This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft File: 49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json) Hash identifier: L5drRMWkJCi2gLgZGDVDHdFf1nnNO4SODrIPiAUJg2g= Subject key identifier: 4D:D3:10:EC:C6:36:45:C1:5B:A6:83:92:EC:3A:CB:D2:B3:C1:96:75 Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20 Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20 Certificate serial: 019B3C7DD02AFD5021624B924DA7335D1946 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft Manifest number: 0C0E Signing time: Sat 20 Dec 2025 16:00:36 +0000 Manifest this update: Sat 20 Dec 2025 16:00:36 +0000 Manifest next update: Sun 21 Dec 2025 16:00:36 +0000 Files and hashes: 1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: Prd35cm4xNg/zDptywCgRktRy8Al/ozW9EAIvfbddv4=) 2: cZFUFzEKgC-gv5r0QzjC3ajp5aE.roa (hash: J7XkWB53jAfy4bD9ukAZFnRAiXvLkNsGXjIsW/vOCx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:d0:2a:fd:50:21:62:4b:92:4d:a7:33:5d:19:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20 Validity Not Before: Dec 20 16:00:36 2025 GMT Not After : Dec 21 16:00:36 2025 GMT Subject: CN=4dd310ecc63645c15ba68392ec3acbd2b3c19675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:5a:1a:f4:f3:9f:0e:ac:5e:ce:d3:9a:87: 51:4e:c6:78:4c:53:45:2a:3f:16:ed:77:59:71:0d: 9a:49:7b:3c:46:d5:11:1e:3c:62:43:3b:cc:4d:67: 55:38:ba:61:39:ec:ef:49:15:84:bc:f3:78:fc:73: 53:77:50:cf:49:c4:29:12:f9:42:44:b1:42:c2:dd: 4e:48:28:cf:2e:80:81:88:fe:85:47:fd:f8:a4:50: eb:25:b6:f6:26:02:69:98:42:a3:d2:73:b4:79:05: d4:d5:be:e2:90:f8:b5:d9:84:bf:b7:b6:6c:9f:6c: 23:84:9b:1d:46:61:6f:72:28:f8:da:0c:a6:91:9b: 5a:bb:ff:98:66:4d:0a:7c:e8:2a:3d:82:1a:7f:82: 00:58:92:45:82:f8:ee:24:89:ef:0d:5d:f9:dc:06: 65:a7:89:af:33:c5:e5:78:ef:18:31:49:55:47:c5: 03:4b:5c:c2:5a:56:82:f3:8a:81:07:82:d6:35:11: ac:18:7b:1e:89:30:57:a0:59:0c:33:7e:e1:fd:e5: 11:21:d8:78:93:53:7e:41:e8:38:d9:c3:15:07:89: 85:17:cb:c0:53:83:13:46:b3:03:8f:ac:69:6d:b2: 80:90:4a:da:12:6b:04:85:ad:67:3e:7d:f7:b6:6c: 0b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D3:10:EC:C6:36:45:C1:5B:A6:83:92:EC:3A:CB:D2:B3:C1:96:75 X509v3 Authority Key Identifier: keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:c7:63:0a:a4:07:f1:8f:02:1e:2e:a5:78:2b:5c:ea:ab:88: df:bc:f5:75:80:20:b9:16:c1:da:10:eb:39:f3:ad:54:b7:c5: c8:44:d9:dd:30:cd:77:50:eb:87:24:8d:d9:fb:04:3e:97:06: ab:d8:19:73:0d:ff:71:8b:4f:12:58:0d:65:1b:cd:76:fa:c1: 86:ff:14:4f:1d:43:a9:26:bd:79:74:15:e1:ea:76:b4:06:46: e6:39:a6:a4:38:32:05:1a:94:5b:44:a7:91:cc:84:65:fa:6c: af:6d:d7:6b:2c:90:31:79:e4:23:09:9c:2e:44:75:6d:1e:e1: 8c:5b:98:9f:dd:76:26:3b:ce:28:c0:e9:91:fe:87:5d:91:dc: f9:5a:6b:d4:79:10:77:d7:c1:96:ec:a3:79:56:d6:4d:53:a2: 4a:50:72:92:50:95:e8:e4:9f:02:49:92:f4:fd:4e:aa:01:b7: 33:bc:81:c5:27:d5:4e:c9:a8:2d:3c:d8:93:c3:26:43:2e:dc: dc:27:aa:5e:64:cd:88:c1:6d:62:35:bd:97:ca:a7:ac:ac:48: 82:bc:e1:10:1b:65:30:44:c8:42:d6:6c:d2:91:ec:4f:d3:36: ec:f1:5c:02:8f:79:a6:65:cf:51:c1:3b:68:ac:08:7f:0b:54: 0b:29:95:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fdAq/VAhYkuSTaczXRlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZDUxNTk4ODJlNzdhNjdmNzk3ZjhmOGI5OTZiNjJjNGVi YWJjMjAwHhcNMjUxMjIwMTYwMDM2WhcNMjUxMjIxMTYwMDM2WjAzMTEwLwYDVQQD Eyg0ZGQzMTBlY2M2MzY0NWMxNWJhNjgzOTJlYzNhY2JkMmIzYzE5Njc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnelaGvTznw6sXs7TmodRTsZ4TFNF Kj8W7XdZcQ2aSXs8RtURHjxiQzvMTWdVOLphOezvSRWEvPN4/HNTd1DPScQpEvlC RLFCwt1OSCjPLoCBiP6FR/34pFDrJbb2JgJpmEKj0nO0eQXU1b7ikPi12YS/t7Zs n2wjhJsdRmFvcij42gymkZtau/+YZk0KfOgqPYIaf4IAWJJFgvjuJInvDV353AZl p4mvM8XleO8YMUlVR8UDS1zCWlaC84qBB4LWNRGsGHseiTBXoFkMM37h/eURIdh4 k1N+Qeg42cMVB4mFF8vAU4MTRrMDj6xpbbKAkEraEmsEha1nPn33tmwLtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3TEOzGNkXBW6aDkuw6y9KzwZZ1MB8GA1UdIwQY MBaAFOPVFZiC53pn95f4+LmWtixOurwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zMDUyM2ItOGIzYy00NmNiLWFiYmMt ZTEwMTQ3N2VmYjhhLzEvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zMDUyM2ItOGIzYy00NmNiLWFiYmMtZTEwMTQ3N2VmYjhh LzEvNDlVVm1JTG5lbWYzbF9qNHVaYTJMRTY2dkNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcdjCqQH 8Y8CHi6leCtc6quI37z1dYAguRbB2hDrOfOtVLfFyETZ3TDNd1DrhySN2fsEPpcG q9gZcw3/cYtPElgNZRvNdvrBhv8UTx1DqSa9eXQV4ep2tAZG5jmmpDgyBRqUW0Sn kcyEZfpsr23XayyQMXnkIwmcLkR1bR7hjFuYn912JjvOKMDpkf6HXZHc+Vpr1HkQ d9fBluyjeVbWTVOiSlByklCV6OSfAkmS9P1OqgG3M7yBxSfVTsmoLTzYk8MmQy7c 3CeqXmTNiMFtYjW9l8qnrKxIgrzhEBtlMETIQtZs0pHsT9M27PFcAo95pmXPUcE7 aKwIfwtUCymVcQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:41 2025 by rpki-client