This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft File: 54ul2Y1Izr1a0EwIvwkIKxKn46s.mft (raw, json) Hash identifier: cIEt5vXLNimlW6W9r8k0jeZvzS/8x+7sdDnGXTWCDps= Subject key identifier: 63:38:66:70:F4:19:46:AF:98:48:B4:27:52:C5:3E:75:E3:84:86:95 Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB Certificate issuer: /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab Certificate serial: 019AF3C07AE188E57BA5AAE7DBA677DB1EF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft Manifest number: 0AC2 Signing time: Sat 06 Dec 2025 13:01:09 +0000 Manifest this update: Sat 06 Dec 2025 13:01:09 +0000 Manifest next update: Sun 07 Dec 2025 13:01:09 +0000 Files and hashes: 1: 54ul2Y1Izr1a0EwIvwkIKxKn46s.crl (hash: 4kPtWvQPa9xrDujgUK2A4Cr25jggHVVEKxybliqQ4o8=) 2: QHaAgYTixdhk1ePZKybxFMUfPdM.roa (hash: Jd+34KxJqDnIgGzG2TDhmQ4nztMHifN1bC7dBSLpDiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:7a:e1:88:e5:7b:a5:aa:e7:db:a6:77:db:1e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab Validity Not Before: Dec 6 13:01:09 2025 GMT Not After : Dec 7 13:01:09 2025 GMT Subject: CN=63386670f41946af9848b42752c53e75e3848695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:53:19:5e:87:15:6a:c0:a4:af:f0:1f:2f: c0:b2:48:fa:99:1a:f5:f3:2f:77:de:11:5f:db:8b: 68:f4:61:69:71:f1:10:f9:76:52:9c:22:f7:0f:32: d6:88:d8:06:a1:07:cc:2f:ee:e0:9c:c0:bf:58:a7: 48:cd:b6:1d:2b:a2:32:fe:c0:f1:fe:14:de:4b:08: 7b:06:65:30:ae:bd:47:8c:77:75:c7:35:e4:a3:f1: fb:80:ef:d4:0a:d3:eb:a4:08:e5:a4:17:22:fb:64: 5b:a4:40:f3:05:1f:c6:19:bf:70:90:ef:3f:ea:be: 90:f4:a6:25:52:9c:4e:15:8f:7e:cf:f6:c7:70:65: 52:7c:e5:3b:25:ea:41:a1:3d:89:22:7d:52:dc:20: c5:a7:a1:26:39:ff:f6:69:04:10:94:a8:78:3d:90: 7d:1d:e8:a9:ab:e9:fd:57:d1:14:c3:d8:0e:2a:11: 1d:bd:38:20:f8:69:a1:b5:49:64:48:a9:13:10:14: f0:d7:f2:2d:3a:ac:84:83:c9:d9:0b:82:73:2d:dd: 03:ae:c0:07:ed:78:48:f9:e4:13:00:4a:77:02:a2: a7:4d:84:bc:4c:f0:82:a5:79:f9:87:9c:6b:91:6c: 2e:26:11:1e:a6:e3:18:47:ae:9e:d9:54:57:35:d0: 14:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:38:66:70:F4:19:46:AF:98:48:B4:27:52:C5:3E:75:E3:84:86:95 X509v3 Authority Key Identifier: keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:13:a1:39:20:e6:b3:15:4f:b5:79:d0:9d:53:8c:40:a8:7c: 9f:cf:1a:b2:1b:4d:04:c0:0a:ec:59:f9:3f:14:d4:eb:9b:f8: 