This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
File: ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json)
Hash identifier: iFuNfI92TY8nVJBegR4YtV97tvCM1P0KIk9yY0ogW00=
Subject key identifier: B6:CA:EA:98:07:E2:DF:E6:F2:CC:C6:1E:F4:2E:66:99:2C:12:C6:2A
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Certificate issuer: /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial: 019AF23F816CE916E7C639AB0F3B57F4BE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
Manifest number: 0508
Signing time: Sat 06 Dec 2025 06:00:39 +0000
Manifest this update: Sat 06 Dec 2025 06:00:39 +0000
Manifest next update: Sun 07 Dec 2025 06:00:39 +0000
Files and hashes: 1: XnOuIokBdMAkCep62IYd6iA-AP0.roa (hash: 46xujjI9s3TgttzYiibmkBsBEPkKuAgurV4IijrOPnY=)
2: c_-rMl7HFVaHx3u8k-mg-7MnS34.roa (hash: AGapCrdXwoHdePxIoXjlgd8fqP8GcovBdv+jOw51rkE=)
3: dhJ1RACMalns3KWMnrERrY8elus.roa (hash: KN4UOM7cl+3YJuxepZbXK+ohK3xSecFS5RbymOVHGoo=)
4: j7YPtJlyRyiLKf8qDfUwSCI2ft8.roa (hash: 1kQEVfqcK66MTq/rhjjN/li68lX8YmDLheaZniGcMLQ=)
5: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: ZLG9CG+rf3QP57MUlsbKaj7zw51r2hgPZz6tNtLRS+Y=)
6: tbYCEHCORQD2jU1FhjpVeyl7yzw.roa (hash: UJRgmyhwhn7tm70C5e/aIyFO87+Jd/xNlqZSp90NpM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:81:6c:e9:16:e7:c6:39:ab:0f:3b:57:f4:be:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Validity
Not Before: Dec 6 06:00:39 2025 GMT
Not After : Dec 7 06:00:39 2025 GMT
Subject: CN=b6caea9807e2dfe6f2ccc61ef42e66992c12c62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:d3:cd:52:bb:82:a9:78:fe:fc:7b:b3:82:
33:2e:aa:ce:9b:a7:6b:23:99:c5:88:84:e9:af:dc:
79:03:79:5d:d4:34:44:24:5a:88:e3:59:cb:cb:17:
50:df:e1:8f:5f:47:83:bc:65:5c:4a:5f:92:1e:cb:
68:b5:3e:f9:50:49:53:f2:7a:29:c0:db:a7:c4:4d:
b5:0d:32:a7:6f:41:1c:b8:d9:37:56:c2:70:0b:10:
88:88:d2:83:6a:fd:93:53:b8:a9:33:c8:63:67:0c:
1f:ee:3f:14:b7:16:00:81:52:9f:f1:96:a9:e1:a3:
3e:6d:3c:d7:71:4f:f1:bd:ab:71:01:6c:f8:f0:be:
31:f9:c1:09:d8:33:d3:a4:24:de:8e:90:5d:db:46:
be:b0:bc:d1:31:88:18:6b:0f:8a:bc:7d:ff:29:76:
96:ab:6d:5c:c6:8a:f0:fa:bf:85:bd:64:ad:ee:5c:
1b:9d:c3:6e:db:42:95:35:03:69:a9:f6:78:fc:a7:
df:d9:f5:bc:c0:e2:91:9c:43:83:71:c3:9b:01:b0:
2a:0c:da:a2:27:f1:e8:be:9e:14:8a:a5:19:80:a1:
1f:8c:2a:56:70:34:eb:5c:05:dd:6c:2e:07:1f:04:
a2:52:f6:c7:48:9b:99:90:63:97:01:93:e0:0b:db:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CA:EA:98:07:E2:DF:E6:F2:CC:C6:1E:F4:2E:66:99:2C:12:C6:2A
X509v3 Authority Key Identifier:
keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:04:b0:b9:ef:1b:26:60:f8:49:fc:22:78:bf:5e:4b:73:2e:
33:e8:c8:f3:c9:53:b1:ab:ca:cc:fb:4b:6f:89:ee:a4:8a:cd:
e4:64:40:90:96:03:7d:2b:36:6e:f8:83:9c:0b:f9:ac:70:7f:
35:23:60:8d:89:fe:75:96:68:c0:cf:f6:d2:b0:92:39:b8:0b:
6b:ca:51:53:b1:7d:8f:f7:55:11:7a:1a:a9:be:9a:aa:5a:61:
8c:d3:99:23:db:f4:53:f0:8e:fe:7b:ca:61:61:f1:1e:94:a0:
c0:22:c9:31:0e:6a:f2:d4:51:e3:30:88:00:d4:ea:5e:65:27:
35:b8:ff:ab:77:3c:7e:2f:9f:60:21:07:5c:dc:b5:d1:05:6f:
87:e7:94:55:35:98:2a:68:7a:b5:15:8b:37:48:d9:db:e2:fe:
5d:13:e0:fa:b3:79:9a:b8:74:fd:51:d6:2c:49:90:93:aa:53:
99:90:c0:fe:4c:47:33:a7:24:ab:5a:37:d0:d0:60:fa:8b:5e:
c3:49:5e:55:a7:37:6a:02:59:ec:31:15:3b:96:3f:1e:da:6e:
c9:41:1c:c4:ab:0d:9f:04:df:e5:c8:e2:ae:20:0d:01:3f:fc:
a4:20:c8:80:59:20:fb:7b:08:ab:88:a4:a9:c5:7f:9f:3b:4f:
d1:55:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:10 2025 by rpki-client