This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft File: 53OfCEQuIkRmIbiaV2ObNUK6NNw.mft (raw, json) Hash identifier: jNwP0ZOoVt2FDX2HsEAAm0CmFbxsC0vxjihtAOrmMAA= Subject key identifier: A1:6D:45:4E:9C:59:08:1B:19:A2:B7:1F:65:CA:7D:9B:46:C5:65:0D Authority key identifier: E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC Certificate issuer: /CN=e7739f08442e22446621b89a57639b3542ba34dc Certificate serial: 019B3C7F5188F0201F975E28BD10E2A962A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft Manifest number: 05A5 Signing time: Sat 20 Dec 2025 16:02:15 +0000 Manifest this update: Sat 20 Dec 2025 16:02:15 +0000 Manifest next update: Sun 21 Dec 2025 16:02:15 +0000 Files and hashes: 1: 53OfCEQuIkRmIbiaV2ObNUK6NNw.crl (hash: 7gqeOZg+pHuvk6g2DFg4GOitttX9B9FxOtmi99MP5mY=) 2: ynJSD2xc-CykfYa79BP9jQj40kM.roa (hash: fMb/laTqYN39Vwte4hGLXjRHIufJPIqxfdcZimxGcGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:51:88:f0:20:1f:97:5e:28:bd:10:e2:a9:62:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7739f08442e22446621b89a57639b3542ba34dc Validity Not Before: Dec 20 16:02:15 2025 GMT Not After : Dec 21 16:02:15 2025 GMT Subject: CN=a16d454e9c59081b19a2b71f65ca7d9b46c5650d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:40:4b:2d:0c:4d:f6:1a:78:79:61:4e:ed:3b: 55:5b:dd:54:53:66:c5:6b:f7:e8:8f:d5:3b:b7:16: 67:b5:6b:c9:1b:f5:22:c7:55:f4:96:d7:2c:2a:21: 02:cf:db:9c:1a:94:1d:7e:73:54:5e:20:8c:39:be: 32:b5:a3:67:75:f2:84:ed:f0:eb:47:e7:6b:27:59: 03:00:bf:df:99:0e:7a:89:9a:0f:30:6a:2f:c7:2e: 5c:d1:c7:a5:29:cb:a0:71:be:3c:78:84:4e:a4:66: 31:8d:c6:93:a1:08:90:2b:dd:33:21:b9:e0:d9:8f: e6:42:af:77:fd:45:82:e2:9a:47:ca:88:d8:10:da: 4b:e6:7c:e0:00:9b:f7:f3:57:bf:67:67:dc:df:32: 24:74:e6:1d:f8:de:0b:bb:74:87:d3:b1:f2:90:2b: 18:02:59:e3:8f:ab:df:66:d2:77:12:d3:bb:19:d9: db:61:84:12:9f:2a:fa:83:2c:e9:69:38:6e:33:2a: 37:10:e5:61:9c:7c:57:a7:15:97:a6:27:4b:32:63: 07:15:96:e4:7c:fe:e6:58:bd:9f:44:02:08:ba:04: 6c:79:eb:ba:4c:9c:e4:43:f6:95:17:a5:44:8e:a6: 34:67:51:b1:76:07:1c:6f:08:66:7c:34:7b:db:0f: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6D:45:4E:9C:59:08:1B:19:A2:B7:1F:65:CA:7D:9B:46:C5:65:0D X509v3 Authority Key Identifier: keyid:E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d6:1b:5c:17:a6:fa:75:bb:1e:90:c0:70:d4:3e:6c:92:44: 14:7b:63:8e:32:4a:ce:f8:56:bf:92:71:93:dd:0e:30:bb:b7: