This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft File: 53e8jj7CUM6F-5CRPCxJBRBD68U.mft (raw, json) Hash identifier: sSN4+8wgru/37lHYl3B1M+6cosC5vobOLsvlffbfA8Y= Subject key identifier: C0:AF:EE:1F:76:14:DE:0B:21:06:B2:06:33:FA:97:BC:79:BC:55:F7 Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5 Certificate issuer: /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5 Certificate serial: 019B3343BA409A9FA43A0F05B4B499A68154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft Manifest number: 0E5E Signing time: Thu 18 Dec 2025 21:00:35 +0000 Manifest this update: Thu 18 Dec 2025 21:00:35 +0000 Manifest next update: Fri 19 Dec 2025 21:00:35 +0000 Files and hashes: 1: 53e8jj7CUM6F-5CRPCxJBRBD68U.crl (hash: /kTcPd7xQu2G/DFttidpFRtsrsvZUS9daPXW1jLmh68=) 2: EC7CG7vDGWKuQugmwYX02eAcLyQ.roa (hash: NeWqCf30d/nzXO3lh6RSwAe3lyCWu1HWylCk2It8npM=) 3: ZABIQATF12aikgC1O0hDBVjOfyU.roa (hash: DodKV5kgcQUZQo+3v/CpLgDA9tUlP1X5Qg4/U91seR4=) 4: c5GR0CvkfkgJP50hkVwQxiZA7C8.roa (hash: H+OOhfte4ViJLC2qWeoEPiaOcajpT6H91Tk+JZt70Sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:ba:40:9a:9f:a4:3a:0f:05:b4:b4:99:a6:81:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5 Validity Not Before: Dec 18 21:00:35 2025 GMT Not After : Dec 19 21:00:35 2025 GMT Subject: CN=c0afee1f7614de0b2106b20633fa97bc79bc55f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cd:53:5f:91:09:38:d9:5b:0b:cf:e5:37:93: d1:a3:63:cf:ac:96:8b:31:12:e2:dc:1a:df:0a:df: e2:d3:b2:ac:0f:41:49:fc:82:b1:f9:ab:d8:ef:38: e6:ea:3d:6a:96:31:88:81:1b:5f:01:21:2d:16:57: a3:b4:f5:f2:a1:7d:b5:24:99:5b:7a:2e:eb:f3:aa: 31:c4:09:da:2b:b5:c6:8d:86:c3:7c:da:c8:88:d7: 5f:ac:5e:38:8c:56:25:ac:44:c8:37:48:e9:66:e2: 61:07:f6:1f:0b:e2:ff:62:79:64:54:a3:9a:67:07: 31:03:79:38:1b:47:f6:93:1c:eb:8e:1f:0c:36:37: 28:ec:20:79:43:45:0a:ea:e5:b1:41:9f:45:12:98: 23:fd:c2:31:47:1b:ec:68:e6:4a:97:6f:f8:ff:fe: 7c:87:92:6c:00:55:3f:d7:63:0c:67:2e:3f:79:91: 03:10:81:d6:05:95:eb:ee:40:94:2f:6f:93:e0:59: 14:de:39:a2:42:ca:f0:22:9a:17:f6:9c:58:30:f8: fe:5c:f1:ff:0d:74:a9:0a:9d:e0:d1:0f:46:aa:b6: 42:e3:78:dd:d9:79:be:37:16:f1:62:af:f8:84:85: 74:0b:66:42:92:b2:a1:10:f0:a3:d9:90:25:cc:00: 2c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:AF:EE:1F:76:14:DE:0B:21:06:B2:06:33:FA:97:BC:79:BC:55:F7 X509v3 Authority Key