This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft File: 50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json) Hash identifier: pL2XDwRqrgv5QQIzljivsWATVqnvDYy2FVQx34hKim0= Subject key identifier: 1D:44:89:CB:4D:2D:8E:AB:41:26:08:30:88:33:B5:7F:6F:16:F2:E8 Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1 Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1 Certificate serial: 019AF208D6D85D3BD5E7B4DC920DD60B6919 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft Manifest number: 0F25 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: EFDjaVuWMyQy+MIbnb5zLRlgS3CPm8mDVQ3I5yNvOB0=) 2: yZ3Po0hR1ZJyc1rv39YH9NNWuXs.roa (hash: 22bouj/6xCSX/ZXyHrbVMTQvQervlfTwQaA97vYRHBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d6:d8:5d:3b:d5:e7:b4:dc:92:0d:d6:0b:69:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1 Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=1d4489cb4d2d8eab412608308833b57f6f16f2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:52:e6:33:ff:32:e3:5f:37:3b:a8:c4:3d: c1:6d:8f:23:2d:c7:84:f9:43:e2:11:9c:d2:05:0c: 7c:84:4e:e8:b7:6e:0f:ef:2c:25:9a:c2:57:20:ef: 8c:75:f8:b4:9d:48:ae:86:8e:a2:b7:94:3f:f9:68: 4e:56:06:35:e9:71:92:f9:1e:c2:87:9e:7e:ce:d7: 2b:0b:17:ae:db:c7:da:e1:27:60:d9:df:12:0b:ce: 70:e4:ab:f8:e4:48:4a:3a:ae:e2:4f:46:be:0e:39: 20:da:3d:70:18:bb:d9:60:c4:42:1b:ba:9c:2b:11: 1b:c0:8f:c6:d9:01:aa:4d:8f:24:1f:29:87:ed:04: 93:39:5e:0a:25:bd:ca:9a:4d:5a:e8:e9:e1:cb:81: 36:0a:d4:57:69:f0:0e:b8:89:f0:8f:33:b7:49:da: d8:50:5e:b5:3a:fa:a9:1a:9a:5f:3c:a0:ee:53:56: a0:c8:44:64:cc:4c:26:0a:b0:ec:ab:d7:2c:7b:d5: 40:f0:9d:c2:77:71:e0:9c:86:06:84:7c:44:85:33: c0:eb:e5:69:27:63:a0:63:4a:ca:84:bb:9e:c3:54: 79:2e:a0:39:ef:8b:54:52:b5:43:b4:f8:c6:4a:cb: 76:49:fe:00:ba:e1:08:95:fb:54:d0:2a:51:8e:0c: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:44:89:CB:4D:2D:8E:AB:41:26:08:30:88:33:B5:7F:6F:16:F2:E8 X509v3 Authority Key Identifier: keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d7:b6:ba:bf:55:1d:69:3d:53:f5:50:61:77:d0:a8:aa:28: 52:d0:98:48:79:3d:bd:d8:b2:81:90:9b:26:26:43:45:3e:b7: 45:2d:bf:40:49:3a:53:47:51:a3:fa:04:45:fa:19:99:0e:65: 30:87:a4:fc:c0:26:c8:38:3d:76:32:6c:08:f8:fe:27:b6:27: f0:82:55:19:4e:26:51:03:3e:10:88:e6:57:4e:07:b4:4c:0c: 06:ee:ce:b5:02:de:bc:23:a6:72:09:6e:22:5d:5c:ea:6e:b7: 01:6f:0e:23:9f:90:60:8d:b6:77:29:51:7a:78:25:87:b4:c9: d5:79:f9:7e:f2:34:72:65:a7:07:63:bc:16:f6:d8:0e:90:1a: 09:05:70:68:2e:f6:e3:e6:c6:1c:bc:1d:78:2a:1f:18:79:8c: 89:6d:12:77:cd:d3:cb:87:62:08:ac:63:31:3a:f8:c6:7d:42: 71:bb:16:4c:79:1e:e0:67:96:c4:d7:ad:f5:a6:c3:3a:d3:dc: 7f:fe:56:79:92:04:dd:30:ca:8c:9a:4c:44:f4:9c:af:06:25: b0:4f:9d:80:f9:2c:e7:82:8f:1f:fd:46:f9:e2:6f:5a:cd:5f: de:02:86:f4:be:88:22:87:5e:fa:5f:bd:44:02:a2:2b:b0:83: 1e:30:7f:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNbYXTvV57Tckg3WC2kZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NDc4NTUwMDY4YmY3ODIyMDQwOGMyNWQ2MTJiYzJmYjAy NDYwYzEwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD EygxZDQ0ODljYjRkMmQ4ZWFiNDEyNjA4MzA4ODMzYjU3ZjZmMTZmMmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzxS5jP/MuNfNzuoxD3BbY8jLceE +UPiEZzSBQx8hE7ot24P7ywlmsJXIO+Mdfi0nUiuho6it5Q/+WhOVgY16XGS+R7C h55+ztcrCxeu28fa4Sdg2d8SC85w5Kv45EhKOq7iT0a+Djkg2j1wGLvZYMRCG7qc KxEbwI/G2QGqTY8kHymH7QSTOV4KJb3Kmk1a6Onhy4E2CtRXafAOuInwjzO3SdrY UF61OvqpGppfPKDuU1agyERkzEwmCrDsq9cse9VA8J3Cd3HgnIYGhHxEhTPA6+Vp J2OgY0rKhLuew1R5LqA574tUUrVDtPjGSst2Sf4AuuEIlftU0CpRjgwFiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1EictNLY6rQSYIMIgztX9vFvLoMB8GA1UdIwQY MBaAFOdHhVAGi/eCIECMJdYSvC+wJGDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzkt N2RhM2NkMjUzYmY2LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzktN2RhM2NkMjUzYmY2 LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNe2ur9V HWk9U/VQYXfQqKooUtCYSHk9vdiygZCbJiZDRT63RS2/QEk6U0dRo/oERfoZmQ5l MIek/MAmyDg9djJsCPj+J7Yn8IJVGU4mUQM+EIjmV04HtEwMBu7OtQLevCOmcglu Il1c6m63AW8OI5+QYI22dylRenglh7TJ1Xn5fvI0cmWnB2O8FvbYDpAaCQVwaC72 4+bGHLwdeCofGHmMiW0Sd83Ty4diCKxjMTr4xn1CcbsWTHke4GeWxNet9abDOtPc f/5WeZIE3TDKjJpMRPScrwYlsE+dgPks54KPH/1G+eJvWs1f3gKG9L6IIode+l+9 RAKiK7CDHjB/iA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:01 2025 by rpki-client