This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json) Hash identifier: pxUEuYe9DvtaToPxEYTg4Krqn2GMmlEl156q2ltMVC0= Subject key identifier: C5:0B:0C:76:7C:E4:42:F3:E3:7C:66:DA:7A:85:0E:C5:E2:7D:0D:8D Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b Certificate serial: 019B48143F000435D5E86E78515B7B7B845A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft Manifest number: 0651 Signing time: Mon 22 Dec 2025 22:00:44 +0000 Manifest this update: Mon 22 Dec 2025 22:00:44 +0000 Manifest next update: Tue 23 Dec 2025 22:00:44 +0000 Files and hashes: 1: ExGaGMHRMHV6Wwq7HUUBGaTmIOs.roa (hash: GrRPycpKBiqBeJAl7ze1jROyMQik0DJu7nFgEpAVFB8=) 2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: Tg4fW1om+38bXqIyWHQr3A2OAH7B8xf7BXRQWx0t8bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:3f:00:04:35:d5:e8:6e:78:51:5b:7b:7b:84:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b Validity Not Before: Dec 22 22:00:44 2025 GMT Not After : Dec 23 22:00:44 2025 GMT Subject: CN=c50b0c767ce442f3e37c66da7a850ec5e27d0d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ea:34:d8:34:4c:3b:80:9e:9d:8e:7d:0a:de: a0:0d:0d:ba:c3:dc:28:2c:b9:71:1c:89:01:bf:b3: 50:bf:12:84:e2:3c:c5:80:84:34:b7:fa:92:87:72: 8a:22:f6:14:84:33:e7:8f:1d:95:7f:21:cc:63:ba: 8f:a7:e3:30:e0:97:72:3c:b0:92:13:b9:f7:fd:17: 22:1c:25:ef:13:b0:70:ba:37:3b:3c:40:6e:07:b4: 37:b0:05:6d:b1:3b:5e:36:c5:1c:b2:6c:9d:e8:3f: e5:e4:fb:68:04:b1:7d:e9:9b:e8:b9:e3:d9:cc:37: 45:7e:8f:ba:fd:3f:3c:ba:f8:f2:90:b6:7d:ef:5c: f8:a5:15:86:b4:f3:e9:2a:51:58:bb:81:64:3a:63: d0:61:90:12:bb:ca:3a:56:77:fb:b2:ff:23:4d:2c: bf:60:40:9e:88:cf:7c:39:09:be:c8:bf:c9:94:1d: fe:c0:92:00:47:ec:15:9d:46:76:2d:0d:1e:5d:c2: 60:35:ad:42:ee:ec:15:f8:14:c1:9f:71:91:b1:2a: d3:68:15:a0:b6:0c:2d:c9:1a:74:10:fd:19:85:d9: e5:d0:74:cc:c3:9a:16:cc:92:a1:17:d5:1b:f9:3f: e4:d9:e1:8a:08:ac:ec:0c:7b:e9:a7:32:64:f2:9e: 7a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0B:0C:76:7C:E4:42:F3:E3:7C:66:DA:7A:85:0E:C5:E2:7D:0D:8D X509v3 Authority Key Identifier: keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c3:26:39:68:f0:7a:47:54:3d:5b:3a:8e:8b:1e:9e:ed:01: 7e:56:6d:3f:5e:33:ad:82:ac:63:04:0f:93:34:27:d3:54:77: 21:9c:c0:33:3b:d5:e6:3e:ac:fd:f4:69:b1:3f:70:d1:67:82: 38:7d:61:7e:57:6c:f7:96:51:ae:3c:09:8a:74:62:f9:b8:b4: 37:fa:97:2e:af:90:3c:ae:eb:13:9b:5a:71:56:bf:be:50:53: 14:8e:03:3d:2d:af:84:9d:f4:58:b6:21:0e:7d:57:f1:5c:ac: 74:dc:0d:4a:f9:00:dc:80:9f:66:05:26:da:c9:7c:d5:af:10: 4a:13:d0:c4:56:e5:1a:28:0d:74:42:b6:c2:91:3c:97:92:75: 5b:57:52:01:d6:d8:a2:7b:f1:43:d4:cf:fa:ef:6a:33:c3:3f: 99:26:5b:13:83:f6:8a:38:13:44:bf:ac:43:e8:69:56:52:28: 8a:35:98:51:4d:a4:ba:ec:0f:59:cb:12:7f:62:d5:3a:66:dc: 3f:11:40:91:c0:2b:7e:4d:a2:f1:71:af:39:f5:ab:36:0a:b7: 85:e2:ff:9a:be:b2:85:18:5a:ac:07:de:cd:d4:98:1d:ef:2c: 1c:b1:96:d7:7c:89:d8:af:01:99:f7:15:72:27:f3:53:e5:fd: 75:f2:35:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFD8ABDXV6G54UVt7e4RaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOWRiZjY4NzhhYjAwYTQ1MmY4YjA3Zjg5MGQzYWIzNDgz NzYyN2IwHhcNMjUxMjIyMjIwMDQ0WhcNMjUxMjIzMjIwMDQ0WjAzMTEwLwYDVQQD EyhjNTBiMGM3NjdjZTQ0MmYzZTM3YzY2ZGE3YTg1MGVjNWUyN2QwZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eo02DRMO4CenY59Ct6gDQ26w9wo LLlxHIkBv7NQvxKE4jzFgIQ0t/qSh3KKIvYUhDPnjx2VfyHMY7qPp+Mw4JdyPLCS E7n3/RciHCXvE7Bwujc7PEBuB7Q3sAVtsTteNsUcsmyd6D/l5PtoBLF96ZvouePZ zDdFfo+6/T88uvjykLZ971z4pRWGtPPpKlFYu4FkOmPQYZASu8o6Vnf7sv8jTSy/ YECeiM98OQm+yL/JlB3+wJIAR+wVnUZ2LQ0eXcJgNa1C7uwV+BTBn3GRsSrTaBWg tgwtyRp0EP0Zhdnl0HTMw5oWzJKhF9Ub+T/k2eGKCKzsDHvppzJk8p56ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMULDHZ85ELz43xm2nqFDsXifQ2NMB8GA1UdIwQY MBaAFKOdv2h4qwCkUviwf4kNOrNIN2J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAt YWQ0NDIzNzY1ODkyLzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAtYWQ0NDIzNzY1ODky LzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsMmOWjw ekdUPVs6josenu0BflZtP14zrYKsYwQPkzQn01R3IZzAMzvV5j6s/fRpsT9w0WeC OH1hflds95ZRrjwJinRi+bi0N/qXLq+QPK7rE5tacVa/vlBTFI4DPS2vhJ30WLYh Dn1X8VysdNwNSvkA3ICfZgUm2sl81a8QShPQxFblGigNdEK2wpE8l5J1W1dSAdbY onvxQ9TP+u9qM8M/mSZbE4P2ijgTRL+sQ+hpVlIoijWYUU2kuuwPWcsSf2LVOmbc PxFAkcArfk2i8XGvOfWrNgq3heL/mr6yhRharAfezdSYHe8sHLGW13yJ2K8BmfcV cifzU+X9dfI1pA== -----END CERTIFICATE-----Generated at Tue Dec 23 08:05:01 2025 by rpki-client