This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json) Hash identifier: kA2y8B1V9tfpWI99k1jvHPNhrIWw1Sps2+Hz+UrDFKk= Subject key identifier: 9F:EC:99:7E:92:C5:99:9D:F8:08:E5:A9:B8:10:B5:8A:FF:B1:A6:23 Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1 Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1 Certificate serial: 019AF12E3E5DF6F28183802AF280E793AB65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: 0gopC7pjNr1dqjvR/reT5Zht1a4Dp9wgo3AEmqAb0I0=) 2: r_pXvYOMh3gSQPYuo_0x5LIDY1s.roa (hash: bQrJT1cr1jHVeYHOeCbVvQ+uUO5ecYBMkZwEAtD6RHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3e:5d:f6:f2:81:83:80:2a:f2:80:e7:93:ab:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1 Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=9fec997e92c5999df808e5a9b810b58affb1a623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:d4:f1:05:33:e3:37:2d:93:e8:20:34:4b: 22:61:89:fb:95:6d:89:8e:2b:34:5c:1c:f8:6f:22: b4:ba:77:69:a8:c8:29:b0:93:72:a1:a5:65:57:28: a0:82:ce:44:10:a8:19:6a:08:c7:54:eb:7f:85:85: b7:cd:a1:a1:a8:e1:62:da:bc:62:94:36:66:9e:d0: dd:b5:e1:11:50:b8:65:da:f8:32:b8:f1:63:20:1f: d7:fe:58:a6:ce:0d:dd:1c:bf:7d:19:54:d1:b0:3f: 55:1f:78:2a:ae:f2:c9:4d:a1:9d:ab:bc:05:d7:66: b5:f1:09:6a:48:f8:f1:ca:aa:7c:f7:2d:48:32:1f: e5:90:99:eb:ce:af:f5:32:f7:be:83:ef:7e:4d:5f: 80:9e:0b:cd:1f:b3:5b:fc:e3:3b:7f:18:15:0b:39: 94:fc:7c:7d:25:e9:7d:7c:73:6e:57:9b:7e:f0:6b: 4c:29:d0:67:07:8c:a6:74:15:cc:6c:cb:df:be:6d: 27:57:43:8f:bf:48:ce:e1:0f:e3:e6:6d:cf:45:ea: 49:ae:52:cc:92:79:fd:31:ff:06:15:ea:d1:db:01: 1f:37:61:7f:22:ad:45:cd:93:50:bc:a3:46:9f:43: 83:3d:da:34:c4:73:33:59:fd:58:8d:30:2e:cc:71: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EC:99:7E:92:C5:99:9D:F8:08:E5:A9:B8:10:B5:8A:FF:B1:A6:23 X509v3 Authority Key Identifier: keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:04:51:97:ad:4b:9d:3b:75:93:97:b6:21:56:12:60:83:8b: 0c:94:7f:a0:d7:c3:a4:eb:58:96:ab:99:21:f4:c7:c0:9d:e9: cd:6e:b9:11:19:35:fd:cc:8f:df:10:86:49:9b:9e:fc:1d:49: 26:a7:d9:96:29:61:2e:81:98:ad:5d:2d:4e:a0:8c:0d:5b:35: 5a:62:08:8a:87:25:c6:51:9b:9d:99:cd:c6:ab:d2:aa:6e:2b: 19:00:36:d6:fd:14:a4:32:bd:9e:f3:38:23:4d:77:de:98:6b: cd:9f:f6:f0:89:b8:cd:35:d0:b5:91:d4:bf:fd:b2:c3:72:00: ab:9f:ec:99:b8:ac:bb:e2:44:d6:10:17:7b:40:cb:f4:d6:b8: 6e:85:98:e5:dd:27:d2:43:59:93:5c:86:ba:47:49:4c:44:ac: f8:17:a6:0c:55:7a:4b:82:93:9a:3b:4f:39:a4:a9:68:4b:f0: 36:8f:32:f5:32:34:0f:b0:24:01:5d:4d:52:47:9e:90:7f:c5: e1:c3:64:84:38:c0:cd:38:03:bd:76:f1:ad:0d:7d:01:f4:99: cb:00:b8:0c:1f:8e:de:f2:b0:9c:eb:14:98:48:55:5f:82:8f: 06:13:20:01:7e:e9:26:cc:88:00:e7:89:7f:d9:aa:a1:75:61: ca:42:30:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLj5d9vKBg4Aq8oDnk6tlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OWQ4MTVkYjMyMjZiN2E4NDg5NjEyNjJhZDc0ZmZjMTU1 NTdmYTEwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD Eyg5ZmVjOTk3ZTkyYzU5OTlkZjgwOGU1YTliODEwYjU4YWZmYjFhNjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSnU8QUz4zctk+ggNEsiYYn7lW2J jis0XBz4byK0undpqMgpsJNyoaVlVyiggs5EEKgZagjHVOt/hYW3zaGhqOFi2rxi lDZmntDdteERULhl2vgyuPFjIB/X/limzg3dHL99GVTRsD9VH3gqrvLJTaGdq7wF 12a18QlqSPjxyqp89y1IMh/lkJnrzq/1Mve+g+9+TV+AngvNH7Nb/OM7fxgVCzmU /Hx9Jel9fHNuV5t+8GtMKdBnB4ymdBXMbMvfvm0nV0OPv0jO4Q/j5m3PRepJrlLM knn9Mf8GFerR2wEfN2F/Iq1FzZNQvKNGn0ODPdo0xHMzWf1YjTAuzHEX2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/smX6SxZmd+AjlqbgQtYr/saYjMB8GA1UdIwQY MBaAFHedgV2zImt6hIlhJirXT/wVVX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUt NjU2MWM4NDkwNTdmLzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUtNjU2MWM4NDkwNTdm LzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQRRl61L nTt1k5e2IVYSYIOLDJR/oNfDpOtYlquZIfTHwJ3pzW65ERk1/cyP3xCGSZue/B1J JqfZlilhLoGYrV0tTqCMDVs1WmIIioclxlGbnZnNxqvSqm4rGQA21v0UpDK9nvM4 I0133phrzZ/28Im4zTXQtZHUv/2yw3IAq5/smbisu+JE1hAXe0DL9Na4boWY5d0n 0kNZk1yGukdJTESs+BemDFV6S4KTmjtPOaSpaEvwNo8y9TI0D7AkAV1NUkeekH/F 4cNkhDjAzTgDvXbxrQ19AfSZywC4DB+O3vKwnOsUmEhVX4KPBhMgAX7pJsyIAOeJ f9mqoXVhykIwTA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:43 2025 by rpki-client