This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft File: 54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json) Hash identifier: oZsweBhL3x5qLcGdXcOUMNcMr1oq/9/d3Z81IvxcLZk= Subject key identifier: A0:7B:03:9B:E1:D0:32:94:65:50:4B:05:4C:E8:56:09:12:4C:68:23 Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5 Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5 Certificate serial: 019B12A6F39A87434188AD513E2E1EF01BD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft Manifest number: 1705 Signing time: Fri 12 Dec 2025 13:01:29 +0000 Manifest this update: Fri 12 Dec 2025 13:01:29 +0000 Manifest next update: Sat 13 Dec 2025 13:01:29 +0000 Files and hashes: 1: 4KuSjXjGdyF1nScN1LwMlleHlmA.roa (hash: HlUuzXxOiMUBV49vY7GcCdve69QZxWM3RwORJ/36zYI=) 2: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: aKZUTvY63QSOk5QNRHm+rIYdsqFVQGNPWmt8Eb2YmCU=) 3: 7lacSGraqTGoKqaT-zAuzKx29Fk.roa (hash: FcCPAhyHMElJytjQ2WhAIPJGkfaFqPbC3K17eZo24Pw=) 4: 8yDd52yiQnWrlCx6kxIE7m9PFW0.roa (hash: B6yZTku2TmuXp6OETqEJRAmXjacawP+SH3G431U19zA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:f3:9a:87:43:41:88:ad:51:3e:2e:1e:f0:1b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5 Validity Not Before: Dec 12 13:01:29 2025 GMT Not After : Dec 13 13:01:29 2025 GMT Subject: CN=a07b039be1d0329465504b054ce85609124c6823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:4d:01:03:e4:3d:ff:e5:5f:7f:a6:67:8e: 4f:30:99:9d:83:6a:bb:3c:ae:22:31:b3:39:40:da: fa:ce:4e:4f:eb:40:65:05:69:2c:89:61:64:ba:e2: ea:ae:bd:16:cd:9c:ff:88:95:c9:90:90:91:fb:5a: 97:ee:79:7b:c2:6a:62:80:0f:cb:a1:30:3d:e7:1a: 6c:d0:81:3c:9e:0f:3f:2a:d7:28:e4:0e:55:76:80: f5:1c:e6:1c:79:06:db:93:a7:1f:c6:0b:f2:96:d1: ef:e6:be:ff:ad:4d:25:3c:fa:6f:0e:79:7e:1d:64: 30:54:0f:c5:89:d2:0e:ad:22:3a:5d:27:2b:ab:76: 9d:31:61:24:09:3e:9c:f6:f9:cb:0c:64:da:26:6a: 17:2d:17:bf:d7:b3:fa:3f:eb:1a:9f:24:30:9d:98: 7a:a3:37:67:09:7b:81:98:0e:db:08:8e:10:64:f5: 48:0a:b9:00:16:b6:64:c0:ed:48:10:18:10:14:f3: 98:26:0d:11:9f:34:7e:27:67:95:90:ae:fc:8d:5b: ec:0f:f9:3d:f6:cd:11:68:89:e8:10:97:f0:bf:6f: ec:08:d0:de:a7:6d:5c:15:a8:86:9a:7d:b1:05:e8: 41:c6:4f:2c:92:29:d3:8f:7e:69:0f:5c:17:51:54: eb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7B:03:9B:E1:D0:32:94:65:50:4B:05:4C:E8:56:09:12:4C:68:23 X509v3 Authority Key Identifier: keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:48:2e:8d:4f:5f:f9:39:93:e1:fd:4a:c8:38:4c:fd:3b:7d: 1e:ee:86:06:35:2b:f4:b8:bd:1a:5a:ab:62:2a:1f:2f:62:88: 21:58:2c:24:ca:7f:26:40:b1:20:98:e2:a5:79:0c:fc:cf:3f: 8e:d0:83:80:a5:85:eb:47:e3:a5:e8:a8:af:5f:be:26:96:b3: bf:62:1f:57:20:f4:47:4f:0f:71:be:2b:cd:af:20:7c:f3:c8: 5f:09:c6:76:63:bc:81:0c:10:c2:9a:59:e6:65:1f:63:24:2c: a5:e3:a0:4a:87:ff:31:26:87:b4:de:70:a5:d9:b9:b2:3f:a0: 0e:c1:2e:93:09:26:3e:b7:2b:56:e9:34:bc:6d:57:9b:d0:13: 66:6d:15:16:85:ab:e3:90:3d:59:d0:22:42:c9:be:c3:67:1c: 63:3a:63:c5:f2:2a:22:58:95:cf:99:cd:88:5b:d8:5a:47:31: f0:31:8f:b1:ea:33:cb:ff:73:5a:e3:ff:03:93:b3:1c:73:bf: 32:48:0b:a1:e8:57:27:c9:18:31:8c:36:97:b0:57:c7:45:32: 29:f7:11:76:94:22:6a:99:6e:df:97:6d:5a:9c:c9:77:ad:c2: 12:77:59:2e:ed:23:69:fc:70:46:0c:ba:dd:f9:a5:9d:60:64: 55:27:18:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSpvOah0NBiK1RPi4e8BvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ODNiNjJhYjhhZWE1MjA3NzBjNTc0MDRiZTc3NzFmNjc5 ZWMwYjUwHhcNMjUxMjEyMTMwMTI5WhcNMjUxMjEzMTMwMTI5WjAzMTEwLwYDVQQD EyhhMDdiMDM5YmUxZDAzMjk0NjU1MDRiMDU0Y2U4NTYwOTEyNGM2ODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMFNAQPkPf/lX3+mZ45PMJmdg2q7 PK4iMbM5QNr6zk5P60BlBWksiWFkuuLqrr0WzZz/iJXJkJCR+1qX7nl7wmpigA/L oTA95xps0IE8ng8/Ktco5A5VdoD1HOYceQbbk6cfxgvyltHv5r7/rU0lPPpvDnl+ HWQwVA/FidIOrSI6XScrq3adMWEkCT6c9vnLDGTaJmoXLRe/17P6P+sanyQwnZh6 ozdnCXuBmA7bCI4QZPVICrkAFrZkwO1IEBgQFPOYJg0RnzR+J2eVkK78jVvsD/k9 9s0RaInoEJfwv2/sCNDep21cFaiGmn2xBehBxk8skinTj35pD1wXUVTrIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKB7A5vh0DKUZVBLBUzoVgkSTGgjMB8GA1UdIwQY MBaAFOeDtiq4rqUgdwxXQEvndx9nnsC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWIt MTlkZjViNGQxMDE0LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWItMTlkZjViNGQxMDE0 LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0gujU9f +TmT4f1KyDhM/Tt9Hu6GBjUr9Li9GlqrYiofL2KIIVgsJMp/JkCxIJjipXkM/M8/ jtCDgKWF60fjpeior1++Jpazv2IfVyD0R08Pcb4rza8gfPPIXwnGdmO8gQwQwppZ 5mUfYyQspeOgSof/MSaHtN5wpdm5sj+gDsEukwkmPrcrVuk0vG1Xm9ATZm0VFoWr 45A9WdAiQsm+w2ccYzpjxfIqIliVz5nNiFvYWkcx8DGPseozy/9zWuP/A5OzHHO/ MkgLoehXJ8kYMYw2l7BXx0UyKfcRdpQiaplu35dtWpzJd63CEndZLu0jafxwRgy6 3fmlnWBkVScYxQ== -----END CERTIFICATE-----Generated at Fri Dec 12 17:51:37 2025 by rpki-client