This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier: er5HunVbog8XqSIbSPRLxSjHPmWFx1LqmyD97vydvvQ=
Subject key identifier: E5:F9:11:77:E1:CC:CC:A1:AB:80:34:8D:91:59:A2:39:6C:D5:31:24
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 019B232BF4A8FC4257F4388C15A8EE73FAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number: 0C36
Signing time: Mon 15 Dec 2025 18:00:41 +0000
Manifest this update: Mon 15 Dec 2025 18:00:41 +0000
Manifest next update: Tue 16 Dec 2025 18:00:41 +0000
Files and hashes: 1: 1-iqnIyKfffTeip77QQglSkGC66k.asa (hash: tm5ocWQ4F8iL11rdh167B46m++zYGle2Ua0389CC5aI=)
2: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
3: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: PQRbaWhuFh0C7W4sQOZsSnxSqscmKlbVv/jwnVq6SMU=)
4: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
5: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
6: BOsl0qn4uIqkA_a-sd3d5l-tYXE.asa (hash: WTaPLVm9v1a65g9j7GNkbyW3n2otJVScGC1bf2hl4GA=)
7: DeUytZfI95MWDsuLJPAteUD07Uc.roa (hash: wyHnlO7zWJ+apYnZ3m2Zd+YBK+GTVFGojfzCgOcEpWA=)
8: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
9: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
10: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
11: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 15:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:23:2b:f4:a8:fc:42:57:f4:38:8c:15:a8:ee:73:fa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Dec 15 18:00:41 2025 GMT
Not After : Dec 16 18:00:41 2025 GMT
Subject: CN=e5f91177e1cccca1ab80348d9159a2396cd53124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:f0:ea:29:d8:91:42:39:a1:81:b6:e6:2c:
ec:d7:60:56:85:8d:bb:cf:fd:34:c2:ae:68:53:71:
2b:25:15:60:4d:55:37:22:fe:4c:63:b2:d8:9e:58:
d7:b6:eb:07:51:e3:1e:82:31:a8:74:cc:3e:63:53:
d3:4b:f0:05:44:6e:70:fc:cb:47:3f:78:1a:7d:05:
11:c0:9b:72:66:f7:32:92:a3:14:4c:39:68:60:bb:
65:8d:ea:75:0a:30:70:c5:42:82:b3:26:6d:79:a9:
99:7a:d4:d0:b7:d0:41:5e:a2:46:96:b8:4d:ea:6b:
0f:59:5a:11:69:14:66:2f:3e:2e:0b:e3:54:da:9d:
02:13:7f:c4:9e:c5:2c:78:1e:2f:ab:cf:30:9b:50:
92:d1:a3:f3:0d:91:16:cf:1a:f2:be:87:8c:62:8e:
4d:d1:ba:e2:0b:0e:aa:6f:93:4e:1e:7e:18:fa:07:
80:3d:11:a3:1a:aa:f6:34:6a:cc:81:8e:83:be:e1:
3d:24:2e:0f:5b:47:9a:c7:82:2b:b5:40:7e:dc:21:
30:86:76:7a:5b:aa:d9:7a:ed:80:28:0a:93:03:ba:
df:96:8f:49:df:9d:eb:fc:16:77:ae:fe:fa:43:45:
d0:d1:05:b8:cb:8f:6f:f6:eb:cf:70:d4:6f:f1:7d:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F9:11:77:E1:CC:CC:A1:AB:80:34:8D:91:59:A2:39:6C:D5:31:24
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:38:96:e4:79:9f:2c:94:7e:17:35:bc:9a:f0:2f:da:6d:e6:
aa:3f:73:6b:f1:56:5b:61:1b:b4:79:75:2a:80:22:e7:5c:75:
ce:87:e6:10:f1:8d:78:1d:2c:b9:8f:7f:df:da:9a:b7:57:14:
c3:4c:49:01:3c:ab:cd:09:48:a5:f1:37:14:88:a9:f1:49:b0:
26:bd:80:d5:ff:e4:80:bd:73:e3:9d:0b:a5:52:02:7f:55:83:
d2:52:49:2d:23:61:8f:5f:78:70:96:15:12:a3:ea:05:3d:0d:
7d:60:ad:5c:79:69:53:e7:d7:90:ae:6f:37:c8:ac:94:91:e0:
92:2e:59:55:43:9f:97:ab:96:28:b6:a2:fa:e0:41:13:df:34:
1c:0d:65:d6:08:07:81:a7:35:5e:b4:f3:75:de:4a:79:2c:1f:
0f:d3:60:82:39:bb:a4:a7:11:5f:30:ad:94:69:cd:01:f0:40:
a7:ee:6c:54:a8:35:31:15:ca:f7:03:ee:9a:3e:b6:27:bc:5f:
6a:2d:59:ba:fb:41:93:40:e5:44:67:95:ee:e6:c1:74:ec:27:
1c:a6:22:a7:9c:be:34:5c:a2:e5:62:5d:7b:b1:62:c7:1e:dc:
fa:92:48:d3:b7:a0:62:0f:cc:1a:55:dd:72:ef:f1:a4:72:21:
9f:5e:17:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsjK/So/EJX9DiMFajuc/qhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk
MTRjNTMwHhcNMjUxMjE1MTgwMDQxWhcNMjUxMjE2MTgwMDQxWjAzMTEwLwYDVQQD
EyhlNWY5MTE3N2UxY2NjY2ExYWI4MDM0OGQ5MTU5YTIzOTZjZDUzMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLLw6inYkUI5oYG25izs12BWhY27
z/00wq5oU3ErJRVgTVU3Iv5MY7LYnljXtusHUeMegjGodMw+Y1PTS/AFRG5w/MtH
P3gafQURwJtyZvcykqMUTDloYLtljep1CjBwxUKCsyZteamZetTQt9BBXqJGlrhN
6msPWVoRaRRmLz4uC+NU2p0CE3/EnsUseB4vq88wm1CS0aPzDZEWzxryvoeMYo5N
0briCw6qb5NOHn4Y+geAPRGjGqr2NGrMgY6DvuE9JC4PW0eax4IrtUB+3CEwhnZ6
W6rZeu2AKAqTA7rflo9J353r/BZ3rv76Q0XQ0QW4y49v9uvPcNRv8X2/zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOX5EXfhzMyhq4A0jZFZojls1TEkMB8GA1UdIwQY
MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt
MGFhNDYzY2RmY2EwLzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew
LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcziW5Hmf
LJR+FzW8mvAv2m3mqj9za/FWW2EbtHl1KoAi51x1zofmEPGNeB0suY9/39qat1cU
w0xJATyrzQlIpfE3FIip8UmwJr2A1f/kgL1z450LpVICf1WD0lJJLSNhj194cJYV
EqPqBT0NfWCtXHlpU+fXkK5vN8islJHgki5ZVUOfl6uWKLai+uBBE980HA1l1ggH
gac1XrTzdd5KeSwfD9Nggjm7pKcRXzCtlGnNAfBAp+5sVKg1MRXK9wPumj62J7xf
ai1ZuvtBk0DlRGeV7ubBdOwnHKYip5y+NFyi5WJde7Fixx7c+pJI07egYg/MGlXd
cu/xpHIhn14XKw==
-----END CERTIFICATE-----
Generated at Mon Dec 15 21:50:25 2025 by rpki-client