This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json) Hash identifier: KKBSG1evYEbYchrvP14HZ1ZtngyMcZpxMu1nOVa6/5I= Subject key identifier: 80:24:3D:B3:81:D1:1D:E6:66:FC:40:06:41:D7:7C:5D:99:1C:0D:E7 Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1 Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1 Certificate serial: 019B5975C63B73C71CF37C647B94A8EDAF9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:00:49 +0000 Manifest this update: Fri 26 Dec 2025 07:00:49 +0000 Manifest next update: Sat 27 Dec 2025 07:00:49 +0000 Files and hashes: 1: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: Vx4gHKkD35acsOAuUisyzl0IRZD8zt0Qt3sXQ9PDnig=) 2: r_pXvYOMh3gSQPYuo_0x5LIDY1s.roa (hash: bQrJT1cr1jHVeYHOeCbVvQ+uUO5ecYBMkZwEAtD6RHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:c6:3b:73:c7:1c:f3:7c:64:7b:94:a8:ed:af:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1 Validity Not Before: Dec 26 07:00:49 2025 GMT Not After : Dec 27 07:00:49 2025 GMT Subject: CN=80243db381d11de666fc400641d77c5d991c0de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e0:57:25:d4:93:41:53:6d:ee:f9:79:87:09: e6:bf:9b:a8:6f:97:07:30:f0:6b:1f:96:22:3b:61: af:7a:11:d8:40:a1:b8:3c:86:05:ea:92:f0:23:56: e3:76:8c:2c:e1:d9:18:8e:5c:46:d1:db:bf:22:7b: 49:6f:73:ab:af:59:b1:86:74:df:6a:75:7b:fd:55: 32:22:3b:ba:26:95:81:56:5c:9a:9e:8a:a4:95:6d: 36:d3:ef:aa:7e:47:fd:02:8b:e9:33:2b:ee:61:7e: fa:ed:16:f7:e5:e3:34:bb:01:df:0d:36:2c:71:bb: bf:cf:6c:2c:bd:3e:fa:e0:e8:56:20:84:d5:bf:a0: 6c:07:03:0f:db:68:fd:30:c9:c9:a9:ca:62:fa:83: 0f:48:9d:0f:94:d6:95:d2:d0:70:65:e6:b8:5b:32: 35:16:13:81:73:7a:bd:cb:c1:b0:62:d1:bb:bd:c1: a4:9e:3a:c4:23:55:13:6e:35:50:39:05:dc:e8:14: 4c:85:be:58:3a:ad:b0:e9:a3:54:5b:4a:29:24:a1: d9:d1:76:92:57:33:8c:46:b3:c9:c4:78:05:5a:93: 30:df:72:18:10:f2:19:79:d3:7c:2d:9b:63:bd:72: f1:9e:60:32:c6:0b:48:be:49:9a:3c:9d:2a:d6:66: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:24:3D:B3:81:D1:1D:E6:66:FC:40:06:41:D7:7C:5D:99:1C:0D:E7 X509v3 Authority Key Identifier: keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:25:70:ed:28:34:71:ca:7f:e8:47:2a:19:a9:4c:a7:cc:73: 9e:ad:5b:5d:7f:e5:b3:1f:51:a1:fa:b7:28:9a:09:eb:ca:79: b4:58:cf:8c:80:73:1c:ae:50:91:b6:94:b0:52:d5:af:b7:f8: 2d:10:25:7d:2d:36:a3:10:66:5c:83:6e:87:f6:d2:36:8a:b2: 53:c6:6f:86:38:c9:f4:4d:30:b1:45:a1:f8:85:23:9a:8d:78: ba:43:6d:76:7c:f8:53:c6:45:db:03:31:1a:4f:c1:43:de:db: c7:55:46:a7:34:21:77:4b:1e:31:ea:1e:1c:69:9a:01:75:c0: 8f:d3:fc:0d:07:07:a5:32:b0:b7:a7:58:1b:ed:cd:33:a7:63: 89:df:cd:00:d8:85:a4:a2:1e:42:91:47:18:19:d0:46:7a:df: 29:81:9d:80:12:87:15:21:e6:79:eb:08:96:57:e8:df:ec:21: c8:58:5f:5d:7b:69:d7:d4:e4:80:e8:0e:0e:36:f9:3a:2b:c5: 1f:6f:85:f5:88:67:ea:06:53:b8:1b:0e:c2:19:6a:fe:53:47: 51:1a:74:83:be:0f:7a:d4:30:42:05:e9:7a:ce:28:ca:68:31: f5:3f:ad:87:15:ac:51:0c:e4:4c:03:94:33:af:c0:80:70:14: 8b:33:e1:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdcY7c8cc83xke5So7a+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OWQ4MTVkYjMyMjZiN2E4NDg5NjEyNjJhZDc0ZmZjMTU1 NTdmYTEwHhcNMjUxMjI2MDcwMDQ5WhcNMjUxMjI3MDcwMDQ5WjAzMTEwLwYDVQQD Eyg4MDI0M2RiMzgxZDExZGU2NjZmYzQwMDY0MWQ3N2M1ZDk5MWMwZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eBXJdSTQVNt7vl5hwnmv5uob5cH MPBrH5YiO2GvehHYQKG4PIYF6pLwI1bjdows4dkYjlxG0du/IntJb3Orr1mxhnTf anV7/VUyIju6JpWBVlyanoqklW020++qfkf9AovpMyvuYX767Rb35eM0uwHfDTYs cbu/z2wsvT764OhWIITVv6BsBwMP22j9MMnJqcpi+oMPSJ0PlNaV0tBwZea4WzI1 FhOBc3q9y8GwYtG7vcGknjrEI1UTbjVQOQXc6BRMhb5YOq2w6aNUW0opJKHZ0XaS VzOMRrPJxHgFWpMw33IYEPIZedN8LZtjvXLxnmAyxgtIvkmaPJ0q1ma1PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAkPbOB0R3mZvxABkHXfF2ZHA3nMB8GA1UdIwQY MBaAFHedgV2zImt6hIlhJirXT/wVVX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUt NjU2MWM4NDkwNTdmLzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUtNjU2MWM4NDkwNTdm LzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCVw7Sg0 ccp/6EcqGalMp8xznq1bXX/lsx9Rofq3KJoJ68p5tFjPjIBzHK5QkbaUsFLVr7f4 LRAlfS02oxBmXINuh/bSNoqyU8ZvhjjJ9E0wsUWh+IUjmo14ukNtdnz4U8ZF2wMx Gk/BQ97bx1VGpzQhd0seMeoeHGmaAXXAj9P8DQcHpTKwt6dYG+3NM6djid/NANiF pKIeQpFHGBnQRnrfKYGdgBKHFSHmeesIllfo3+whyFhfXXtp19TkgOgODjb5OivF H2+F9Yhn6gZTuBsOwhlq/lNHURp0g74PetQwQgXpes4oymgx9T+thxWsUQzkTAOU M6/AgHAUizPhKQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:30 2025 by rpki-client