This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft File: 54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json) Hash identifier: zkvyzqlIQhNte/l+DXIyqF6RAnwtyJFxiL9QyGQb0/Q= Subject key identifier: C4:8D:C5:87:05:48:57:59:F6:79:96:B9:9A:69:0E:64:0E:00:8B:2F Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D Certificate issuer: /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d Certificate serial: 019B6FC6331E14142676B38887486D72CE3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft Manifest number: 0577 Signing time: Tue 30 Dec 2025 15:00:18 +0000 Manifest this update: Tue 30 Dec 2025 15:00:18 +0000 Manifest next update: Wed 31 Dec 2025 15:00:18 +0000 Files and hashes: 1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: r6fi2jxOpeirB9lgZR+57G0gbqHEWrBs0wbzJdBfWzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:c6:33:1e:14:14:26:76:b3:88:87:48:6d:72:ce:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d Validity Not Before: Dec 30 15:00:18 2025 GMT Not After : Dec 31 15:00:18 2025 GMT Subject: CN=c48dc58705485759f67996b99a690e640e008b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:61:1d:60:55:c5:d5:59:e9:07:02:27:e2:db: 75:65:60:8d:30:b9:1c:a6:14:65:42:de:4f:df:e9: cb:e2:eb:3a:2b:1c:7b:12:de:e8:ca:65:b7:78:18: 4b:d1:16:93:76:38:2c:16:0b:66:43:d6:47:ee:f8: 72:2e:7a:1b:aa:6e:4f:d4:03:ab:e5:d3:4f:95:cb: 38:e9:87:56:c1:52:ac:bb:0b:50:d3:7a:8b:9e:81: 1a:33:d3:fd:84:ca:6e:8b:b3:ab:df:85:30:e1:dc: bc:64:fe:bc:e9:d3:60:5b:06:8b:f8:7f:32:e5:78: 4a:a9:73:23:2c:ac:c4:28:c4:24:e9:4e:6c:cd:53: 06:39:88:00:fe:27:44:35:39:81:7b:0c:c3:33:8a: 20:b9:0a:62:52:0d:05:e9:b8:ba:32:8a:36:40:d4: d4:8c:a3:50:6b:40:01:8d:3b:18:0e:c0:e2:17:46: b7:ff:e6:dc:b9:37:7b:5d:91:34:9d:ff:dc:56:d2: 59:02:ce:77:33:87:f0:84:f7:68:21:62:3d:46:4d: f2:1e:88:da:40:8c:33:d7:d3:68:38:96:5e:b5:d3: d4:cd:21:13:96:78:73:2a:3d:87:57:98:75:a6:7b: c9:60:8c:b2:e2:57:ea:54:48:a3:8d:75:1d:8f:68: 36:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8D:C5:87:05:48:57:59:F6:79:96:B9:9A:69:0E:64:0E:00:8B:2F X509v3 Authority Key Identifier: keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:5d:e0:72:d2:04:7f:2f:c4:3b:97:86:ad:af:ea:ce:2e:4e: 25:03:1f:bd:32:99:12:c1:86:c7:92:73:00:24:dc:ac:e0:11: 91:72:20:28:09:b7:6d:25:eb:a9:40:b0:52:6f:c2:67:a5:88: 31:f0:38:23:68:2e:e3:3b:cc:ed:8f:2a:4f:cb:7f:6f:9a:8a: 83:16:15:e7:b5:5b:02:1b:a0:68:32:5e:1f:f3:34:6b:69:c9: c3:8f:eb:ed:96:db:51:eb:78:3e:bc:69:c3:44:95:1a:05:3f: b3:3f:49:97:e3:47:82:80:ee:b7:ed:60:1e:72:fe:54:29:ef: 0c:95:88:62:39:a5:de:82:a7:90:38:58:79:7f:88:ce:b0:8c: 29:99:2a:3f:07:51:3c:e3:f8:4d:da:99:5c:34:5e:9d:22:e1: a2:74:29:76:08:98:8e:d7:28:7d:ba:38:87:78:c7:05:af:31: db:16:4f:cf:44:ad:02:bb:1a:81:dd:8a:bf:70:71:c0:1d:f8: d5:fa:f9:b8:1f:e6:47:ce:f9:c3:e4:70:7a:0f:2d:21:e0:f2: cd:86:2f:23:bf:e9:50:cc:30:98:b4:31:7c:16:66:58:17:eb: 1a:7f:c4:44:f6:72:17:b6:2a:5d:55:b9:75:e2:75:75:2f:02: 83:73:0b:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvxjMeFBQmdrOIh0htcs48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ODA5NTU1YThmMDVmMDQwYjQ1ZjlhZWM5YzNlZjU1YTFi YTkzM2QwHhcNMjUxMjMwMTUwMDE4WhcNMjUxMjMxMTUwMDE4WjAzMTEwLwYDVQQD EyhjNDhkYzU4NzA1NDg1NzU5ZjY3OTk2Yjk5YTY5MGU2NDBlMDA4YjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72EdYFXF1VnpBwIn4tt1ZWCNMLkc phRlQt5P3+nL4us6Kxx7Et7oymW3eBhL0RaTdjgsFgtmQ9ZH7vhyLnobqm5P1AOr 5dNPlcs46YdWwVKsuwtQ03qLnoEaM9P9hMpui7Or34Uw4dy8ZP686dNgWwaL+H8y 5XhKqXMjLKzEKMQk6U5szVMGOYgA/idENTmBewzDM4oguQpiUg0F6bi6Moo2QNTU jKNQa0ABjTsYDsDiF0a3/+bcuTd7XZE0nf/cVtJZAs53M4fwhPdoIWI9Rk3yHoja QIwz19NoOJZetdPUzSETlnhzKj2HV5h1pnvJYIyy4lfqVEijjXUdj2g2YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSNxYcFSFdZ9nmWuZppDmQOAIsvMB8GA1UdIwQY MBaAFOeAlVWo8F8EC0X5rsnD71WhupM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgt Y2EwOGZlNmYzZTU3LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgtY2EwOGZlNmYzZTU3 LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoF3gctIE fy/EO5eGra/qzi5OJQMfvTKZEsGGx5JzACTcrOARkXIgKAm3bSXrqUCwUm/CZ6WI MfA4I2gu4zvM7Y8qT8t/b5qKgxYV57VbAhugaDJeH/M0a2nJw4/r7ZbbUet4Prxp w0SVGgU/sz9Jl+NHgoDut+1gHnL+VCnvDJWIYjml3oKnkDhYeX+IzrCMKZkqPwdR POP4TdqZXDRenSLhonQpdgiYjtcofbo4h3jHBa8x2xZPz0StArsagd2Kv3BxwB34 1fr5uB/mR875w+Rweg8tIeDyzYYvI7/pUMwwmLQxfBZmWBfrGn/ERPZyF7YqXVW5 deJ1dS8Cg3ML5Q== -----END CERTIFICATE-----Generated at Tue Dec 30 18:40:35 2025 by rpki-client