This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft File: 53ltjBnzKhyvvVt49Sds6N-ZXQo.mft (raw, json) Hash identifier: BzFh6xkBBthXfmyIBSu4joTJEoH6eJ3RqX0FgGQe+ow= Subject key identifier: 9F:4D:9E:49:54:50:56:66:03:AD:08:C8:23:94:0C:66:13:D3:CA:AC Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A Certificate issuer: /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a Certificate serial: 019B40C918C37FCEAD686085684F161ECA38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 12:01:19 +0000 Manifest this update: Sun 21 Dec 2025 12:01:19 +0000 Manifest next update: Mon 22 Dec 2025 12:01:19 +0000 Files and hashes: 1: 53ltjBnzKhyvvVt49Sds6N-ZXQo.crl (hash: AzAtlCzDW+uiwzcVZi8hEJRL04LH+edCR5OeAHQYL4E=) 2: tUZHDdFwry8ADa4Cy4cgEjcwGpA.roa (hash: khx6M/GES6UZBMxotwf4KeFJV0Wp8E9iWqwkSmvOz7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:18:c3:7f:ce:ad:68:60:85:68:4f:16:1e:ca:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a Validity Not Before: Dec 21 12:01:19 2025 GMT Not After : Dec 22 12:01:19 2025 GMT Subject: CN=9f4d9e495450566603ad08c823940c6613d3caac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:d1:e6:83:5e:ee:6b:75:b1:f4:07:71:5f: 75:ea:d5:ef:dd:89:b1:c8:f3:b0:a2:53:42:61:e2: 7a:ff:d0:d6:0e:9f:43:bd:8b:31:35:f0:7a:b1:79: f3:3e:26:1f:f4:df:90:49:6c:86:c1:ef:5a:a8:84: 16:ea:db:e8:af:1a:c1:58:87:0e:4c:17:4d:a9:67: ac:ae:fc:49:2e:e8:7d:87:26:f6:83:c6:f8:c0:db: 09:65:16:3f:87:ea:27:d5:41:55:1f:36:1b:58:3e: 59:9c:14:af:9f:3a:f0:69:7d:83:22:84:d7:c2:39: 65:60:e2:ce:7c:58:e1:96:3e:01:37:ad:62:68:74: 1b:44:92:c9:a0:13:43:52:d1:72:d6:04:eb:ff:b5: 02:00:61:17:af:bb:24:4e:96:84:90:2f:e3:cc:55: dd:7f:31:00:68:b1:32:92:1c:16:45:cd:28:bd:eb: 24:c0:ad:3a:6c:9b:9e:22:93:47:92:e0:43:0d:de: 6b:5a:1b:f2:40:02:64:fa:fc:30:dc:66:38:1a:eb: 5c:a1:ad:be:79:31:97:cd:c0:77:08:dc:82:e7:8b: 6e:dd:f0:61:17:82:3a:8c:8e:46:1b:83:ea:39:ae: 84:90:0f:d7:ed:29:4e:ff:9e:3b:c5:1f:9b:37:96: dc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4D:9E:49:54:50:56:66:03:AD:08:C8:23:94:0C:66:13:D3:CA:AC X509v3 Authority Key Identifier: keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:19:49:bf:c5:a2:5a:3f:14:f3:e2:86:4d:c3:a0:2c:5d:76: 81:00:fb:63:59:99:e5:32:49:54:aa:7c:b1:6b:56:22:1a:79: 68:0e:f9:cf:74:f4:36:12:8d:fc:ee:8f:d0:23:78:bd:0c:15: 