This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft File: ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json) Hash identifier: jEB9+5bAcPIFAHovo/F/KNMMypd5BkN2uy69u92D4Dw= Subject key identifier: 8C:99:21:16:5A:45:C1:8B:A6:1E:8B:A4:31:14:37:48:CC:A4:90:1E Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0 Certificate issuer: /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0 Certificate serial: 019B3BA26B05F73E43487EE469A553D87BCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft Manifest number: 052E Signing time: Sat 20 Dec 2025 12:00:58 +0000 Manifest this update: Sat 20 Dec 2025 12:00:58 +0000 Manifest next update: Sun 21 Dec 2025 12:00:58 +0000 Files and hashes: 1: XnOuIokBdMAkCep62IYd6iA-AP0.roa (hash: 46xujjI9s3TgttzYiibmkBsBEPkKuAgurV4IijrOPnY=) 2: c_-rMl7HFVaHx3u8k-mg-7MnS34.roa (hash: AGapCrdXwoHdePxIoXjlgd8fqP8GcovBdv+jOw51rkE=) 3: dhJ1RACMalns3KWMnrERrY8elus.roa (hash: KN4UOM7cl+3YJuxepZbXK+ohK3xSecFS5RbymOVHGoo=) 4: j7YPtJlyRyiLKf8qDfUwSCI2ft8.roa (hash: 1kQEVfqcK66MTq/rhjjN/li68lX8YmDLheaZniGcMLQ=) 5: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: Fnu94MoRlgo4XZ23IqUIRlAFO1cQmsiy0BatQ1Rzjto=) 6: tbYCEHCORQD2jU1FhjpVeyl7yzw.roa (hash: UJRgmyhwhn7tm70C5e/aIyFO87+Jd/xNlqZSp90NpM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:6b:05:f7:3e:43:48:7e:e4:69:a5:53:d8:7b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0 Validity Not Before: Dec 20 12:00:58 2025 GMT Not After : Dec 21 12:00:58 2025 GMT Subject: CN=8c9921165a45c18ba61e8ba431143748cca4901e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:da:4a:5b:56:56:4d:f7:70:8f:6d:16:dd: 0e:d9:bf:fe:af:e3:ea:ba:85:c8:c9:5d:37:d6:e2: b1:bf:e2:5e:4a:c5:e4:a1:a9:b6:da:a4:35:b6:36: 81:39:1e:c9:2b:c8:3e:78:59:2b:0f:3f:66:8d:a8: 36:a7:dd:2e:31:bd:d6:ca:28:f1:22:95:49:f7:0a: 21:e8:3e:8e:92:b0:f0:66:60:7d:15:32:d4:c6:f3: f9:c0:c3:26:cf:60:bb:93:83:bb:fc:be:06:2d:71: 9f:4b:e8:2a:79:6c:12:b3:41:07:5f:4a:a4:82:b5: 1e:b7:a1:4a:77:6e:75:b4:c4:07:af:88:4f:67:d4: e4:3b:bb:a4:df:ba:dd:7f:38:21:8f:14:45:07:7b: 23:c6:a3:c8:9b:9c:d6:67:2d:c2:76:35:d4:13:63: 4b:e4:2d:5b:5b:2f:8f:0c:52:1c:02:e7:5b:45:e5: b2:54:0a:2e:25:57:be:f4:10:58:3e:da:ed:d0:51: bb:62:a0:2a:7c:c4:4c:2a:bf:2e:2f:27:8b:83:c3: 37:c9:96:89:eb:a2:b4:e4:ca:f5:81:05:b8:ca:98: f2:00:6a:00:ff:4d:b1:b0:1d:1d:05:19:0c:56:cf: bd:3c:9e:54:7a:30:f8:26:79:c5:82:60:fe:d4:e1: 97:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:99:21:16:5A:45:C1:8B:A6:1E:8B:A4:31:14:37:48:CC:A4:90:1E X509v3 Authority Key Identifier: keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d9:80:af:b4:cf:a7:b2:d4:5d:87:1f:e7:79:0d:8f:77:a9: 40:0f:67:88:1f:2b:df:45:af:cb:0f:b0:55:27:e1:47:f7:00: 04:2f:f6:7b:1f:07:bb:c7:e5:46:e2:7b:0a:4f:3b:e0:33:ea: 3a:5a:a6:02:57:48:25:99:0c:68:12:0e:a4:d3:8a:be:8d:6b: 40:f8:44:1d:69:74:68:26:3c:f6:86:c8:9e:cd:e3:e5:ee:33: 0f:f8:c5:fa:bb:4c:3d:bf:03:5b:59:02:76:08:8d:27:ea:65: 43:ed:84:07:ae:dc:85:02:32:58:07:ec:95:3b:81:1a:c0:5a: 84:41:2a:cb:f8:99:b4:5a:ee:87:73:37:79:52:6a:96:ad:c6: 6c:19:46:ac:9e:da:39:bf:35:ad:4c:22:98:f4:20:69:a1:32: b0:89:a1:56:60:03:94:2c:17:d3:73:61:3b:67:1f:6b:49:24: 55:83:72:6c:f4:aa:1e:92:b4:3b:89:9a:d2:cf:05:72:b3:54: 0f:36:74:58:ab:e1:6e:95:e7:48:33:b9:a7:81:c8:ad:86:85: a1:7d:ee:a8:2f:75:a9:b5:d7:ba:08:b6:72:de:67:79:86:cf: 0e:72:40:f1:27:f6:17:58:70:2f:75:de:81:ee:06:ce:39:2e: 75:d1:07:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7omsF9z5DSH7kaaVT2HvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNWU3NmY5MjlkMjFiNTg2ZjQyZTMwZjdkOWIwMDM5OWIz ZGNiZjAwHhcNMjUxMjIwMTIwMDU4WhcNMjUxMjIxMTIwMDU4WjAzMTEwLwYDVQQD Eyg4Yzk5MjExNjVhNDVjMThiYTYxZThiYTQzMTE0Mzc0OGNjYTQ5MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX3aSltWVk33cI9tFt0O2b/+r+Pq uoXIyV031uKxv+JeSsXkoam22qQ1tjaBOR7JK8g+eFkrDz9mjag2p90uMb3Wyijx IpVJ9woh6D6OkrDwZmB9FTLUxvP5wMMmz2C7k4O7/L4GLXGfS+gqeWwSs0EHX0qk grUet6FKd251tMQHr4hPZ9TkO7uk37rdfzghjxRFB3sjxqPIm5zWZy3CdjXUE2NL 5C1bWy+PDFIcAudbReWyVAouJVe+9BBYPtrt0FG7YqAqfMRMKr8uLyeLg8M3yZaJ 66K05Mr1gQW4ypjyAGoA/02xsB0dBRkMVs+9PJ5UejD4JnnFgmD+1OGX7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyZIRZaRcGLph6LpDEUN0jMpJAeMB8GA1UdIwQY MBaAFJpedvkp0htYb0LjD32bADmbPcvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAt YjRhYWEyM2ZkYWE5LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAtYjRhYWEyM2ZkYWE5 LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9mAr7TP p7LUXYcf53kNj3epQA9niB8r30Wvyw+wVSfhR/cABC/2ex8Hu8flRuJ7Ck874DPq OlqmAldIJZkMaBIOpNOKvo1rQPhEHWl0aCY89obIns3j5e4zD/jF+rtMPb8DW1kC dgiNJ+plQ+2EB67chQIyWAfslTuBGsBahEEqy/iZtFruh3M3eVJqlq3GbBlGrJ7a Ob81rUwimPQgaaEysImhVmADlCwX03NhO2cfa0kkVYNybPSqHpK0O4ma0s8FcrNU DzZ0WKvhbpXnSDO5p4HIrYaFoX3uqC91qbXXugi2ct5neYbPDnJA8Sf2F1hwL3Xe ge4GzjkuddEHdQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:04:31 2025 by rpki-client