This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json) Hash identifier: i+9/+gF+4ceTcbp/QBv3LwwnDAxLcLvK4J9v6BrR1t4= Subject key identifier: B3:59:C5:79:28:B7:56:F1:C0:39:EE:84:88:4D:2F:95:E8:6D:3B:83 Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb Certificate serial: 019B3C106A21A0E96F5FDFF3FCF415922991 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft Manifest number: 1798 Signing time: Sat 20 Dec 2025 14:01:07 +0000 Manifest this update: Sat 20 Dec 2025 14:01:07 +0000 Manifest next update: Sun 21 Dec 2025 14:01:07 +0000 Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=) 2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: 2fb4F95DFMXa+9Q8RPJvBucfYUGcsRBpbTGUH5S78fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:6a:21:a0:e9:6f:5f:df:f3:fc:f4:15:92:29:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb Validity Not Before: Dec 20 14:01:07 2025 GMT Not After : Dec 21 14:01:07 2025 GMT Subject: CN=b359c57928b756f1c039ee84884d2f95e86d3b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:2a:3e:d1:10:d6:31:e7:b3:74:e0:3e:d3: 1b:01:96:a5:5c:09:46:91:8b:87:c1:59:f8:15:d7: f1:90:73:38:59:8b:31:4a:43:be:8f:d4:95:1f:fb: d3:e8:cd:4f:f6:98:4a:fb:f3:a4:a6:a6:6d:27:55: e2:99:67:c6:c4:b4:72:ee:3b:59:28:2d:cc:ff:9c: d2:a3:fb:5f:1b:ee:74:ac:68:db:9f:53:a9:03:94: d2:d5:16:86:ee:1f:43:56:59:eb:1b:5d:c7:2f:9a: c1:08:86:3a:e1:4e:32:4f:c9:a4:43:b9:03:86:49: b9:f2:7b:c8:57:7c:4d:57:11:46:cc:d3:b0:fb:1f: fc:b8:c8:b2:89:13:38:10:09:19:4a:d1:46:bf:da: 04:86:39:c4:5f:80:0f:06:3d:7d:6a:26:dd:80:ce: 64:ca:74:d8:b5:75:37:86:75:38:ff:04:80:6e:db: 91:f2:b9:df:0b:65:2d:61:21:ab:12:2a:9d:f5:0b: 6c:19:a8:b5:93:9d:73:c6:2f:6f:9b:44:b2:cb:53: d3:e1:4c:e9:da:37:ba:80:79:03:a1:24:a3:64:06: c8:ee:41:f4:35:be:70:ec:12:18:04:be:da:cb:64: 84:d4:c8:be:f7:ed:64:94:b9:c0:9c:ad:27:2a:c1: 0e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:59:C5:79:28:B7:56:F1:C0:39:EE:84:88:4D:2F:95:E8:6D:3B:83 X509v3 Authority Key Identifier: keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f5:dd:a5:97:fd:6d:15:4e:20:85:bf:eb:5b:1e:a1:ee:dd: a6:81:4b:14:52:db:00:a3:ee:3b:ad:b1:c3:58:92:e1:59:2c: 7e:cf:f9:85:84:4c:72:35:00:9b:43:c8:6b:0c:1f:2e:9f:9c: 56:db:e6:2c:c9:b1:87:db:0e:e4:49:0d:f2:2f:b2:4d:83:48: 79:4f:a4:c3:c1:10:56:b6:c4:61:25:75:46:9d:9b:27:e8:cc: 8f:87:13:fa:31:e4:52:6c:a7:d6:42:4e:4c:73:b0:2e:38:14: cc:de:de:df:2d:4d:ef:c2:ee:bb:98:59:d9:d9:dc:f4:fb:d6: 03:45:b4:10:f3:e2:bb:5f:36:0e:8b:20:36:6f:39:49:12:a3: 54:7f:bc:94:4a:a4:a2:92:7c:56:83:7d:f6:52:16:37:07:8c: d5:5e:bc:a4:9a:13:63:58:44:22:0d:19:61:59:5c:11:83:0f: 29:b0:59:5f:93:d3:3c:36:2a:b6:8b:1a:5f:81:d4:ff:33:b9: ff:12:31:14:ec:44:93:b7:37:33:cd:58:f5:f9:8b:1e:7d:d7: 9d:ed:23:19:f6:f2:7f:fc:56:a9:95:6b:f8:08:bf:c2:d8:67: 14:d5:e8:9c:9c:cf:55:e3:d1:bc:ae:81:2b:e8:b0:3d:31:f3: 4b:1b:f9:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EGohoOlvX9/z/PQVkimRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOWQ4NjA5NmE0OTExMGNmOWJmNjcwMjQwYjUxOTMxNWI2 NmFiY2IwHhcNMjUxMjIwMTQwMTA3WhcNMjUxMjIxMTQwMTA3WjAzMTEwLwYDVQQD EyhiMzU5YzU3OTI4Yjc1NmYxYzAzOWVlODQ4ODRkMmY5NWU4NmQzYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0oqPtEQ1jHns3TgPtMbAZalXAlG kYuHwVn4FdfxkHM4WYsxSkO+j9SVH/vT6M1P9phK+/OkpqZtJ1XimWfGxLRy7jtZ KC3M/5zSo/tfG+50rGjbn1OpA5TS1RaG7h9DVlnrG13HL5rBCIY64U4yT8mkQ7kD hkm58nvIV3xNVxFGzNOw+x/8uMiyiRM4EAkZStFGv9oEhjnEX4APBj19aibdgM5k ynTYtXU3hnU4/wSAbtuR8rnfC2UtYSGrEiqd9QtsGai1k51zxi9vm0Syy1PT4Uzp 2je6gHkDoSSjZAbI7kH0Nb5w7BIYBL7ay2SE1Mi+9+1klLnAnK0nKsEO9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNZxXkot1bxwDnuhIhNL5XobTuDMB8GA1UdIwQY MBaAFAudhglqSREM+b9nAkC1GTFbZqvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUt OGMxMDkwOWE0ODVjLzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUtOGMxMDkwOWE0ODVj LzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/XdpZf9 bRVOIIW/61seoe7dpoFLFFLbAKPuO62xw1iS4Vksfs/5hYRMcjUAm0PIawwfLp+c VtvmLMmxh9sO5EkN8i+yTYNIeU+kw8EQVrbEYSV1Rp2bJ+jMj4cT+jHkUmyn1kJO THOwLjgUzN7e3y1N78Luu5hZ2dnc9PvWA0W0EPPiu182DosgNm85SRKjVH+8lEqk opJ8VoN99lIWNweM1V68pJoTY1hEIg0ZYVlcEYMPKbBZX5PTPDYqtosaX4HU/zO5 /xIxFOxEk7c3M81Y9fmLHn3Xne0jGfbyf/xWqZVr+Ai/wthnFNXonJzPVePRvK6B K+iwPTHzSxv52w== -----END CERTIFICATE-----Generated at Sat Dec 20 17:00:05 2025 by rpki-client