This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft File: 51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json) Hash identifier: gCDtV3j1XHnq7I18AubGXlx3kWBTDzOnMNZ0GNdFo3g= Subject key identifier: C6:56:19:2E:30:15:DD:AC:4A:47:FB:53:D4:09:1B:20:7C:2B:E2:95 Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2 Certificate issuer: /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2 Certificate serial: 019B4581F9AA8903D62E4141575F6440C2F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft Manifest number: 0727 Signing time: Mon 22 Dec 2025 10:01:44 +0000 Manifest this update: Mon 22 Dec 2025 10:01:44 +0000 Manifest next update: Tue 23 Dec 2025 10:01:44 +0000 Files and hashes: 1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: 4uEH2VWvK9vP4Z+TOG6eWdEx+jNOMp01SnwZTH5OdeY=) 2: Ylfj2CG1V0DaK4f8uH_BBUtoGWA.roa (hash: CAUuMYHSplNovMOYBe0Qjx/057sd/Jrw0wK6ui3RBo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:f9:aa:89:03:d6:2e:41:41:57:5f:64:40:c2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2 Validity Not Before: Dec 22 10:01:44 2025 GMT Not After : Dec 23 10:01:44 2025 GMT Subject: CN=c656192e3015ddac4a47fb53d4091b207c2be295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:f1:e4:b3:b7:a8:b8:db:2e:cd:ce:e4:22: 3d:73:4c:a3:76:aa:73:bc:52:e0:4c:8c:7b:cd:48: 46:31:15:25:ed:3e:d1:9d:f3:18:78:2c:3c:1d:26: b6:1c:17:66:24:7a:5d:75:46:06:41:d7:6e:54:51: e8:1b:38:53:56:17:84:91:cb:b5:79:48:c8:7a:93: 26:c4:91:e1:b4:0d:87:5f:1e:aa:c2:7e:fa:58:b4: 35:29:75:b6:56:0b:b0:1c:93:cf:2b:4d:c9:ee:b1: 29:4e:39:a7:ee:9b:4b:09:dc:ca:28:7f:7b:f6:33: ba:a2:47:4a:09:a5:38:8d:d9:99:40:33:1f:d7:71: 01:f6:3b:7d:52:0a:56:ae:c1:de:04:39:cf:8e:ae: de:3e:5e:55:16:41:b4:f8:bc:83:90:2a:31:13:07: 52:54:50:a9:92:34:f5:4b:6c:a3:96:71:41:85:ca: 1f:c5:6f:5c:df:11:6f:7c:02:d1:02:a1:95:cd:88: f2:5f:d5:7b:68:77:72:eb:dd:85:d3:a2:b3:e5:09: bb:f2:99:a5:f2:5d:a1:64:9a:7f:bc:d3:63:87:5b: 47:f2:3f:d2:89:f4:99:1f:e0:b1:d5:5e:a4:39:65: 1c:22:6c:97:8c:f2:c3:09:3b:61:c2:0d:62:f6:6c: 11:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:56:19:2E:30:15:DD:AC:4A:47:FB:53:D4:09:1B:20:7C:2B:E2:95 X509v3 Authority Key Identifier: keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f9:af:89:d6:fc:8e:a6:83:74:12:d6:99:e3:50:8d:b0:15: f0:92:9a:fc:a8:ea:f8:9d:75:70:ad:15:14:f0:1d:ef:fb:32: b0:bf:62:f8:32:47:f8:df:53:30:e2:c7:f0:57:4d:d2:46:63: 5a:b6:74:c5:ad:7d:51:13:a3:38:d9:b4:a5:5d:7c:08:70:97: 66:8f:e0:7e:fb:ee:15:e6:4b:6e:1d:b4:a3:71:33:f5:db:83: c8:6e:d1:63:f6:77:10:dd:2a:e0:85:78:0a:9d:f5:aa:b6:bf: 42:6e:b7:6d:4c:f3:56:bd:b1:c2:cd:94:04:cf:0b:04:87:ca: 07:35:41:60:ed:c5:7f:ff:c6:47:b5:0e:19:4d:2b:92:62:7e: 6f:c6:c8:ea:ce:4b:f9:02:cc:99:9a:84:07:22:71:1a:24:93: 3a:d9:cb:01:fe:fa:7c:fd:b3:71:20:91:c7:64:73:f7:76:64: e4:c7:5b:ac:3b:9c:a7:f1:0e:31:8e:a1:f6:3b:19:f1:8e:44: b7:eb:73:0c:72:f7:7e:22:54:b5:c7:63:00:c6:55:0a:ff:99: 5b:59:57:ec:11:7a:ea:5b:4a:58:d7:74:d4:28:0a:cb:98:09: 4b:73:c7:76:64:b4:f5:11:83:7a:37:5e:f0:bf:6d:80:4a:54: 7e:77:9f:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgfmqiQPWLkFBV19kQML3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTY0ZDBjYzdkYTA1ZmE1OGNmYmQ4YzJhOTQzNWNiMzM2 MmNkZTIwHhcNMjUxMjIyMTAwMTQ0WhcNMjUxMjIzMTAwMTQ0WjAzMTEwLwYDVQQD EyhjNjU2MTkyZTMwMTVkZGFjNGE0N2ZiNTNkNDA5MWIyMDdjMmJlMjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4Dx5LO3qLjbLs3O5CI9c0yjdqpz vFLgTIx7zUhGMRUl7T7RnfMYeCw8HSa2HBdmJHpddUYGQdduVFHoGzhTVheEkcu1 eUjIepMmxJHhtA2HXx6qwn76WLQ1KXW2VguwHJPPK03J7rEpTjmn7ptLCdzKKH97 9jO6okdKCaU4jdmZQDMf13EB9jt9UgpWrsHeBDnPjq7ePl5VFkG0+LyDkCoxEwdS VFCpkjT1S2yjlnFBhcofxW9c3xFvfALRAqGVzYjyX9V7aHdy692F06Kz5Qm78pml 8l2hZJp/vNNjh1tH8j/SifSZH+Cx1V6kOWUcImyXjPLDCTthwg1i9mwR9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZWGS4wFd2sSkf7U9QJGyB8K+KVMB8GA1UdIwQY MBaAFOdWTQzH2gX6WM+9jCqUNcszYs3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFaTkRNZmFCZnBZejcyTUtwUTF5ek5pemVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80MmNmYWUtZTI5ZC00ZDk0LWJhNTIt YzQxZDk5ZjE3ZmRhLzEvNTFaTkRNZmFCZnBZejcyTUtwUTF5ek5pemVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80MmNmYWUtZTI5ZC00ZDk0LWJhNTItYzQxZDk5ZjE3ZmRh LzEvNTFaTkRNZmFCZnBZejcyTUtwUTF5ek5pemVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvmvidb8 jqaDdBLWmeNQjbAV8JKa/Kjq+J11cK0VFPAd7/sysL9i+DJH+N9TMOLH8FdN0kZj WrZ0xa19UROjONm0pV18CHCXZo/gfvvuFeZLbh20o3Ez9duDyG7RY/Z3EN0q4IV4 Cp31qra/Qm63bUzzVr2xws2UBM8LBIfKBzVBYO3Ff//GR7UOGU0rkmJ+b8bI6s5L +QLMmZqEByJxGiSTOtnLAf76fP2zcSCRx2Rz93Zk5MdbrDucp/EOMY6h9jsZ8Y5E t+tzDHL3fiJUtcdjAMZVCv+ZW1lX7BF66ltKWNd01CgKy5gJS3PHdmS09RGDejde 8L9tgEpUfnef2A== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:18 2025 by rpki-client