This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft File: 51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json) Hash identifier: Tm2tEafc7E8dS/WhbJW8ff24BzSsCCRUVETGAzXN1Ro= Subject key identifier: 95:11:99:12:1A:D2:2D:F0:24:35:0D:40:01:B6:AE:11:F7:45:7C:D9 Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27 Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627 Certificate serial: 019AF20934D803E6EB34036EB082DD9B6A0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft Manifest number: 0A8D Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: XeSGgkH7KsQ2vZPMVgVnMS+0IGnlkP4qEuW0IHcW/G4=) 2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:34:d8:03:e6:eb:34:03:6e:b0:82:dd:9b:6a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627 Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=951199121ad22df024350d4001b6ae11f7457cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:06:ef:fe:56:dd:00:81:8b:2e:78:dd:33: ce:1e:74:d8:ec:29:35:fd:80:6d:26:29:e2:17:82: b7:a6:13:27:68:e0:9a:5c:b5:07:08:01:0e:4e:d0: fa:36:0f:f7:ba:ee:11:2e:b5:eb:31:ee:33:78:02: e7:e7:59:d0:98:d1:bd:32:3c:f0:31:5c:f9:ca:49: 06:27:44:a1:8d:a1:bb:85:61:cd:d8:e1:ac:30:a5: e7:43:5f:0d:9e:48:c0:8b:ba:58:6f:c6:b2:a5:04: 84:8c:33:c1:5b:ca:f3:a4:03:11:27:97:20:28:9a: df:9b:f5:36:11:e9:03:66:49:e8:5e:fd:0c:39:68: 28:7a:dc:4f:57:98:51:2c:81:7d:f6:63:4d:66:d3: 2d:2d:28:97:e7:c8:bb:0b:ae:d3:3b:08:80:7b:bd: d0:d3:93:49:e9:f4:f5:ed:79:1e:4b:c9:18:34:8d: 97:b7:c6:9e:88:9c:d7:dd:0c:13:de:2c:85:c9:0f: 63:ab:1e:32:55:7d:e0:96:85:5d:93:0c:9d:61:44: f5:02:60:13:00:7f:24:b5:56:eb:8d:85:cb:07:c5: 49:83:ff:40:79:76:05:5b:f5:12:ce:e2:48:6e:3c: 86:b6:1e:96:d7:f6:41:62:c0:e3:eb:fd:24:27:96: 0f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:11:99:12:1A:D2:2D:F0:24:35:0D:40:01:B6:AE:11:F7:45:7C:D9 X509v3 Authority Key Identifier: keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:76:58:b0:4a:3f:64:01:4a:37:22:87:36:f2:76:19:0c:60: c0:5c:4a:d0:d3:7d:e6:30:f7:e4:86:97:fd:1f:5c:f3:b9:9e: 80:a5:28:fb:31:d2:31:7e:39:cf:28:40:d5:cd:ec:d7:ca:73: d4:d1:09:f0:ef:36:9f:75:85:35:5b:e8:31:3a:9c:6a:9a:84: 1c:ef:6b:76:2a:ac:e6:7e:a3:36:de:02:18:b1:4a:88:ff:d5: 99:b3:e0:7e:98:62:a7:02:a3:31:75:bf:37:bc:e5:a5:93:64: 42:7e:b5:0d:44:f0:19:7f:3e:58:bd:40:68:0d:9f:24:20:5d: 47:e9:e6:4a:9a:98:1e:df:9f:2a:b7:88:1c:08:0f:8c:8c:9f: ed:2e:03:25:c7:6a:94:f9:07:8f:33:81:c3:36:00:f8:ec:eb: 41:13:0d:1c:62:4e:b1:46:9f:40:2a:75:a1:8c:b1:07:0b:5a: f4:27:a3:e8:40:b8:c5:d7:cc:e0:5d:06:f4:9c:d6:6e:54:f6: 7c:39:99:51:28:29:d6:0d:f9:61:0c:99:92:68:42:7b:35:8e: 3f:46:e6:05:3a:2c:7c:67:c9:af:4d:2b:85:35:32:df:f8:d0: e2:ec:f0:61:cb:3b:fb:52:96:d7:c8:23:f8:26:ca:a7:df:14: 7b:f1:68:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTTYA+brNANusILdm2oMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTg1MjQ0NTlmOTEzNTBiZjNhNzBiZGRlYTAyYmI3ZjE5 OGY2MjcwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD Eyg5NTExOTkxMjFhZDIyZGYwMjQzNTBkNDAwMWI2YWUxMWY3NDU3Y2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGwG7/5W3QCBiy543TPOHnTY7Ck1 /YBtJiniF4K3phMnaOCaXLUHCAEOTtD6Ng/3uu4RLrXrMe4zeALn51nQmNG9Mjzw MVz5ykkGJ0ShjaG7hWHN2OGsMKXnQ18NnkjAi7pYb8aypQSEjDPBW8rzpAMRJ5cg KJrfm/U2EekDZknoXv0MOWgoetxPV5hRLIF99mNNZtMtLSiX58i7C67TOwiAe73Q 05NJ6fT17XkeS8kYNI2Xt8aeiJzX3QwT3iyFyQ9jqx4yVX3gloVdkwydYUT1AmAT AH8ktVbrjYXLB8VJg/9AeXYFW/USzuJIbjyGth6W1/ZBYsDj6/0kJ5YPhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJURmRIa0i3wJDUNQAG2rhH3RXzZMB8GA1UdIwQY MBaAFOdYUkRZ+RNQvzpwvd6gK7fxmPYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEt YzQxOWU3MTI5OTI4LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEtYzQxOWU3MTI5OTI4 LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXZYsEo/ ZAFKNyKHNvJ2GQxgwFxK0NN95jD35IaX/R9c87megKUo+zHSMX45zyhA1c3s18pz 1NEJ8O82n3WFNVvoMTqcapqEHO9rdiqs5n6jNt4CGLFKiP/VmbPgfphipwKjMXW/ N7zlpZNkQn61DUTwGX8+WL1AaA2fJCBdR+nmSpqYHt+fKreIHAgPjIyf7S4DJcdq lPkHjzOBwzYA+OzrQRMNHGJOsUafQCp1oYyxBwta9Cej6EC4xdfM4F0G9JzWblT2 fDmZUSgp1g35YQyZkmhCezWOP0bmBTosfGfJr00rhTUy3/jQ4uzwYcs7+1KW18gj +CbKp98Ue/FoeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:11 2025 by rpki-client