93:8f:56:d3:b6:b0:5c:56:0a:6a:d7:7b:d4:1f:d8:7d:f4:0a: 47:74:0a:11:6f:00:c7:26:ab:ff:1c:93:c4:e3:d4:09:11:fa: f7:97:14:c2:46:71:43:2d:fb:7c:ad:f4:d6:bf:0d:28:9d:35: c8:11:12:17:f4:fd:74:45:23:85:de:54:8a:ff:16:e4:19:ba: df:63:2f:e3:a6:cf:ea:9a:99:1d:86:25:1a:fe:98:cb:27:ab: 2c:82:bc:8c:53:5d:99:bf:3e:8d:c0:60:e7:b6:1b:ca:5e:7b: ce:c1:95:ee:45:b3:ef:00:a5:a0:a5:c6:d0:ec:d3:a6:c5:05: 2c:4e:bb:67:fc:3e:38:c5:6a:19:3f:00:a5:64:03:a1:0f:ec: a4:68:e0:c9:9e:5d:d2:d3:d3:9f:8f:e3:87:3c:85:88:2f:da: 34:1a:ed:77:4b:98:51:23:48:d7:60:2b:08:4e:66:63:b8:d3: c1:f3:a4:91:f9:67:06:fa:e8:28:bf:54:9d:c2:79:af:3d:4e: cb:4c:30:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyRjDf86taGCFaE8WHso4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Nzk2ZDhjMTlmMzJhMWNhZmJkNWI3OGY1Mjc2Y2U4ZGY5 OTVkMGEwHhcNMjUxMjIxMTIwMTE5WhcNMjUxMjIyMTIwMTE5WjAzMTEwLwYDVQQD Eyg5ZjRkOWU0OTU0NTA1NjY2MDNhZDA4YzgyMzk0MGM2NjEzZDNjYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5nR5oNe7mt1sfQHcV916tXv3Ymx yPOwolNCYeJ6/9DWDp9DvYsxNfB6sXnzPiYf9N+QSWyGwe9aqIQW6tvorxrBWIcO TBdNqWesrvxJLuh9hyb2g8b4wNsJZRY/h+on1UFVHzYbWD5ZnBSvnzrwaX2DIoTX wjllYOLOfFjhlj4BN61iaHQbRJLJoBNDUtFy1gTr/7UCAGEXr7skTpaEkC/jzFXd fzEAaLEykhwWRc0oveskwK06bJueIpNHkuBDDd5rWhvyQAJk+vww3GY4Gutcoa2+ eTGXzcB3CNyC54tu3fBhF4I6jI5GG4PqOa6EkA/X7SlO/547xR+bN5bczQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9NnklUUFZmA60IyCOUDGYT08qsMB8GA1UdIwQY MBaAFOd5bYwZ8yocr71bePUnbOjfmV0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTNsdGpCbnpLaHl2dlZ0NDlTZHM2Ti1aWFFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81ZWM5NzAtNzk2NS00ZTBiLWI5NDct Mjg1N2U4YTIzNTU4LzEvNTNsdGpCbnpLaHl2dlZ0NDlTZHM2Ti1aWFFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81ZWM5NzAtNzk2NS00ZTBiLWI5NDctMjg1N2U4YTIzNTU4 LzEvNTNsdGpCbnpLaHl2dlZ0NDlTZHM2Ti1aWFFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahlJv8Wi Wj8U8+KGTcOgLF12gQD7Y1mZ5TJJVKp8sWtWIhp5aA75z3T0NhKN/O6P0CN4vQwV k49W07awXFYKatd71B/YffQKR3QKEW8Axyar/xyTxOPUCRH695cUwkZxQy37fK30 1r8NKJ01yBESF/T9dEUjhd5Uiv8W5Bm632Mv46bP6pqZHYYlGv6YyyerLIK8jFNd mb8+jcBg57Ybyl57zsGV7kWz7wCloKXG0OzTpsUFLE67Z/w+OMVqGT8ApWQDoQ/s pGjgyZ5d0tPTn4/jhzyFiC/aNBrtd0uYUSNI12ArCE5mY7jTwfOkkflnBvroKL9U ncJ5rz1Oy0wwXQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:11:48 2025 by rpki-client