This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft File: 53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json) Hash identifier: Nl4aLeHkU/cF5A7nltE4jIEf/aGnzfEvkm3BAyymISU= Subject key identifier: 48:77:69:56:61:78:B6:8F:9D:33:05:78:80:5F:AC:80:55:D6:1B:39 Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F Certificate issuer: /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f Certificate serial: 019B3EA3A329B2F49392EEE9C43B5E3DE96B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft Manifest number: 039C Signing time: Sun 21 Dec 2025 02:01:10 +0000 Manifest this update: Sun 21 Dec 2025 02:01:10 +0000 Manifest next update: Mon 22 Dec 2025 02:01:10 +0000 Files and hashes: 1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: T4WAr70ZjsYZ7RxtU9Jfm+Ta3coX+aC6NS3+bd2uSRI=) 2: MSnHBIOL0Bltj-Q0mkBqryaUsS4.roa (hash: R8xRgK2CEN6mE5gSyGtBAs14gnmUzJFq4i62UURLtRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:a3:29:b2:f4:93:92:ee:e9:c4:3b:5e:3d:e9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f Validity Not Before: Dec 21 02:01:10 2025 GMT Not After : Dec 22 02:01:10 2025 GMT Subject: CN=487769566178b68f9d330578805fac8055d61b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:ef:6c:fc:29:4a:f2:88:0f:13:e7:5e:23: 09:98:76:ad:2e:f8:5b:06:e4:2c:c8:90:d8:b8:5f: eb:d7:fd:0a:ae:f6:01:eb:9e:16:8f:5e:2e:43:4f: 78:6b:a4:69:00:17:e7:55:c9:4a:ee:87:c0:c3:c4: 68:ef:3b:b9:c3:16:6c:9b:17:76:e9:df:ce:83:23: e6:c4:04:b5:14:e8:16:a6:8a:36:ac:44:16:e6:98: a1:46:3d:68:ef:49:e9:f5:6f:d7:75:be:c6:4a:1f: 33:3a:c3:43:23:41:16:e6:7c:d7:b9:8b:fa:17:0d: d7:c3:da:31:f9:03:13:4e:6b:d3:35:4d:aa:84:73: 88:05:f8:dc:0e:39:76:0a:32:22:2a:e9:9c:76:46: 15:ff:b4:1e:41:38:b7:ff:50:8e:82:10:be:f7:c0: e3:4b:24:2a:72:7f:bc:f3:c3:cb:93:02:36:d7:d1: 0b:d3:bc:95:cb:9f:54:2c:04:2d:de:e4:01:41:f0: 56:5a:0b:cf:94:6e:d8:09:b6:23:3b:02:14:4f:70: 01:42:7e:7a:af:88:ed:b7:f7:b3:1b:ad:be:a7:49: 15:ea:5e:80:5d:32:f5:e4:99:5d:a6:85:72:9b:f9: 84:02:a4:f0:42:76:17:f5:68:7d:aa:17:b3:af:df: d4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:77:69:56:61:78:B6:8F:9D:33:05:78:80:5F:AC:80:55:D6:1B:39 X509v3 Authority Key Identifier: keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:62:67:84:e9:03:42:d4:b8:bd:ed:b5:ca:03:f1:b9:d6:4c: 74:23:d3:61:bc:38:ac:e0:79:70:bd:bd:24:32:8d:95:9a:57: 2c:4b:b3:88:b8:01:e2:2c:66:ad:2c:ce:a0:64:11:61:3c:44: 9b:c6:9a:8e:bf:c5:e5:32:e2:d9:6d:6f:72:58:20:e7:c9:45: 26:85:95:aa:13:26:b7:4d:f2:12:af:d2:92:ef:d1:5a:1b:9a: cf:ee:ee:6a:b8:60:64:17:a0:90:dc:25:e9:35:f4:0c:bf:a6: 73:ca:15:63:ec:7f:74:7c:0d:0a:38:3f:54:f0:83:47:f5:49: 2c:de:5a:a2:49:a8:7b:2b:95:1e:3f:75:d5:3c:24:36:57:dc: 49:02:2b:c3:03:fb:b4:df:fc:35:df:0d:eb:df:5a:ec:dc:5e: 03:7a:e1:65:64:01:55:45:4a:79:e6:bc:0a:c8:27:9b:ba:72: 48:a5:37:63:52:de:17:bd:fd:2b:87:e6:8f:be:09:78:96:be: d3:b4:4d:68:10:ed:64:5c:eb:29:0d:82:93:eb:da:c9:81:23: 55:a1:ca:fd:a1:f6:4b:5f:99:6b:9f:cd:75:c6:a8:e2:c3:11: f2:4d:20:73:60:a5:0b:d2:f8:60:89:dd:c5:6e:17:64:09:fc: 00:8e:5a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o6MpsvSTku7pxDtePelrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NzZjNTE5ODBjNzUxZWE1ZTMxZGRkYWM4ZWY2MWZiNTZj OTcwMGYwHhcNMjUxMjIxMDIwMTEwWhcNMjUxMjIyMDIwMTEwWjAzMTEwLwYDVQQD Eyg0ODc3Njk1NjYxNzhiNjhmOWQzMzA1Nzg4MDVmYWM4MDU1ZDYxYjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdzvbPwpSvKIDxPnXiMJmHatLvhb BuQsyJDYuF/r1/0KrvYB654Wj14uQ094a6RpABfnVclK7ofAw8Ro7zu5wxZsmxd2 6d/OgyPmxAS1FOgWpoo2rEQW5pihRj1o70np9W/Xdb7GSh8zOsNDI0EW5nzXuYv6 Fw3Xw9ox+QMTTmvTNU2qhHOIBfjcDjl2CjIiKumcdkYV/7QeQTi3/1COghC+98Dj SyQqcn+888PLkwI219EL07yVy59ULAQt3uQBQfBWWgvPlG7YCbYjOwIUT3ABQn56 r4jtt/ezG62+p0kV6l6AXTL15JldpoVym/mEAqTwQnYX9Wh9qhezr9/UqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEh3aVZheLaPnTMFeIBfrIBV1hs5MB8GA1UdIwQY MBaAFOd2xRmAx1HqXjHd2sjvYftWyXAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80NWFkZGUtMjdiNS00ZDk5LTkzMTkt ZDdjMDA3NTBlZDk0LzEvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80NWFkZGUtMjdiNS00ZDk5LTkzMTktZDdjMDA3NTBlZDk0 LzEvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWJnhOkD QtS4ve21ygPxudZMdCPTYbw4rOB5cL29JDKNlZpXLEuziLgB4ixmrSzOoGQRYTxE m8aajr/F5TLi2W1vclgg58lFJoWVqhMmt03yEq/Sku/RWhuaz+7uarhgZBegkNwl 6TX0DL+mc8oVY+x/dHwNCjg/VPCDR/VJLN5aokmoeyuVHj911TwkNlfcSQIrwwP7 tN/8Nd8N699a7NxeA3rhZWQBVUVKeea8Csgnm7pySKU3Y1LeF739K4fmj74JeJa+ 07RNaBDtZFzrKQ2Ck+vayYEjVaHK/aH2S1+Za5/Ndcao4sMR8k0gc2ClC9L4YInd xW4XZAn8AI5agA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:21:01 2025 by rpki-client