This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json) Hash identifier: IDDX68OGs09DAAtrXpGq7+xbJNjddotSCVmvF6yedLg= Subject key identifier: 92:61:E2:9D:44:5A:F5:74:F4:17:5B:61:68:A3:5F:BF:AC:DB:F2:78 Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20 Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20 Certificate serial: 019B2EF91913EB5AD175BB198DB2CE79C3C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft Manifest number: 0C07 Signing time: Thu 18 Dec 2025 01:00:35 +0000 Manifest this update: Thu 18 Dec 2025 01:00:35 +0000 Manifest next update: Fri 19 Dec 2025 01:00:35 +0000 Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: v0kHUYQLP1eoFE1I8qoXmzkx/NFN1iyBBNlx1zj9NOI=) 2: cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa (hash: J7XkWB53jAfy4bD9ukAZFnRAiXvLkNsGXjIsW/vOCx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:19:13:eb:5a:d1:75:bb:19:8d:b2:ce:79:c3:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20 Validity Not Before: Dec 18 01:00:35 2025 GMT Not After : Dec 19 01:00:35 2025 GMT Subject: CN=9261e29d445af574f4175b6168a35fbfacdbf278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:8e:6d:a2:66:af:1f:02:15:31:28:86:72: 39:ed:e0:4b:3e:35:d6:f1:d0:6d:07:0f:50:59:13: 9d:a0:05:4c:75:33:9d:6e:f8:42:db:cd:a6:82:5d: 07:75:c1:0e:18:a9:38:eb:97:ae:4d:fa:e9:31:d3: b7:68:da:8f:8d:1c:e4:14:85:08:48:6a:0c:7d:c8: 22:4e:a4:0c:c0:7d:07:f6:c5:e9:ae:f5:90:52:f7: 50:13:38:61:3f:0c:fb:9d:2d:76:0d:c9:e9:e2:cd: d8:2e:de:61:a5:d6:65:88:2d:5d:1f:04:a8:65:25: 7e:88:db:4c:19:55:d0:4b:ed:aa:da:d6:33:78:19: 94:d7:50:ce:07:f1:10:19:1a:a6:52:3f:2f:66:c0: 65:86:34:ec:e7:5c:18:f2:2d:4b:07:fc:bf:7c:34: d5:7a:20:a7:12:60:bd:dd:37:89:90:6b:10:90:d3: c7:c0:3f:4d:fc:b9:e7:ae:a8:b2:7d:26:d2:8e:ca: f7:4f:92:a6:e4:10:ce:30:a5:e4:fd:fd:67:3d:d2: cb:1d:92:6e:80:50:0b:9f:61:60:a0:1a:ad:e6:17: 98:44:c1:a5:d8:45:f1:34:8a:bd:e1:17:61:83:ab: f9:4c:24:06:c0:70:8a:cc:90:6e:04:3a:d4:fd:1d: c2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:61:E2:9D:44:5A:F5:74:F4:17:5B:61:68:A3:5F:BF:AC:DB:F2:78 X509v3 Authority Key Identifier: keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:53:c4:2a:2b:ae:f6:b7:b7:4b:55:54:f7:da:06:db:3e:f6: c3:3e:7e:c2:87:79:dd:9b:2a:40:66:e4:fe:66:09:3e:d0:d8: ca:64:68:b9:78:d9:b0:3b:0c:55:b9:ad:c4:dd:b2:b0:75:06: 45:16:6c:c6:5b:26:04:63:98:d1:63:ef:b6:c7:ac:c4:13:d6: c3:b0:74:6c:ba:4d:b4:3a:e7:00:aa:5e:aa:d1:af:90:dc:6d: e3:e3:7b:b2:4c:5a:e2:08:f7:2f:20:a1:15:02:f5:79:93:29: 7b:0e:d8:29:fa:12:6e:a6:b0:0c:94:0d:62:f1:57:58:65:0e: 96:de:3b:55:c9:47:0d:c0:61:98:f7:e1:f8:88:d3:3f:cc:31: 03:c0:20:9c:55:c4:d9:aa:68:18:31:32:ee:54:a8:cc:b1:a9: 0a:7a:72:12:25:b8:44:94:dc:f3:1b:04:e9:95:44:40:26:0c: a8:1f:c4:50:30:d7:ce:10:fe:75:bf:d3:58:f4:b5:22:46:76: d3:ce:35:71:be:1c:21:7f:61:97:ad:b5:ad:76:4b:d8:00:ed: 0a:75:34:82:26:39:0c:fa:28:4c:28:f5:fa:d8:25:d0:f1:8f: bd:83:aa:ba:21:bf:56:a5:b5:c2:98:98:c7:d2:8b:0f:3b:fd: 16:b8:62:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+RkT61rRdbsZjbLOecPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZDUxNTk4ODJlNzdhNjdmNzk3ZjhmOGI5OTZiNjJjNGVi YWJjMjAwHhcNMjUxMjE4MDEwMDM1WhcNMjUxMjE5MDEwMDM1WjAzMTEwLwYDVQQD Eyg5MjYxZTI5ZDQ0NWFmNTc0ZjQxNzViNjE2OGEzNWZiZmFjZGJmMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspOObaJmrx8CFTEohnI57eBLPjXW 8dBtBw9QWROdoAVMdTOdbvhC282mgl0HdcEOGKk465euTfrpMdO3aNqPjRzkFIUI SGoMfcgiTqQMwH0H9sXprvWQUvdQEzhhPwz7nS12Dcnp4s3YLt5hpdZliC1dHwSo ZSV+iNtMGVXQS+2q2tYzeBmU11DOB/EQGRqmUj8vZsBlhjTs51wY8i1LB/y/fDTV eiCnEmC93TeJkGsQkNPHwD9N/LnnrqiyfSbSjsr3T5Km5BDOMKXk/f1nPdLLHZJu gFALn2FgoBqt5heYRMGl2EXxNIq94Rdhg6v5TCQGwHCKzJBuBDrU/R3C1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJh4p1EWvV09BdbYWijX7+s2/J4MB8GA1UdIwQY MBaAFOPVFZiC53pn95f4+LmWtixOurwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zMDUyM2ItOGIzYy00NmNiLWFiYmMt ZTEwMTQ3N2VmYjhhLzEvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zMDUyM2ItOGIzYy00NmNiLWFiYmMtZTEwMTQ3N2VmYjhh LzEvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1PEKiuu 9re3S1VU99oG2z72wz5+wod53ZsqQGbk/mYJPtDYymRouXjZsDsMVbmtxN2ysHUG RRZsxlsmBGOY0WPvtsesxBPWw7B0bLpNtDrnAKpeqtGvkNxt4+N7skxa4gj3LyCh FQL1eZMpew7YKfoSbqawDJQNYvFXWGUOlt47VclHDcBhmPfh+IjTP8wxA8AgnFXE 2apoGDEy7lSozLGpCnpyEiW4RJTc8xsE6ZVEQCYMqB/EUDDXzhD+db/TWPS1IkZ2 0841cb4cIX9hl621rXZL2ADtCnU0giY5DPooTCj1+tgl0PGPvYOquiG/VqW1wpiY x9KLDzv9FrhiUA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:46:54 2025 by rpki-client