This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json) Hash identifier: yW9p/cBYlWcSYQ+1vYqyo56i1gQQewHPr3QQ+Q7ghoU= Subject key identifier: C7:89:27:A5:4B:3B:AF:4E:9F:20:E8:41:05:03:DF:D0:A0:BF:9A:D0 Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b Certificate serial: 019B48B90179580851A4BE72B5E7FA1D655D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft Manifest number: 0A8A Signing time: Tue 23 Dec 2025 01:00:42 +0000 Manifest this update: Tue 23 Dec 2025 01:00:42 +0000 Manifest next update: Wed 24 Dec 2025 01:00:42 +0000 Files and hashes: 1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: q/iA6hjNGIofFVdTOs0+ncqytVvzy1T/35FLa27rse0=) 2: AUcTDGFOG81He-CgX2Nb9NjPt98.roa (hash: VCQVsxF89yc5l33h6/1499iiv5KQTcfZEYfizAwCUSE=) 3: vaF2ggurkdMa29mOe8Ln8Gh0s84.roa (hash: 0hWPx/v7SQ3YrJu6uA8c9hJgR2g58Nd5ph2a6xS95t0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:01:79:58:08:51:a4:be:72:b5:e7:fa:1d:65:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b Validity Not Before: Dec 23 01:00:42 2025 GMT Not After : Dec 24 01:00:42 2025 GMT Subject: CN=c78927a54b3baf4e9f20e8410503dfd0a0bf9ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:39:bc:db:a4:00:3a:eb:98:33:2c:7c:41: 3f:3f:39:ce:a1:27:80:ae:0d:76:50:a3:2d:db:57: bf:96:42:29:37:b8:29:e7:d3:86:ac:95:73:19:89: b0:c4:46:55:f5:3a:7f:b9:ba:06:c3:7d:f5:13:5c: 54:f6:d2:eb:35:79:bd:43:79:8b:f4:71:5d:d7:e5: ac:a5:4d:77:d5:b1:77:c6:20:40:8f:d2:14:cf:d7: 73:ef:c0:e8:73:b7:14:05:cb:db:77:e4:35:4d:e8: f7:ab:a0:4f:87:39:f1:9c:cf:4b:9a:c0:cd:df:83: fd:60:e5:d0:ef:9d:1b:05:53:7c:db:b5:aa:b2:14: 65:8a:b5:71:f5:ea:44:0d:c4:7e:6a:72:b8:b3:4a: 73:c7:88:96:81:1b:c7:9e:89:49:f5:a5:2d:59:a0: 60:12:9d:63:b8:eb:48:e2:95:ec:e8:8b:11:8d:45: ab:6e:a3:0d:02:62:f9:15:c3:69:db:e4:f9:6d:df: 32:e9:8f:c5:41:e4:5d:c3:94:f7:21:4c:55:b2:d9: 71:85:cf:2a:c7:6a:32:db:dd:8e:3c:99:5c:10:0b: 99:33:ad:8b:64:bf:80:53:4d:2b:d4:50:ff:f3:cf: 16:85:8f:df:58:01:13:8d:43:dd:61:72:20:b4:fc: 8b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:89:27:A5:4B:3B:AF:4E:9F:20:E8:41:05:03:DF:D0:A0:BF:9A:D0 X509v3 Authority Key Identifier: keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2c:d0:de:b1:99:70:ec:f6:a0:61:6c:99:c2:50:90:47:87: cc:35:d3:89:5b:49:63:e8:10:f0:8e:10:86:73:50:af:8b:46: 71:93:93:ad:cc:6a:a1:7e:9c:5d:92:70:52:8d:b7:24:5a:14: 90:d2:0f:f2:a9:05:81:b5:ef:f9:34:66:81:72:da:2b:f7:c8: 92:0c:2c:17:16:22:30:f6:69:54:53:58:06:6f:ef:dd:3c:f8: 72:18:84:95:b3:03:55:6e:0f:4b:82:87:aa:e0:07:1c:aa:3f: 23:df:7c:4b:2d:bb:68:e0:fa:5f:06:12:73:75:5a:e7:76:c0: 51:76:3d:f3:79:6d:8c:cb:fe:85:63:59:18:70:10:84:cd:71: 2b:c5:8f:da:8c:36:ed:25:4b:d8:a3:2d:9e:34:5e:b2:f5:89: 17:1c:3d:92:1d:59:70:0f:03:c2:55:6f:b8:ae:e5:43:e5:7f: 50:19:1a:c3:cd:d9:0c:02:9f:a4:df:24:21:95:80:12:87:e8: bb:f6:11:c0:4e:93:4d:cb:49:16:fd:93:73:d7:22:e5:1c:86: 12:8c:25:a3:6b:a7:6a:33:e9:99:d8:f7:62:12:3d:49:49:2b: 67:af:6d:87:fe:c5:6a:7a:ca:7e:a9:7e:d4:e4:7e:57:d3:71: 2b:6d:2d:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuQF5WAhRpL5ytef6HWVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjIxMGUzOGIxNjkwOWE3ZWU4ZmUzYjhkMDY2NDdmMDY2 NTI5MmIwHhcNMjUxMjIzMDEwMDQyWhcNMjUxMjI0MDEwMDQyWjAzMTEwLwYDVQQD EyhjNzg5MjdhNTRiM2JhZjRlOWYyMGU4NDEwNTAzZGZkMGEwYmY5YWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlI5vNukADrrmDMsfEE/PznOoSeA rg12UKMt21e/lkIpN7gp59OGrJVzGYmwxEZV9Tp/uboGw331E1xU9tLrNXm9Q3mL 9HFd1+WspU131bF3xiBAj9IUz9dz78Doc7cUBcvbd+Q1Tej3q6BPhznxnM9LmsDN 34P9YOXQ750bBVN827WqshRlirVx9epEDcR+anK4s0pzx4iWgRvHnolJ9aUtWaBg Ep1juOtI4pXs6IsRjUWrbqMNAmL5FcNp2+T5bd8y6Y/FQeRdw5T3IUxVstlxhc8q x2oy292OPJlcEAuZM62LZL+AU00r1FD/888WhY/fWAETjUPdYXIgtPyL9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeJJ6VLO69OnyDoQQUD39Cgv5rQMB8GA1UdIwQY MBaAFOdiEOOLFpCafuj+O40GZH8GZSkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZDZiNzYtYjRiNy00ZjdlLTg2Mjgt Y2Y3OTQ2NThmNWJlLzEvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82ZDZiNzYtYjRiNy00ZjdlLTg2MjgtY2Y3OTQ2NThmNWJl LzEvNTJJUTQ0c1drSnAtNlA0N2pRWmtmd1psS1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCzQ3rGZ cOz2oGFsmcJQkEeHzDXTiVtJY+gQ8I4QhnNQr4tGcZOTrcxqoX6cXZJwUo23JFoU kNIP8qkFgbXv+TRmgXLaK/fIkgwsFxYiMPZpVFNYBm/v3Tz4chiElbMDVW4PS4KH quAHHKo/I998Sy27aOD6XwYSc3Va53bAUXY983ltjMv+hWNZGHAQhM1xK8WP2ow2 7SVL2KMtnjResvWJFxw9kh1ZcA8DwlVvuK7lQ+V/UBkaw83ZDAKfpN8kIZWAEofo u/YRwE6TTctJFv2Tc9ci5RyGEowlo2unajPpmdj3YhI9SUkrZ69th/7FanrKfql+ 1OR+V9NxK20t0Q== -----END CERTIFICATE-----Generated at Tue Dec 23 10:50:05 2025 by rpki-client