This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json) Hash identifier: o20TfNzk18Hzc6Q9afoqTzyTr5Szsuvf9gjMl5M3yrs= Subject key identifier: 78:2B:4C:07:EF:0E:D7:B6:64:CB:0F:6C:E3:5F:91:6A:2F:97:76:50 Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc Certificate serial: 019B39B454D1997347310546A2655C91909F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft Manifest number: 14A0 Signing time: Sat 20 Dec 2025 03:01:17 +0000 Manifest this update: Sat 20 Dec 2025 03:01:17 +0000 Manifest next update: Sun 21 Dec 2025 03:01:17 +0000 Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: 7NBRrTlXZbTZuBQ0GatkGrrxxq4tfe0yUkm+FCjeUoY=) 2: qetS73-OE2CSttiMvug0TDfkr54.roa (hash: f7CQ5AXCS66V7YOxpVoih8o6XmqrwIeswAWr26eRNls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:54:d1:99:73:47:31:05:46:a2:65:5c:91:90:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc Validity Not Before: Dec 20 03:01:17 2025 GMT Not After : Dec 21 03:01:17 2025 GMT Subject: CN=782b4c07ef0ed7b664cb0f6ce35f916a2f977650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:32:07:50:73:e4:06:9d:3e:f8:ac:04:cb:91: d1:31:7a:46:9c:2f:99:4b:18:23:ab:33:e7:99:7f: 1c:90:a4:a9:bc:b4:5e:42:81:9c:38:f5:eb:0f:43: 73:b8:d7:33:21:ad:4f:a6:e4:6e:f9:04:ca:a6:00: 9a:ef:82:82:78:6c:01:d3:31:2d:47:06:bc:c1:ee: f9:05:3a:b0:b4:f0:bc:b5:8a:96:22:41:c5:2f:29: ff:15:7c:b6:ac:40:6b:67:35:02:93:be:5b:c0:16: 63:c0:1b:9d:67:25:54:a9:91:a7:62:a4:2e:44:b1: bd:c8:af:f5:5b:d4:5c:9b:9b:92:3d:b4:d9:c6:a5: db:34:10:bf:68:f5:d5:ca:d5:25:f6:25:9e:6b:93: 20:9c:73:bc:e3:c5:24:dc:e7:47:a9:9f:05:aa:83: e0:fb:09:bf:87:5d:26:2e:ce:46:61:2e:9c:55:48: 9c:71:a5:81:62:79:76:88:47:c1:2b:b4:fa:dd:9d: cb:e7:e0:cc:a7:cc:b2:6b:8b:aa:1f:eb:b3:9e:6f: 56:d4:ef:05:77:34:de:ff:47:18:63:7c:8f:a8:9e: 7c:5d:54:03:89:55:f7:26:6c:4d:24:00:0a:10:82: f8:32:3b:b6:1c:f4:3a:a7:2f:ec:90:6f:09:c3:f3: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2B:4C:07:EF:0E:D7:B6:64:CB:0F:6C:E3:5F:91:6A:2F:97:76:50 X509v3 Authority Key Identifier: keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:00:38:d4:97:d8:5a:41:d1:4c:56:42:c7:6e:c9:e6:e5:84: 5b:56:6d:fa:0f:7d:56:bf:69:1a:8d:e7:9a:70:b2:8a:1d:c5: 0f:74:9d:49:6a:a8:6f:d2:9b:0c:1a:20:62:c2:45:eb:0c:73: f5:3d:5d:7a:23:61:99:7f:da:90:ea:77:53:62:1d:f9:73:48: 53:18:5f:f1:ef:d5:5b:78:9b:7e:e9:ba:53:8c:40:06:fc:45: f0:fb:34:f3:c1:8b:41:81:4b:d5:41:0b:6a:2c:0c:df:f7:ea: 51:e1:90:33:c7:c6:13:bb:cb:24:09:9c:ad:87:d5:b3:fa:cf: 2e:52:d0:52:6e:8e:c7:02:3b:b9:4c:8f:94:46:cd:65:22:c3: b8:fe:c3:8a:e9:a0:cc:48:7e:b9:50:dd:86:6d:13:c4:94:b4: fa:5b:fe:1e:25:39:1e:69:72:55:84:be:1c:ba:ff:71:68:29: aa:44:62:f0:1b:41:ea:08:77:90:3a:52:34:be:e0:ce:f7:bb: 3b:8f:bf:01:ec:05:55:21:34:71:a9:a8:f5:70:28:a5:7f:d2: bf:d2:6f:23:40:1b:3e:9a:e6:8f:25:25:1c:a8:22:f8:c9:e5: 0d:05:e2:8d:05:9d:c8:9e:4d:2b:cb:7c:fa:93:ed:e1:2c:f4: 92:e3:7f:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tFTRmXNHMQVGomVckZCfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDY4YTllYjg2YTgyNjRlOWRkYzMxMjI4NDliODBjYzM0 MmY1ZGMwHhcNMjUxMjIwMDMwMTE3WhcNMjUxMjIxMDMwMTE3WjAzMTEwLwYDVQQD Eyg3ODJiNGMwN2VmMGVkN2I2NjRjYjBmNmNlMzVmOTE2YTJmOTc3NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTIHUHPkBp0++KwEy5HRMXpGnC+Z SxgjqzPnmX8ckKSpvLReQoGcOPXrD0NzuNczIa1PpuRu+QTKpgCa74KCeGwB0zEt Rwa8we75BTqwtPC8tYqWIkHFLyn/FXy2rEBrZzUCk75bwBZjwBudZyVUqZGnYqQu RLG9yK/1W9Rcm5uSPbTZxqXbNBC/aPXVytUl9iWea5MgnHO848Uk3OdHqZ8FqoPg +wm/h10mLs5GYS6cVUiccaWBYnl2iEfBK7T63Z3L5+DMp8yya4uqH+uznm9W1O8F dzTe/0cYY3yPqJ58XVQDiVX3JmxNJAAKEIL4Mju2HPQ6py/skG8Jw/MAkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgrTAfvDte2ZMsPbONfkWovl3ZQMB8GA1UdIwQY MBaAFOfWip64aoJk6d3DEihJuAzDQvXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUt ZjBkNDBmMDI5NjczLzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUtZjBkNDBmMDI5Njcz LzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAA41JfY WkHRTFZCx27J5uWEW1Zt+g99Vr9pGo3nmnCyih3FD3SdSWqob9KbDBogYsJF6wxz 9T1deiNhmX/akOp3U2Id+XNIUxhf8e/VW3ibfum6U4xABvxF8Ps088GLQYFL1UEL aiwM3/fqUeGQM8fGE7vLJAmcrYfVs/rPLlLQUm6OxwI7uUyPlEbNZSLDuP7Diumg zEh+uVDdhm0TxJS0+lv+HiU5HmlyVYS+HLr/cWgpqkRi8BtB6gh3kDpSNL7gzve7 O4+/AewFVSE0camo9XAopX/Sv9JvI0AbPprmjyUlHKgi+MnlDQXijQWdyJ5NK8t8 +pPt4Sz0kuN/gA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:47:44 2025 by rpki-client