This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft File: 52m60wYYMt6bfXw3Nzf0NGxsBuY.mft (raw, json) Hash identifier: xvndDTYlCdujhDmi3+8VAAG8KhV7IJdfoipsvV3VUGA= Subject key identifier: 2B:7F:98:E3:68:37:2E:9C:6B:1C:E2:FC:34:57:47:A6:27:B7:4B:7F Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6 Certificate issuer: /CN=e769bad3061832de9b7d7c373737f4346c6c06e6 Certificate serial: 019AF12DFB611437431AE6EDCD5E099C0B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft Manifest number: 0C07 Signing time: Sat 06 Dec 2025 01:01:53 +0000 Manifest this update: Sat 06 Dec 2025 01:01:53 +0000 Manifest next update: Sun 07 Dec 2025 01:01:53 +0000 Files and hashes: 1: 52m60wYYMt6bfXw3Nzf0NGxsBuY.crl (hash: JeqspnGgUuvqCOoisRS1poi8UM6fuATJfwM6YJPjq7w=) 2: lxXNUCeQItpUU-WIqT27d6PPlu0.roa (hash: gRV2uGVItKOTTis9BRa/lRn5duot/VIpG4JMEM2dMPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fb:61:14:37:43:1a:e6:ed:cd:5e:09:9c:0b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6 Validity Not Before: Dec 6 01:01:53 2025 GMT Not After : Dec 7 01:01:53 2025 GMT Subject: CN=2b7f98e368372e9c6b1ce2fc345747a627b74b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:01:66:6f:8b:68:23:81:2d:4e:7b:21:5a: 2a:b8:98:3f:35:00:a1:76:2d:28:37:35:8e:11:34: 14:9c:60:c3:b3:fb:3c:9b:a3:ed:72:3a:47:3f:7a: 0f:af:77:3a:fd:5c:13:ff:9b:82:22:a1:ac:de:14: 8d:71:f5:f1:f8:f7:02:9b:5e:f0:02:3c:0f:97:b1: 64:96:cc:b0:ce:b4:fe:eb:16:e1:94:60:0a:c0:16: 87:54:b5:76:26:2c:03:32:7c:8c:c6:24:d1:7c:14: a2:1a:7e:d2:1e:51:e3:c2:9d:1f:19:7a:9f:84:13: 29:db:25:20:13:dd:a8:2c:3b:72:5e:5d:15:20:e2: 14:56:79:91:2f:1f:d3:81:da:6d:75:d6:43:7b:68: ae:1e:3d:ba:5d:42:d3:16:60:9c:3b:96:71:b8:55: 2a:09:85:18:0d:39:13:92:45:2b:e1:b9:e8:9e:88: a1:e1:f7:f4:e5:6b:94:39:d3:c0:ac:11:3d:b3:59: c6:da:b4:9b:b2:a8:87:3b:d3:0c:5d:5f:e9:95:77: 9b:97:08:2a:c3:07:7f:15:bb:51:66:9c:f8:30:65: 8d:09:c4:15:06:25:c6:68:fe:66:41:9c:43:41:b1: 66:17:fd:ca:c5:65:b1:6e:05:b9:c8:d1:32:01:7c: fc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7F:98:E3:68:37:2E:9C:6B:1C:E2:FC:34:57:47:A6:27:B7:4B:7F X509v3 Authority Key Identifier: keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2b:dc:82:41:48:c0:5c:8e:0e:04:7f:f4:a3:80:cb:a3:66: 24:3d:5a:c2:39:17:f1:d8:97:71:6f:c6:a5:12:c0:5d:c4:a0: 43:8b:3e:ed:7a:47:a0:f4:de:b0:b8:f7:bc:8b:f7:ab:77:1d: 44:03:28:9a:8f:45:2c:1d:96:62:d0:9b:3b:9a:be:e7:5e:ce: a5:1a:4a:c5:68:23:1f:61:ff:7f:11:9c:74:ca:df:42:5a:3c: d2:25:69:91:50:29:e3:2d:ee:da:c5:e8:0f:f9:cd:87:9c:8a: 70:d0:1a:f0:64:3f:96:fb:f2:ca:65:dc:6f:ea:e9:97:8c:67: 2b:db:d5:7e:ff:15:f7:98:66:6e:fa:1e:e7:3e:de:fc:1a:d3: 2d:a3:9f:1a:d7:01:4b:57:62:6a:00:e1:a0:93:ef:d3:d9:d1: 79:18:a1:36:ab:d6:49:17:f0:74:b4:7e:60:26:78:e4:58:44: 2c:89:81:57:bf:bf:41:3e:bd:70:2b:55:8f:d8:9d:1b:6f:d9: 12:0e:11:41:ef:04:10:db:c5:00:74:5a:e2:69:ee:89:2f:64: d2:cf:5c:be:9f:54:9a:54:aa:36:b7:71:c4:45:20:54:cc:f4: e8:c2:ee:b2:77:96:aa:5f:c4:68:be:64:f6:d2:b0:18:5e:47: 5a:7e:33:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfthFDdDGubtzV4JnAstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjliYWQzMDYxODMyZGU5YjdkN2MzNzM3MzdmNDM0NmM2 YzA2ZTYwHhcNMjUxMjA2MDEwMTUzWhcNMjUxMjA3MDEwMTUzWjAzMTEwLwYDVQQD EygyYjdmOThlMzY4MzcyZTljNmIxY2UyZmMzNDU3NDdhNjI3Yjc0YjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqABZm+LaCOBLU57IVoquJg/NQCh di0oNzWOETQUnGDDs/s8m6PtcjpHP3oPr3c6/VwT/5uCIqGs3hSNcfXx+PcCm17w AjwPl7FklsywzrT+6xbhlGAKwBaHVLV2JiwDMnyMxiTRfBSiGn7SHlHjwp0fGXqf hBMp2yUgE92oLDtyXl0VIOIUVnmRLx/TgdptddZDe2iuHj26XULTFmCcO5ZxuFUq CYUYDTkTkkUr4bnonoih4ff05WuUOdPArBE9s1nG2rSbsqiHO9MMXV/plXeblwgq wwd/FbtRZpz4MGWNCcQVBiXGaP5mQZxDQbFmF/3KxWWxbgW5yNEyAXz85wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCt/mONoNy6caxzi/DRXR6Ynt0t/MB8GA1UdIwQY MBaAFOdputMGGDLem318Nzc39DRsbAbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMWJjZGEtOTI3MC00M2EzLWJhYWUt MmNjOGRjNGYwMjIwLzEvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kMWJjZGEtOTI3MC00M2EzLWJhYWUtMmNjOGRjNGYwMjIw LzEvNTJtNjB3WVlNdDZiZlh3M056ZjBOR3hzQnVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSvcgkFI wFyODgR/9KOAy6NmJD1awjkX8diXcW/GpRLAXcSgQ4s+7XpHoPTesLj3vIv3q3cd RAMomo9FLB2WYtCbO5q+517OpRpKxWgjH2H/fxGcdMrfQlo80iVpkVAp4y3u2sXo D/nNh5yKcNAa8GQ/lvvyymXcb+rpl4xnK9vVfv8V95hmbvoe5z7e/BrTLaOfGtcB S1diagDhoJPv09nReRihNqvWSRfwdLR+YCZ45FhELImBV7+/QT69cCtVj9idG2/Z Eg4RQe8EENvFAHRa4mnuiS9k0s9cvp9UmlSqNrdxxEUgVMz06MLusneWql/EaL5k 9tKwGF5HWn4z4g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:01 2025 by rpki-client