This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
File:                     50Du0o8tmU6yuDHLjvxkcDBtdGE.mft (raw, json)
Hash identifier:          spWUcoEXVz3eO7OsAKweD4yTe07rAm+5jUnpcymxjVg=
Subject key identifier:   55:78:48:EE:42:26:B8:33:F6:95:5A:26:87:1D:E8:AA:A3:8F:E0:9E
Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
Certificate issuer:       /CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Certificate serial:       019B33B18F59D67AFEFF33D536EEC433CF55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
Manifest number:          0F99
Signing time:             Thu 18 Dec 2025 23:00:32 +0000
Manifest this update:     Thu 18 Dec 2025 23:00:32 +0000
Manifest next update:     Fri 19 Dec 2025 23:00:32 +0000
Files and hashes:         1: 50Du0o8tmU6yuDHLjvxkcDBtdGE.crl (hash: it8HLbutFsphuHAX2ZRIBJdB7iJTpsGmPVBbfjS09Qg=)
                          2: nIb9hACkrzkR8YbAdKP9wDLbBJc.roa (hash: GZXAKYA4rdv87pCnOscB54KXgGj+TJ2DGRrncRH4Kpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:b1:8f:59:d6:7a:fe:ff:33:d5:36:ee:c4:33:cf:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461
        Validity
            Not Before: Dec 18 23:00:32 2025 GMT
            Not After : Dec 19 23:00:32 2025 GMT
        Subject: CN=557848ee4226b833f6955a26871de8aaa38fe09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:f6:33:87:99:f8:bc:95:fe:c3:34:41:95:
                    ac:a0:cb:60:4f:11:b0:ff:96:59:88:c2:34:73:b4:
                    d1:7a:12:45:e1:8f:ba:28:ff:c8:6f:9b:b2:43:3d:
                    1f:03:d7:d3:6a:d0:d0:b4:9a:40:a4:45:63:08:9b:
                    29:1f:ff:c2:28:8c:08:c3:03:9a:ae:77:07:5d:30:
                    b3:09:c7:e9:ba:32:3f:3a:31:ba:c5:93:45:18:4f:
                    a7:07:49:03:3b:f5:b2:fb:64:8d:08:9d:b5:21:e4:
                    68:2d:20:6f:0f:e5:50:d4:61:42:dc:0b:c8:55:73:
                    4f:79:93:58:f9:89:47:76:95:5d:26:65:9b:f4:d5:
                    8f:7f:ea:77:05:5b:be:04:27:24:b3:84:80:a3:bf:
                    4a:9b:01:f7:d2:94:fe:12:22:49:cd:36:a1:1c:7e:
                    3e:3d:74:6b:7c:83:62:50:d7:94:d7:74:be:b2:02:
                    43:a4:98:f4:ae:23:f3:d8:fc:5e:14:18:13:df:17:
                    dc:4c:0c:e6:5e:8d:53:74:a6:89:94:ef:8b:40:c7:
                    96:5e:42:c5:a9:9b:a0:4a:e2:e3:6f:e7:45:6e:da:
                    ee:94:d7:0d:35:b4:94:f4:76:6a:b5:e0:ea:3b:b8:
                    30:d6:f6:b5:36:7b:f9:f4:f0:3b:c6:00:8a:e0:d2:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:78:48:EE:42:26:B8:33:F6:95:5A:26:87:1D:E8:AA:A3:8F:E0:9E
            X509v3 Authority Key Identifier:
                keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:77:a7:b2:61:66:f2:60:ee:48:78:bc:3e:b0:27:82:40:
         b0:17:74:6e:6e:e7:7d:76:57:7d:cc:d3:d1:b2:44:40:f7:2c:
         b9:3d:d3:7e:65:32:1c:c5:d8:8b:bf:51:69:be:12:06:d4:7a:
         df:8f:6e:87:37:85:64:ec:37:b0:62:c2:51:51:9f:92:bf:61:
         8a:f2:ae:6a:6b:8c:12:2c:e2:ac:5b:4a:02:2b:79:d2:9f:6a:
         b2:40:7a:ec:27:22:73:ae:a8:61:ab:f8:bf:b1:34:12:47:d9:
         19:c1:e9:4d:37:29:f3:9f:c3:23:f6:e7:53:5f:53:74:ed:c2:
         4c:66:a8:b2:9b:0d:e1:f9:5b:ab:b7:54:4a:34:8d:06:9c:a5:
         2c:d4:c2:9a:08:b3:22:b9:e4:be:52:a0:53:69:7f:eb:d5:8e:
         2f:08:a8:d4:e3:b1:2b:9b:79:b1:7a:9d:55:54:14:55:10:0c:
         e6:a8:89:c2:9f:7f:c1:ec:eb:21:36:06:08:6e:90:9d:d0:07:
         68:ce:5e:54:8b:41:17:fc:db:07:df:35:bf:da:ec:72:4a:4c:
         55:1b:f0:25:c8:e5:8c:78:ad:9e:30:c4:25:52:d6:18:6d:00:
         28:7a:0c:fe:20:c2:23:a8:8b:36:69:fc:bf:96:b7:af:03:ef:
         5c:40:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 02:33:12 2025 by rpki-client