This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json) Hash identifier: h2mUcNLSdGMXdhZM4/mIyXX4Utc9a6kQJhLdhyhhTbs= Subject key identifier: 02:7B:D8:02:12:E2:BB:0B:72:83:56:75:85:CF:A8:AC:E6:A1:10:CA Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b Certificate serial: 019B3AFDD0C9A5156D8B1B288F8D00DABE58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft Manifest number: 0AC9 Signing time: Sat 20 Dec 2025 09:01:11 +0000 Manifest this update: Sat 20 Dec 2025 09:01:11 +0000 Manifest next update: Sun 21 Dec 2025 09:01:11 +0000 Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: 4xpNF+tpCrAvu/xrIY5HsN+ODgCpr1fv/auV0KVOyC0=) 2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:d0:c9:a5:15:6d:8b:1b:28:8f:8d:00:da:be:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b Validity Not Before: Dec 20 09:01:11 2025 GMT Not After : Dec 21 09:01:11 2025 GMT Subject: CN=027bd80212e2bb0b7283567585cfa8ace6a110ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:bc:6c:a0:cd:1b:6f:31:27:90:c6:82:c6: 6b:71:99:8d:75:e2:cf:1d:54:60:d8:72:b7:f5:ec: 0b:8e:e8:76:16:87:83:ec:2b:5e:80:df:bf:27:80: 01:c3:e1:90:fa:dd:3c:4a:00:b0:80:82:1d:c3:ae: 54:88:32:46:a5:5b:76:92:a7:8e:29:7b:d3:15:eb: f8:d5:ee:f9:fd:0c:c6:c8:54:f9:8d:42:41:a8:79: e3:dd:ca:78:a6:81:5b:cd:bf:35:ba:32:b1:8c:be: 2b:50:34:74:fc:bd:98:73:3b:d7:d5:dd:1f:d7:0f: 77:46:6f:4f:9b:b1:3b:1f:84:a6:3d:8a:b7:c0:1b: ac:97:92:53:27:f3:26:bc:21:4c:fb:ea:f0:27:f4: 94:ad:5a:79:2d:23:c2:1d:68:09:9a:dc:d6:15:63: 3a:95:3c:f8:0a:15:f6:49:5d:c9:6b:59:1e:ba:6e: c7:fe:dc:0e:e9:b0:f2:ba:b4:da:7a:b8:93:90:b9: a8:40:ec:0d:ac:cf:e9:48:40:3b:37:5e:49:88:a5: 6b:20:53:c9:d9:89:db:03:8d:c4:f2:53:97:3b:73: ff:83:e8:1d:76:1a:c6:83:53:38:82:89:ee:74:32: 51:40:9b:13:f9:14:e9:e6:e4:e2:39:b2:4b:af:10: d4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7B:D8:02:12:E2:BB:0B:72:83:56:75:85:CF:A8:AC:E6:A1:10:CA X509v3 Authority Key Identifier: keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4f:46:ee:24:f4:54:06:b9:10:da:21:15:01:ee:91:38:68: 16:90:39:88:01:a8:6d:cc:af:97:70:8c:f6:6c:69:f9:10:4c: 64:af:82:0a:d8:d0:3b:ae:9c:a0:14:80:07:0f:68:70:c0:ee: f0:d0:25:85:04:69:fc:c7:29:3c:f2:84:fd:41:60:4f:af:70: ad:3d:7d:e7:5c:59:54:31:c8:33:7f:f3:fe:bf:54:4f:5d:99: 6c:80:34:34:e6:79:fd:da:0b:ac:b3:56:d0:58:6c:a7:69:60: 7b:a1:36:c3:6d:fb:71:81:7d:d1:94:5a:72:12:b7:35:73:54: 4d:22:e8:8a:c4:56:eb:11:10:81:18:b5:bf:5d:45:7a:e7:29: 8f:b1:c0:1a:a7:7e:99:c2:c0:d4:2d:ae:83:32:aa:34:7a:10: cf:c5:84:9c:b6:91:8e:26:d9:16:df:27:51:f8:34:14:30:62: 22:89:2f:29:4c:3c:53:8d:69:08:d6:98:54:1f:3a:01:d5:74: 9c:0c:55:cf:36:7b:4d:bb:f6:c8:ea:e9:07:f8:13:5f:58:e3: 83:d2:84:7b:66:56:6a:06:1e:97:b0:c0:19:dd:c4:54:7a:86: 34:2f:94:a1:28:21:a8:ff:7c:31:1f:5e:38:90:b9:95:bf:fb: 3e:bb:de:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/dDJpRVtixsoj40A2r5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2M4NjI2MTM4YmYxZTljYjNmZDFmZWMyNmM2OGM0YTYz NDA5NmIwHhcNMjUxMjIwMDkwMTExWhcNMjUxMjIxMDkwMTExWjAzMTEwLwYDVQQD EygwMjdiZDgwMjEyZTJiYjBiNzI4MzU2NzU4NWNmYThhY2U2YTExMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog+8bKDNG28xJ5DGgsZrcZmNdeLP HVRg2HK39ewLjuh2FoeD7CtegN+/J4ABw+GQ+t08SgCwgIIdw65UiDJGpVt2kqeO KXvTFev41e75/QzGyFT5jUJBqHnj3cp4poFbzb81ujKxjL4rUDR0/L2YczvX1d0f 1w93Rm9Pm7E7H4SmPYq3wBusl5JTJ/MmvCFM++rwJ/SUrVp5LSPCHWgJmtzWFWM6 lTz4ChX2SV3Ja1keum7H/twO6bDyurTaeriTkLmoQOwNrM/pSEA7N15JiKVrIFPJ 2YnbA43E8lOXO3P/g+gddhrGg1M4gonudDJRQJsT+RTp5uTiObJLrxDUewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJ72AIS4rsLcoNWdYXPqKzmoRDKMB8GA1UdIwQY MBaAFOfMhiYTi/Hpyz/R/sJsaMSmNAlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWIt ZjVjMDlmZjM4YTAwLzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWItZjVjMDlmZjM4YTAw LzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALU9G7iT0 VAa5ENohFQHukThoFpA5iAGobcyvl3CM9mxp+RBMZK+CCtjQO66coBSABw9ocMDu 8NAlhQRp/McpPPKE/UFgT69wrT1951xZVDHIM3/z/r9UT12ZbIA0NOZ5/doLrLNW 0Fhsp2lge6E2w237cYF90ZRachK3NXNUTSLoisRW6xEQgRi1v11Feucpj7HAGqd+ mcLA1C2ugzKqNHoQz8WEnLaRjibZFt8nUfg0FDBiIokvKUw8U41pCNaYVB86AdV0 nAxVzzZ7Tbv2yOrpB/gTX1jjg9KEe2ZWagYel7DAGd3EVHqGNC+UoSghqP98MR9e OJC5lb/7PrvexQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:23:52 2025 by rpki-client