This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json) Hash identifier: NUfNW0LUhqutr4aQ22MMIDjym6fycwWnvHviqb6EByc= Subject key identifier: 50:76:33:F4:B3:20:31:2E:B2:32:3B:25:AD:39:D7:02:76:F5:82:8D Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1 Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1 Certificate serial: 019B405C10E48A4969A66E914764DC291E55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 10:02:13 +0000 Manifest this update: Sun 21 Dec 2025 10:02:13 +0000 Manifest next update: Mon 22 Dec 2025 10:02:13 +0000 Files and hashes: 1: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: d8NDRmDaTai1R3RJdIOtNlN7/2Ywz7UU6AVPd2f1ODo=) 2: r_pXvYOMh3gSQPYuo_0x5LIDY1s.roa (hash: bQrJT1cr1jHVeYHOeCbVvQ+uUO5ecYBMkZwEAtD6RHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:10:e4:8a:49:69:a6:6e:91:47:64:dc:29:1e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1 Validity Not Before: Dec 21 10:02:13 2025 GMT Not After : Dec 22 10:02:13 2025 GMT Subject: CN=507633f4b320312eb2323b25ad39d70276f5828d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:41:81:61:64:f8:aa:46:ca:8f:74:27:34:44: bc:12:a4:40:69:46:24:4a:45:5a:be:17:2f:b8:31: 83:92:d6:a1:10:a6:9e:a6:68:7f:0e:8c:68:05:53: 5f:de:71:3f:33:6f:46:94:18:1a:e2:eb:be:aa:03: 35:d2:65:a9:14:47:63:2b:80:82:35:30:e8:1d:37: 43:c2:05:ee:9a:96:67:38:bb:21:a4:27:b7:af:b0: 3e:5d:3a:24:5a:47:df:39:d8:0d:92:46:54:96:16: 9a:b7:14:3c:6d:d2:3c:a6:05:c2:87:f7:64:24:fc: 40:1e:30:fa:59:c3:65:f5:93:41:cf:84:18:99:df: 24:44:db:8f:17:1c:ef:0c:40:ac:9f:bc:ea:04:e6: 33:28:be:5b:0a:76:0d:14:db:ff:eb:35:33:32:43: 03:98:cc:59:bb:41:9b:a5:a4:91:b4:c1:29:8f:fc: 8f:8b:b0:91:2e:57:01:fc:17:e2:c1:9e:b8:73:46: f8:6a:d0:b2:23:98:1c:07:b4:49:a3:df:40:70:03: ff:b3:5d:71:a8:8d:27:9e:1a:f5:3a:81:8a:0f:f6: f8:96:9b:9b:b7:1e:0c:42:9c:6b:6b:26:7d:bb:b2: e7:3c:cd:97:51:64:43:1d:6e:01:41:f9:6c:74:88: ae:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:76:33:F4:B3:20:31:2E:B2:32:3B:25:AD:39:D7:02:76:F5:82:8D X509v3 Authority Key Identifier: keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:08:db:d9:f1:48:d9:55:76:69:1e:cc:92:b0:be:20:6d:45: 67:0a:e0:00:2a:55:22:69:4c:bf:53:b4:d4:ee:0c:dd:c4:99: 35:f4:0e:0a:49:96:d9:11:67:f9:82:f0:0c:bf:c2:d8:42:ee: ff:b3:57:4d:60:cb:28:40:aa:9e:39:8f:11:02:bf:13:3e:8c: 4d:e9:7c:00:de:0f:1b:1c:0c:29:79:fc:2e:4f:12:e6:b6:e9: 92:a9:21:cf:b5:29:3d:46:39:0c:57:4e:24:a7:f9:ad:53:82: e8:bf:cc:f4:ba:9f:c2:b0:22:a2:e6:bb:c5:0d:1c:79:e6:3d: b7:0d:7a:a4:3c:76:c7:d6:32:70:c4:72:6c:f2:de:c4:34:c8: b4:71:b6:f3:d6:98:45:f0:24:a0:da:07:74:ed:de:f6:ec:9d: 93:81:38:c5:d9:d2:c5:84:c0:2c:d8:4b:99:e2:51:29:e3:af: 10:bf:25:e9:cb:37:89:25:80:7c:e8:ab:cf:42:e6:cc:45:68: 79:1b:5c:14:f7:4c:cc:a0:7d:dc:70:94:c0:a8:ad:31:dd:4e: 66:cc:9f:35:5c:83:1d:f4:69:e6:53:18:df:31:10:cc:9d:7c: 20:ac:62:ec:57:e6:f4:3c:0e:4f:46:7a:42:26:33:0a:cf:39: 6f:b1:87:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXBDkiklppm6RR2TcKR5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OWQ4MTVkYjMyMjZiN2E4NDg5NjEyNjJhZDc0ZmZjMTU1 NTdmYTEwHhcNMjUxMjIxMTAwMjEzWhcNMjUxMjIyMTAwMjEzWjAzMTEwLwYDVQQD Eyg1MDc2MzNmNGIzMjAzMTJlYjIzMjNiMjVhZDM5ZDcwMjc2ZjU4MjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kGBYWT4qkbKj3QnNES8EqRAaUYk SkVavhcvuDGDktahEKaepmh/DoxoBVNf3nE/M29GlBga4uu+qgM10mWpFEdjK4CC NTDoHTdDwgXumpZnOLshpCe3r7A+XTokWkffOdgNkkZUlhaatxQ8bdI8pgXCh/dk JPxAHjD6WcNl9ZNBz4QYmd8kRNuPFxzvDECsn7zqBOYzKL5bCnYNFNv/6zUzMkMD mMxZu0GbpaSRtMEpj/yPi7CRLlcB/BfiwZ64c0b4atCyI5gcB7RJo99AcAP/s11x qI0nnhr1OoGKD/b4lpubtx4MQpxrayZ9u7LnPM2XUWRDHW4BQflsdIiuyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFB2M/SzIDEusjI7Ja051wJ29YKNMB8GA1UdIwQY MBaAFHedgV2zImt6hIlhJirXT/wVVX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUt NjU2MWM4NDkwNTdmLzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUtNjU2MWM4NDkwNTdm LzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAjb2fFI 2VV2aR7MkrC+IG1FZwrgACpVImlMv1O01O4M3cSZNfQOCkmW2RFn+YLwDL/C2ELu /7NXTWDLKECqnjmPEQK/Ez6MTel8AN4PGxwMKXn8Lk8S5rbpkqkhz7UpPUY5DFdO JKf5rVOC6L/M9LqfwrAioua7xQ0ceeY9tw16pDx2x9YycMRybPLexDTItHG289aY RfAkoNoHdO3e9uydk4E4xdnSxYTALNhLmeJRKeOvEL8l6cs3iSWAfOirz0LmzEVo eRtcFPdMzKB93HCUwKitMd1OZsyfNVyDHfRp5lMY3zEQzJ18IKxi7Ffm9DwOT0Z6 QiYzCs85b7GHcQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:44 2025 by rpki-client