This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft File: ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json) Hash identifier: a9k+a3+R6NcoVmi0OFB2AkcAE6mdOSGqKND62koo/dE= Subject key identifier: 3C:D5:2C:16:1B:3E:BD:2E:74:96:B5:88:5C:D7:F2:AA:0D:AE:B7:C6 Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0 Certificate issuer: /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0 Certificate serial: 019B4926C1FAED44A17CC22527A9946A5980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft Manifest number: 0535 Signing time: Tue 23 Dec 2025 03:00:35 +0000 Manifest this update: Tue 23 Dec 2025 03:00:35 +0000 Manifest next update: Wed 24 Dec 2025 03:00:35 +0000 Files and hashes: 1: XnOuIokBdMAkCep62IYd6iA-AP0.roa (hash: 46xujjI9s3TgttzYiibmkBsBEPkKuAgurV4IijrOPnY=) 2: c_-rMl7HFVaHx3u8k-mg-7MnS34.roa (hash: AGapCrdXwoHdePxIoXjlgd8fqP8GcovBdv+jOw51rkE=) 3: dhJ1RACMalns3KWMnrERrY8elus.roa (hash: KN4UOM7cl+3YJuxepZbXK+ohK3xSecFS5RbymOVHGoo=) 4: j7YPtJlyRyiLKf8qDfUwSCI2ft8.roa (hash: 1kQEVfqcK66MTq/rhjjN/li68lX8YmDLheaZniGcMLQ=) 5: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: C71s8P66IjkVSPfsLkpuOrmiY/8J8Sr8uy6KuKO1VjE=) 6: tbYCEHCORQD2jU1FhjpVeyl7yzw.roa (hash: UJRgmyhwhn7tm70C5e/aIyFO87+Jd/xNlqZSp90NpM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:c1:fa:ed:44:a1:7c:c2:25:27:a9:94:6a:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0 Validity Not Before: Dec 23 03:00:35 2025 GMT Not After : Dec 24 03:00:35 2025 GMT Subject: CN=3cd52c161b3ebd2e7496b5885cd7f2aa0daeb7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:f2:56:17:01:b2:ae:3a:df:1e:4b:bf:b6: b9:eb:d3:a5:15:2c:fe:49:88:3f:c5:ed:b2:98:06: ba:9c:75:ac:d8:25:4a:d7:33:db:fa:15:f7:82:48: 61:1f:67:d7:bd:66:56:8d:f0:75:c1:d6:18:d1:41: 8c:b9:ae:e2:d5:77:db:da:9c:3a:dd:cd:1e:14:0c: 3c:00:60:aa:c6:14:23:31:7e:5a:e6:42:27:2f:c3: 74:fe:93:aa:38:26:fc:10:f4:3b:10:6f:3e:c7:4a: 63:39:84:1c:c6:ad:c7:bf:ce:84:78:63:72:71:f6: 59:80:92:a2:39:ae:81:19:a4:81:e9:5a:08:81:d3: 9c:1d:5e:7d:d9:d2:34:26:d1:42:87:b6:2d:98:5b: 85:80:5c:33:bf:1b:6a:14:4b:76:dc:9a:66:d4:c4: de:b9:4d:ce:e3:f3:0d:ec:45:d3:48:3b:04:8c:34: 3c:0c:6d:9a:d3:a0:00:dd:44:15:46:e0:f7:68:4d: b2:2a:79:f9:c1:a0:f3:1c:59:aa:20:81:bd:26:86: e5:77:16:b1:8e:15:98:e4:db:88:7e:b7:d4:e6:39: a7:f5:50:11:a4:a9:a5:1c:23:65:22:84:78:12:88: 