This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft File: 50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json) Hash identifier: 1iye/H90SljMLBnMgk0MSgLVgPNHNIeM+zyqksXfGWo= Subject key identifier: 9A:5E:3C:F1:07:1B:D4:24:26:E7:0F:CE:BC:B3:CE:84:54:8B:7B:82 Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0 Certificate issuer: /CN=e74ba5e734cff3506814162545566e331c724bc0 Certificate serial: 019B424A0F6FA6FC5896BC72EB9B13653E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft Manifest number: 1038 Signing time: Sun 21 Dec 2025 19:01:48 +0000 Manifest this update: Sun 21 Dec 2025 19:01:48 +0000 Manifest next update: Mon 22 Dec 2025 19:01:48 +0000 Files and hashes: 1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: 9wfqkm98J9Qnl8NPEem2ZN5M+Du68sEi614+ctHeOMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:0f:6f:a6:fc:58:96:bc:72:eb:9b:13:65:3e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0 Validity Not Before: Dec 21 19:01:48 2025 GMT Not After : Dec 22 19:01:48 2025 GMT Subject: CN=9a5e3cf1071bd42426e70fcebcb3ce84548b7b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:9b:2b:39:84:c4:62:73:d4:22:aa:cd:3c: 90:1c:3d:9e:e3:58:73:82:d6:1e:0c:01:64:e6:2d: d6:b5:75:56:4c:a5:2d:52:da:ae:36:31:6c:f2:86: 68:33:7b:6f:13:ee:68:55:99:bf:09:7c:06:4f:72: 3c:70:4a:6d:d5:8c:2c:e1:b9:6b:19:6f:8c:3f:fc: d7:d7:3d:8c:72:b4:2e:bf:61:80:68:01:3e:eb:e9: a1:d2:54:65:11:19:bd:50:d4:dd:12:dc:0d:2c:90: 77:46:0f:eb:6e:a6:32:6c:42:48:9c:76:a7:a6:12: 22:18:b1:62:93:4a:e6:36:97:75:45:48:16:9e:ff: 2c:09:f6:d4:65:6f:5c:36:75:cd:11:14:68:07:49: ba:73:ad:14:8d:36:16:76:a8:aa:31:9c:9d:ec:69: 62:09:c1:b2:34:88:ba:16:57:2e:79:e5:a3:a7:1c: 03:e3:68:83:be:13:4f:69:be:a2:19:3e:d0:5b:25: 8e:62:ee:49:c8:82:38:6f:65:fb:6d:34:22:b9:08: 6e:f5:ab:23:48:d4:56:77:77:e5:49:b9:57:22:be: 12:85:6b:8e:47:1f:d6:2e:aa:ec:32:74:3f:c0:50: 26:39:e6:42:00:45:2b:d1:ce:13:02:92:7f:e5:93: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5E:3C:F1:07:1B:D4:24:26:E7:0F:CE:BC:B3:CE:84:54:8B:7B:82 X509v3 Authority Key Identifier: keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9e:67:03:85:6c:23:97:df:df:32:d4:d5:bc:e3:20:97:40: 86:81:fa:3b:32:99:d3:dd:1f:b3:e3:25:d3:cc:04:96:0a:a5: f4:a7:35:8e:3a:44:3a:71:b7:5d:39:84:e2:59:e4:23:a4:ee: f1:94:af:14:8f:01:3c:32:e1:3f:2b:88:3c:70:9c:28:27:9a: 3c:b2:0c:23:32:13:f2:1a:ad:aa:d6:60:6c:54:e2:20:42:f7: ab:5d:cb:34:27:b7:c0:14:16:98:74:85:0d:2d:f6:7c:ca:22: 32:f8:be:aa:16:5f:ed:f1:d8:7e:66:fc:6d:23:fd:a4:24:91: 9c:36:18:ab:e6:22:3a:97:71:06:ba:e2:93:fa:b0:96:c5:96: ec:9b:f0:0a:53:bd:c6:a9:c1:bb:36:b3:47:93:d2:d1:7b:2b: 34:9f:e6:8c:aa:b6:0b:48:24:86:54:28:49:2a:27:50:97:fc: 71:e4:73:88:09:f7:0a:78:56:ed:c3:77:a9:7a:a1:b9:e0:bf: 6a:1e:d1:6b:94:02:f2:a7:89:04:cc:87:1e:21:90:8c:c0:28: d8:7d:1f:64:d4:d8:b8:4a:0e:cc:4e:28:aa:a5:31:d3:b7:f5: 00:f8:bd:24:47:87:90:62:51:bb:5b:39:15:09:64:65:43:bc: 54:93:13:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSg9vpvxYlrxy65sTZT6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NGJhNWU3MzRjZmYzNTA2ODE0MTYyNTQ1NTY2ZTMzMWM3 MjRiYzAwHhcNMjUxMjIxMTkwMTQ4WhcNMjUxMjIyMTkwMTQ4WjAzMTEwLwYDVQQD Eyg5YTVlM2NmMTA3MWJkNDI0MjZlNzBmY2ViY2IzY2U4NDU0OGI3YjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4ebKzmExGJz1CKqzTyQHD2e41hz gtYeDAFk5i3WtXVWTKUtUtquNjFs8oZoM3tvE+5oVZm/CXwGT3I8cEpt1Yws4blr GW+MP/zX1z2McrQuv2GAaAE+6+mh0lRlERm9UNTdEtwNLJB3Rg/rbqYybEJInHan phIiGLFik0rmNpd1RUgWnv8sCfbUZW9cNnXNERRoB0m6c60UjTYWdqiqMZyd7Gli CcGyNIi6FlcueeWjpxwD42iDvhNPab6iGT7QWyWOYu5JyII4b2X7bTQiuQhu9asj SNRWd3flSblXIr4ShWuORx/WLqrsMnQ/wFAmOeZCAEUr0c4TApJ/5ZNAVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpePPEHG9QkJucPzryzzoRUi3uCMB8GA1UdIwQY MBaAFOdLpec0z/NQaBQWJUVWbjMcckvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2Qt YWU1YzI3MmQ0NTQxLzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2QtYWU1YzI3MmQ0NTQx LzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgp5nA4Vs I5ff3zLU1bzjIJdAhoH6OzKZ090fs+Ml08wElgql9Kc1jjpEOnG3XTmE4lnkI6Tu 8ZSvFI8BPDLhPyuIPHCcKCeaPLIMIzIT8hqtqtZgbFTiIEL3q13LNCe3wBQWmHSF DS32fMoiMvi+qhZf7fHYfmb8bSP9pCSRnDYYq+YiOpdxBrrik/qwlsWW7JvwClO9 xqnBuzazR5PS0XsrNJ/mjKq2C0gkhlQoSSonUJf8ceRziAn3CnhW7cN3qXqhueC/ ah7Ra5QC8qeJBMyHHiGQjMAo2H0fZNTYuEoOzE4oqqUx07f1APi9JEeHkGJRu1s5 FQlkZUO8VJMT9Q== -----END CERTIFICATE-----Generated at Mon Dec 22 04:44:48 2025 by rpki-client