This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json) Hash identifier: SAG+Gp4w2bA4dy7Cak3LhWtJXUFywXNmoKZSJ0sqY4A= Subject key identifier: 10:56:35:DC:43:96:9A:A0:45:4D:08:72:03:EA:D7:BF:1F:02:7F:D6 Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb Certificate serial: 019AF2AD61FC7C33E5D439E3CD77C6371D94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft Manifest number: 1772 Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=) 2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: 1E1c2RGDbk/Lkzwky2yEuzszlmMQ+P1teWbGF5W/oHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:61:fc:7c:33:e5:d4:39:e3:cd:77:c6:37:1d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=105635dc43969aa0454d087203ead7bf1f027fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:0c:e4:78:b4:4e:d9:ca:5c:90:99:ef:30: 1f:93:f6:48:8d:d2:73:5c:9c:76:f8:b7:32:17:87: 5b:95:7f:2f:f3:2c:f8:6d:07:27:88:03:43:9c:da: ac:22:41:94:90:ef:46:6a:a3:ab:43:66:1c:6a:c3: 6e:7e:70:52:33:50:03:6c:0a:6e:da:3b:37:d4:ff: 66:b4:9d:b7:cd:b8:75:18:9e:0c:88:9c:27:0d:8f: fb:d9:6c:5f:2c:56:d7:03:47:2b:4f:7d:99:8f:fe: 8e:c8:35:8d:19:79:b3:7b:a7:3e:7f:84:92:0e:3f: 94:4a:75:60:fd:b6:d5:10:3f:47:a4:48:fd:a7:ee: f0:79:05:7e:b2:6f:13:f3:d6:81:35:b6:39:50:0a: 31:77:79:a1:92:f5:f4:b9:4d:ef:01:f8:22:7c:5b: f3:73:81:4f:a1:f4:63:0b:a0:cf:69:61:d9:30:0e: 8d:d7:23:07:17:47:c6:2e:98:49:2a:a8:77:bb:44: 85:d5:3f:71:8b:e0:74:e7:fe:cb:59:88:e3:8c:b7: db:27:39:b1:23:8a:dd:d4:1a:cd:79:e1:10:4d:e6: bd:51:75:cf:d5:5f:d3:12:bb:68:81:04:4b:39:d9: 99:52:b3:5b:39:a5:ca:57:6e:e1:c5:bc:a9:18:60: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:56:35:DC:43:96:9A:A0:45:4D:08:72:03:EA:D7:BF:1F:02:7F:D6 X509v3 Authority Key Identifier: keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:13:c1:d4:c8:90:69:b9:7f:90:1a:df:88:0f:c6:dd:73:9c: 54:97:b6:e9:2e:00:da:90:5e:84:af:36:51:3b:a1:d6:a9:f7: 31:77:54:bb:38:9a:78:ef:55:20:bb:60:f9:9e:b4:8a:39:cf: 06:28:07:f9:ae:aa:c5:b5:e5:31:84:a2:30:bf:4d:7e:c1:e7: fc:7a:63:d3:ad:c9:5d:a7:0b:14:a6:e5:53:a5:76:e1:40:c2: 54:f5:37:9a:2f:2f:8d:4d:4a:09:2c:ef:20:cb:fe:c9:cd:fc: 1c:c2:3c:fe:8f:f0:a1:bd:92:5f:8c:2b:49:1e:4d:dc:70:79: 8f:4e:58:0b:ce:1a:e5:da:5c:b9:f5:55:cc:07:5a:38:21:81: 5b:95:0e:4e:c5:98:04:dc:6f:f5:ce:b5:98:0d:bf:de:e9:90: 71:01:71:70:99:5b:e8:2e:26:a7:9c:33:0f:6b:71:c7:db:0a: 3a:da:0d:af:6e:78:75:33:e0:6e:5b:4b:73:6f:0b:36:83:1d: ba:dd:76:2c:74:94:d6:bd:ff:18:ea:8d:53:fa:bb:c4:56:5f: b7:de:9d:79:0f:e7:4f:e4:4c:5e:80:2c:34:dc:df:ca:51:c1: cb:17:70:59:c3:bb:2a:11:a9:5b:2b:21:60:50:e8:0b:8c:a9: 9d:87:35:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWH8fDPl1DnjzXfGNx2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOWQ4NjA5NmE0OTExMGNmOWJmNjcwMjQwYjUxOTMxNWI2 NmFiY2IwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD EygxMDU2MzVkYzQzOTY5YWEwNDU0ZDA4NzIwM2VhZDdiZjFmMDI3ZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq4M5Hi0TtnKXJCZ7zAfk/ZIjdJz XJx2+LcyF4dblX8v8yz4bQcniANDnNqsIkGUkO9GaqOrQ2YcasNufnBSM1ADbApu 2js31P9mtJ23zbh1GJ4MiJwnDY/72WxfLFbXA0crT32Zj/6OyDWNGXmze6c+f4SS Dj+USnVg/bbVED9HpEj9p+7weQV+sm8T89aBNbY5UAoxd3mhkvX0uU3vAfgifFvz c4FPofRjC6DPaWHZMA6N1yMHF0fGLphJKqh3u0SF1T9xi+B05/7LWYjjjLfbJzmx I4rd1BrNeeEQTea9UXXP1V/TErtogQRLOdmZUrNbOaXKV27hxbypGGA6uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBWNdxDlpqgRU0IcgPq178fAn/WMB8GA1UdIwQY MBaAFAudhglqSREM+b9nAkC1GTFbZqvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUt OGMxMDkwOWE0ODVjLzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUtOGMxMDkwOWE0ODVj LzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBPB1MiQ abl/kBrfiA/G3XOcVJe26S4A2pBehK82UTuh1qn3MXdUuziaeO9VILtg+Z60ijnP BigH+a6qxbXlMYSiML9NfsHn/Hpj063JXacLFKblU6V24UDCVPU3mi8vjU1KCSzv IMv+yc38HMI8/o/wob2SX4wrSR5N3HB5j05YC84a5dpcufVVzAdaOCGBW5UOTsWY BNxv9c61mA2/3umQcQFxcJlb6C4mp5wzD2txx9sKOtoNr254dTPgbltLc28LNoMd ut12LHSU1r3/GOqNU/q7xFZft96deQ/nT+RMXoAsNNzfylHByxdwWcO7KhGpWysh YFDoC4ypnYc1Jw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:34 2025 by rpki-client