This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json) Hash identifier: p0Xt+om+/st3qUeXyxJecXm9ghgg/onSh3OSAK8zV3E= Subject key identifier: E8:B2:7F:5A:12:92:D5:04:5E:E3:B7:FB:7F:6F:5B:C0:02:12:69:96 Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de Certificate serial: 019B21AC1F7A2A75285D5825715E84C9D05F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft Manifest number: 15BF Signing time: Mon 15 Dec 2025 11:01:26 +0000 Manifest this update: Mon 15 Dec 2025 11:01:26 +0000 Manifest next update: Tue 16 Dec 2025 11:01:26 +0000 Files and hashes: 1: 1-mxTaqS9jnMIVzPA52AOuEvFZm4.roa (hash: 1RjRiQMb+qYiL+Zpi5jDEokqMnjDRUg4dGO0fKP7lfA=) 2: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: 5IsPxrwsEmYNw4XNj6I+N5AKqXxnbhJd4E4/A+zVPKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ac:1f:7a:2a:75:28:5d:58:25:71:5e:84:c9:d0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de Validity Not Before: Dec 15 11:01:26 2025 GMT Not After : Dec 16 11:01:26 2025 GMT Subject: CN=e8b27f5a1292d5045ee3b7fb7f6f5bc002126996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2b:c6:28:52:5c:72:f7:37:56:9e:99:65:d8: 1f:bc:f7:c4:64:d3:a7:2a:83:28:3e:d8:33:4b:40: fe:88:31:d4:ad:14:9a:77:2e:7c:61:27:b0:ad:06: 35:5f:14:98:6d:44:d3:ec:52:d7:47:34:27:ae:76: 3e:39:76:bf:fe:80:12:7a:5f:cf:a5:04:09:db:64: ec:12:55:2d:d0:c9:3e:46:86:93:63:ab:b4:6f:b5: c8:53:51:4f:94:40:c8:af:07:c2:00:19:07:f7:af: 5c:78:32:13:32:2b:f8:74:1f:ad:a5:e0:f8:3a:0b: df:74:7e:4f:63:9d:48:ed:01:d7:f8:ee:fc:95:6f: f5:29:53:ba:73:fc:91:6b:9c:40:de:fd:f1:93:4b: 67:5b:1e:63:1a:23:bb:39:8c:85:6e:ab:28:66:4f: 21:4a:2d:24:73:30:80:9c:ce:59:df:83:e2:27:ea: c6:27:9e:ce:c4:ba:f9:d4:ef:e4:ae:bb:9e:21:89: ec:bb:e3:e0:a5:18:33:f7:4f:2c:61:fd:6d:48:bc: b2:a1:e0:21:f5:5d:5e:34:06:7f:cb:5d:8d:3d:6f: 2c:a7:ca:0c:95:ca:4d:99:0e:ce:04:b7:3b:55:92: 8e:22:84:59:89:1e:0f:e9:32:46:6c:de:86:c3:e1: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B2:7F:5A:12:92:D5:04:5E:E3:B7:FB:7F:6F:5B:C0:02:12:69:96 X509v3 Authority Key Identifier: keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9f:08:9d:1f:23:d5:8a:d2:d2:33:e9:bc:35:36:5c:e1:7f: 30:61:09:ce:eb:6b:74:84:b7:94:69:fc:97:fa:a7:9f:fa:b2: cf:06:c6:75:70:9c:94:cb:10:26:df:c2:6c:b3:4e:ef:13:e3: 56:2d:f2:9f:26:93:33:b8:c8:fe:e7:56:f2:71:d1:41:98:0b: c0:df:4e:ce:ac:bf:79:22:c7:ff:83:0f:54:09:c0:12:4e:c8: 48:2e:63:1f:f5:8b:0f:f1:57:18:d2:1b:a5:3f:7e:4f:76:83: 1f:44:4b:04:43:28:16:8e:e7:92:3f:30:1e:e2:f9:b1:a6:08: 87:89:15:e9:e4:0c:2b:9f:72:7e:a2:21:8b:8f:7e:f8:95:1b: 11:43:e2:75:70:52:06:10:3f:d4:89:1e:41:c9:6c:7a:21:3c: 33:69:b3:d2:69:53:27:6b:f8:03:b1:ef:90:31:e8:fc:23:9b: 0e:c1:fe:cb:39:5c:89:fa:22:76:62:57:13:34:a8:fd:a9:e0: 61:18:87:f1:51:72:51:19:d5:df:13:3e:32:d7:b3:67:ce:4e: fe:9a:68:75:a9:8c:ba:27:66:07:50:82:57:86:59:4d:cd:68: 2a:21:4c:b2:e6:30:33:e3:12:0d:5f:c2:be:83:48:6b:f8:bc: a5:51:9e:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshrB96KnUoXVglcV6EydBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDNlNDYzZjExY2NhZDA1NWQxNjYyZTAwOGMyYTk0ZjQy ZGU5ZGUwHhcNMjUxMjE1MTEwMTI2WhcNMjUxMjE2MTEwMTI2WjAzMTEwLwYDVQQD EyhlOGIyN2Y1YTEyOTJkNTA0NWVlM2I3ZmI3ZjZmNWJjMDAyMTI2OTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCvGKFJccvc3Vp6ZZdgfvPfEZNOn KoMoPtgzS0D+iDHUrRSady58YSewrQY1XxSYbUTT7FLXRzQnrnY+OXa//oASel/P pQQJ22TsElUt0Mk+RoaTY6u0b7XIU1FPlEDIrwfCABkH969ceDITMiv4dB+tpeD4 OgvfdH5PY51I7QHX+O78lW/1KVO6c/yRa5xA3v3xk0tnWx5jGiO7OYyFbqsoZk8h Si0kczCAnM5Z34PiJ+rGJ57OxLr51O/krrueIYnsu+PgpRgz908sYf1tSLyyoeAh 9V1eNAZ/y12NPW8sp8oMlcpNmQ7OBLc7VZKOIoRZiR4P6TJGbN6Gw+F+BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiyf1oSktUEXuO3+39vW8ACEmmWMB8GA1UdIwQY MBaAFOfT5GPxHMrQVdFmLgCMKpT0LeneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUt MjJiODQ5OGI1MTViLzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUtMjJiODQ5OGI1MTVi LzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn58InR8j 1YrS0jPpvDU2XOF/MGEJzutrdIS3lGn8l/qnn/qyzwbGdXCclMsQJt/CbLNO7xPj Vi3ynyaTM7jI/udW8nHRQZgLwN9Ozqy/eSLH/4MPVAnAEk7ISC5jH/WLD/FXGNIb pT9+T3aDH0RLBEMoFo7nkj8wHuL5saYIh4kV6eQMK59yfqIhi49++JUbEUPidXBS BhA/1IkeQclseiE8M2mz0mlTJ2v4A7HvkDHo/CObDsH+yzlcifoidmJXEzSo/ang YRiH8VFyURnV3xM+MtezZ85O/ppodamMuidmB1CCV4ZZTc1oKiFMsuYwM+MSDV/C voNIa/i8pVGeLw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:54:59 2025 by rpki-client