This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier: qm5TgkQMoKTTTJ3sC7GMGbdLOgyLAhLkfHsoSpefqJY=
Subject key identifier: 51:D4:08:F3:C3:33:E5:6C:9B:82:DF:C0:B4:19:29:C9:12:DE:28:DB
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial: 019C427D442D6D974BDB305A3B24224CC08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number: 0B52
Signing time: Mon 09 Feb 2026 13:00:31 +0000
Manifest this update: Mon 09 Feb 2026 13:00:31 +0000
Manifest next update: Tue 10 Feb 2026 13:00:31 +0000
Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: EVaJLlmkL4O2k67EvNOx4YF15DeJnBTa3yHhdijxLwQ=)
2: kjD9MNfC0BPcwkyPzs0CEhSag-I.roa (hash: e8QlVBviEv2pFqVxAanGI81u7if0cNyxjU/3EXVOJq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:44:2d:6d:97:4b:db:30:5a:3b:24:22:4c:c0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Validity
Not Before: Feb 9 13:00:31 2026 GMT
Not After : Feb 10 13:00:31 2026 GMT
Subject: CN=51d408f3c333e56c9b82dfc0b41929c912de28db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:70:e1:75:03:26:1a:ac:e1:c2:1b:c7:ff:
b6:e5:eb:69:eb:a8:e4:5b:2b:ed:33:5c:dc:92:c9:
4b:6e:1f:21:11:f4:30:fb:6e:b5:58:40:0a:48:07:
7e:dc:71:e0:d4:d9:4e:07:5d:b5:68:80:de:6d:29:
58:b8:82:83:7a:77:1b:e3:88:cd:b6:69:5c:80:df:
a6:85:aa:50:0a:c9:ff:bc:a5:33:1a:76:9c:50:e6:
23:81:79:7b:42:76:30:83:47:a4:60:d9:79:9b:b3:
67:36:e3:ee:58:2b:5f:f9:71:79:df:f0:f5:b1:e5:
58:4f:78:de:32:06:20:c4:57:e9:7a:68:5a:b1:17:
19:8e:f7:03:9f:2c:a0:bb:be:84:38:58:fc:80:ea:
35:6b:36:19:88:a8:47:69:89:49:68:3f:7b:3f:e6:
f1:ff:ef:a5:3a:56:fd:35:4f:45:b2:43:13:31:f9:
19:f3:69:da:fc:60:39:8b:a5:e0:1e:f5:08:c1:22:
e4:b8:50:07:cd:1b:d7:fd:7f:c3:66:9f:0d:80:99:
99:08:1c:21:c7:13:69:95:25:e8:68:74:b9:d7:14:
0a:7b:0c:4e:8a:80:8d:17:17:c4:77:b9:c9:c8:6f:
dc:53:81:7b:69:a6:1f:ef:25:ad:3c:ec:c2:89:a9:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D4:08:F3:C3:33:E5:6C:9B:82:DF:C0:B4:19:29:C9:12:DE:28:DB
X509v3 Authority Key Identifier:
keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:98:e1:4d:8c:6b:f5:9c:01:30:00:19:55:1f:00:70:3c:3a:
4c:e1:b8:ad:13:d9:ad:cc:d8:40:0d:83:d7:a0:95:27:8c:d9:
14:83:47:35:da:2d:00:e3:3f:9a:e0:a7:2b:38:79:af:77:11:
f3:4e:2f:f9:e4:e6:e3:a9:a5:5a:d2:a2:ca:81:35:20:ab:e1:
04:06:af:22:fa:a0:c3:01:39:e0:6c:d8:f7:ce:73:e8:88:15:
5d:cf:15:37:63:24:93:84:ad:c7:7b:74:19:46:f6:6a:42:8b:
d0:6c:ba:0f:0d:65:ea:d7:4f:a0:d4:20:15:e9:d9:54:50:10:
76:8b:f4:57:9d:d1:24:9b:2d:10:8f:a4:e5:b3:75:f4:ae:d7:
7f:07:27:25:7a:62:cb:89:cc:d9:0d:5c:b3:b1:bd:63:94:23:
76:87:48:ff:12:ef:6f:8f:78:1b:8b:94:d3:aa:b9:df:91:ad:
26:fa:2c:9c:d9:59:62:d0:bf:67:fc:47:df:0f:7b:02:c5:74:
ae:76:f2:b1:52:74:11:45:70:5e:a3:05:fd:1f:3d:0f:58:8a:
8f:6f:9f:9f:8a:34:81:17:02:91:38:83:b4:ff:77:aa:70:29:
c1:43:3b:94:af:74:41:55:46:4b:5c:f8:d6:19:36:12:c6:37:
7e:ac:43:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfUQtbZdL2zBaOyQiTMCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2M4NjI2MTM4YmYxZTljYjNmZDFmZWMyNmM2OGM0YTYz
NDA5NmIwHhcNMjYwMjA5MTMwMDMxWhcNMjYwMjEwMTMwMDMxWjAzMTEwLwYDVQQD
Eyg1MWQ0MDhmM2MzMzNlNTZjOWI4MmRmYzBiNDE5MjljOTEyZGUyOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sdw4XUDJhqs4cIbx/+25etp66jk
WyvtM1zckslLbh8hEfQw+261WEAKSAd+3HHg1NlOB121aIDebSlYuIKDencb44jN
tmlcgN+mhapQCsn/vKUzGnacUOYjgXl7QnYwg0ekYNl5m7NnNuPuWCtf+XF53/D1
seVYT3jeMgYgxFfpemhasRcZjvcDnyygu76EOFj8gOo1azYZiKhHaYlJaD97P+bx
/++lOlb9NU9FskMTMfkZ82na/GA5i6XgHvUIwSLkuFAHzRvX/X/DZp8NgJmZCBwh
xxNplSXoaHS51xQKewxOioCNFxfEd7nJyG/cU4F7aaYf7yWtPOzCiameQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHUCPPDM+Vsm4LfwLQZKckS3ijbMB8GA1UdIwQY
MBaAFOfMhiYTi/Hpyz/R/sJsaMSmNAlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWIt
ZjVjMDlmZjM4YTAwLzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWItZjVjMDlmZjM4YTAw
LzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5jhTYxr
9ZwBMAAZVR8AcDw6TOG4rRPZrczYQA2D16CVJ4zZFINHNdotAOM/muCnKzh5r3cR
804v+eTm46mlWtKiyoE1IKvhBAavIvqgwwE54GzY985z6IgVXc8VN2Mkk4Stx3t0
GUb2akKL0Gy6Dw1l6tdPoNQgFenZVFAQdov0V53RJJstEI+k5bN19K7XfwcnJXpi
y4nM2Q1cs7G9Y5QjdodI/xLvb494G4uU06q535GtJvosnNlZYtC/Z/xH3w97AsV0
rnbysVJ0EUVwXqMF/R89D1iKj2+fn4o0gRcCkTiDtP93qnApwUM7lK90QVVGS1z4
1hk2EsY3fqxD6w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:09 2026 by rpki-client