This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft File: 54z133frZmwE77frs8o0BK3sNPs.mft (raw, json) Hash identifier: opI4hNRVRsbWyAHyarlcNvB2JMseoKBwNWjYE7oHVNE= Subject key identifier: 45:7F:96:9F:19:25:8C:34:30:FB:6C:35:93:10:3D:BC:51:41:94:76 Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB Certificate issuer: /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb Certificate serial: 019B2250CFE7DA31F9BBFEA0A738C207229A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft Manifest number: 0E5A Signing time: Mon 15 Dec 2025 14:01:19 +0000 Manifest this update: Mon 15 Dec 2025 14:01:19 +0000 Manifest next update: Tue 16 Dec 2025 14:01:19 +0000 Files and hashes: 1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: RK7shxuW/lqQwzmtiqWzgdcLrzjFlMdk/zwdFhCvVhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:cf:e7:da:31:f9:bb:fe:a0:a7:38:c2:07:22:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb Validity Not Before: Dec 15 14:01:19 2025 GMT Not After : Dec 16 14:01:19 2025 GMT Subject: CN=457f969f19258c3430fb6c3593103dbc51419476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:36:b4:66:07:24:d0:67:16:25:94:48:4b: 79:93:87:a2:17:59:88:53:ae:f2:52:43:a0:ef:c8: 43:e3:b9:72:2c:08:d0:5c:1f:16:8b:c2:b5:fc:aa: fe:9d:f2:22:0d:6b:09:49:b9:3b:01:b8:05:4b:92: c2:cc:24:8a:aa:fd:a9:19:92:ea:34:37:f5:75:4d: 0e:19:c8:3b:4e:ab:62:d1:f7:f7:01:20:11:2b:27: e1:28:42:ae:e2:8b:2f:19:05:22:8a:b3:16:4c:41: b5:e3:9e:19:92:b5:0f:9b:8c:2f:8e:c9:ca:b3:90: 48:fe:d8:9c:6c:53:1f:d5:45:68:da:45:5b:45:1a: c5:74:9d:e1:ad:79:a5:ff:85:81:82:87:4d:fc:21: 74:ba:45:6a:1d:6d:33:27:9f:30:73:60:0b:2c:68: a6:2a:54:a5:0f:be:dc:74:15:4c:d8:99:8a:48:81: 9b:44:5d:6b:e5:80:dd:d5:cb:35:b9:2b:60:c3:7e: 00:66:2b:54:68:68:49:27:60:10:39:13:17:9a:ce: 7d:a1:fa:84:b2:28:df:00:c9:98:b5:ee:de:a6:04: 2b:cf:fb:12:cf:aa:df:d1:9e:5c:be:71:30:11:f7: 59:72:82:1e:b8:d3:d4:7e:2f:c7:22:39:d9:c2:50: 94:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7F:96:9F:19:25:8C:34:30:FB:6C:35:93:10:3D:BC:51:41:94:76 X509v3 Authority Key Identifier: keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:6e:15:ad:a6:c3:fb:a0:d7:ad:f1:59:3e:8e:5a:04:c1:ab: e9:28:c0:fb:e8:36:6b:11:53:43:53:18:46:61:9f:16:83:b2: b9:c9:f3:5e:78:1c:2d:20:54:a7:79:4a:4f:0d:7b:81:8b:1d: d4:24:d2:1d:f9:ae:8f:0e:a4:a6:8d:c1:b3:8b:53:0a:17:f1: d4:89:52:63:25:a1:c3:2e:01:73:ff:44:5a:b1:17:13:03:fb: ef:25:c6:a9:8e:da:16:e4:be:1f:d9:b2:87:e7:cc:af:1f:3e: 4a:6c:de:a4:2b:e5:65:dd:23:21:33:29:9d:cd:69:fd:18:5d: 38:53:63:af:fa:fb:0b:ab:92:da:69:4f:3a:a6:d4:16:a4:c9: 52:ab:64:bc:8b:68:91:32:0c:31:e9:5e:c3:a5:24:ad:a0:9a: ee:4f:9f:4a:64:5f:06:8e:9a:ae:55:53:6a:72:05:cc:27:9c: 9b:0b:97:c9:26:2a:48:b4:40:b8:f3:dd:9c:51:c5:b5:57:42: d1:05:1d:c1:83:09:41:fa:79:b6:b8:11:ed:d2:7f:b8:94:fa: 1f:2f:6f:c8:05:06:c1:6a:03:62:68:26:52:7d:28:09:aa:78: 8f:71:54:47:cf:53:78:09:de:65:9c:4b:a0:e5:43:46:9d:b3: e5:c0:94:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUM/n2jH5u/6gpzjCByKaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OGNmNWRmNzdlYjY2NmMwNGVmYjdlYmIzY2EzNDA0YWRl YzM0ZmIwHhcNMjUxMjE1MTQwMTE5WhcNMjUxMjE2MTQwMTE5WjAzMTEwLwYDVQQD Eyg0NTdmOTY5ZjE5MjU4YzM0MzBmYjZjMzU5MzEwM2RiYzUxNDE5NDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rM2tGYHJNBnFiWUSEt5k4eiF1mI U67yUkOg78hD47lyLAjQXB8Wi8K1/Kr+nfIiDWsJSbk7AbgFS5LCzCSKqv2pGZLq NDf1dU0OGcg7Tqti0ff3ASARKyfhKEKu4osvGQUiirMWTEG1454ZkrUPm4wvjsnK s5BI/ticbFMf1UVo2kVbRRrFdJ3hrXml/4WBgodN/CF0ukVqHW0zJ58wc2ALLGim KlSlD77cdBVM2JmKSIGbRF1r5YDd1cs1uStgw34AZitUaGhJJ2AQORMXms59ofqE sijfAMmYte7epgQrz/sSz6rf0Z5cvnEwEfdZcoIeuNPUfi/HIjnZwlCUnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEV/lp8ZJYw0MPtsNZMQPbxRQZR2MB8GA1UdIwQY MBaAFOeM9d9362ZsBO+367PKNASt7DT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0Yjkt MjExYjQzOTQ3MDA3LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0YjktMjExYjQzOTQ3MDA3 LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw24VrabD +6DXrfFZPo5aBMGr6SjA++g2axFTQ1MYRmGfFoOyucnzXngcLSBUp3lKTw17gYsd 1CTSHfmujw6kpo3Bs4tTChfx1IlSYyWhwy4Bc/9EWrEXEwP77yXGqY7aFuS+H9my h+fMrx8+SmzepCvlZd0jITMpnc1p/RhdOFNjr/r7C6uS2mlPOqbUFqTJUqtkvIto kTIMMelew6UkraCa7k+fSmRfBo6arlVTanIFzCecmwuXySYqSLRAuPPdnFHFtVdC 0QUdwYMJQfp5trgR7dJ/uJT6Hy9vyAUGwWoDYmgmUn0oCap4j3FUR89TeAneZZxL oOVDRp2z5cCUlA== -----END CERTIFICATE-----Generated at Mon Dec 15 23:10:48 2025 by rpki-client