This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json) Hash identifier: 9xs25Gzkg5gawJdMjgvUYJO1SGFOcNZEcKwka8SPd/Q= Subject key identifier: 50:14:1E:BC:AC:67:3D:99:FB:78:A4:9B:84:49:FF:C7:22:0B:B8:20 Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb Certificate serial: 019BFDD3AAB32242BEAB23654B57BD9A0B8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft Manifest number: 17FD Signing time: Tue 27 Jan 2026 05:01:05 +0000 Manifest this update: Tue 27 Jan 2026 05:01:05 +0000 Manifest next update: Wed 28 Jan 2026 05:01:05 +0000 Files and hashes: 1: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: oLa/0l6od7uR1Px6tP52JA/ZJAa5wESngZWMAhpMBW8=) 2: MJ0wcLYLagq2-IQh1IDBnVmPp4Y.roa (hash: nddzrdr88MahK2kDnudEExFRXp/cZ5hcgfEP7PPKmNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d3:aa:b3:22:42:be:ab:23:65:4b:57:bd:9a:0b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb Validity Not Before: Jan 27 05:01:05 2026 GMT Not After : Jan 28 05:01:05 2026 GMT Subject: CN=50141ebcac673d99fb78a49b8449ffc7220bb820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:a0:ac:8f:ea:a0:cd:1a:23:d3:03:ee:d9: b9:df:d6:a9:81:c6:20:e7:6d:b8:f3:b9:25:5b:5c: 1c:b5:9a:f8:e9:6a:a0:99:9d:47:39:b8:1a:26:54: 81:b2:61:56:4c:cd:ea:92:11:4d:5d:03:14:74:ad: ae:70:b3:7e:21:7e:0e:82:d6:12:bf:fd:af:87:3d: 8a:b5:a3:fb:f9:69:83:66:20:f0:72:04:ad:d1:db: c8:16:e9:99:15:f8:06:96:c9:2e:aa:51:93:45:df: f5:48:02:46:8e:9f:8b:7a:d5:7b:d3:c6:8a:24:da: d8:07:5c:66:32:7b:68:ca:22:ec:7b:27:a0:39:c4: b7:9d:67:4b:77:87:68:3a:46:d9:a7:1c:52:34:56: ed:e4:0d:cf:64:7b:43:c1:a2:df:5f:53:ce:f8:21: 88:3f:86:97:50:86:dd:8b:51:0a:4b:ec:d4:cc:ad: b2:3c:2a:8c:63:ce:25:0b:5c:76:aa:39:f7:ba:73: 87:69:b9:69:08:74:71:08:6f:fd:81:c9:09:bd:75: 7f:1d:07:db:2a:9b:9d:08:e3:b7:e7:34:97:7b:e1: 1a:e1:9b:96:38:31:6c:a4:df:75:67:c9:b2:28:dc: 88:64:be:59:c9:ff:e7:91:86:c8:14:42:df:a9:1a: cb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:14:1E:BC:AC:67:3D:99:FB:78:A4:9B:84:49:FF:C7:22:0B:B8:20 X509v3 Authority Key Identifier: keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:66:54:f4:cd:65:41:ac:40:07:e0:3e:ee:74:35:0b:81:75: 7a:4f:23:1f:ae:65:c9:5f:5c:69:9e:85:25:b0:ca:32:f2:d6: ad:3c:90:27:29:ce:8d:40:e3:3f:2b:9e:e5:dc:53:d6:23:9b: d4:34:f7:68:a7:a0:a2:63:c5:d9:82:61:d9:43:bd:fa:97:b2: 2a:d1:e1:2e:bc:35:55:8d:f7:09:8f:05:99:73:93:76:88:e4: 1b:a4:e7:66:f4:eb:82:18:c6:99:19:8f:95:bc:f6:db:93:ba: 33:9d:f9:15:3f:ce:c1:ce:03:f3:e5:cc:38:f2:c9:58:a2:5d: 0f:4b:a9:ad:72:22:1a:57:55:b2:42:0d:71:33:4e:2f:77:90: 41:14:77:5f:01:21:7d:10:bb:81:66:cc:bd:bf:fd:48:c5:84: ea:4b:bf:c8:b7:2f:14:0a:2b:78:a5:fc:91:69:8b:58:74:bf: 12:94:83:b8:55:ac:26:e3:37:2b:2a:9c:ff:c3:98:bb:7f:32: 88:df:95:01:6d:e3:4b:6e:16:6b:4b:12:d0:23:25:11:f5:90: da:8a:05:45:8c:ef:78:89:c2:94:61:45:10:0c:db:c7:84:43: 47:e4:a3:1e:37:25:8e:cb:87:30:67:e9:e8:d5:56:78:3f:50: 01:8f:91:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv906qzIkK+qyNlS1e9mguPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOWQ4NjA5NmE0OTExMGNmOWJmNjcwMjQwYjUxOTMxNWI2 NmFiY2IwHhcNMjYwMTI3MDUwMTA1WhcNMjYwMTI4MDUwMTA1WjAzMTEwLwYDVQQD Eyg1MDE0MWViY2FjNjczZDk5ZmI3OGE0OWI4NDQ5ZmZjNzIyMGJiODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNKgrI/qoM0aI9MD7tm539apgcYg 522487klW1wctZr46WqgmZ1HObgaJlSBsmFWTM3qkhFNXQMUdK2ucLN+IX4OgtYS v/2vhz2KtaP7+WmDZiDwcgSt0dvIFumZFfgGlskuqlGTRd/1SAJGjp+LetV708aK JNrYB1xmMntoyiLseyegOcS3nWdLd4doOkbZpxxSNFbt5A3PZHtDwaLfX1PO+CGI P4aXUIbdi1EKS+zUzK2yPCqMY84lC1x2qjn3unOHablpCHRxCG/9gckJvXV/HQfb KpudCOO35zSXe+Ea4ZuWODFspN91Z8myKNyIZL5Zyf/nkYbIFELfqRrLEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAUHrysZz2Z+3ikm4RJ/8ciC7ggMB8GA1UdIwQY MBaAFAudhglqSREM+b9nAkC1GTFbZqvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUt OGMxMDkwOWE0ODVjLzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUtOGMxMDkwOWE0ODVj LzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmZU9M1l QaxAB+A+7nQ1C4F1ek8jH65lyV9caZ6FJbDKMvLWrTyQJynOjUDjPyue5dxT1iOb 1DT3aKegomPF2YJh2UO9+peyKtHhLrw1VY33CY8FmXOTdojkG6TnZvTrghjGmRmP lbz225O6M535FT/Owc4D8+XMOPLJWKJdD0uprXIiGldVskINcTNOL3eQQRR3XwEh fRC7gWbMvb/9SMWE6ku/yLcvFAoreKX8kWmLWHS/EpSDuFWsJuM3Kyqc/8OYu38y iN+VAW3jS24Wa0sS0CMlEfWQ2ooFRYzveInClGFFEAzbx4RDR+SjHjcljsuHMGfp 6NVWeD9QAY+RMg== -----END CERTIFICATE-----Generated at Tue Jan 27 13:24:30 2026 by rpki-client