This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft File: 53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json) Hash identifier: 3US1w8HQLGZxR4gcxWpeBA2O85OCrWwsmqEN6I2cLtQ= Subject key identifier: 4B:1F:E8:10:FF:B1:3D:51:6D:15:59:1B:C1:74:72:73:B6:6E:08:DD Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25 Certificate issuer: /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325 Certificate serial: 3C49289B7B4163779FA3CA70035E38135B01F340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft Manifest number: 02B3 Signing time: Sat 20 Dec 2025 14:59:18 +0000 Manifest this update: Sat 20 Dec 2025 14:54:18 +0000 Manifest next update: Sun 21 Dec 2025 15:42:18 +0000 Files and hashes: 1: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: VwwCVWM9YkS6AkymJ1hIh/nYkaBsbinNRHkFkWcAYV0=) 2: AS215171.asa (hash: gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:49:28:9b:7b:41:63:77:9f:a3:ca:70:03:5e:38:13:5b:01:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325 Validity Not Before: Dec 20 14:54:18 2025 GMT Not After : Dec 21 15:42:18 2025 GMT Subject: CN=4B1FE810FFB13D516D15591BC1747273B66E08DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:03:72:20:1a:27:2e:49:a2:3e:05:52:22: 33:fe:66:20:12:84:23:e2:62:61:05:ff:a1:79:c1: f1:00:c9:4b:93:9b:3a:a8:e3:90:bb:cf:18:ab:73: 1c:81:54:b7:f0:c0:c5:83:03:26:34:63:2f:61:48: de:a3:f1:fc:d9:0e:23:5a:fd:45:09:83:b0:58:e9: 97:f8:35:6a:e1:24:cc:99:d3:a9:75:12:20:b3:bf: d9:59:85:47:e3:5e:80:85:83:6e:aa:38:58:b5:af: 47:72:e1:65:95:e5:59:28:f3:f8:10:11:82:6b:f6: 9c:99:7c:d3:d5:3b:ad:cc:a6:2a:a6:dc:50:aa:b9: 90:5e:8b:4a:a6:b4:af:13:fb:2b:9e:5b:2a:19:45: bc:8b:91:80:62:80:14:ae:ed:3a:da:94:8b:c1:e7: e4:16:30:b5:2e:bc:ea:14:91:c8:69:50:3d:af:ec: 2a:07:a6:0d:ff:73:0f:51:34:10:7e:41:39:86:93: 20:1d:4f:a2:7f:bb:20:c2:65:2e:4e:b2:da:2c:95: d5:37:0d:da:88:58:bf:30:7a:eb:60:32:1c:2b:dd: 10:00:3e:da:9f:7b:8b:cd:9e:b1:e6:03:44:2b:15: 34:cd:bc:0a:6e:a7:97:ad:56:44:40:09:9b:9e:d0: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1F:E8:10:FF:B1:3D:51:6D:15:59:1B:C1:74:72:73:B6:6E:08:DD X509v3 Authority Key Identifier: keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:38:b3:1a:2a:8c:9d:ed:04:78:38:d9:e7:3e:ae:a3:8b:a8: 41:65:eb:5a:8e:28:34:c9:4e:8e:be:6d:5f:0d:e4:75:64:96: 1a:8e:d9:f7:97:f4:38:c5:32:30:66:8e:91:01:99:26:77:c3: af:72:74:95:2a:50:c8:82:74:0d:42:10:a0:51:24:1f:54:e1: 99:ae:60:f1:7a:d8:ad:2e:44:13:7a:15:f0:37:2b:4f:46:ae: f0:5c:f8:01:20:99:14:40:8e:72:f9:7e:a5:c3:3e:4b:4c:0d: b9:ce:bb:ae:6e:75:a7:13:91:a0:d1:06:21:8a:8d:ce:1b:d4: 50:9c:0f:32:0c:71:a0:41:45:6e:31:79:28:38:c0:8b:d0:8f: 0b:90:d8:93:76:ca:c9:13:76:b1:04:ed:f8:dd:4a:62:7a:e0: 45:81:6a:4b:4b:8e:42:8d:34:f3:b3:92:e8:b2:36:c8:54:98: 6c:99:7e:87:3c:e2:8f:59:7b:76:b8:43:2b:a4:33:fb:1e:69: f1:d7:06:02:aa:0a:eb:c3:b6:26:46:c8:8d:e6:f5:e7:84:64: d7:63:dd:ea:86:45:43:fe:81:0c:16:fa:73:43:f6:e2:a6:94: 40:c6:e2:31:01:38:89:7d:85:4c:8c:77:a9:ea:9b:f7:88:1e: c6:47:0f:8b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPEkom3tBY3efo8pwA144E1sB80AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNhMmFhMTYwMWNjMDkyMTQ0NjFkMDNjYTc3MWVkNTBl YzFkNjMyNTAeFw0yNTEyMjAxNDU0MThaFw0yNTEyMjExNTQyMThaMDMxMTAvBgNV BAMTKDRCMUZFODEwRkZCMTNENTE2RDE1NTkxQkMxNzQ3MjczQjY2RTA4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAgNyIBonLkmiPgVSIjP+ZiAS hCPiYmEF/6F5wfEAyUuTmzqo45C7zxircxyBVLfwwMWDAyY0Yy9hSN6j8fzZDiNa /UUJg7BY6Zf4NWrhJMyZ06l1EiCzv9lZhUfjXoCFg26qOFi1r0dy4WWV5Vko8/gQ EYJr9pyZfNPVO63Mpiqm3FCquZBei0qmtK8T+yueWyoZRbyLkYBigBSu7TralIvB 5+QWMLUuvOoUkchpUD2v7CoHpg3/cw9RNBB+QTmGkyAdT6J/uyDCZS5OstosldU3 DdqIWL8weutgMhwr3RAAPtqfe4vNnrHmA0QrFTTNvApup5etVkRACZue0A+XAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUSx/oEP+xPVFtFVkbwXRyc7ZuCN0wHwYDVR0j BBgwFoAUU6KqFgHMCSFEYdA8p3HtUOwdYyUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzUvNTNBMkFBMTYwMUNDMDkyMTQ0NjFEMDNDQTc3MUVENTBFQzFENjMyNS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1U2S3FGZ0hNQ1NGRVlkQThwM0h0VU93 ZFl5VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMTFlNDdjNC0w MmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNS81M0EyQUExNjAxQ0MwOTIxNDQ2 MUQwM0NBNzcxRUQ1MEVDMUQ2MzI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzizGiqMne0EeDjZ5z6u o4uoQWXrWo4oNMlOjr5tXw3kdWSWGo7Z95f0OMUyMGaOkQGZJnfDr3J0lSpQyIJ0 DUIQoFEkH1Thma5g8XrYrS5EE3oV8DcrT0au8Fz4ASCZFECOcvl+pcM+S0wNuc67 rm51pxORoNEGIYqNzhvUUJwPMgxxoEFFbjF5KDjAi9CPC5DYk3bKyRN2sQTt+N1K YnrgRYFqS0uOQo0087OS6LI2yFSYbJl+hzzij1l7drhDK6Qz+x5p8dcGAqoK68O2 JkbIjeb154Rk12Pd6oZFQ/6BDBb6c0P24qaUQMbiMQE4iX2FTIx3qeqb94gexkcP iw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:07:35 2025 by rpki-client