05: 11:97:09:ab:ef:88:e9:d2:8f:da:22:df:1e:48:dd: 06:98:f8:c1:0b:6a:65:10:1a:b4:84:ee:73:a0:7a: 2d:a9:49:68:89:00:41:87:bf:2c:fc:e8:78:74:29: 1a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:30:DE:40:D7:A8:91:59:12:99:9E:05:EF:76:E4:55:F8:11:79:78 X509v3 Authority Key Identifier: keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b7:b2:ef:7d:bb:6c:2b:b1:cc:12:5c:8b:b5:fa:4b:fa:df: 17:5b:7a:b2:79:b9:26:bd:ae:a7:8a:a1:1f:0a:32:c6:64:c6: 24:33:b1:1b:5f:5b:bb:b5:d3:db:c0:5d:76:08:4e:c3:21:02: b3:e9:f0:ca:09:5c:f0:4a:d3:54:66:b9:47:6c:18:a0:aa:cf: 28:66:f9:68:b5:32:45:03:51:bf:05:69:ee:e0:2a:b6:ca:56: 75:3d:ec:6a:eb:f6:85:d6:e2:f5:dc:80:b8:37:87:69:38:97: 2d:dc:d4:62:a4:0e:af:ad:fc:28:14:c2:b1:15:d0:a4:1e:c5: 49:b0:f6:0a:cf:6f:39:49:19:18:b4:72:ba:f6:eb:83:28:a5: bb:9d:a2:ed:0a:e6:8b:4b:9f:cb:af:94:19:13:b0:29:0f:48: 1b:b2:bc:d1:65:66:d5:c1:8a:0e:a1:f2:c4:0d:46:b9:c1:41: af:8e:7f:9e:95:bf:26:2f:a9:0a:cd:02:4e:1c:e9:e4:4c:c8: c4:90:90:40:55:0d:b6:5e:ee:5a:50:ab:ab:86:2f:91:45:3b: 09:72:28:d3:aa:95:4c:b7:ad:7e:19:ed:78:7e:9c:e0:89:c8: cb:17:85:74:64:c6:ba:f3:98:96:97:d3:2e:2c:a9:79:4a:21: d6:a8:27:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvNzlX9vL3dxp74DFNgS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OWQ4MTVkYjMyMjZiN2E4NDg5NjEyNjJhZDc0ZmZjMTU1 NTdmYTEwHhcNMjUxMjI0MTkwMTMwWhcNMjUxMjI1MTkwMTMwWjAzMTEwLwYDVQQD EygzMTMwZGU0MGQ3YTg5MTU5MTI5OTllMDVlZjc2ZTQ1NWY4MTE3OTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmksUcREYClmUV8Mg+8X4F5Cj357E mpcn23+MEAncADH7HMBVQlyZr0Sg9gNllYB6j7gtFu5pPW9zrP0LzAkVy2YqE75r peTU6h3s6mQRbyxE4g/tafA6ututlXK7nlAt5q9lfu1xLYDnXAeK3u13wxutO1MQ J4ry8WUDU+uRUpcuQkiap8xbeMiuGN/1VLeb8c0tus1VaTalt5jPPp9n20M5imkv 37wCDEu/lXhko1GxDD4jqgHSgR3fEivdnpdkvjcOJ1fVJH6gRG7o68Yn7wURlwmr 74jp0o/aIt8eSN0GmPjBC2plEBq0hO5zoHotqUloiQBBh78s/Oh4dCkaFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEw3kDXqJFZEpmeBe925FX4EXl4MB8GA1UdIwQY MBaAFHedgV2zImt6hIlhJirXT/wVVX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUt NjU2MWM4NDkwNTdmLzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUtNjU2MWM4NDkwNTdm LzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbey7327 bCuxzBJci7X6S/rfF1t6snm5Jr2up4qhHwoyxmTGJDOxG19bu7XT28BddghOwyEC s+nwyglc8ErTVGa5R2wYoKrPKGb5aLUyRQNRvwVp7uAqtspWdT3sauv2hdbi9dyA uDeHaTiXLdzUYqQOr638KBTCsRXQpB7FSbD2Cs9vOUkZGLRyuvbrgyilu52i7Qrm i0ufy6+UGROwKQ9IG7K80WVm1cGKDqHyxA1GucFBr45/npW/Ji+pCs0CThzp5EzI xJCQQFUNtl7uWlCrq4YvkUU7CXIo06qVTLetfhnteH6c4InIyxeFdGTGuvOYlpfT LiypeUoh1qgnVw== -----END CERTIFICATE-----Generated at Wed Dec 24 23:27:17 2025 by rpki-client