This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier: shHIhqfYh6WQEsN7WPw5Mf51AVi+rGVA4a56g/Awaqk=
Subject key identifier: 0D:EA:89:39:27:B5:66:0A:AE:E8:14:EC:23:6D:7E:A2:6B:C4:0C:07
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019B35D6EDF63C3FD99C151705EF6EB023E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number: 17CE
Signing time: Fri 19 Dec 2025 09:00:36 +0000
Manifest this update: Fri 19 Dec 2025 09:00:36 +0000
Manifest next update: Sat 20 Dec 2025 09:00:36 +0000
Files and hashes: 1: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: Jfpx13zbR8kPVO5NN3jbxgmH/CH9HRwxHqRnfYkvVI8=)
2: 7YzRWXLDcfjfZ1pfSykSzsi_Bqo.roa (hash: upRBCre7SZMIKE1wJY8xBkRe6ItlC6jUoHp+iPPL2jY=)
3: 7tiEv9a2cte9CpBTPcqjs8xnBKQ.roa (hash: Lp0nRST7H/IZB0m5wIyra+a/lX3Kx1yfYMfJAqiypu0=)
4: MrqpvKVhGghgWqjcBqKvEuXDI-w.roa (hash: 2m6ct1yYKNn97oNHEpEMtqOhuEyZV5Dslxg+dpwmv70=)
5: cHgsLum03vUPk1ZqgWFlR06D1Gs.roa (hash: cQZtsmDbQpAD/17b4zQranEZKH1IDqAE5jHDvC9CNKs=)
6: djDphXEUQBdX3R-46qlc_mVjIWM.roa (hash: kRTKow+YAequmrCl7iJcVr6r44o9uLfJr2UgqP80lNc=)
7: kPSNnw4_4qELTdWvaGuzZV1m1HA.roa (hash: 4wdK73NzeZ3ZvPINCQjy0JUV5WCBpYsSrh/XOjnZGIg=)
8: oFq4k3jjq58AVkYV37VxNam_vhQ.roa (hash: yt9RD78c2DlDLj9QrteYguRc3xhGx9cs6a+AGlNFCXg=)
9: opmTxamDTTGhXXB97pQEAvfnlEA.roa (hash: +a21sRDHCzkVFGym6Uca5XjXTPbBTo6ZNir2uKNCj3g=)
10: uQJ8uXAtBqaSg0chFS7wIEPvMFk.roa (hash: OOagBGLstHbMyzpz2lFNp3hjWcGgUfG7Q/Mr5UAMmgY=)
11: uQU12zYitg_amaVlwJpXM9XCEAY.roa (hash: IYdpyZTPtIiqFILl8uMqJOM+CkHBFW5wOhN+3p4JTWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:35:d6:ed:f6:3c:3f:d9:9c:15:17:05:ef:6e:b0:23:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Dec 19 09:00:36 2025 GMT
Not After : Dec 20 09:00:36 2025 GMT
Subject: CN=0dea893927b5660aaee814ec236d7ea26bc40c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:62:04:02:24:47:47:d0:97:76:61:fa:dc:
c6:01:11:41:a2:a1:c0:ab:7d:c7:2e:92:24:55:c5:
62:95:78:4f:4e:9a:a8:da:50:f8:42:0e:2c:c4:e6:
5d:3d:73:1e:5a:f1:ce:c3:d9:e9:b0:6c:53:d2:58:
44:7f:e4:e3:a9:fa:65:71:cb:c8:d8:c1:a3:98:7d:
4d:b8:18:2a:7f:6e:36:4e:9b:06:3d:11:a3:7a:02:
5f:aa:e4:d3:47:5c:e7:9d:00:98:db:a2:7d:ec:5d:
7f:0f:16:3f:63:48:bd:ea:3c:c5:63:69:ae:8b:10:
8e:c4:b4:d3:5a:7e:74:f1:58:1c:16:73:13:a4:b1:
eb:28:a5:88:91:70:34:65:7c:e1:33:5d:0c:79:b4:
d3:0e:46:a3:6c:71:19:2c:51:81:90:05:93:6e:1e:
04:57:4f:7b:b0:33:e9:03:0c:34:0d:f1:cc:39:86:
a9:1c:f1:af:75:62:ea:3c:c5:a2:04:ce:8e:b8:27:
15:2c:d0:88:09:19:8e:3c:ca:f3:8c:f5:e4:dd:1f:
c4:d8:4c:d2:a9:81:30:52:90:5d:c1:1f:17:72:c1:
ae:ee:a5:fb:dc:fc:0d:be:31:25:f5:de:74:d9:c1:
a9:9d:86:cc:d2:4c:f9:6c:27:05:53:53:78:1e:80:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:89:39:27:B5:66:0A:AE:E8:14:EC:23:6D:7E:A2:6B:C4:0C:07
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bd:e7:9c:82:e8:89:1c:3e:eb:e9:e6:9e:ec:f0:50:79:21:
d7:cf:7c:03:43:bb:0d:ab:97:5b:6b:b2:5b:e2:ff:b5:f3:7b:
64:5b:d4:e9:15:48:bb:eb:bb:2e:ec:85:9f:13:f5:03:52:8b:
f2:af:e5:c7:0d:bc:64:27:50:20:1f:48:46:4b:ff:8c:31:f7:
22:01:67:e4:93:c2:44:a0:49:ec:05:25:95:d0:e5:1b:d0:ea:
4a:25:82:82:60:46:ce:23:d9:1e:36:8a:d5:72:71:24:45:49:
7c:f0:b8:a6:63:90:1b:76:3e:53:a0:57:44:f3:4c:80:42:59:
4a:59:ad:8c:0b:ea:38:bf:ce:1f:a5:e7:51:de:f9:a1:0b:ed:
b4:54:99:ec:8f:e5:d9:39:0a:b3:97:20:36:d3:72:f7:2e:c3:
7a:47:9f:28:09:2f:f9:db:36:96:aa:44:3c:b7:94:c9:85:b2:
cf:e4:1a:6f:d9:58:03:64:c8:cf:89:7e:22:a1:85:15:9b:0a:
59:c7:86:b5:00:eb:17:2a:86:e0:82:73:13:f8:91:24:68:f9:
5b:26:de:fa:73:a4:54:9a:36:a7:ce:ea:c9:e2:25:23:06:41:
cf:a0:f9:3e:0b:91:96:4d:ee:1a:8d:9c:fb:a0:c8:b9:7b:33:
65:44:18:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:52:09 2025 by rpki-client