Identifier: keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:91:b9:e0:5c:1a:2e:3f:54:83:8e:93:5f:91:09:8f:f5:ee: 92:9e:db:04:0a:d1:85:39:51:0d:98:50:2a:f2:e8:61:8e:2b: 1d:b1:9d:fe:bd:b6:f8:6e:ee:4e:01:d8:1a:18:3b:e9:0c:af: ad:64:ff:0c:6f:82:dd:df:d3:e3:e1:5c:cc:c2:ab:19:c2:1f: 2c:99:53:93:2b:cb:e2:37:b3:8a:25:86:da:0f:c7:64:c4:66: 1f:45:b1:84:d7:e7:e6:51:b5:cb:41:1e:aa:8d:73:dc:a6:e8: 2e:ee:16:a1:7a:58:6d:e0:28:e8:96:9c:24:1b:a1:8f:d7:97: 71:44:3a:b3:57:03:1b:cc:3a:ef:8d:e8:31:91:93:01:62:55: 46:b3:00:10:0c:1e:5e:8b:9a:ba:4e:f5:1f:33:4d:9e:86:e6: 6c:a3:51:f2:a2:ca:81:1b:e0:a3:0d:14:c9:7d:6f:a7:ab:89: 10:e6:5c:58:cf:34:71:6d:7b:3e:e6:a4:85:0d:2d:c5:63:71: 58:36:b0:d8:e0:4e:22:e0:93:d6:3d:dc:b9:ef:c7:9e:5e:fb: 07:e1:a5:f2:cb:e4:4d:92:c4:7a:bd:18:91:ff:4f:72:b2:2d: 4b:74:b5:8b:6e:2f:44:a5:ca:84:1b:1e:1c:d2:81:5c:f1:02: 31:6b:c2:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ7pAmp+kOg8FtLSZpoFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NzdiYzhlM2VjMjUwY2U4NWZiOTA5MTNjMmM0OTA1MTA0 M2ViYzUwHhcNMjUxMjE4MjEwMDM1WhcNMjUxMjE5MjEwMDM1WjAzMTEwLwYDVQQD EyhjMGFmZWUxZjc2MTRkZTBiMjEwNmIyMDYzM2ZhOTdiYzc5YmM1NWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws1TX5EJONlbC8/lN5PRo2PPrJaL MRLi3BrfCt/i07KsD0FJ/IKx+avY7zjm6j1qljGIgRtfASEtFlejtPXyoX21JJlb ei7r86oxxAnaK7XGjYbDfNrIiNdfrF44jFYlrETIN0jpZuJhB/YfC+L/YnlkVKOa ZwcxA3k4G0f2kxzrjh8MNjco7CB5Q0UK6uWxQZ9FEpgj/cIxRxvsaOZKl2/4//58 h5JsAFU/12MMZy4/eZEDEIHWBZXr7kCUL2+T4FkU3jmiQsrwIpoX9pxYMPj+XPH/ DXSpCp3g0Q9GqrZC43jd2Xm+NxbxYq/4hIV0C2ZCkrKhEPCj2ZAlzAAsxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCv7h92FN4LIQayBjP6l7x5vFX3MB8GA1UdIwQY MBaAFOd3vI4+wlDOhfuQkTwsSQUQQ+vFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWIt ZmFlMGU1ZDJlZWJmLzEvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWItZmFlMGU1ZDJlZWJm LzEvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5G54Fwa Lj9Ug46TX5EJj/Xukp7bBArRhTlRDZhQKvLoYY4rHbGd/r22+G7uTgHYGhg76Qyv rWT/DG+C3d/T4+FczMKrGcIfLJlTkyvL4jeziiWG2g/HZMRmH0WxhNfn5lG1y0Ee qo1z3KboLu4WoXpYbeAo6JacJBuhj9eXcUQ6s1cDG8w6743oMZGTAWJVRrMAEAwe Xouauk71HzNNnobmbKNR8qLKgRvgow0UyX1vp6uJEOZcWM80cW17PuakhQ0txWNx WDaw2OBOIuCT1j3cue/Hnl77B+Gl8svkTZLEer0Ykf9PcrItS3S1i24vRKXKhBse HNKBXPECMWvCqQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:41:07 2025 by rpki-client