9a:a1:86:b6:da:5e:d5:34:1f:1d:7f:fd:bd:2e:7a: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D5:2C:16:1B:3E:BD:2E:74:96:B5:88:5C:D7:F2:AA:0D:AE:B7:C6 X509v3 Authority Key Identifier: keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4a:13:ee:0b:63:18:ce:c4:33:54:bd:09:4a:10:71:1c:c3: 6d:cd:e5:83:c3:96:97:0f:92:95:fd:79:76:d9:e5:a4:aa:ce: 16:bd:3b:af:19:37:24:54:ea:7a:48:86:d3:43:4d:8c:94:56: e0:35:4a:8c:ff:6d:48:47:ff:23:8b:3d:5a:10:98:07:f8:b3: af:e9:40:f6:64:63:f1:78:5e:49:f8:d7:0f:32:bd:2c:bd:a5: 10:77:27:b7:40:55:7e:bf:ff:63:48:9d:bd:f6:d1:80:7d:3f: 1a:29:99:4d:c1:b5:77:72:53:22:2f:2f:0f:aa:50:72:4e:3b: 9a:77:61:78:7b:63:8a:5b:7f:b5:82:11:7c:5b:83:0b:23:73: 7d:bc:44:79:f6:cf:9a:24:ee:72:ad:b6:0d:1a:8e:b4:b4:1d: ea:31:91:73:a6:bb:3a:f6:e1:43:a1:26:2a:0d:49:9b:ea:91: d4:65:21:38:02:b4:8b:bb:7f:c4:c2:90:64:c1:e3:09:39:ff: 9e:3e:af:eb:68:2a:54:72:58:48:3f:26:50:3b:94:4a:8c:e2: c4:dc:1f:fa:e0:df:ef:95:3a:bd:36:c8:f0:e1:7b:57:fb:91: e0:6f:74:f2:d5:18:2a:c5:36:1f:a1:a6:3e:c5:c5:86:87:f5: 80:f5:19:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJsH67UShfMIlJ6mUalmAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNWU3NmY5MjlkMjFiNTg2ZjQyZTMwZjdkOWIwMDM5OWIz ZGNiZjAwHhcNMjUxMjIzMDMwMDM1WhcNMjUxMjI0MDMwMDM1WjAzMTEwLwYDVQQD EygzY2Q1MmMxNjFiM2ViZDJlNzQ5NmI1ODg1Y2Q3ZjJhYTBkYWViN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue7yVhcBsq463x5Lv7a569OlFSz+ SYg/xe2ymAa6nHWs2CVK1zPb+hX3gkhhH2fXvWZWjfB1wdYY0UGMua7i1Xfb2pw6 3c0eFAw8AGCqxhQjMX5a5kInL8N0/pOqOCb8EPQ7EG8+x0pjOYQcxq3Hv86EeGNy cfZZgJKiOa6BGaSB6VoIgdOcHV592dI0JtFCh7YtmFuFgFwzvxtqFEt23Jpm1MTe uU3O4/MN7EXTSDsEjDQ8DG2a06AA3UQVRuD3aE2yKnn5waDzHFmqIIG9Jobldxax jhWY5NuIfrfU5jmn9VARpKmlHCNlIoR4EoiaoYa22l7VNB8df/29Lnqf5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzVLBYbPr0udJa1iFzX8qoNrrfGMB8GA1UdIwQY MBaAFJpedvkp0htYb0LjD32bADmbPcvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAt YjRhYWEyM2ZkYWE5LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAtYjRhYWEyM2ZkYWE5 LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUoT7gtj GM7EM1S9CUoQcRzDbc3lg8OWlw+Slf15dtnlpKrOFr07rxk3JFTqekiG00NNjJRW 4DVKjP9tSEf/I4s9WhCYB/izr+lA9mRj8XheSfjXDzK9LL2lEHcnt0BVfr//Y0id vfbRgH0/GimZTcG1d3JTIi8vD6pQck47mndheHtjilt/tYIRfFuDCyNzfbxEefbP miTucq22DRqOtLQd6jGRc6a7OvbhQ6EmKg1Jm+qR1GUhOAK0i7t/xMKQZMHjCTn/ nj6v62gqVHJYSD8mUDuUSozixNwf+uDf75U6vTbI8OF7V/uR4G908tUYKsU2H6Gm PsXFhof1gPUZcA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:37:49 2025 by rpki-client