This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft File: 54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json) Hash identifier: l7ekSeKJ934oC5NdZ0MDh+utquWhl2RF+vuoSxU8CGY= Subject key identifier: 3A:92:CA:CE:04:09:CD:36:2D:29:E7:C1:F1:82:41:53:08:8E:0F:E9 Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D Certificate issuer: /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d Certificate serial: 019B435BAABE49D34BEFCEA0C9FA95B04F95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft Manifest number: 0560 Signing time: Mon 22 Dec 2025 00:00:39 +0000 Manifest this update: Mon 22 Dec 2025 00:00:39 +0000 Manifest next update: Tue 23 Dec 2025 00:00:39 +0000 Files and hashes: 1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: tnvd0S2KtHRc7R1N6CNDB5pPIREYTxJLuYY1BLQp0IM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:aa:be:49:d3:4b:ef:ce:a0:c9:fa:95:b0:4f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d Validity Not Before: Dec 22 00:00:39 2025 GMT Not After : Dec 23 00:00:39 2025 GMT Subject: CN=3a92cace0409cd362d29e7c1f1824153088e0fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:fe:ec:5c:54:de:52:24:bc:cd:76:7b:ca: 69:4e:4f:27:01:54:07:d7:5e:91:c3:73:5f:37:0c: 06:84:f0:a1:50:4d:53:c5:92:a2:d0:1c:2c:64:66: ba:77:a8:6e:6e:fd:6c:f0:49:61:6b:b6:93:fe:35: ed:38:46:b9:9d:d0:3d:68:8d:df:4d:7c:7a:5f:23: d2:15:fa:4c:3b:54:82:03:d7:63:19:8a:3d:f9:ce: 90:b3:3f:3e:a4:3a:8c:92:c7:9a:0b:ff:90:47:e9: 3e:a1:d2:1e:1b:58:1c:cf:e2:aa:42:8f:62:6f:4a: a4:52:67:4e:16:0f:7f:d3:24:3b:6d:89:e3:a2:52: e1:30:1b:a4:c3:0e:ae:ca:21:85:5d:4d:99:1b:00: e4:e0:c8:1e:23:88:26:79:8d:f1:ec:be:8d:da:84: e4:73:00:85:c6:5a:4f:c1:94:5a:6d:c4:40:04:19: 35:ae:b1:8b:50:f1:4a:98:41:f5:a1:75:d4:16:16: 41:bc:ed:86:d0:fa:18:cf:73:2f:73:6d:d6:8f:1d: 32:5a:5c:88:1b:c6:87:bf:9b:fe:4e:4e:f6:d2:fa: 10:88:53:de:7a:f2:59:81:0d:e9:17:60:ca:47:14: f5:9e:fd:4c:ac:ee:ca:2e:41:35:b5:9e:71:73:d0: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:92:CA:CE:04:09:CD:36:2D:29:E7:C1:F1:82:41:53:08:8E:0F:E9 X509v3 Authority Key Identifier: keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:61:ca:04:e9:85:ea:e1:8b:60:8c:d3:83:47:f8:3b:c7:ff: ea:d3:71:e0:2a:3a:86:d6:21:72:3e:f5:21:0f:f8:72:cf:19: e2:2d:d1:8b:cc:31:62:c6:89:d6:2a:ff:7c:0e:59:6c:ae:c6: ed:52:ae:42:10:5f:1e:a7:dd:93:77:d0:78:34:50:bf:2a:b5: 0d:ce:67:2a:9a:a2:4b:b3:1f:b4:32:e3:0e:dd:b9:56:c0:2e: 4b:f4:88:76:65:65:05:50:1f:7d:82:6a:6b:88:8c:ba:31:19: e3:66:39:22:c6:7b:57:ac:fb:01:76:66:1a:ea:02:18:b1:b6: a7:9a:5a:f3:44:b7:a6:3f:11:43:92:f5:60:9a:3f:ae:2b:37: 97:d6:af:f6:60:23:c3:b5:79:fe:9d:48:97:4f:ca:d1:97:e8: 2f:45:d3:6f:26:7f:56:fb:1e:a8:92:2f:c1:ae:6e:1a:59:e5: e6:30:df:e4:69:fa:57:14:cc:2d:db:15:4c:9d:a8:54:4c:35: e2:4e:05:cb:f6:03:d9:43:73:e7:64:fe:00:9e:04:53:ef:a2: 52:79:05:e1:ec:14:d4:03:09:19:1b:b5:ae:31:16:25:93:51: 79:4d:44:99:7c:aa:4c:51:98:c4:dc:6e:82:88:16:16:69:77: 00:b3:02:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW6q+SdNL786gyfqVsE+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ODA5NTU1YThmMDVmMDQwYjQ1ZjlhZWM5YzNlZjU1YTFi YTkzM2QwHhcNMjUxMjIyMDAwMDM5WhcNMjUxMjIzMDAwMDM5WjAzMTEwLwYDVQQD EygzYTkyY2FjZTA0MDljZDM2MmQyOWU3YzFmMTgyNDE1MzA4OGUwZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqr+7FxU3lIkvM12e8ppTk8nAVQH 116Rw3NfNwwGhPChUE1TxZKi0BwsZGa6d6hubv1s8Elha7aT/jXtOEa5ndA9aI3f TXx6XyPSFfpMO1SCA9djGYo9+c6Qsz8+pDqMkseaC/+QR+k+odIeG1gcz+KqQo9i b0qkUmdOFg9/0yQ7bYnjolLhMBukww6uyiGFXU2ZGwDk4MgeI4gmeY3x7L6N2oTk cwCFxlpPwZRabcRABBk1rrGLUPFKmEH1oXXUFhZBvO2G0PoYz3Mvc23Wjx0yWlyI G8aHv5v+Tk720voQiFPeevJZgQ3pF2DKRxT1nv1MrO7KLkE1tZ5xc9D7eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqSys4ECc02LSnnwfGCQVMIjg/pMB8GA1UdIwQY MBaAFOeAlVWo8F8EC0X5rsnD71WhupM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgt Y2EwOGZlNmYzZTU3LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgtY2EwOGZlNmYzZTU3 LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWHKBOmF 6uGLYIzTg0f4O8f/6tNx4Co6htYhcj71IQ/4cs8Z4i3Ri8wxYsaJ1ir/fA5ZbK7G 7VKuQhBfHqfdk3fQeDRQvyq1Dc5nKpqiS7MftDLjDt25VsAuS/SIdmVlBVAffYJq a4iMujEZ42Y5IsZ7V6z7AXZmGuoCGLG2p5pa80S3pj8RQ5L1YJo/ris3l9av9mAj w7V5/p1Il0/K0ZfoL0XTbyZ/VvseqJIvwa5uGlnl5jDf5Gn6VxTMLdsVTJ2oVEw1 4k4Fy/YD2UNz52T+AJ4EU++iUnkF4ewU1AMJGRu1rjEWJZNReU1EmXyqTFGYxNxu gogWFml3ALMCFg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:56 2025 by rpki-client