This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft File: 51qM71_SqPGFr_WajG692YNjrGc.mft (raw, json) Hash identifier: XFOI5N4W7Di4t/92mr7CDGggc89nWezcKBDIoN6vO+o= Subject key identifier: 58:FE:05:CE:E5:0C:F8:75:F9:54:B8:5A:FB:53:B3:6D:D4:BE:22:C9 Authority key identifier: E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67 Certificate issuer: /CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67 Certificate serial: 019AF31CDEC9DB17699BD1CC7466AF50B02E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft Manifest number: 09D5 Signing time: Sat 06 Dec 2025 10:02:26 +0000 Manifest this update: Sat 06 Dec 2025 10:02:26 +0000 Manifest next update: Sun 07 Dec 2025 10:02:26 +0000 Files and hashes: 1: 0IBqXjTVhcvD4lCSiVgJHykRKw4.roa (hash: Dumvxj6VzhZyR7xgjdh7+SNA6SS4v9smnXFYVL96Sao=) 2: 51qM71_SqPGFr_WajG692YNjrGc.crl (hash: lbcFovoa972mdskETme9O0mf6oS2ROp1ORPWFDdSsW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:de:c9:db:17:69:9b:d1:cc:74:66:af:50:b0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67 Validity Not Before: Dec 6 10:02:26 2025 GMT Not After : Dec 7 10:02:26 2025 GMT Subject: CN=58fe05cee50cf875f954b85afb53b36dd4be22c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:0f:90:1b:62:0c:02:8c:51:a6:67:c9:fa: 6c:ca:98:e5:66:51:cd:34:79:f6:87:78:ba:15:ff: d5:5b:43:96:36:1f:98:13:40:38:08:b5:84:2a:91: 7f:85:27:62:10:61:62:c3:9d:e0:27:5c:ad:b3:5f: d7:f8:90:54:b4:a7:79:ee:f1:e3:3a:be:d0:cb:a4: 82:3a:0a:54:4f:f6:09:8b:a2:e4:cd:7c:76:d1:38: 43:4f:9d:79:e9:4d:1c:e6:89:86:97:60:d1:9b:a6: 50:44:2b:25:08:a5:ab:ec:5b:3d:f3:ff:43:7f:e9: 72:4b:88:1c:4c:d3:12:2e:ea:ea:5d:a0:99:d3:8c: b9:20:32:71:9b:24:c0:bc:11:3c:1b:b0:26:3b:be: 30:2e:2d:c0:f6:5e:f7:f2:64:4a:4f:9c:c9:89:ac: 25:de:6b:8c:b2:e5:5d:e1:91:60:31:00:98:a4:cc: 87:02:d6:a2:a5:55:af:92:93:45:86:4b:ed:bb:f6: 20:09:7a:bc:3a:d0:c0:65:5c:47:ca:83:6e:d3:0f: 0b:9f:0b:0b:c5:a8:60:ee:a3:dd:49:0e:0a:84:78: 8e:fd:a2:ba:fd:a9:86:34:f9:0c:a2:43:8b:ca:d4: 50:44:f2:13:e3:c1:7f:a0:e2:98:f9:7c:5e:4b:0a: 7b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FE:05:CE:E5:0C:F8:75:F9:54:B8:5A:FB:53:B3:6D:D4:BE:22:C9 X509v3 Authority Key Identifier: keyid:E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6a:7e:83:40:cc:ca:08:f9:1f:97:41:a3:e6:87:86:0e:b7: 33:a4:62:5f:61:34:29:21:9c:a7:65:90:41:e5:02:d9:50:67: 