This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json) Hash identifier: +qnyDUaJOsh0PhKNlTt4CRrpCMfUFMyRfbMuDcrs9NI= Subject key identifier: 4D:CC:B2:0F:0C:23:60:CD:65:65:7E:E2:47:0B:F7:84:19:82:2A:E7 Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84 Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184 Certificate serial: 019AF5E59D7BCF2597BEF93A664941FDE180 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft Manifest number: 0186 Signing time: Sat 06 Dec 2025 23:00:57 +0000 Manifest this update: Sat 06 Dec 2025 23:00:57 +0000 Manifest next update: Sun 07 Dec 2025 23:00:57 +0000 Files and hashes: 1: ZQjPC2fpyT-Vvc_kqiwp7b7rczY.roa (hash: WGoaZKgovkzunqobaBY3s+Zo6C38U50g1kvmNlqSsZ0=) 2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: BzH+AFUa1LvFLnM8RBL99WZuU5TSATuilGLKdRUnWy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:9d:7b:cf:25:97:be:f9:3a:66:49:41:fd:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184 Validity Not Before: Dec 6 23:00:57 2025 GMT Not After : Dec 7 23:00:57 2025 GMT Subject: CN=4dccb20f0c2360cd65657ee2470bf78419822ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:0e:6b:56:c8:4c:d0:9d:25:5f:9e:9b:35: 2b:23:64:53:85:31:22:7c:6c:7a:d9:55:a3:c1:69: 88:0e:99:96:3d:30:82:8a:73:69:76:72:35:36:b1: 83:fa:d8:2d:e3:86:14:00:63:d3:4a:d5:8b:b3:7d: 5a:9a:39:76:e7:16:10:75:56:bb:6f:cb:83:94:54: 2e:01:2f:66:00:4f:df:d7:0f:6e:c0:c4:e7:00:42: e0:49:ed:7e:a5:34:27:2e:c5:86:f2:27:20:e2:4e: 8a:0a:b7:f0:62:58:75:3a:ac:c4:c4:48:6a:e0:11: 66:83:47:d5:5f:7f:be:d6:fd:30:cc:4f:46:44:6a: f6:8a:0f:cd:84:2d:f9:33:d5:36:8d:8f:6b:b9:70: 84:5c:34:a5:67:74:5f:41:c7:0c:89:4d:7c:5f:8d: 80:ac:7e:0a:d4:3a:a0:57:7b:80:27:9f:ce:85:83: 23:78:14:2f:c6:23:87:21:25:49:9a:4d:42:4f:fa: d5:d7:a9:0e:b5:46:f0:0d:d2:f7:99:c4:d6:63:14: 2c:d4:75:a1:c8:1a:7f:3e:9c:a5:2b:e1:32:fc:e6: c1:57:d8:63:82:6b:e6:86:3e:72:c6:98:9d:84:bd: f6:50:fc:7d:3e:1e:bf:a0:dd:cb:6f:4c:75:0e:5d: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CC:B2:0F:0C:23:60:CD:65:65:7E:E2:47:0B:F7:84:19:82:2A:E7 X509v3 Authority Key Identifier: keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:a4:24:a8:f9:79:5a:67:49:7f:91:50:94:35:ff:26:8e:2f: 6b:d7:b2:73:df:a4:07:65:5b:61:0c:8c:24:5a:94:09:82:40: 62:ac:f4:2c:80:b5:14:30:05:ed:34:17:90:c7:da:66:e8:2b: af:cd:a3:62:82:1b:20:e3:70:8e:5e:12:9e:ef:4d:7c:07:0f: 0e:26:cd:51:86:b4:f8:aa:6a:b1:82:76:42:34:d3:43:c1:e3: 5b:5f:c5:09:03:d3:b0:80:4d:02:b5:5f:99:fe:78:a4:9b:c3: 26:f4:3c:55:c1:5e:e2:44:9b:67:c9:b2:27:ad:f5:61:d0:10: fe:00:9e:ce:95:8c:3d:05:83:fc:de:7a:8a:ad:66:b4:63:22: 43:82:74:64:38:2f:32:fe:62:82:d9:1a:57:66:60:7d:85:52: f1:8d:7e:60:c1:c6:6e:48:c7:a6:40:2e:08:5e:2d:85:9d:3c: f7:7b:cd:c5:45:4f:40:e8:b7:1f:57:6d:7e:59:00:50:64:af: 73:b7:51:d0:cf:5b:e0:c4:33:34:48:56:8b:32:c1:20:47:50: 53:f7:49:16:dd:d2:08:32:79:82:b4:6f:c4:b2:92:41:00:2d: 24:d3:fc:44:7a:50:b5:c4:8f:1f:9c:75:80:5b:be:bb:1e:7c: 1a:6f:d5:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15Z17zyWXvvk6ZklB/eGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OWQxMzY2NGEzNzlkOGI1ZGFkZjc2M2RkMDRmNTExNWUw MjMxODQwHhcNMjUxMjA2MjMwMDU3WhcNMjUxMjA3MjMwMDU3WjAzMTEwLwYDVQQD Eyg0ZGNjYjIwZjBjMjM2MGNkNjU2NTdlZTI0NzBiZjc4NDE5ODIyYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxAOa1bITNCdJV+emzUrI2RThTEi fGx62VWjwWmIDpmWPTCCinNpdnI1NrGD+tgt44YUAGPTStWLs31amjl25xYQdVa7 b8uDlFQuAS9mAE/f1w9uwMTnAELgSe1+pTQnLsWG8icg4k6KCrfwYlh1OqzExEhq 4BFmg0fVX3++1v0wzE9GRGr2ig/NhC35M9U2jY9ruXCEXDSlZ3RfQccMiU18X42A rH4K1DqgV3uAJ5/OhYMjeBQvxiOHISVJmk1CT/rV16kOtUbwDdL3mcTWYxQs1HWh yBp/PpylK+Ey/ObBV9hjgmvmhj5yxpidhL32UPx9Ph6/oN3Lb0x1Dl2FcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3Msg8MI2DNZWV+4kcL94QZgirnMB8GA1UdIwQY MBaAFMedE2ZKN52LXa33Y90E9RFeAjGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2Mjgt Mjg4NDI1MjljN2ExLzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2MjgtMjg4NDI1MjljN2Ex LzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6QkqPl5 WmdJf5FQlDX/Jo4va9eyc9+kB2VbYQyMJFqUCYJAYqz0LIC1FDAF7TQXkMfaZugr r82jYoIbIONwjl4Snu9NfAcPDibNUYa0+KpqsYJ2QjTTQ8HjW1/FCQPTsIBNArVf mf54pJvDJvQ8VcFe4kSbZ8myJ631YdAQ/gCezpWMPQWD/N56iq1mtGMiQ4J0ZDgv Mv5igtkaV2ZgfYVS8Y1+YMHGbkjHpkAuCF4thZ0893vNxUVPQOi3H1dtflkAUGSv c7dR0M9b4MQzNEhWizLBIEdQU/dJFt3SCDJ5grRvxLKSQQAtJNP8RHpQtcSPH5x1 gFu+ux58Gm/Vkg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:58:57 2025 by rpki-client