This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier: yANsURKKZANECFmMgCc9q/KkLAd/+NqoB7NYKVym7R8=
Subject key identifier: 60:ED:CC:FA:78:06:57:C4:A4:95:30:95:8A:9D:8C:C5:B2:BF:B1:2C
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 019C1C82E1FF344214AE7B554265B3BC858F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number: 0CB8
Signing time: Mon 02 Feb 2026 04:01:05 +0000
Manifest this update: Mon 02 Feb 2026 04:01:05 +0000
Manifest next update: Tue 03 Feb 2026 04:01:05 +0000
Files and hashes: 1: 1-iqnIyKfffTeip77QQglSkGC66k.asa (hash: tm5ocWQ4F8iL11rdh167B46m++zYGle2Ua0389CC5aI=)
2: 1-nCQN0VaQ2ael-H6q4WDuaNQ3YY.asa (hash: KIdLVAXXfbqG6AUAL9K0nR+wv3qEFvVz82UnXZsV/e0=)
3: 4drBeY0WR_A1GPJtZA4YXlykfh4.roa (hash: uPxG8eo/1XvDANn6qBOuvVB20xa9nluualatLIHzSnQ=)
4: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: TNsaCkTYGRYG6NkoNg17gDumyk5fOKRKf7CA03M5d54=)
5: 7uHJu7In6geY62mGLWsA-BkgXxQ.roa (hash: pCDrNYSeQf8254wV63If3iDd+pDCOI3GCLUFpM1rWQ4=)
6: BOsl0qn4uIqkA_a-sd3d5l-tYXE.asa (hash: WTaPLVm9v1a65g9j7GNkbyW3n2otJVScGC1bf2hl4GA=)
7: BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa (hash: hmgm/Pnh2iZKFyyt03L0VwIKzZWIKaWyCr/JtLV+SZ0=)
8: OpTtVKAksYNEjp3sCGLjB77TEtQ.roa (hash: CAYkdDo7AOeXQO9VIZQbkqyLJ0Mm55TJfWGJgk3xupc=)
9: m_98aREObyeD712Ey5gRbDiZuLo.roa (hash: O+Oki3q+yMkC01ENxqqfabIW79L+GAIiTNddxHZ4sdw=)
10: o0nlrJylYIGYsWBjRFGVnG7mqFk.roa (hash: ytLMden+iVQSZ4MVhXxgpNGbvtp5EMg2V51G3jlU0Tc=)
11: qEsk61krs4UNghsWKgM1rpZTsAA.roa (hash: zR7J3cxzeRnLNGTYl/CdMoo52lC6GVsx4Ud+EzU7nAE=)
12: xSo_S4mp4KylJ282tG2KBfx1kB4.roa (hash: y6cL2LAD2UaFnNZj8A3tj8qtOaCatFdh20b64QN2mxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:82:e1:ff:34:42:14:ae:7b:55:42:65:b3:bc:85:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Feb 2 04:01:05 2026 GMT
Not After : Feb 3 04:01:05 2026 GMT
Subject: CN=60edccfa780657c4a49530958a9d8cc5b2bfb12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f4:7f:35:c6:1b:f8:a0:59:5e:1f:52:ce:ca:
d8:00:2b:e8:fb:64:27:ab:70:46:50:b2:fa:d4:a7:
b5:b1:f8:82:78:f2:00:f0:3b:5b:46:43:6e:0a:5b:
0b:cd:4d:af:f1:2c:9f:a0:97:00:7d:b1:47:cf:9d:
36:b0:fc:26:fb:65:dd:6e:01:40:33:30:6d:7d:73:
7f:2b:39:84:1f:0c:c4:27:2e:4b:22:ca:33:0a:90:
e2:ef:89:d0:ac:5f:dd:a8:9e:43:88:2a:a2:82:ea:
4b:c2:35:38:4c:7c:e9:03:81:cb:c8:46:0f:c2:6d:
28:92:84:15:09:40:89:c1:8e:d6:bd:ab:7e:83:cd:
cd:12:2e:12:f2:61:3c:e6:5d:47:3d:d2:bb:9b:13:
f9:95:fe:39:ee:47:23:38:50:b9:d3:29:68:95:c5:
06:74:43:e6:62:b8:61:7f:45:a8:03:ea:77:ac:1c:
88:85:5c:67:54:1c:e8:82:66:ac:7c:46:4c:b9:c6:
c7:c0:6d:1b:81:b8:b5:bd:65:97:99:72:8a:cc:1e:
86:ff:e3:45:64:37:da:03:74:10:58:9e:18:48:b7:
36:a2:f2:1f:7e:ca:5f:75:5c:19:8d:0d:90:1e:c3:
c5:39:cb:fb:e2:48:98:8c:fb:91:62:7e:d9:f2:17:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:ED:CC:FA:78:06:57:C4:A4:95:30:95:8A:9D:8C:C5:B2:BF:B1:2C
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:52:02:14:04:d2:28:bf:91:6e:8e:69:0b:be:ff:e8:65:db:
64:72:e1:65:c4:c9:42:ad:b2:ce:24:b3:92:a8:f6:4f:77:f3:
0d:de:13:af:88:56:dc:f5:0d:02:c8:f7:3d:49:b4:aa:6f:ce:
e4:a0:76:d5:0d:37:98:0a:18:2a:91:fc:ee:9a:4e:08:4e:46:
5d:07:f2:f1:02:2d:27:ee:93:a9:08:24:32:11:59:3e:2a:e7:
0a:60:ea:3f:8b:68:4d:58:90:29:76:e7:cb:ac:8f:fa:62:32:
1a:bb:e1:98:93:92:24:cd:57:d4:1b:e9:4e:e3:4d:c1:a3:03:
fa:d6:a2:41:fa:5c:7a:64:49:d5:fd:fe:e3:e2:b5:e5:59:bf:
4b:47:ad:7a:17:ee:3e:9d:f0:ba:0a:9d:f2:c6:e1:4e:c6:65:
ae:25:82:65:ae:0d:d1:67:16:0e:1a:01:f3:58:d2:a0:da:ad:
2e:90:ea:28:b5:b3:fb:04:91:6a:b9:08:58:cb:52:b6:63:e1:
74:13:d6:8a:d7:a3:19:d6:da:9f:03:8b:00:84:fa:30:7a:f1:
d2:c3:32:27:04:e2:47:de:ea:86:57:97:5d:85:49:bf:1a:8f:
77:43:fc:0a:5c:de:99:68:ba:6a:b5:aa:5c:0d:76:13:ef:a5:
86:aa:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:11 2026 by rpki-client