This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft File: 54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json) Hash identifier: MxQr3Z/lW0kPSOrDX6N+RPGQYrKZH72AllUAXOnDyLA= Subject key identifier: 7A:85:00:48:02:DF:B6:EE:F3:E3:07:F1:86:94:55:33:83:0F:05:F5 Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D Certificate issuer: /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d Certificate serial: 019AF42E568D27C528F9E616D819190E4DA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft Manifest number: 0537 Signing time: Sat 06 Dec 2025 15:01:08 +0000 Manifest this update: Sat 06 Dec 2025 15:01:08 +0000 Manifest next update: Sun 07 Dec 2025 15:01:08 +0000 Files and hashes: 1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: A/JFmoQSvgsFyHv3s1ZI2ZWF/YNW3XSdoKDZd7NLTuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:56:8d:27:c5:28:f9:e6:16:d8:19:19:0e:4d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d Validity Not Before: Dec 6 15:01:08 2025 GMT Not After : Dec 7 15:01:08 2025 GMT Subject: CN=7a85004802dfb6eef3e307f186945533830f05f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2e:e1:e0:74:ae:a1:20:b7:1d:ba:60:81:75: 87:b5:39:2b:80:03:b8:d3:4c:18:2a:a3:f1:07:5b: c8:15:f9:78:65:ec:65:eb:c7:a3:81:7b:15:d2:38: 52:38:b5:17:cb:64:cc:d9:e9:95:d3:77:a7:1e:d6: 34:c0:64:7a:8a:b5:1d:0d:62:c8:41:c9:27:68:29: 47:e1:15:0c:5c:ba:ce:e1:ca:e7:79:23:ef:8d:e0: 66:45:a8:fa:7c:fe:63:a4:1e:bb:57:03:00:23:18: 9e:5d:6c:35:80:8d:a9:cd:49:08:a5:f3:a1:24:fb: 65:42:48:a4:ac:45:24:63:0d:c4:ad:8d:e4:6b:b3: 1e:7b:c9:5d:ea:ca:74:f7:52:f3:66:a1:b6:6f:8a: d6:b1:23:29:82:5b:2d:f2:03:99:1f:65:50:04:4c: 53:fa:1f:8f:fa:c9:1b:59:4d:d7:a0:c3:fd:9d:af: 40:1b:ee:b7:a5:a9:61:97:e5:8b:66:06:7e:f9:28: 19:8d:7e:4a:a9:33:5a:c0:a2:2e:b4:94:91:04:9c: 61:75:a4:c7:7d:19:fb:83:dc:90:49:f6:53:e0:16: 27:42:92:ab:85:db:e8:b2:be:41:b9:f4:c8:8c:90: d8:e0:1d:ab:88:b7:37:f0:6c:f5:1d:0b:a5:10:a4: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:85:00:48:02:DF:B6:EE:F3:E3:07:F1:86:94:55:33:83:0F:05:F5 X509v3 Authority Key Identifier: keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d8:5d:ee:f4:b6:4e:f6:9a:da:b9:ae:df:a9:21:bb:07:3d: df:67:8b:20:fb:31:be:4b:57:43:46:11:79:30:73:eb:c3:e6: 83:f3:ef:ac:7d:b1:8c:5f:01:12:15:b4:cc:21:49:67:4d:95: 34:10:92:77:c4:2c:a0:33:45:ad:f8:2d:29:6c:c1:a0:84:9c: 76:14:1f:9a:42:54:54:f4:03:9c:25:23:7e:a9:20:76:60:1f: c4:87:cc:3b:c7:bc:34:3d:40:f5:25:4c:45:e2:f0:1a:e3:f3: 04:27:c4:ce:b3:ef:f5:b0:96:9f:78:bf:d3:e1:4a:c7:dd:6a: a5:ca:67:a4:19:d3:8b:6b:ec:37:27:06:7a:21:1a:4c:8f:5d: db:b2:0f:91:f5:6e:b9:c7:c1:84:c8:01:64:b6:58:16:a0:f3: b9:c0:b9:2e:99:be:1b:d0:08:a9:1b:7a:67:d9:c7:47:3c:8c: 5b:1f:3d:02:54:fc:d3:ba:7d:b8:60:91:af:af:ea:20:94:b4: 0c:12:4c:5e:ec:f4:e1:3e:a3:7b:6b:50:4d:c5:af:83:76:4c: 53:d0:29:99:47:53:00:83:87:76:cb:52:03:7f:25:b7:a0:03: 15:86:61:32:d8:c5:d2:a7:3a:22:12:83:df:ac:24:48:f5:a1: 45:a5:74:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LlaNJ8Uo+eYW2BkZDk2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ODA5NTU1YThmMDVmMDQwYjQ1ZjlhZWM5YzNlZjU1YTFi YTkzM2QwHhcNMjUxMjA2MTUwMTA4WhcNMjUxMjA3MTUwMTA4WjAzMTEwLwYDVQQD Eyg3YTg1MDA0ODAyZGZiNmVlZjNlMzA3ZjE4Njk0NTUzMzgzMGYwNWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS7h4HSuoSC3HbpggXWHtTkrgAO4 00wYKqPxB1vIFfl4Zexl68ejgXsV0jhSOLUXy2TM2emV03enHtY0wGR6irUdDWLI QcknaClH4RUMXLrO4crneSPvjeBmRaj6fP5jpB67VwMAIxieXWw1gI2pzUkIpfOh JPtlQkikrEUkYw3ErY3ka7Mee8ld6sp091LzZqG2b4rWsSMpglst8gOZH2VQBExT +h+P+skbWU3XoMP9na9AG+63palhl+WLZgZ++SgZjX5KqTNawKIutJSRBJxhdaTH fRn7g9yQSfZT4BYnQpKrhdvosr5BufTIjJDY4B2riLc38Gz1HQulEKS3LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqFAEgC37bu8+MH8YaUVTODDwX1MB8GA1UdIwQY MBaAFOeAlVWo8F8EC0X5rsnD71WhupM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgt Y2EwOGZlNmYzZTU3LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgtY2EwOGZlNmYzZTU3 LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAthd7vS2 Tvaa2rmu36khuwc932eLIPsxvktXQ0YReTBz68Pmg/PvrH2xjF8BEhW0zCFJZ02V NBCSd8QsoDNFrfgtKWzBoIScdhQfmkJUVPQDnCUjfqkgdmAfxIfMO8e8ND1A9SVM ReLwGuPzBCfEzrPv9bCWn3i/0+FKx91qpcpnpBnTi2vsNycGeiEaTI9d27IPkfVu ucfBhMgBZLZYFqDzucC5Lpm+G9AIqRt6Z9nHRzyMWx89AlT807p9uGCRr6/qIJS0 DBJMXuz04T6je2tQTcWvg3ZMU9ApmUdTAIOHdstSA38lt6ADFYZhMtjF0qc6IhKD 36wkSPWhRaV0PA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:09 2025 by rpki-client