This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft File: 53ltjBnzKhyvvVt49Sds6N-ZXQo.mft (raw, json) Hash identifier: /I1hvFJDPTCLrUnwc2hM79XPD5JmSTXNGP95DcqBCsA= Subject key identifier: 21:1F:72:46:D2:10:DA:28:A6:1B:E6:5B:A7:46:F7:99:99:9B:0B:B0 Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A Certificate issuer: /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a Certificate serial: 019AF57874039159EC4D141A19B18E79580D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 21:01:43 +0000 Manifest this update: Sat 06 Dec 2025 21:01:43 +0000 Manifest next update: Sun 07 Dec 2025 21:01:43 +0000 Files and hashes: 1: 53ltjBnzKhyvvVt49Sds6N-ZXQo.crl (hash: zJd3Ydg0QKA8IP+ccu0NXkTrqGS50Gexb3DgunGp5ik=) 2: tUZHDdFwry8ADa4Cy4cgEjcwGpA.roa (hash: khx6M/GES6UZBMxotwf4KeFJV0Wp8E9iWqwkSmvOz7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:74:03:91:59:ec:4d:14:1a:19:b1:8e:79:58:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a Validity Not Before: Dec 6 21:01:43 2025 GMT Not After : Dec 7 21:01:43 2025 GMT Subject: CN=211f7246d210da28a61be65ba746f799999b0bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:97:57:5c:73:9a:66:e0:85:c7:04:96:04: 5b:b5:9d:d0:9c:0b:35:3c:44:87:69:70:f2:22:ed: ed:5b:04:41:fb:a1:5a:f4:26:c7:1a:c4:d8:ac:dd: 36:d7:ad:86:af:6d:d2:9c:e5:5d:50:81:8e:c1:f7: b1:cf:1f:9d:1d:74:a6:41:dc:05:e2:34:5d:6a:b2: c9:fe:53:2f:98:c0:60:cf:bc:07:ee:a9:31:b5:a9: 81:e1:63:f5:90:6f:56:68:d0:c1:3c:4f:6e:43:85: 33:ed:2b:6c:d7:5c:26:80:a1:3b:59:ef:1c:e3:26: 34:37:e4:07:32:17:e1:4c:8b:bf:2d:83:db:30:ef: c1:c2:3f:dc:94:af:0e:5e:23:c5:02:47:02:21:b6: 83:66:de:cc:57:a2:80:dc:47:52:93:58:55:f7:44: 0e:7a:df:1e:6a:4a:0f:43:76:c2:bf:94:3e:bd:6c: 44:25:75:d1:6d:86:f7:08:73:8e:83:1b:46:02:52: 3a:e8:3d:7d:14:7a:6b:9e:22:b1:f1:ae:26:9b:9a: 25:19:49:c1:41:43:55:c4:2f:3f:89:40:6c:6b:a7: ae:e5:1b:38:d6:36:e0:fa:b1:e3:7d:8b:e5:5b:c9: 6b:c3:82:2b:11:97:42:9d:8a:ed:c9:f2:01:e2:b3: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1F:72:46:D2:10:DA:28:A6:1B:E6:5B:A7:46:F7:99:99:9B:0B:B0 X509v3 Authority Key Identifier: keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6f:e9:84:bf:f3:30:d9:4e:21:bb:f4:a1:a9:a7:7c:a1:26: a2:81:44:79:ca:82:bb:78:78:85:13:56:b4:dc:98:d1:19:e6: 8c:b8:cd:86:81:ee:02:c9:6d:2d:b6:15:06:05:03:9c:5f:60: