This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft File: 500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json) Hash identifier: RRXlF5LvEBovP1PYnsMNBAbVm314LXoKUIVVYRXPN/Q= Subject key identifier: 51:30:80:CB:4E:48:48:F6:8B:47:64:E3:01:68:22:16:22:1A:5D:55 Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d Certificate serial: 019AF277364AD4964F6803010E2235CA78F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft Manifest number: 110C Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 07:01:30 +0000 Manifest next update: Sun 07 Dec 2025 07:01:30 +0000 Files and hashes: 1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: 4K9rQaffwNBTv54YxLjHA+w0op4QWGcyhUUo3fj89I0=) 2: BBc69UDcCnvJ9YXOkYKIegaNiDE.roa (hash: u/teCtCSqk7whi20Ul6NWhHZ26QmJCDD43T9Guz4eqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:36:4a:d4:96:4f:68:03:01:0e:22:35:ca:78:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d Validity Not Before: Dec 6 07:01:30 2025 GMT Not After : Dec 7 07:01:30 2025 GMT Subject: CN=513080cb4e4848f68b4764e301682216221a5d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a4:4b:b7:2e:80:e7:60:cd:15:e6:b8:fa:4b: 22:5e:10:07:b7:90:f0:b1:00:1f:35:1e:2b:18:63: 27:0e:e1:4c:b1:a1:45:90:57:9c:38:45:cb:14:4c: 62:9a:67:c9:d2:c7:16:4d:17:2b:aa:11:6c:9a:42: b6:75:66:43:3c:50:a4:a7:8d:80:5c:48:a1:55:2f: f0:1d:1e:f5:78:b5:1c:8b:23:16:d8:65:d1:3c:a0: 04:61:9f:f8:d3:f7:2b:e4:75:ca:89:94:c5:f3:f1: d6:2f:f0:35:c2:eb:a9:4e:4a:9d:02:1e:0d:d5:f6: 9c:c3:7b:55:1c:45:88:02:b7:46:10:9c:80:69:56: e1:07:11:e4:10:88:70:0a:61:21:41:19:12:5f:f4: 19:3c:9f:2e:33:a0:b2:63:b8:4a:92:5c:4b:04:f1: 89:7f:73:85:a0:b5:91:cf:08:cd:d4:2c:93:54:af: c6:9f:af:3f:69:b6:d7:7b:e7:3c:0c:37:92:a5:ac: 0e:de:8b:11:64:fa:8d:f6:8e:c0:d7:f3:33:d2:1c: fd:60:d1:dd:21:fd:e4:52:c8:8c:3e:b9:21:b3:07: d0:e5:3e:59:7d:85:ed:8e:bc:59:4d:a8:3f:6f:6c: a5:1c:1f:ba:ec:d8:94:59:bb:0a:5a:96:78:11:69: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:30:80:CB:4E:48:48:F6:8B:47:64:E3:01:68:22:16:22:1A:5D:55 X509v3 Authority Key Identifier: keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:4f:8d:ae:09:2f:cc:0d:70:3f:70:17:f2:eb:a1:02:c8:a3: be:52:80:33:ca:aa:bf:2d:d4:9e:12:fe:8a:a8:82:21:3a:b0: 69:0e:c5:d5:a1:ae:bd:d2:ff:40:9d:ce:40:52:d4:f9:98:96: dd:df:9e:71:29:fc:4a:7b:40:42:ef:23:3b:34:74:b8:9e:ff: a6:72:43:0b:e1:61:33:7e:31:af:d3:3d:71:06:f9:dc:73:ae: 99:6b:ea:9c:c9:2a:89:39:89:8a:73:fa:b0:d5:5c:0e:c7:41: c0:57:07:01:bd:c9:ed:82:93:61:e8:63:e1:fe:06:02:24:93: 82:08:e8:a3:fe:bf:bf:cc:9e:1a:32:88:ff:e9:2b:43:4e:b7: 41:d9:25:f2:8b:d5:15:f9:10:74:93:bc:fb:4f:cd:9a:de:8e: d5:89:0f:f0:70:7c:19:49:9e:5f:b6:72:61:08:19:58:91:b0: 56:aa:c4:92:3c:2e:d5:0d:14:b2:42:4f:29:4b:e3:bf:31:07: c7:d0:5d:ef:c1:4c:33:1c:16:64:36:0e:22:bb:ac:91:37:9e: 2b:90:d9:53:fd:f9:71:10:24:24:4e:dd:2e:9b:70:d9:9e:24: 1a:81:16:cc:07:cf:6b:6f:37:d8:93:d7:d5:9d:e6:84:5a:84: 63:db:b4:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzZK1JZPaAMBDiI1ynjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NGQzZTVkOTk0YmVjZDNmMjU4YzQxZGYzOWYxZjYzZWM1 NjNlMWQwHhcNMjUxMjA2MDcwMTMwWhcNMjUxMjA3MDcwMTMwWjAzMTEwLwYDVQQD Eyg1MTMwODBjYjRlNDg0OGY2OGI0NzY0ZTMwMTY4MjIxNjIyMWE1ZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06RLty6A52DNFea4+ksiXhAHt5Dw sQAfNR4rGGMnDuFMsaFFkFecOEXLFEximmfJ0scWTRcrqhFsmkK2dWZDPFCkp42A XEihVS/wHR71eLUciyMW2GXRPKAEYZ/40/cr5HXKiZTF8/HWL/A1wuupTkqdAh4N 1facw3tVHEWIArdGEJyAaVbhBxHkEIhwCmEhQRkSX/QZPJ8uM6CyY7hKklxLBPGJ f3OFoLWRzwjN1CyTVK/Gn68/abbXe+c8DDeSpawO3osRZPqN9o7A1/Mz0hz9YNHd If3kUsiMPrkhswfQ5T5ZfYXtjrxZTag/b2ylHB+67NiUWbsKWpZ4EWn5BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEwgMtOSEj2i0dk4wFoIhYiGl1VMB8GA1UdIwQY MBaAFOdNPl2ZS+zT8ljEHfOfH2PsVj4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTAwLVhabEw3TlB5V01RZDg1OGZZLXhXUGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80MmUyNGMtMjFmNS00NDFmLWI2YmMt YzIzZDdhZGJlYmRjLzEvNTAwLVhabEw3TlB5V01RZDg1OGZZLXhXUGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC80MmUyNGMtMjFmNS00NDFmLWI2YmMtYzIzZDdhZGJlYmRj LzEvNTAwLVhabEw3TlB5V01RZDg1OGZZLXhXUGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdE+Nrgkv zA1wP3AX8uuhAsijvlKAM8qqvy3UnhL+iqiCITqwaQ7F1aGuvdL/QJ3OQFLU+ZiW 3d+ecSn8SntAQu8jOzR0uJ7/pnJDC+FhM34xr9M9cQb53HOumWvqnMkqiTmJinP6 sNVcDsdBwFcHAb3J7YKTYehj4f4GAiSTggjoo/6/v8yeGjKI/+krQ063Qdkl8ovV FfkQdJO8+0/Nmt6O1YkP8HB8GUmeX7ZyYQgZWJGwVqrEkjwu1Q0UskJPKUvjvzEH x9Bd78FMMxwWZDYOIruskTeeK5DZU/35cRAkJE7dLptw2Z4kGoEWzAfPa2832JPX 1Z3mhFqEY9u0aQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:12 2025 by rpki-client