This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json) Hash identifier: v/n5CvKoKv6lsfhq2QfDk2O6uSctmCcQWqvwRsF3grc= Subject key identifier: 41:E1:61:07:A7:73:8F:6B:83:DE:20:82:CA:D5:43:5C:07:F3:0B:A9 Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84 Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184 Certificate serial: 019AFBB0A831AF7197E03E10AB199550984A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft Manifest number: 0189 Signing time: Mon 08 Dec 2025 02:00:49 +0000 Manifest this update: Mon 08 Dec 2025 02:00:49 +0000 Manifest next update: Tue 09 Dec 2025 02:00:49 +0000 Files and hashes: 1: ZQjPC2fpyT-Vvc_kqiwp7b7rczY.roa (hash: WGoaZKgovkzunqobaBY3s+Zo6C38U50g1kvmNlqSsZ0=) 2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: qUZPiQvmaLnvXg6jFwOXQVtgZ67sqzZ/zRnxnKFE9Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b0:a8:31:af:71:97:e0:3e:10:ab:19:95:50:98:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184 Validity Not Before: Dec 8 02:00:49 2025 GMT Not After : Dec 9 02:00:49 2025 GMT Subject: CN=41e16107a7738f6b83de2082cad5435c07f30ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:aa:9b:ef:c7:b7:31:95:a4:2c:0a:02:60: 1e:3f:59:80:f0:9c:54:25:00:68:af:c2:85:f1:d3: 6f:db:2b:d1:f3:2a:b0:1c:b6:f8:6f:34:cc:80:ba: 71:8d:e2:0e:c6:3d:79:45:51:d8:c6:a6:73:e8:6b: 0b:c6:4d:27:c6:b4:f0:54:6b:db:d6:ef:19:54:51: 3d:3b:ae:51:63:0e:9f:03:14:22:68:1d:11:33:ce: 17:d3:8e:08:f1:09:4f:a5:6b:79:b3:9b:6a:3e:e0: 83:ba:a1:b5:d8:ee:a3:d6:79:99:e6:72:17:e3:53: 64:69:3e:2b:00:af:7a:4d:d3:94:76:91:05:f0:2e: ad:76:a0:af:6a:09:91:dc:52:ee:94:59:10:1f:95: a0:d3:a6:7f:d7:0b:20:60:6b:da:e1:ab:18:31:1f: 9d:a6:9e:38:b1:f7:22:43:94:f3:ca:b6:d8:07:83: b2:d5:04:c9:bc:0d:b2:2e:e8:fb:24:a1:46:5b:25: 32:c0:13:d7:45:5b:45:05:cd:1f:28:84:d9:f7:ac: 0f:d3:b2:c7:8f:89:f6:55:ce:5c:d2:e6:24:40:db: f7:8b:bf:b1:b6:51:e9:f9:05:96:e7:b2:9f:d2:4e: c1:98:88:32:79:a7:b8:94:71:7e:e8:60:c0:84:8e: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E1:61:07:A7:73:8F:6B:83:DE:20:82:CA:D5:43:5C:07:F3:0B:A9 X509v3 Authority Key Identifier: keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:29:12:9f:52:09:a0:30:52:ac:1b:43:e1:fa:5c:f8:c3:c4: 48:2c:89:98:3e:01:52:78:22:e2:e7:b3:d6:2d:6f:62:5f:c3: 0f:00:6a:a4:19:29:bd:93:bf:28:5a:9b:5e:8a:a2:57:02:5e: a0:f2:37:f4:c9:57:39:af:93:0d:df:cd:98:dc:15:58:46:7c: e0:2b:c5:a8:ad:be:86:88:35:80:2e:0c:1f:71:3d:87:62:74: a6:08:e6:27:92:da:06:96:47:46:30:41:ba:30:70:7f:01:0c: 9b:55:0b:9b:7c:26:e8:41:35:85:10:f8:70:b4:d0:f7:ee:e2: 6f:42:56:ba:37:78:4c:4f:46:0f:d1:e7:42:ea:bb:59:2f:88: 4f:df:1a:3a:e1:21:89:c6:0f:89:04:a0:2c:41:5f:6a:ce:4d: 05:2c:73:bd:17:b5:5d:e9:59:b5:c3:08:fe:19:a1:2d:0b:73: fb:72:de:66:8c:c0:bf:68:27:35:f4:f3:df:2a:29:b8:ba:1f: 89:89:8c:ea:19:21:8e:43:ff:25:d4:9a:f2:93:61:64:cb:41: 21:7e:93:8e:f8:35:f8:4a:6d:29:c7:04:8d:f5:d8:23:d6:ad: e8:b2:55:93:15:af:25:58:c4:7b:b9:e0:ad:2b:53:4e:0c:34: 2d:13:f4:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sKgxr3GX4D4QqxmVUJhKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OWQxMzY2NGEzNzlkOGI1ZGFkZjc2M2RkMDRmNTExNWUw MjMxODQwHhcNMjUxMjA4MDIwMDQ5WhcNMjUxMjA5MDIwMDQ5WjAzMTEwLwYDVQQD Eyg0MWUxNjEwN2E3NzM4ZjZiODNkZTIwODJjYWQ1NDM1YzA3ZjMwYmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk+qm+/HtzGVpCwKAmAeP1mA8JxU JQBor8KF8dNv2yvR8yqwHLb4bzTMgLpxjeIOxj15RVHYxqZz6GsLxk0nxrTwVGvb 1u8ZVFE9O65RYw6fAxQiaB0RM84X044I8QlPpWt5s5tqPuCDuqG12O6j1nmZ5nIX 41NkaT4rAK96TdOUdpEF8C6tdqCvagmR3FLulFkQH5Wg06Z/1wsgYGva4asYMR+d pp44sfciQ5TzyrbYB4Oy1QTJvA2yLuj7JKFGWyUywBPXRVtFBc0fKITZ96wP07LH j4n2Vc5c0uYkQNv3i7+xtlHp+QWW57Kf0k7BmIgyeae4lHF+6GDAhI6RrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHhYQenc49rg94ggsrVQ1wH8wupMB8GA1UdIwQY MBaAFMedE2ZKN52LXa33Y90E9RFeAjGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2Mjgt Mjg4NDI1MjljN2ExLzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2MjgtMjg4NDI1MjljN2Ex LzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCkSn1IJ oDBSrBtD4fpc+MPESCyJmD4BUngi4uez1i1vYl/DDwBqpBkpvZO/KFqbXoqiVwJe oPI39MlXOa+TDd/NmNwVWEZ84CvFqK2+hog1gC4MH3E9h2J0pgjmJ5LaBpZHRjBB ujBwfwEMm1ULm3wm6EE1hRD4cLTQ9+7ib0JWujd4TE9GD9HnQuq7WS+IT98aOuEh icYPiQSgLEFfas5NBSxzvRe1XelZtcMI/hmhLQtz+3LeZozAv2gnNfTz3yopuLof iYmM6hkhjkP/JdSa8pNhZMtBIX6Tjvg1+EptKccEjfXYI9at6LJVkxWvJVjEe7ng rStTTgw0LRP0Bw== -----END CERTIFICATE-----Generated at Mon Dec 8 10:54:08 2025 by rpki-client