9d:6d:cf:7a:53:cd:f3:6a:49:5f:58:73:c5:99:2c:09:7b:5c: 88:60:ee:b9:0c:24:bf:90:63:06:e9:f0:da:e1:f4:24:06:9f: 5b:58:3b:52:36:9a:cf:ac:99:68:9d:79:3e:b6:1d:67:f9:5c: 66:73:ac:f4:7b:26:7e:7f:da:dc:d4:4c:ee:f0:2b:55:c8:4b: 9d:0f:35:de:61:d7:7c:22:35:e3:82:93:59:47:1e:96:2b:7c: ae:0f:c4:aa:98:78:bf:56:86:dc:81:ac:54:5d:85:d4:61:e3: c3:37:9e:53:4f:4d:87:9c:21:75:02:94:7f:ae:ea:68:5b:8d: c4:49:2f:97:83:be:b0:89:c0:a9:c8:da:c0:0d:7f:4b:a4:96: 9a:01:f5:9f:40:0a:f0:bf:1b:62:5a:c1:76:f4:fc:9b:a7:ca: 79:83:24:92:91:0c:f4:03:30:91:d3:2e:ce:cf:05:41:e2:0f: 4e:43:47:18:77:bb:d4:2f:97:ea:90:27:d5:d7:5b:ec:8e:37: a3:ae:c9:1f:e7:2d:22:a5:a6:42:a8:0c:fa:94:13:99:c1:3d: 07:52:e9:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHrhiOV7parn26Z32x72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OGJhNWQ5OGQ0OGNlYmQ1YWQwNGMwOGJmMDkwODJiMTJh N2UzYWIwHhcNMjUxMjA2MTMwMTA5WhcNMjUxMjA3MTMwMTA5WjAzMTEwLwYDVQQD Eyg2MzM4NjY3MGY0MTk0NmFmOTg0OGI0Mjc1MmM1M2U3NWUzODQ4Njk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+tTGV6HFWrApK/wHy/Askj6mRr1 8y933hFf24to9GFpcfEQ+XZSnCL3DzLWiNgGoQfML+7gnMC/WKdIzbYdK6Iy/sDx /hTeSwh7BmUwrr1HjHd1xzXko/H7gO/UCtPrpAjlpBci+2RbpEDzBR/GGb9wkO8/ 6r6Q9KYlUpxOFY9+z/bHcGVSfOU7JepBoT2JIn1S3CDFp6EmOf/2aQQQlKh4PZB9 Heipq+n9V9EUw9gOKhEdvTgg+GmhtUlkSKkTEBTw1/ItOqyEg8nZC4JzLd0DrsAH 7XhI+eQTAEp3AqKnTYS8TPCCpXn5h5xrkWwuJhEepuMYR66e2VRXNdAUIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGM4ZnD0GUavmEi0J1LFPnXjhIaVMB8GA1UdIwQY MBaAFOeLpdmNSM69WtBMCL8JCCsSp+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTR1bDJZMUl6cjFhMEV3SXZ3a0lLeEtuNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNTIyOTMtMDY3OC00YjQyLThhZTAt NDg5MTY1M2VlYjY3LzEvNTR1bDJZMUl6cjFhMEV3SXZ3a0lLeEtuNDZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNTIyOTMtMDY3OC00YjQyLThhZTAtNDg5MTY1M2VlYjY3 LzEvNTR1bDJZMUl6cjFhMEV3SXZ3a0lLeEtuNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlROhOSDm sxVPtXnQnVOMQKh8n88ashtNBMAK7Fn5PxTU65v4nW3PelPN82pJX1hzxZksCXtc iGDuuQwkv5BjBunw2uH0JAafW1g7Ujaaz6yZaJ15PrYdZ/lcZnOs9Hsmfn/a3NRM 7vArVchLnQ813mHXfCI144KTWUcelit8rg/Eqph4v1aG3IGsVF2F1GHjwzeeU09N h5whdQKUf67qaFuNxEkvl4O+sInAqcjawA1/S6SWmgH1n0AK8L8bYlrBdvT8m6fK eYMkkpEM9AMwkdMuzs8FQeIPTkNHGHe71C+X6pAn1ddb7I43o67JH+ctIqWmQqgM +pQTmcE9B1Lpxg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:19 2025 by rpki-client