This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft File: x50TZko3nYtdrfdj3QT1EV4CMYQ.mft (raw, json) Hash identifier: zeTgz1Xka1sDkB2d6VMotwk1cOsxdq9vQJa0ezTLPeI= Subject key identifier: C8:97:88:40:B8:00:F4:1B:46:70:DB:6C:C0:37:C3:23:BC:73:F7:95 Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84 Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184 Certificate serial: 019B3B6B2AA9B9ABB816FD91FD3A307E84B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft Manifest number: 01AA Signing time: Sat 20 Dec 2025 11:00:37 +0000 Manifest this update: Sat 20 Dec 2025 11:00:37 +0000 Manifest next update: Sun 21 Dec 2025 11:00:37 +0000 Files and hashes: 1: ZQjPC2fpyT-Vvc_kqiwp7b7rczY.roa (hash: WGoaZKgovkzunqobaBY3s+Zo6C38U50g1kvmNlqSsZ0=) 2: x50TZko3nYtdrfdj3QT1EV4CMYQ.crl (hash: K6P0w8VHxUZU1v1Dxz2Nt6GiMK0qSiK7cUQhen07dys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:2a:a9:b9:ab:b8:16:fd:91:fd:3a:30:7e:84:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184 Validity Not Before: Dec 20 11:00:37 2025 GMT Not After : Dec 21 11:00:37 2025 GMT Subject: CN=c8978840b800f41b4670db6cc037c323bc73f795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:4c:d3:58:c2:71:1e:87:bb:4f:ca:bb:1b: 82:84:29:b3:6f:fb:21:25:e6:68:4f:c5:a7:4d:b9: fb:c7:76:c2:4e:4e:d9:ec:c2:60:eb:e5:dc:e8:80: 41:ad:f9:7b:ab:aa:5a:6d:53:5f:ca:a3:dd:38:66: 44:81:df:5f:c5:21:af:d6:a9:3f:35:84:49:f0:9f: fb:fe:06:e1:23:53:24:9d:3b:40:51:a9:38:d3:42: a6:33:9d:57:2e:4b:56:36:fe:a9:92:d4:79:cf:4a: f6:58:6c:09:dd:17:5c:1c:0a:90:2b:f6:9b:c7:ab: 12:f0:e2:78:3a:ab:40:e7:d0:58:c7:3e:df:5b:b5: 41:49:7f:d6:3f:1a:b9:90:83:d2:a5:fa:29:66:d2: 1c:3f:aa:8e:f4:9e:51:70:39:38:a8:c1:13:11:f8: b0:6a:cf:a6:5c:23:7b:18:04:d3:df:a5:04:a6:b6: 77:d1:8c:0d:d8:cd:f4:41:75:63:09:41:45:0f:87: 19:e3:a4:72:5e:d7:c0:c1:eb:56:29:91:28:22:76: 6e:a9:7f:50:b5:34:c3:11:28:f9:a1:98:6e:32:98: 75:89:66:83:c6:32:0d:ed:fb:fc:11:01:7c:ed:e3: 70:55:e3:c5:0b:f6:92:ae:be:6f:4e:a0:7c:ff:1f: 13:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:97:88:40:B8:00:F4:1B:46:70:DB:6C:C0:37:C3:23:BC:73:F7:95 X509v3 Authority Key Identifier: keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:9a:0d:a1:e3:c8:f1:49:b5:15:50:7a:23:bb:43:da:9f:ac: 01:48:eb:4c:b9:f8:56:56:9f:4c:d8:4b:36:02:95:9a:c0:2f: 5b:ad:be:08:75:b1:88:25:d2:ee:c3:2e:36:3b:a9:92:2f:c8: cc:95:f9:c0:40:e5:e9:c9:2d:2b:16:bd:15:b7:95:f3:3e:1e: f4:b3:1f:6c:6e:8a:e1:7c:fe:1b:ba:ef:bd:1b:00:5b:18:6a: 96:b0:7c:a6:06:bf:96:46:0a:98:bb:c9:64:1a:60:a2:e4:1b: 33:9d:35:1f:b2:05:99:6b:72:11:f5:85:f8:2d:5c:00:19:9a: 14:a2:be:4e:fc:a6:ed:e0:b5:28:ef:59:26:a1:1b:fc:b2:16: d5:e2:06:b9:cc:71:65:fe:e0:92:20:49:b9:46:82:17:41:f3: de:75:4e:b2:68:d2:a0:88:90:05:ac:ee:92:3a:b3:c1:57:b1: bc:91:ed:3d:d4:62:8a:d2:21:6c:ee:17:48:1b:a1:d1:4e:08: ae:70:0f:52:25:f5:8c:9c:44:a3:0b:7c:0f:57:d4:fc:96:0d: 13:81:db:81:cb:1b:e8:5d:26:72:d3:e8:21:9d:46:61:1f:a7: 4f:43:23:73:2b:8d:84:9f:71:33:b6:78:4d:8d:3d:2e:08:35: a1:30:46:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ayqpuau4Fv2R/TowfoSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OWQxMzY2NGEzNzlkOGI1ZGFkZjc2M2RkMDRmNTExNWUw MjMxODQwHhcNMjUxMjIwMTEwMDM3WhcNMjUxMjIxMTEwMDM3WjAzMTEwLwYDVQQD EyhjODk3ODg0MGI4MDBmNDFiNDY3MGRiNmNjMDM3YzMyM2JjNzNmNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMVM01jCcR6Hu0/KuxuChCmzb/sh JeZoT8WnTbn7x3bCTk7Z7MJg6+Xc6IBBrfl7q6pabVNfyqPdOGZEgd9fxSGv1qk/ NYRJ8J/7/gbhI1MknTtAUak400KmM51XLktWNv6pktR5z0r2WGwJ3RdcHAqQK/ab x6sS8OJ4OqtA59BYxz7fW7VBSX/WPxq5kIPSpfopZtIcP6qO9J5RcDk4qMETEfiw as+mXCN7GATT36UEprZ30YwN2M30QXVjCUFFD4cZ46RyXtfAwetWKZEoInZuqX9Q tTTDESj5oZhuMph1iWaDxjIN7fv8EQF87eNwVePFC/aSrr5vTqB8/x8TVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiXiEC4APQbRnDbbMA3wyO8c/eVMB8GA1UdIwQY MBaAFMedE2ZKN52LXa33Y90E9RFeAjGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2Mjgt Mjg4NDI1MjljN2ExLzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9lYzZiMjktMzYyMS00MDI0LTg2MjgtMjg4NDI1MjljN2Ex LzEveDUwVFprbzNuWXRkcmZkajNRVDFFVjRDTVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy5oNoePI 8Um1FVB6I7tD2p+sAUjrTLn4VlafTNhLNgKVmsAvW62+CHWxiCXS7sMuNjupki/I zJX5wEDl6cktKxa9FbeV8z4e9LMfbG6K4Xz+G7rvvRsAWxhqlrB8pga/lkYKmLvJ ZBpgouQbM501H7IFmWtyEfWF+C1cABmaFKK+Tvym7eC1KO9ZJqEb/LIW1eIGucxx Zf7gkiBJuUaCF0Hz3nVOsmjSoIiQBazukjqzwVexvJHtPdRiitIhbO4XSBuh0U4I rnAPUiX1jJxEowt8D1fU/JYNE4Hbgcsb6F0mctPoIZ1GYR+nT0MjcyuNhJ9xM7Z4 TY09Lgg1oTBGUQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:21:56 2025 by rpki-client