db:78:aa:b0:3d:af:85:99:d6:b7:74:29:0a:c3:d8:8f:e7:e9: e2:68:c7:fc:c3:3c:43:9b:e8:db:2d:f8:75:ba:e6:c4:c8:f3: f4:a9:31:44:cf:42:1b:47:52:23:04:fd:7c:9c:b6:a8:b2:c3: 4d:b0:62:56:df:85:f7:3b:0c:e7:26:31:59:21:9d:49:7e:86: bb:64:8c:87:0b:c1:55:4d:09:d2:2c:81:dc:5e:e4:a9:a5:a1: a9:3a:dc:2a:12:67:da:d3:78:08:1a:21:29:ea:43:44:a8:96: 90:40:2a:a3:ce:da:55:f1:c7:8b:38:ef:6d:18:82:66:b4:68: fd:68:de:af:69:98:41:f9:8c:ba:97:51:0a:b4:0f:72:98:e1: 8e:e9:53:54:66:c9:8e:a9:c9:5e:81:70:e2:bc:8a:4e:69:69: 45:84:47:cb:9a:ab:c5:66:5a:3f:9a:43:eb:15:00:0a:0d:1b: 9d:b9:6b:ef:e4:29:d3:38:ab:5e:ec:0c:0a:74:f2:19:cf:af: b3:2c:d1:bf:4d:28:77:c2:a7:39:e1:77:a5:50:29:66:8a:d4: 1e:1a:6b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f1GI8CAfl14ovRDiqWKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NzM5ZjA4NDQyZTIyNDQ2NjIxYjg5YTU3NjM5YjM1NDJi YTM0ZGMwHhcNMjUxMjIwMTYwMjE1WhcNMjUxMjIxMTYwMjE1WjAzMTEwLwYDVQQD EyhhMTZkNDU0ZTljNTkwODFiMTlhMmI3MWY2NWNhN2Q5YjQ2YzU2NTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kBLLQxN9hp4eWFO7TtVW91UU2bF a/foj9U7txZntWvJG/Uix1X0ltcsKiECz9ucGpQdfnNUXiCMOb4ytaNndfKE7fDr R+drJ1kDAL/fmQ56iZoPMGovxy5c0celKcugcb48eIROpGYxjcaToQiQK90zIbng 2Y/mQq93/UWC4ppHyojYENpL5nzgAJv381e/Z2fc3zIkdOYd+N4Lu3SH07HykCsY Alnjj6vfZtJ3EtO7GdnbYYQSnyr6gyzpaThuMyo3EOVhnHxXpxWXpidLMmMHFZbk fP7mWL2fRAIIugRseeu6TJzkQ/aVF6VEjqY0Z1GxdgccbwhmfDR72w+sSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFtRU6cWQgbGaK3H2XKfZtGxWUNMB8GA1UdIwQY MBaAFOdznwhELiJEZiG4mldjmzVCujTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTNPZkNFUXVJa1JtSWJpYVYyT2JOVUs2Tk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lMjBkNTktNDQ1NC00ZWM4LTk2Nzct NWYyYmYyMmUxODlkLzEvNTNPZkNFUXVJa1JtSWJpYVYyT2JOVUs2Tk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lMjBkNTktNDQ1NC00ZWM4LTk2NzctNWYyYmYyMmUxODlk LzEvNTNPZkNFUXVJa1JtSWJpYVYyT2JOVUs2Tk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9YbXBem +nW7HpDAcNQ+bJJEFHtjjjJKzvhWv5Jxk90OMLu323iqsD2vhZnWt3QpCsPYj+fp 4mjH/MM8Q5vo2y34dbrmxMjz9KkxRM9CG0dSIwT9fJy2qLLDTbBiVt+F9zsM5yYx WSGdSX6Gu2SMhwvBVU0J0iyB3F7kqaWhqTrcKhJn2tN4CBohKepDRKiWkEAqo87a VfHHizjvbRiCZrRo/Wjer2mYQfmMupdRCrQPcpjhjulTVGbJjqnJXoFw4ryKTmlp RYRHy5qrxWZaP5pD6xUACg0bnblr7+Qp0zirXuwMCnTyGc+vsyzRv00od8KnOeF3 pVApZorUHhpr2A== -----END CERTIFICATE-----Generated at Sat Dec 20 19:06:09 2025 by rpki-client