This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft File: 53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json) Hash identifier: OnqxImfji22nDDtcHTJQURMgWjbCEAtC7mci4O6GH0I= Subject key identifier: 3D:D9:07:2C:A5:AA:17:60:95:70:94:3D:39:BF:0C:D7:F2:CD:12:F7 Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F Certificate issuer: /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f Certificate serial: 019B2F302F775AC0F39ED38BFA750BB597C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft Manifest number: 0394 Signing time: Thu 18 Dec 2025 02:00:45 +0000 Manifest this update: Thu 18 Dec 2025 02:00:45 +0000 Manifest next update: Fri 19 Dec 2025 02:00:45 +0000 Files and hashes: 1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: Ix6Od2o2uud5EY0GiTtYyNX8MSZuQ+Wqi2nf2R64ZYo=) 2: MSnHBIOL0Bltj-Q0mkBqryaUsS4.roa (hash: R8xRgK2CEN6mE5gSyGtBAs14gnmUzJFq4i62UURLtRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:2f:77:5a:c0:f3:9e:d3:8b:fa:75:0b:b5:97:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f Validity Not Before: Dec 18 02:00:45 2025 GMT Not After : Dec 19 02:00:45 2025 GMT Subject: CN=3dd9072ca5aa17609570943d39bf0cd7f2cd12f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:3f:a3:9b:60:fd:05:0e:ea:e4:87:4c:2a: e4:e9:ca:b1:7b:45:f9:a0:77:ab:a3:ce:3b:06:c3: 1a:81:f8:9a:20:25:28:71:d1:7c:a0:6b:1c:ad:ca: b6:2f:cc:f4:94:96:49:e8:b3:87:28:6c:8b:76:b5: 7e:53:20:b6:5e:5d:a1:c7:a2:e4:a3:4a:fa:af:41: bf:64:15:cd:72:ac:2d:2d:01:8f:d3:79:60:32:0f: 16:35:5d:f8:ba:3c:be:a8:b8:0e:c5:b3:20:44:35: 2f:87:08:7f:15:9b:fe:fd:64:07:f8:d1:54:7f:3a: 09:c7:ec:72:66:b6:41:ff:66:70:52:c7:f4:88:70: 31:92:d0:aa:49:ba:d5:12:0b:cc:03:29:c1:ba:82: 5f:67:58:a8:55:6e:44:40:e2:05:c7:73:a7:54:ac: 27:5b:83:c3:0f:ef:a6:86:77:fd:8b:a3:c3:a0:1e: cd:63:7a:05:2d:1c:e2:02:2b:df:5b:9e:5a:4e:2b: 26:cf:91:8d:ba:50:50:e9:9b:c0:e0:b0:4b:09:d1: c0:bb:bb:b2:f2:18:24:81:a2:eb:fb:2a:16:63:75: 8f:c3:ba:1c:c8:ae:cf:bd:57:30:7a:75:92:d8:4a: 5c:0f:17:75:9a:17:0c:1a:0e:bb:25:f0:83:20:92: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D9:07:2C:A5:AA:17:60:95:70:94:3D:39:BF:0C:D7:F2:CD:12:F7 X509v3 Authority Key Identifier: keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:72:ee:da:c2:f5:fc:2e:a8:59:24:5f:97:c6:25:1f:97:36: fa:58:61:8c:3c:c3:c2:fd:b0:4d:38:02:e5:5a:30:88:33:c3: 95:61:27:af:d0:30:47:f5:b4:10:ca:41:a9:3e:46:4a:a4:ab: 98:91:f2:e8:1a:cd:ac:e7:6d:55:c1:ec:34:1b:ae:a2:6b:e0: 4f:9c:ca:dd:9a:99:1d:96:8a:e8:e4:91:0f:54:f3:10:3b:04: 6a:c4:07:09:d1:d1:bd:72:92:1b:96:10:c9:d9:4f:9f:b0:91: a9:bc:1f:3d:7f:c8:e7:8f:4f:e8:fd:53:93:58:64:56:64:6e: 4a:33:94:49:67:f8:e1:b3:ff:08:87:6e:31:f5:de:48:b6:db: 2a:42:6d:40:bc:d0:e8:d5:a6:fe:c2:7a:1d:6d:5f:ae:b4:57: 3b:92:11:c6:29:3e:2b:0a:26:02:30:08:7a:c0:47:2b:b7:2b: 46:02:26:73:d5:a2:01:fb:a0:29:2c:94:77:fb:56:08:18:90: fd:62:20:5f:02:ea:47:ac:3d:31:1a:7b:6e:8e:0e:1d:86:f2: 0e:0b:82:83:87:c9:b0:7b:04:67:b2:32:39:72:44:d5:b8:12: e8:3f:8c:93:c5:79:da:ba:f3:8c:9f:49:58:d7:7e:1a:00:29: a6:02:af:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMC93WsDzntOL+nULtZfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NzZjNTE5ODBjNzUxZWE1ZTMxZGRkYWM4ZWY2MWZiNTZj OTcwMGYwHhcNMjUxMjE4MDIwMDQ1WhcNMjUxMjE5MDIwMDQ1WjAzMTEwLwYDVQQD EygzZGQ5MDcyY2E1YWExNzYwOTU3MDk0M2QzOWJmMGNkN2YyY2QxMmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9I/o5tg/QUO6uSHTCrk6cqxe0X5 oHero847BsMagfiaICUocdF8oGscrcq2L8z0lJZJ6LOHKGyLdrV+UyC2Xl2hx6Lk o0r6r0G/ZBXNcqwtLQGP03lgMg8WNV34ujy+qLgOxbMgRDUvhwh/FZv+/WQH+NFU fzoJx+xyZrZB/2ZwUsf0iHAxktCqSbrVEgvMAynBuoJfZ1ioVW5EQOIFx3OnVKwn W4PDD++mhnf9i6PDoB7NY3oFLRziAivfW55aTismz5GNulBQ6ZvA4LBLCdHAu7uy 8hgkgaLr+yoWY3WPw7ocyK7PvVcwenWS2EpcDxd1mhcMGg67JfCDIJLzaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3ZByylqhdglXCUPTm/DNfyzRL3MB8GA1UdIwQY MBaAFOd2xRmAx1HqXjHd2sjvYftWyXAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80NWFkZGUtMjdiNS00ZDk5LTkzMTkt ZDdjMDA3NTBlZDk0LzEvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80NWFkZGUtMjdiNS00ZDk5LTkzMTktZDdjMDA3NTBlZDk0 LzEvNTNiRkdZREhVZXBlTWQzYXlPOWgtMWJKY0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHLu2sL1 /C6oWSRfl8YlH5c2+lhhjDzDwv2wTTgC5VowiDPDlWEnr9AwR/W0EMpBqT5GSqSr mJHy6BrNrOdtVcHsNBuuomvgT5zK3ZqZHZaK6OSRD1TzEDsEasQHCdHRvXKSG5YQ ydlPn7CRqbwfPX/I549P6P1Tk1hkVmRuSjOUSWf44bP/CIduMfXeSLbbKkJtQLzQ 6NWm/sJ6HW1frrRXO5IRxik+KwomAjAIesBHK7crRgImc9WiAfugKSyUd/tWCBiQ /WIgXwLqR6w9MRp7bo4OHYbyDguCg4fJsHsEZ7IyOXJE1bgS6D+Mk8V52rrzjJ9J WNd+GgAppgKvVg== -----END CERTIFICATE-----Generated at Thu Dec 18 04:39:27 2025 by rpki-client