This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json) Hash identifier: rrXwzqbfGXwMww1cobZdB1OT9/n70osnuOxLmoVDNl0= Subject key identifier: EB:38:0E:E9:77:97:5C:7D:89:13:90:F4:DA:F4:75:9C:58:4C:BD:86 Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d Certificate serial: 019B0EC9F6B75F39141343DC542B3D22F111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 19:01:15 +0000 Manifest this update: Thu 11 Dec 2025 19:01:15 +0000 Manifest next update: Fri 12 Dec 2025 19:01:15 +0000 Files and hashes: 1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=) 2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: FiYUx4k4eeQQAJSZVm5VKoazYmufm7QdvD7V+HeTn7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:f6:b7:5f:39:14:13:43:dc:54:2b:3d:22:f1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d Validity Not Before: Dec 11 19:01:15 2025 GMT Not After : Dec 12 19:01:15 2025 GMT Subject: CN=eb380ee977975c7d891390f4daf4759c584cbd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:fe:ba:70:9a:c5:22:c4:a5:46:e7:c8:b1: d5:c9:89:04:25:5d:bd:db:90:12:19:df:30:02:39: d6:19:29:af:52:0e:21:09:d0:a1:cc:bd:e3:91:40: 50:d5:56:00:35:46:61:d1:6b:85:6b:6d:fd:f6:7e: 87:00:5b:59:7b:79:53:08:b6:09:49:95:94:d7:67: 57:7f:d1:38:33:a4:99:a7:08:2c:fc:2c:01:07:ed: a0:72:35:94:b0:db:e2:bd:68:09:d1:3d:48:6b:cb: 53:9c:53:5b:92:d4:e1:07:5f:19:43:25:ea:a1:89: 73:fa:77:df:77:a8:81:3d:2b:cf:06:dc:dd:e5:c1: 80:e4:97:a7:79:3e:6b:b6:b6:40:e0:9b:10:d9:a5: 30:5f:86:98:40:1a:9e:37:06:19:43:16:c8:76:95: c7:5b:ef:41:44:7b:d3:5b:a1:8d:2f:5a:2e:32:22: 4e:f8:e4:d4:9b:1f:fc:f4:b6:16:d6:9b:5d:29:3b: e5:d5:35:78:78:32:1a:48:3f:5c:d6:93:1b:f3:72: 2c:67:f9:af:8d:32:08:b8:08:51:e2:70:e5:5b:ed: b3:a9:b0:7b:53:3f:ba:6c:d3:11:48:e3:18:a7:09: 8e:1c:7e:db:89:49:89:bf:c8:04:86:40:8a:cd:0e: c9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:38:0E:E9:77:97:5C:7D:89:13:90:F4:DA:F4:75:9C:58:4C:BD:86 X509v3 Authority Key Identifier: keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3a:e8:0e:cf:cf:12:a8:cb:e4:05:37:ea:41:6c:46:ed:43: e6:9b:65:41:fc:61:a0:37:8d:47:33:06:8f:3b:de:8d:fa:d1: b8:f0:8a:ee:14:7a:7f:0b:93:63:13:e3:b5:f1:0f:ce:f9:23: 40:0e:42:f2:89:15:3a:32:88:86:d6:e8:bb:98:8d:08:9f:24: fc:01:9e:00:3a:77:98:84:e4:ce:99:b9:a7:ca:c4:b6:64:0e: bd:2b:f2:66:78:de:47:11:3f:bc:82:6a:26:d7:1d:dc:26:16: c6:95:6a:d3:24:c0:34:5b:85:05:3e:19:d6:08:4e:63:35:ca: 5e:87:99:7f:e0:bc:d5:24:fd:a6:89:19:8c:c8:7b:98:3e:7d: db:46:f5:da:10:c4:38:78:09:51:23:00:7c:52:8b:64:f7:95: 1e:18:04:05:ca:e1:0d:31:23:84:30:cb:15:1f:17:78:08:44: e1:ad:83:33:84:71:6b:09:62:e7:cd:65:d7:03:a7:2f:cc:b1: 2a:c5:6a:f9:95:17:48:29:eb:40:2b:7e:ad:0a:bb:95:e1:93: e1:a3:23:34:17:3a:3f:00:79:5d:11:ac:cc:e2:5e:03:61:67: fc:5c:c0:68:59:03:52:32:70:c0:b3:3d:c7:49:3f:46:09:0a: a5:57:8a:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyfa3XzkUE0PcVCs9IvERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzY4MGVlMWIyN2MzYTZmMDcwMTNjOGZjMjVlYmZmMGM2 N2ZiOWQwHhcNMjUxMjExMTkwMTE1WhcNMjUxMjEyMTkwMTE1WjAzMTEwLwYDVQQD EyhlYjM4MGVlOTc3OTc1YzdkODkxMzkwZjRkYWY0NzU5YzU4NGNiZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHj+unCaxSLEpUbnyLHVyYkEJV29 25ASGd8wAjnWGSmvUg4hCdChzL3jkUBQ1VYANUZh0WuFa2399n6HAFtZe3lTCLYJ SZWU12dXf9E4M6SZpwgs/CwBB+2gcjWUsNvivWgJ0T1Ia8tTnFNbktThB18ZQyXq oYlz+nffd6iBPSvPBtzd5cGA5JeneT5rtrZA4JsQ2aUwX4aYQBqeNwYZQxbIdpXH W+9BRHvTW6GNL1ouMiJO+OTUmx/89LYW1ptdKTvl1TV4eDIaSD9c1pMb83IsZ/mv jTIIuAhR4nDlW+2zqbB7Uz+6bNMRSOMYpwmOHH7biUmJv8gEhkCKzQ7JKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOs4Dul3l1x9iROQ9Nr0dZxYTL2GMB8GA1UdIwQY MBaAFP3GgO4bJ8Om8HATyPwl6/8MZ/udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMt N2JlZDI2NzQzYmNjLzEvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMtN2JlZDI2NzQzYmNj LzEvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzroDs/P EqjL5AU36kFsRu1D5ptlQfxhoDeNRzMGjzvejfrRuPCK7hR6fwuTYxPjtfEPzvkj QA5C8okVOjKIhtbou5iNCJ8k/AGeADp3mITkzpm5p8rEtmQOvSvyZnjeRxE/vIJq Jtcd3CYWxpVq0yTANFuFBT4Z1ghOYzXKXoeZf+C81ST9pokZjMh7mD5920b12hDE OHgJUSMAfFKLZPeVHhgEBcrhDTEjhDDLFR8XeAhE4a2DM4Rxawli581l1wOnL8yx KsVq+ZUXSCnrQCt+rQq7leGT4aMjNBc6PwB5XRGszOJeA2Fn/FzAaFkDUjJwwLM9 x0k/RgkKpVeK/g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:29 2025 by rpki-client