This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft File: 50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json) Hash identifier: qwDiMV0BoppkqZAllI69NpM0apcP47gUXe4sX1yWFLU= Subject key identifier: 77:84:32:36:3D:22:8E:4B:3C:95:A1:47:2E:40:90:C0:CB:6A:46:E8 Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0 Certificate issuer: /CN=e74ba5e734cff3506814162545566e331c724bc0 Certificate serial: 019AF509E5EF24FF3D4B39FDAB358F6B36C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft Manifest number: 1010 Signing time: Sat 06 Dec 2025 19:00:57 +0000 Manifest this update: Sat 06 Dec 2025 19:00:57 +0000 Manifest next update: Sun 07 Dec 2025 19:00:57 +0000 Files and hashes: 1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: Xsg8Zig/8SpUwn+fbD1CfFfw/SNgm3Jq1Pff/859GdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:e5:ef:24:ff:3d:4b:39:fd:ab:35:8f:6b:36:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0 Validity Not Before: Dec 6 19:00:57 2025 GMT Not After : Dec 7 19:00:57 2025 GMT Subject: CN=778432363d228e4b3c95a1472e4090c0cb6a46e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:8f:bf:73:a2:95:48:b3:75:39:c3:4c:e2: d7:c8:9a:8b:d0:0c:f8:99:71:e9:40:52:a7:4e:45: 2a:b5:d1:93:7f:b0:dd:a3:15:5e:fe:b6:8c:a1:f0: d1:7b:fe:e1:41:61:10:da:30:fc:65:cd:94:25:e0: 16:2f:ab:01:70:58:c8:4e:4f:89:04:a3:61:eb:44: 0d:a8:63:37:83:ea:26:25:de:9f:d4:f5:e5:f9:da: 73:9a:6f:de:22:12:af:af:d4:24:c3:14:75:99:dc: eb:fa:ca:c5:ad:7f:72:94:55:07:6d:f6:ea:be:cb: 2c:ee:9a:49:c8:1d:8d:53:f1:c4:9a:f0:6f:ea:9d: b9:4c:5b:b6:ad:29:41:d9:d2:c1:83:c9:c4:61:02: ac:36:55:05:e5:41:d0:cf:9c:61:6a:d4:68:e1:f7: 18:d0:3d:e5:dd:b9:f0:30:0c:ba:3e:fe:4f:ca:36: df:7c:3d:9c:5f:e1:79:45:ad:9c:68:5a:2d:57:ba: 41:c8:7a:77:60:56:be:ee:13:d2:98:98:51:ff:8b: 62:39:1c:5f:09:00:4f:c1:e2:8b:0d:cf:49:f4:f1: 32:0c:d9:66:37:0d:87:2d:93:0f:0c:73:00:11:d1: 56:e0:a8:23:41:44:23:3c:1f:76:c9:1f:6a:b6:18: dd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:84:32:36:3D:22:8E:4B:3C:95:A1:47:2E:40:90:C0:CB:6A:46:E8 X509v3 Authority Key Identifier: keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:36:ce:f3:ac:08:3c:98:b0:44:00:73:e4:dc:a6:ed:2b:08: e4:9f:e9:bc:4c:df:34:cd:8a:7e:77:c3:3a:3e:bb:48:da:8f: 9a:1e:e9:9f:95:cb:ad:68:c3:95:a3:3a:09:8b:e1:2f:16:0c: 53:2e:7e:c1:e8:51:ea:db:88:76:47:3a:5a:8b:1f:0c:27:12: 20:06:3d:e3:84:29:08:95:19:9b:d0:a0:4e:6c:01:48:36:23: 1f:81:85:23:d7:54:44:f5:27:4b:b6:3a:42:b0:0c:48:c3:83: b0:5a:4b:cc:30:6c:2c:5b:bd:82:90:77:d1:25:ee:48:d0:da: 30:cc:eb:62:07:84:08:39:04:7c:66:90:66:4d:74:62:d9:3c: da:f9:30:98:46:d1:93:11:5b:6a:c0:66:e4:fd:46:aa:c4:18: 6e:99:cd:f4:13:95:e1:f1:70:65:25:e8:0d:3f:7e:c2:1a:f3: fe:ec:92:77:f3:4d:33:1c:b5:3a:f6:6e:c0:94:6a:dc:ef:75: 63:ce:69:7e:d0:2a:d6:51:36:f4:27:08:b1:cc:22:de:6d:96: bb:40:9e:81:c6:71:fe:c7:b2:17:35:29:93:83:70:b3:46:9c: c5:2a:9e:b1:0e:86:58:e4:c5:26:36:cb:d9:41:dc:03:9a:50: 15:e1:a5:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CeXvJP89Szn9qzWPazbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NGJhNWU3MzRjZmYzNTA2ODE0MTYyNTQ1NTY2ZTMzMWM3 MjRiYzAwHhcNMjUxMjA2MTkwMDU3WhcNMjUxMjA3MTkwMDU3WjAzMTEwLwYDVQQD Eyg3Nzg0MzIzNjNkMjI4ZTRiM2M5NWExNDcyZTQwOTBjMGNiNmE0NmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFiPv3OilUizdTnDTOLXyJqL0Az4 mXHpQFKnTkUqtdGTf7DdoxVe/raMofDRe/7hQWEQ2jD8Zc2UJeAWL6sBcFjITk+J BKNh60QNqGM3g+omJd6f1PXl+dpzmm/eIhKvr9QkwxR1mdzr+srFrX9ylFUHbfbq vsss7ppJyB2NU/HEmvBv6p25TFu2rSlB2dLBg8nEYQKsNlUF5UHQz5xhatRo4fcY 0D3l3bnwMAy6Pv5PyjbffD2cX+F5Ra2caFotV7pByHp3YFa+7hPSmJhR/4tiORxf CQBPweKLDc9J9PEyDNlmNw2HLZMPDHMAEdFW4KgjQUQjPB92yR9qthjduwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeEMjY9Io5LPJWhRy5AkMDLakboMB8GA1UdIwQY MBaAFOdLpec0z/NQaBQWJUVWbjMcckvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2Qt YWU1YzI3MmQ0NTQxLzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2QtYWU1YzI3MmQ0NTQx LzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDbO86wI PJiwRABz5Nym7SsI5J/pvEzfNM2KfnfDOj67SNqPmh7pn5XLrWjDlaM6CYvhLxYM Uy5+wehR6tuIdkc6WosfDCcSIAY944QpCJUZm9CgTmwBSDYjH4GFI9dURPUnS7Y6 QrAMSMODsFpLzDBsLFu9gpB30SXuSNDaMMzrYgeECDkEfGaQZk10Ytk82vkwmEbR kxFbasBm5P1GqsQYbpnN9BOV4fFwZSXoDT9+whrz/uySd/NNMxy1OvZuwJRq3O91 Y85pftAq1lE29CcIscwi3m2Wu0CegcZx/seyFzUpk4Nws0acxSqesQ6GWOTFJjbL 2UHcA5pQFeGlJQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:28 2025 by rpki-client