This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json) Hash identifier: hsWUpwCrKtVBatAGa7DZ+7IdntZxFzL2ogrm+76dFU0= Subject key identifier: DC:6C:50:2E:34:83:B1:A7:58:03:B0:9B:BF:A7:54:DB:BB:CD:00:2C Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb Certificate serial: 019B0FA5515B99A0F30035AA7D7462856F16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft Manifest number: 1781 Signing time: Thu 11 Dec 2025 23:00:51 +0000 Manifest this update: Thu 11 Dec 2025 23:00:51 +0000 Manifest next update: Fri 12 Dec 2025 23:00:51 +0000 Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=) 2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: MSptz4gfcAIEOYRPIzuLlJ7L2DnieQ1CUw6KdSnNpRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:51:5b:99:a0:f3:00:35:aa:7d:74:62:85:6f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb Validity Not Before: Dec 11 23:00:51 2025 GMT Not After : Dec 12 23:00:51 2025 GMT Subject: CN=dc6c502e3483b1a75803b09bbfa754dbbbcd002c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0d:2c:b0:31:67:7c:c7:b7:cc:d1:87:3a:46: 06:46:0a:a9:b5:3a:04:95:ed:38:11:f1:b1:c3:fa: c4:40:fd:e4:46:27:a5:65:76:4d:c5:a4:7d:ad:88: 84:7d:b9:4d:d3:84:7a:f4:7c:82:a2:3e:b2:62:ce: 62:b5:b6:99:41:86:b4:32:37:96:5d:6d:d2:18:b4: 75:13:8b:3f:ec:20:12:8c:ed:fe:3e:a7:bb:0c:13: 76:a7:d9:e5:98:96:b5:7a:5e:80:0b:09:62:79:87: 1b:5f:53:8d:49:19:64:44:d7:e6:5f:ba:c3:a4:90: 1d:9e:d3:e2:c8:bf:3f:14:26:05:f2:2e:2f:dd:ab: 0f:8f:2f:42:48:71:c4:2d:48:3c:a8:d8:3b:d1:36: 6c:51:fb:f6:f6:35:da:68:9f:04:10:80:0d:ab:0d: e4:f5:9b:ae:c2:e9:74:a1:b9:30:3b:31:3f:d0:35: 3c:b9:2c:60:2f:e4:53:51:a5:0e:26:49:72:48:38: 61:1c:63:25:18:1c:57:23:03:9c:7a:f5:9a:65:91: 18:46:50:ae:3a:84:37:e1:93:84:0b:69:60:91:f9: 11:65:0c:f6:b7:b0:0d:3b:a8:6a:87:77:9b:4d:3c: a9:0d:17:79:ee:03:34:04:3c:b0:1f:43:db:c7:1f: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6C:50:2E:34:83:B1:A7:58:03:B0:9B:BF:A7:54:DB:BB:CD:00:2C X509v3 Authority Key Identifier: keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:02:a2:ab:78:1f:06:62:d7:9a:60:43:11:9f:8b:51:e7:a0: 8c:41:92:9a:b4:f1:9a:78:99:ee:c9:1b:be:ba:82:89:cd:d2: 84:c9:16:96:31:31:74:11:30:49:12:39:a9:52:5b:22:e3:6f: 6f:3e:78:76:ec:e4:1b:4d:a6:0f:08:be:0b:56:6f:d1:2f:c7: cc:e0:44:b8:c9:ac:aa:dd:f5:f3:bb:b4:32:2d:e2:b9:c3:57: 14:ba:f7:76:ff:f5:40:54:26:40:c0:0c:c2:84:85:e9:0d:df: 4f:28:33:4f:23:5f:ff:68:83:7e:7f:78:81:b9:99:f0:a3:c3: e8:bf:94:f7:34:35:a8:6c:f9:92:dd:72:8f:76:22:04:2b:4f: c8:0f:01:03:60:6a:e4:8e:f6:d8:c9:17:5c:41:d0:54:55:55: 62:79:b8:ae:b7:96:8b:c9:3e:4f:33:54:f7:15:85:31:cc:da: bb:06:2f:60:3c:68:f8:20:50:5b:28:09:db:64:9e:07:0e:eb: 1a:b9:f9:c3:84:89:79:44:14:ee:75:8d:ab:87:a8:d6:05:d0: 14:66:f0:13:6c:49:86:f1:2b:fe:1e:de:dd:f6:3d:05:3a:c4: 59:36:4f:8e:1c:1c:00:c7:97:55:20:4e:85:e6:b3:81:a0:31: 15:50:04:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpVFbmaDzADWqfXRihW8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOWQ4NjA5NmE0OTExMGNmOWJmNjcwMjQwYjUxOTMxNWI2 NmFiY2IwHhcNMjUxMjExMjMwMDUxWhcNMjUxMjEyMjMwMDUxWjAzMTEwLwYDVQQD EyhkYzZjNTAyZTM0ODNiMWE3NTgwM2IwOWJiZmE3NTRkYmJiY2QwMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9g0ssDFnfMe3zNGHOkYGRgqptToE le04EfGxw/rEQP3kRielZXZNxaR9rYiEfblN04R69HyCoj6yYs5itbaZQYa0MjeW XW3SGLR1E4s/7CASjO3+Pqe7DBN2p9nlmJa1el6ACwlieYcbX1ONSRlkRNfmX7rD pJAdntPiyL8/FCYF8i4v3asPjy9CSHHELUg8qNg70TZsUfv29jXaaJ8EEIANqw3k 9Zuuwul0obkwOzE/0DU8uSxgL+RTUaUOJklySDhhHGMlGBxXIwOcevWaZZEYRlCu OoQ34ZOEC2lgkfkRZQz2t7ANO6hqh3ebTTypDRd57gM0BDywH0Pbxx9/KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxsUC40g7GnWAOwm7+nVNu7zQAsMB8GA1UdIwQY MBaAFAudhglqSREM+b9nAkC1GTFbZqvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUt OGMxMDkwOWE0ODVjLzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xZTFhOTctZjI3Ni00YTUxLWIxYjUtOGMxMDkwOWE0ODVj LzEvQzUyR0NXcEpFUXo1djJjQ1FMVVpNVnRtcThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgKiq3gf BmLXmmBDEZ+LUeegjEGSmrTxmniZ7skbvrqCic3ShMkWljExdBEwSRI5qVJbIuNv bz54duzkG02mDwi+C1Zv0S/HzOBEuMmsqt3187u0Mi3iucNXFLr3dv/1QFQmQMAM woSF6Q3fTygzTyNf/2iDfn94gbmZ8KPD6L+U9zQ1qGz5kt1yj3YiBCtPyA8BA2Bq 5I722MkXXEHQVFVVYnm4rreWi8k+TzNU9xWFMczauwYvYDxo+CBQWygJ22SeBw7r Grn5w4SJeUQU7nWNq4eo1gXQFGbwE2xJhvEr/h7e3fY9BTrEWTZPjhwcAMeXVSBO heazgaAxFVAEpQ== -----END CERTIFICATE-----Generated at Fri Dec 12 03:20:10 2025 by rpki-client