c9:69:f9:0d:52:00:3d:10:ca:9b:30:c4:a8:d4:cd:90:fa:d2: dd:2b:2d:46:70:6f:9b:00:fd:5b:8b:f3:d4:5a:54:2e:6c:89: bd:ac:74:2b:8a:f5:39:9f:95:11:31:a1:61:97:54:96:81:b2: d0:15:d3:b3:06:2f:1e:31:bd:4d:97:b4:65:cb:24:24:c7:c4: ed:d8:c1:5c:bd:73:ec:d9:11:ee:52:00:ea:b8:a8:51:66:5c: e7:51:10:3d:c8:16:5c:5c:29:18:f0:50:53:8a:82:36:00:99: 63:9b:7d:5c:7e:7f:ec:2b:cc:da:fc:d5:cb:68:7b:d7:69:97: 98:04:7e:d4:c3:ee:7c:bb:22:d3:01:53:38:03:b0:f7:92:d2: a5:f1:57:52:0b:ca:ea:79:cc:d3:a7:84:16:87:d9:de:19:27: 66:d7:ae:48:67:17:9d:5f:b7:7a:a6:08:ad:d8:0b:3c:93:98: f7:a7:66:b3:9c:b5:c3:c5:30:3a:37:cb:41:e0:3f:ff:bf:c7: 6c:37:e8:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eHQDkVnsTRQaGbGOeVgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Nzk2ZDhjMTlmMzJhMWNhZmJkNWI3OGY1Mjc2Y2U4ZGY5 OTVkMGEwHhcNMjUxMjA2MjEwMTQzWhcNMjUxMjA3MjEwMTQzWjAzMTEwLwYDVQQD EygyMTFmNzI0NmQyMTBkYTI4YTYxYmU2NWJhNzQ2Zjc5OTk5OWIwYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo2XV1xzmmbghccElgRbtZ3QnAs1 PESHaXDyIu3tWwRB+6Fa9CbHGsTYrN02162Gr23SnOVdUIGOwfexzx+dHXSmQdwF 4jRdarLJ/lMvmMBgz7wH7qkxtamB4WP1kG9WaNDBPE9uQ4Uz7Sts11wmgKE7We8c 4yY0N+QHMhfhTIu/LYPbMO/Bwj/clK8OXiPFAkcCIbaDZt7MV6KA3EdSk1hV90QO et8eakoPQ3bCv5Q+vWxEJXXRbYb3CHOOgxtGAlI66D19FHprniKx8a4mm5olGUnB QUNVxC8/iUBsa6eu5Rs41jbg+rHjfYvlW8lrw4IrEZdCnYrtyfIB4rPOowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEfckbSENoophvmW6dG95mZmwuwMB8GA1UdIwQY MBaAFOd5bYwZ8yocr71bePUnbOjfmV0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTNsdGpCbnpLaHl2dlZ0NDlTZHM2Ti1aWFFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81ZWM5NzAtNzk2NS00ZTBiLWI5NDct Mjg1N2U4YTIzNTU4LzEvNTNsdGpCbnpLaHl2dlZ0NDlTZHM2Ti1aWFFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS81ZWM5NzAtNzk2NS00ZTBiLWI5NDctMjg1N2U4YTIzNTU4 LzEvNTNsdGpCbnpLaHl2dlZ0NDlTZHM2Ti1aWFFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtG/phL/z MNlOIbv0oamnfKEmooFEecqCu3h4hRNWtNyY0RnmjLjNhoHuAsltLbYVBgUDnF9g yWn5DVIAPRDKmzDEqNTNkPrS3SstRnBvmwD9W4vz1FpULmyJvax0K4r1OZ+VETGh YZdUloGy0BXTswYvHjG9TZe0ZcskJMfE7djBXL1z7NkR7lIA6rioUWZc51EQPcgW XFwpGPBQU4qCNgCZY5t9XH5/7CvM2vzVy2h712mXmAR+1MPufLsi0wFTOAOw95LS pfFXUgvK6nnM06eEFofZ3hknZteuSGcXnV+3eqYIrdgLPJOY96dms5y1w8UwOjfL QeA//7/HbDfoLA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:09 2025 by rpki-client