This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft File: 54z133frZmwE77frs8o0BK3sNPs.mft (raw, json) Hash identifier: fqzYKI6eb5nghoODmY84aRbyPD4LwuRVrZOCSds1m3A= Subject key identifier: 83:89:31:D3:5D:A2:82:AC:A9:EB:96:3D:72:E4:F0:5C:50:35:B1:75 Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB Certificate issuer: /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb Certificate serial: 019AF20942D587F8510EF534C07BCAA96377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft Manifest number: 0E41 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: rgYEukTWzx4BZYu6d46uf0S885z4i6ORfk0dVSsFwHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:42:d5:87:f8:51:0e:f5:34:c0:7b:ca:a9:63:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=838931d35da282aca9eb963d72e4f05c5035b175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:7a:f4:50:34:5b:ed:d1:fb:ad:2a:67:b6: fd:69:b0:59:90:ec:6b:82:e4:67:32:10:34:3e:54: 9d:10:39:98:68:06:27:66:d2:2d:cf:af:70:0e:de: ec:ab:19:72:9d:e2:4e:e6:5d:7b:e0:4e:8b:78:7f: 0f:16:02:ce:83:96:42:9c:b3:27:87:69:39:60:2e: c1:73:b8:01:9a:6f:a5:51:7f:45:99:fe:16:d5:8b: ee:60:8c:48:7b:c4:44:ef:42:55:9a:5c:f0:ed:a2: 9e:a3:ed:01:55:7a:99:69:f2:ab:fc:33:09:c5:9b: 2d:97:3a:47:bd:78:5a:99:bf:8b:7a:4c:38:28:b0: 9e:95:d6:eb:ad:d0:d2:39:5b:2d:07:d2:cb:2b:eb: a2:31:ce:37:cb:05:92:23:19:8a:c8:4c:92:81:47: ec:8a:6b:a4:0d:af:32:71:d5:ae:f1:6d:73:70:ff: 7a:c2:12:44:d0:e9:45:14:b9:2a:50:6b:8a:8b:de: a2:26:ea:17:b8:ce:25:37:ad:8b:06:63:a3:71:b1: ec:b8:f6:90:36:b3:3d:e7:b6:d0:d2:4d:3d:d9:2f: 9e:ee:89:3d:f5:bb:1f:be:f0:da:79:bc:75:af:a3: d1:24:72:71:5c:e1:1a:18:2a:a8:74:ad:8a:92:31: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:89:31:D3:5D:A2:82:AC:A9:EB:96:3D:72:E4:F0:5C:50:35:B1:75 X509v3 Authority Key Identifier: keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:68:76:2b:64:b5:c7:55:0d:de:a4:42:cc:88:44:00:48:22: f6:70:07:c0:b8:17:9b:14:22:94:f2:48:f1:91:84:09:51:41: 17:7d:54:f3:83:91:cd:53:bd:f3:76:2f:fa:32:c6:b5:1a:55: 6a:03:96:e8:5d:9c:3d:a3:44:2f:e8:49:2f:45:c2:02:66:02: 37:19:7b:39:cf:44:2a:03:ce:21:71:e5:a7:42:f0:e5:67:b3: 8e:44:90:31:96:d5:e9:55:2d:df:df:d9:7c:8c:84:32:58:da: 10:61:ab:dd:d2:47:b1:a3:c4:9f:a7:55:35:d8:8a:1f:13:93: 8b:8c:55:da:b8:94:ec:76:78:7d:ed:0e:0f:a9:99:c4:fc:96: bf:ad:ff:a5:d3:87:cf:38:02:43:4a:58:61:fb:87:8a:40:53: 23:d8:bc:88:a2:6b:50:32:33:4c:f5:72:95:78:6d:62:bf:1d: 5f:27:37:d5:8a:5f:4f:7a:5c:46:47:0b:f2:ad:41:b1:22:11: 8c:75:3f:da:74:18:60:cc:45:76:77:f5:bb:ef:d4:23:69:bd: d0:37:ec:3a:cb:a7:9e:6a:74:71:17:f9:9d:9e:f9:28:47:2c: c2:c0:49:71:36:5d:04:f0:5e:9c:9c:f8:46:02:b1:54:38:82: a6:94:76:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCULVh/hRDvU0wHvKqWN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OGNmNWRmNzdlYjY2NmMwNGVmYjdlYmIzY2EzNDA0YWRl YzM0ZmIwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD Eyg4Mzg5MzFkMzVkYTI4MmFjYTllYjk2M2Q3MmU0ZjA1YzUwMzViMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokx69FA0W+3R+60qZ7b9abBZkOxr guRnMhA0PlSdEDmYaAYnZtItz69wDt7sqxlyneJO5l174E6LeH8PFgLOg5ZCnLMn h2k5YC7Bc7gBmm+lUX9Fmf4W1YvuYIxIe8RE70JVmlzw7aKeo+0BVXqZafKr/DMJ xZstlzpHvXhamb+Lekw4KLCeldbrrdDSOVstB9LLK+uiMc43ywWSIxmKyEySgUfs imukDa8ycdWu8W1zcP96whJE0OlFFLkqUGuKi96iJuoXuM4lN62LBmOjcbHsuPaQ NrM957bQ0k092S+e7ok99bsfvvDaebx1r6PRJHJxXOEaGCqodK2KkjE2GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOJMdNdooKsqeuWPXLk8FxQNbF1MB8GA1UdIwQY MBaAFOeM9d9362ZsBO+367PKNASt7DT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0Yjkt MjExYjQzOTQ3MDA3LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0YjktMjExYjQzOTQ3MDA3 LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2h2K2S1 x1UN3qRCzIhEAEgi9nAHwLgXmxQilPJI8ZGECVFBF31U84ORzVO983Yv+jLGtRpV agOW6F2cPaNEL+hJL0XCAmYCNxl7Oc9EKgPOIXHlp0Lw5WezjkSQMZbV6VUt39/Z fIyEMljaEGGr3dJHsaPEn6dVNdiKHxOTi4xV2riU7HZ4fe0OD6mZxPyWv63/pdOH zzgCQ0pYYfuHikBTI9i8iKJrUDIzTPVylXhtYr8dXyc31YpfT3pcRkcL8q1BsSIR jHU/2nQYYMxFdnf1u+/UI2m90DfsOsunnmp0cRf5nZ75KEcswsBJcTZdBPBenJz4 RgKxVDiCppR2Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:46 2025 by rpki-client