7f:d6:a0:91:19:34:b2:89:ae:ec:f0:cb:ee:6d:36:55:66:83: 95:44:4a:2f:57:c1:11:8d:9b:10:5b:70:36:f6:15:19:1f:9a: 56:13:af:f3:fc:bb:b1:fd:8a:99:68:a5:62:54:e7:ee:cf:64: fb:af:1d:54:9a:78:3c:f3:02:4e:e7:d4:80:b7:f6:bc:96:8e: 06:1a:28:84:34:a5:d1:b3:77:3d:b9:68:fa:c0:cf:4f:aa:b8: a6:b0:de:56:70:a7:a2:78:69:ad:80:6c:57:cc:da:47:1e:a5: b8:43:f3:3f:14:bd:f1:4e:17:ed:b8:e3:c1:61:1b:f4:44:ef: 0a:9a:e5:6f:96:28:cc:fa:a6:0b:15:b4:39:14:90:5c:79:17: d1:32:73:8f:cf:64:ee:94:f2:de:5b:d4:3f:31:f7:71:0a:4d: 29:cf:5b:83:c7:5b:e0:56:95:0f:7b:0e:56:60:37:80:90:ca: a3:8a:3f:00:a4:a4:56:24:22:d9:b7:80:c3:7f:33:20:af:7b: fc:54:23:14:a5:10:25:ba:a3:b6:3b:3e:c0:bb:a2:7c:9d:95: f6:ea:ba:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHN7J2xdpm9HMdGavULAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NWE4Y2VmNWZkMmE4ZjE4NWFmZjU5YThjNmViZGQ5ODM2 M2FjNjcwHhcNMjUxMjA2MTAwMjI2WhcNMjUxMjA3MTAwMjI2WjAzMTEwLwYDVQQD Eyg1OGZlMDVjZWU1MGNmODc1Zjk1NGI4NWFmYjUzYjM2ZGQ0YmUyMmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0UPkBtiDAKMUaZnyfpsypjlZlHN NHn2h3i6Ff/VW0OWNh+YE0A4CLWEKpF/hSdiEGFiw53gJ1yts1/X+JBUtKd57vHj Or7Qy6SCOgpUT/YJi6LkzXx20ThDT5156U0c5omGl2DRm6ZQRCslCKWr7Fs98/9D f+lyS4gcTNMSLurqXaCZ04y5IDJxmyTAvBE8G7AmO74wLi3A9l738mRKT5zJiawl 3muMsuVd4ZFgMQCYpMyHAtaipVWvkpNFhkvtu/YgCXq8OtDAZVxHyoNu0w8LnwsL xahg7qPdSQ4KhHiO/aK6/amGNPkMokOLytRQRPIT48F/oOKY+XxeSwp7/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFj+Bc7lDPh1+VS4WvtTs23UviLJMB8GA1UdIwQY MBaAFOdajO9f0qjxha/1moxuvdmDY6xnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFxTTcxX1NxUEdGcl9XYWpHNjkyWU5qckdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kNGUyYjMtYWZmOC00OWNkLTljN2Ut OTdkOGQ0NGUxMGNlLzEvNTFxTTcxX1NxUEdGcl9XYWpHNjkyWU5qckdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kNGUyYjMtYWZmOC00OWNkLTljN2UtOTdkOGQ0NGUxMGNl LzEvNTFxTTcxX1NxUEdGcl9XYWpHNjkyWU5qckdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmp+g0DM ygj5H5dBo+aHhg63M6RiX2E0KSGcp2WQQeUC2VBnf9agkRk0somu7PDL7m02VWaD lURKL1fBEY2bEFtwNvYVGR+aVhOv8/y7sf2KmWilYlTn7s9k+68dVJp4PPMCTufU gLf2vJaOBhoohDSl0bN3Pblo+sDPT6q4prDeVnCnonhprYBsV8zaRx6luEPzPxS9 8U4X7bjjwWEb9ETvCprlb5YozPqmCxW0ORSQXHkX0TJzj89k7pTy3lvUPzH3cQpN Kc9bg8db4FaVD3sOVmA3gJDKo4o/AKSkViQi2beAw38zIK97/FQjFKUQJbqjtjs+ wLuifJ2V9uq6SA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:23 2025 by rpki-client