This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft File: 50Du0o8tmU6yuDHLjvxkcDBtdGE.mft (raw, json) Hash identifier: 3o3lkD5hSiSBZrqexBoAAfWjiX6zwOLIUACYOQ6btBQ= Subject key identifier: 55:F8:8B:DF:81:2B:7B:3D:89:13:E5:79:75:2B:4A:E3:45:85:11:3B Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61 Certificate issuer: /CN=e740eed28f2d994eb2b831cb8efc6470306d7461 Certificate serial: 019AF208DB6862FC3867F5605D9EF13665B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft Manifest number: 0F77 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: 50Du0o8tmU6yuDHLjvxkcDBtdGE.crl (hash: wqRX6C9c/b5A+WcMxxzbha+AMblHdqkhZd6d6h09aUk=) 2: nIb9hACkrzkR8YbAdKP9wDLbBJc.roa (hash: GZXAKYA4rdv87pCnOscB54KXgGj+TJ2DGRrncRH4Kpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:db:68:62:fc:38:67:f5:60:5d:9e:f1:36:65:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=55f88bdf812b7b3d8913e579752b4ae34585113b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:24:11:29:a1:1d:2a:f4:f4:75:a7:cf:d1: 24:ba:54:57:8b:c8:49:ac:60:61:10:a7:0e:c9:7d: e9:b5:c0:40:e3:f4:2f:75:65:61:f1:2e:cf:91:78: 79:b0:36:cd:aa:28:f1:7f:ec:5a:cd:5e:51:50:fc: 37:b0:9c:bc:1e:eb:a5:5a:51:ff:7a:6f:f7:b7:ea: c0:09:e1:9b:2c:c6:66:4a:e1:61:cd:69:8a:a2:0e: b5:f8:96:d5:ea:22:96:31:f1:af:c2:c6:a6:1b:d3: 5f:aa:3f:85:fd:b9:b5:7a:70:61:01:cf:45:41:e8: 68:4d:48:aa:cc:42:ef:0e:30:1c:c5:b9:53:74:33: e1:bf:69:ad:b9:a4:50:5e:42:bb:59:87:29:f6:14: 13:96:6a:7b:f9:64:f7:f6:13:c8:0e:4d:21:91:0c: 9f:92:d9:4a:2f:f4:8e:6a:ff:f5:51:13:22:95:b2: 4e:78:80:6a:b3:0c:c1:eb:12:6e:91:28:d2:32:d7: 02:9c:c0:fd:83:00:0e:50:ae:00:69:9d:d5:65:ae: cf:18:d1:91:53:b2:75:c4:2b:15:e9:aa:b2:1e:cf: 5e:36:75:e5:ff:00:eb:5c:d5:df:7a:47:d5:c4:fa: 45:13:d0:b6:19:22:c2:c0:cc:4a:a1:8f:6d:32:14: ef:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F8:8B:DF:81:2B:7B:3D:89:13:E5:79:75:2B:4A:E3:45:85:11:3B X509v3 Authority Key Identifier: keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0e:9b:9f:a2:fd:7c:8b:ca:3f:90:06:b8:09:1e:a6:75:4e: 81:b4:ab:b4:11:2b:dd:49:fd:51:c1:47:81:14:70:e9:fe:54: 92:3d:49:32:12:68:b1:f0:42:b3:5d:78:00:58:a6:97:9f:fb: 38:f3:7f:2d:e2:36:d0:b2:2b:20:00:c1:2c:f2:81:6f:63:85: 18:bb:17:7c:ab:43:4b:af:0b:ce:0d:55:03:73:92:51:4e:44: 46:14:a3:36:b1:5e:ea:0c:c6:a1:0b:53:03:01:4f:47:bd:bd: b6:92:bf:76:45:78:9d:ba:bc:ac:06:e4:5a:8f:86:4f:4f:33: 47:b0:08:27:b3:88:4f:d6:3b:9d:24:98:26:9d:74:c0:04:04: 18:f5:a0:d5:a3:37:81:7f:73:00:27:c5:7b:27:e3:db:24:da: 05:64:86:1d:1d:79:57:55:4d:de:88:4a:8d:e3:d4:46:18:0e: e7:8c:83:fd:df:1c:13:8b:57:53:3c:91:fe:fc:fe:af:42:2a: da:7f:e7:1a:be:df:34:17:ff:65:dd:24:f5:d8:20:c2:f1:0b: 95:24:0a:2c:b0:96:d6:e9:35:c5:36:14:f3:fc:48:83:e0:84: a7:ce:6f:b9:49:3a:49:42:e2:dc:bc:6d:2b:e7:41:24:3d:97: 17:dd:3a:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNtoYvw4Z/VgXZ7xNmW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NDBlZWQyOGYyZDk5NGViMmI4MzFjYjhlZmM2NDcwMzA2 ZDc0NjEwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD Eyg1NWY4OGJkZjgxMmI3YjNkODkxM2U1Nzk3NTJiNGFlMzQ1ODUxMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIQkESmhHSr09HWnz9EkulRXi8hJ rGBhEKcOyX3ptcBA4/QvdWVh8S7PkXh5sDbNqijxf+xazV5RUPw3sJy8HuulWlH/ em/3t+rACeGbLMZmSuFhzWmKog61+JbV6iKWMfGvwsamG9Nfqj+F/bm1enBhAc9F QehoTUiqzELvDjAcxblTdDPhv2mtuaRQXkK7WYcp9hQTlmp7+WT39hPIDk0hkQyf ktlKL/SOav/1URMilbJOeIBqswzB6xJukSjSMtcCnMD9gwAOUK4AaZ3VZa7PGNGR U7J1xCsV6aqyHs9eNnXl/wDrXNXfekfVxPpFE9C2GSLCwMxKoY9tMhTv6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFX4i9+BK3s9iRPleXUrSuNFhRE7MB8GA1UdIwQY MBaAFOdA7tKPLZlOsrgxy478ZHAwbXRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTBEdTBvOHRtVTZ5dURITGp2eGtjREJ0ZEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80ZDIwMGQtZWFlNS00NGRhLThlZTMt MDk1OTVlOWNkNmMyLzEvNTBEdTBvOHRtVTZ5dURITGp2eGtjREJ0ZEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy80ZDIwMGQtZWFlNS00NGRhLThlZTMtMDk1OTVlOWNkNmMy LzEvNTBEdTBvOHRtVTZ5dURITGp2eGtjREJ0ZEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACw6bn6L9 fIvKP5AGuAkepnVOgbSrtBEr3Un9UcFHgRRw6f5Ukj1JMhJosfBCs114AFiml5/7 OPN/LeI20LIrIADBLPKBb2OFGLsXfKtDS68Lzg1VA3OSUU5ERhSjNrFe6gzGoQtT AwFPR729tpK/dkV4nbq8rAbkWo+GT08zR7AIJ7OIT9Y7nSSYJp10wAQEGPWg1aM3 gX9zACfFeyfj2yTaBWSGHR15V1VN3ohKjePURhgO54yD/d8cE4tXUzyR/vz+r0Iq 2n/nGr7fNBf/Zd0k9dggwvELlSQKLLCW1uk1xTYU8/xIg+CEp85vuUk6SULi3Lxt K+dBJD2XF906+g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:50 2025 by rpki-client