This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File: 52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier: VJsJwfVuK/hdPB37LrervYiheBalYHKPZzN1FUrFVUE=
Subject key identifier: E9:22:B1:5D:AB:77:6E:3D:AB:06:B7:64:48:E8:36:3C:D2:94:C5:8B
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019B1ACD90DDD2A97386270AE7450A17DD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number: 17C0
Signing time: Sun 14 Dec 2025 03:00:38 +0000
Manifest this update: Sun 14 Dec 2025 03:00:38 +0000
Manifest next update: Mon 15 Dec 2025 03:00:38 +0000
Files and hashes: 1: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: 86ssM6nyqMdjZhXK5umfBporwKy2BBU6hehBsdDWUXI=)
2: 7YzRWXLDcfjfZ1pfSykSzsi_Bqo.roa (hash: upRBCre7SZMIKE1wJY8xBkRe6ItlC6jUoHp+iPPL2jY=)
3: 7tiEv9a2cte9CpBTPcqjs8xnBKQ.roa (hash: Lp0nRST7H/IZB0m5wIyra+a/lX3Kx1yfYMfJAqiypu0=)
4: MrqpvKVhGghgWqjcBqKvEuXDI-w.roa (hash: 2m6ct1yYKNn97oNHEpEMtqOhuEyZV5Dslxg+dpwmv70=)
5: cHgsLum03vUPk1ZqgWFlR06D1Gs.roa (hash: cQZtsmDbQpAD/17b4zQranEZKH1IDqAE5jHDvC9CNKs=)
6: djDphXEUQBdX3R-46qlc_mVjIWM.roa (hash: kRTKow+YAequmrCl7iJcVr6r44o9uLfJr2UgqP80lNc=)
7: kPSNnw4_4qELTdWvaGuzZV1m1HA.roa (hash: 4wdK73NzeZ3ZvPINCQjy0JUV5WCBpYsSrh/XOjnZGIg=)
8: oFq4k3jjq58AVkYV37VxNam_vhQ.roa (hash: yt9RD78c2DlDLj9QrteYguRc3xhGx9cs6a+AGlNFCXg=)
9: opmTxamDTTGhXXB97pQEAvfnlEA.roa (hash: +a21sRDHCzkVFGym6Uca5XjXTPbBTo6ZNir2uKNCj3g=)
10: uQJ8uXAtBqaSg0chFS7wIEPvMFk.roa (hash: OOagBGLstHbMyzpz2lFNp3hjWcGgUfG7Q/Mr5UAMmgY=)
11: uQU12zYitg_amaVlwJpXM9XCEAY.roa (hash: IYdpyZTPtIiqFILl8uMqJOM+CkHBFW5wOhN+3p4JTWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1a:cd:90:dd:d2:a9:73:86:27:0a:e7:45:0a:17:dd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Dec 14 03:00:38 2025 GMT
Not After : Dec 15 03:00:38 2025 GMT
Subject: CN=e922b15dab776e3dab06b76448e8363cd294c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:10:dc:d5:e8:6a:1c:b9:e8:58:21:de:af:
b8:6f:5f:fe:f3:62:e7:f1:27:96:04:46:d1:a1:6f:
68:8f:d4:f7:7e:70:c9:12:98:27:0b:09:a6:68:cf:
76:29:ea:88:57:11:e6:12:bf:55:d9:fd:dc:3e:ab:
ea:36:cc:af:3c:e5:2f:02:9f:06:41:24:6b:af:62:
1b:fd:99:ab:6e:a9:f4:6a:48:a2:64:6f:43:56:24:
e4:4f:3c:b9:29:a4:d0:66:43:bf:7f:5f:14:1f:86:
13:da:24:57:9e:a1:27:59:5e:be:ab:8f:2c:47:da:
99:ee:5f:93:5e:20:27:f2:09:ad:e6:fd:de:5c:e7:
7f:df:3b:10:5e:79:4d:fe:f4:51:09:c2:26:d2:7f:
c2:85:d1:49:ca:18:ab:22:af:6d:c2:13:9a:d8:b6:
26:b5:c2:8e:f5:38:19:92:17:c9:4b:b3:bd:43:f3:
8f:12:bd:c8:48:f5:3c:29:5c:34:f1:2d:df:5b:8f:
e3:e8:4a:0a:32:23:85:08:52:87:c7:0d:4f:a6:70:
c0:03:af:a2:c5:d7:ba:82:84:97:1c:53:a1:d4:3e:
c9:96:9e:97:7e:29:59:03:d2:1f:a3:89:87:07:8d:
f8:ac:67:13:7a:ba:d9:4b:a4:dd:8e:e5:b5:95:4d:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:B1:5D:AB:77:6E:3D:AB:06:B7:64:48:E8:36:3C:D2:94:C5:8B
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b2:bb:f7:b2:20:b8:21:4c:3f:0f:3f:6a:80:89:2d:a7:05:
bc:1b:80:39:44:86:bc:fe:11:75:d3:51:b8:c2:16:6d:aa:bb:
90:6d:3f:78:a8:37:a1:21:e8:28:f4:60:42:0f:e4:21:58:93:
43:7e:f4:6b:e0:7f:5c:48:c3:67:9d:d1:04:7d:4c:c6:87:85:
ee:d3:41:cd:32:32:66:23:1b:6d:d0:f2:c0:84:88:18:f1:a1:
20:38:26:ab:2e:bf:79:ed:f8:29:42:64:2e:14:50:0c:e5:22:
c8:ce:ea:b0:b2:32:a7:de:d2:0f:c2:fe:8e:7b:44:4a:99:a4:
7e:95:4a:2b:9e:9d:bd:d5:7b:86:3c:d6:d9:61:42:1e:47:75:
79:6c:cf:c0:c5:38:38:39:79:69:1c:4a:93:16:b4:2e:48:10:
71:bc:a4:e3:13:46:92:ce:1e:b3:95:da:50:14:d9:10:ba:66:
1d:02:1c:8f:fe:1d:36:18:d3:cf:78:95:a1:aa:64:26:5e:1b:
f1:fb:bc:24:61:da:9d:09:bb:e5:bd:cd:0d:56:f6:7f:b9:fc:
f1:4b:41:b4:ff:e9:58:ad:5a:a3:f5:3c:d0:81:08:cd:96:29:
d5:b4:3e:30:d1:a6:ea:67:3d:d7:a7:7f:30:46:51:a1:d8:42:
33:ac:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 12:22:24 2025 by rpki-client