This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft File: 51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json) Hash identifier: OzMBD3cv33xJ6cRhl8KBjZHjHd7+DCatampkq0XUn0w= Subject key identifier: 3B:CD:D5:1B:17:AB:61:E1:9E:7D:32:9F:C1:AB:A7:55:0D:7E:11:97 Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27 Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627 Certificate serial: 019B2FD56C4C0F731F0EA1C0D50ECE0653EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft Manifest number: 0AAD Signing time: Thu 18 Dec 2025 05:01:14 +0000 Manifest this update: Thu 18 Dec 2025 05:01:14 +0000 Manifest next update: Fri 19 Dec 2025 05:01:14 +0000 Files and hashes: 1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: U84nhgRsUr4VzzQmX47GFK/0alTnX1JIfS1P6X9BokY=) 2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:6c:4c:0f:73:1f:0e:a1:c0:d5:0e:ce:06:53:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627 Validity Not Before: Dec 18 05:01:14 2025 GMT Not After : Dec 19 05:01:14 2025 GMT Subject: CN=3bcdd51b17ab61e19e7d329fc1aba7550d7e1197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8f:aa:b3:67:e6:53:36:90:25:ee:2c:2b:ac: ce:9c:d0:8a:ba:cd:f0:82:0b:14:fb:c7:d3:ff:51: c5:94:48:24:2f:4e:20:c1:e4:0b:9f:9a:b3:f2:c4: 30:a7:e5:a9:4f:0a:38:62:9e:66:d4:7d:ed:5d:29: ee:f8:1e:a4:b5:97:70:9d:76:cd:22:46:6b:d6:b7: 2d:1b:18:8b:82:1d:7c:1f:32:26:58:cb:43:02:85: 74:ca:a9:dd:85:b7:6a:0b:1f:bb:b1:1f:53:ca:aa: 65:50:c9:5a:65:a0:0a:b9:32:33:40:fb:82:80:d6: 80:e1:9c:7c:fd:e0:70:76:c3:65:a2:d6:4f:df:38: df:34:eb:f8:58:6b:c2:73:ff:35:5f:75:07:84:ae: 9a:7c:fd:a3:b4:79:30:77:e9:40:d0:64:ca:c3:b0: 95:73:16:93:19:5b:7e:b1:e9:ce:1e:f4:03:d0:f5: e4:37:2f:2e:6b:c7:bf:8d:b2:bc:8b:fc:a3:a2:72: 71:d7:c7:ae:8f:35:da:72:b2:84:3e:df:be:58:91: 45:a4:f2:8f:31:5c:e6:3d:14:b9:45:eb:23:a7:10: 40:9e:9c:16:d5:22:f5:cd:f1:75:98:79:74:da:90: 47:6e:cc:98:77:d1:3f:23:0c:3d:25:a0:84:1c:e6: 2d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CD:D5:1B:17:AB:61:E1:9E:7D:32:9F:C1:AB:A7:55:0D:7E:11:97 X509v3 Authority Key Identifier: keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:90:85:17:d5:e2:66:1a:a3:a0:80:77:09:bf:53:3a:30:d6: 34:96:83:7e:b6:12:9e:92:3f:d4:af:45:94:3b:d8:cb:b5:71: 84:96:6a:32:78:9f:ef:d7:cf:15:e5:db:1a:3c:dc:93:69:be: 7b:d8:6e:64:14:64:02:c9:f6:13:0e:2a:c6:a2:e5:16:e1:7e: 00:b4:53:dd:0e:85:56:20:6b:b5:9d:e0:1c:c3:02:f6:29:c5: 05:60:62:34:ee:7c:22:a8:48:f4:25:21:f9:58:d5:27:19:23: 40:51:74:92:22:78:a6:78:dd:68:cc:48:2b:3f:b2:eb:49:45: 0c:23:f7:a7:e8:ab:fd:f1:a6:d4:46:8c:aa:d0:45:a5:de:4b: 9c:73:7d:66:07:17:c2:c6:59:b7:c6:07:94:99:3f:57:a7:bc: ae:e8:c8:19:cd:f2:38:68:3c:ec:65:c3:a7:6c:2f:f6:05:09: a6:53:82:66:91:0f:26:91:db:33:a0:eb:45:5b:af:8c:47:e0: 25:89:d7:cd:67:60:6f:18:36:80:09:71:5d:5a:1e:9f:57:1b: 74:22:f4:fe:85:82:56:4d:31:6d:71:58:7a:ca:24:15:4d:14: 17:1f:08:63:04:2d:ca:ce:a1:80:78:98:71:a3:8d:8f:d2:1a: 0a:0c:6a:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1WxMD3MfDqHA1Q7OBlPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTg1MjQ0NTlmOTEzNTBiZjNhNzBiZGRlYTAyYmI3ZjE5 OGY2MjcwHhcNMjUxMjE4MDUwMTE0WhcNMjUxMjE5MDUwMTE0WjAzMTEwLwYDVQQD EygzYmNkZDUxYjE3YWI2MWUxOWU3ZDMyOWZjMWFiYTc1NTBkN2UxMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y+qs2fmUzaQJe4sK6zOnNCKus3w ggsU+8fT/1HFlEgkL04gweQLn5qz8sQwp+WpTwo4Yp5m1H3tXSnu+B6ktZdwnXbN IkZr1rctGxiLgh18HzImWMtDAoV0yqndhbdqCx+7sR9TyqplUMlaZaAKuTIzQPuC gNaA4Zx8/eBwdsNlotZP3zjfNOv4WGvCc/81X3UHhK6afP2jtHkwd+lA0GTKw7CV cxaTGVt+senOHvQD0PXkNy8ua8e/jbK8i/yjonJx18eujzXacrKEPt++WJFFpPKP MVzmPRS5ResjpxBAnpwW1SL1zfF1mHl02pBHbsyYd9E/Iww9JaCEHOYt9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvN1RsXq2Hhnn0yn8Grp1UNfhGXMB8GA1UdIwQY MBaAFOdYUkRZ+RNQvzpwvd6gK7fxmPYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEt YzQxOWU3MTI5OTI4LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEtYzQxOWU3MTI5OTI4 LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ZCFF9Xi ZhqjoIB3Cb9TOjDWNJaDfrYSnpI/1K9FlDvYy7VxhJZqMnif79fPFeXbGjzck2m+ e9huZBRkAsn2Ew4qxqLlFuF+ALRT3Q6FViBrtZ3gHMMC9inFBWBiNO58IqhI9CUh +VjVJxkjQFF0kiJ4pnjdaMxIKz+y60lFDCP3p+ir/fGm1EaMqtBFpd5LnHN9ZgcX wsZZt8YHlJk/V6e8rujIGc3yOGg87GXDp2wv9gUJplOCZpEPJpHbM6DrRVuvjEfg JYnXzWdgbxg2gAlxXVoen1cbdCL0/oWCVk0xbXFYesokFU0UFx8IYwQtys6hgHiY caONj9IaCgxqow== -----END CERTIFICATE-----Generated at Thu Dec 18 07:00:54 2025 by rpki-client