This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json) Hash identifier: cYmvR9Jsm34A0K76lEW8iTtLsJIb1QW6sKEYPxt1b5A= Subject key identifier: EE:40:B9:3C:E5:91:96:95:21:32:8A:A3:5D:CA:05:0B:09:66:34:17 Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b Certificate serial: 019B72FEA6BE2257A09426C66B818A028AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft Manifest number: 0AE6 Signing time: Wed 31 Dec 2025 06:00:49 +0000 Manifest this update: Wed 31 Dec 2025 06:00:49 +0000 Manifest next update: Thu 01 Jan 2026 06:00:49 +0000 Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: 84ptx9sjf5VuDUGOBzxjxuMfOPKDtZwuXSDEEskzz28=) 2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:fe:a6:be:22:57:a0:94:26:c6:6b:81:8a:02:8a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b Validity Not Before: Dec 31 06:00:49 2025 GMT Not After : Jan 1 06:00:49 2026 GMT Subject: CN=ee40b93ce591969521328aa35dca050b09663417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:97:ed:fa:b4:4c:ea:c7:2a:73:08:de:87: a8:ea:a9:08:59:ac:bd:b1:69:41:a6:ed:b4:28:df: de:c7:00:4e:dd:b4:10:81:6f:42:bb:b8:b4:59:d7: 26:d2:b5:dc:01:b8:17:fc:42:d4:4e:8f:d4:ee:6e: e1:29:c7:b1:73:3a:e2:b5:38:9b:08:03:8f:01:6b: a1:60:c6:3a:dd:36:8a:2a:2d:5f:8b:39:3e:e4:19: 55:80:e4:24:c0:33:11:fd:fe:07:b9:e0:12:5c:72: 09:29:dc:35:e9:39:02:6b:81:4c:df:5e:ee:ff:be: 97:87:c1:36:63:72:98:08:45:c7:fc:bf:88:30:9f: 10:2b:25:b2:97:e8:8f:9e:28:f9:f6:68:1d:cd:6e: 70:e8:be:10:33:22:29:16:1f:f0:52:98:0e:ce:e7: 79:f8:01:42:ed:83:d3:0c:39:17:17:26:f4:1d:bf: d2:82:68:e9:04:35:6c:01:52:db:90:60:d3:d0:3a: 1d:a5:44:da:32:07:87:97:d9:4e:eb:dc:82:a4:35: 18:b0:3e:32:b4:09:77:8f:ed:f7:90:d8:73:c8:98: 7c:d7:1f:fa:71:83:3a:29:65:d6:61:0d:81:6f:28: 1d:38:89:53:f1:c1:dd:df:49:72:a1:86:22:66:5f: 8d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:40:B9:3C:E5:91:96:95:21:32:8A:A3:5D:CA:05:0B:09:66:34:17 X509v3 Authority Key Identifier: keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b4:a0:b5:ce:f6:eb:fb:09:f2:e3:e4:72:99:f0:3a:bf:95: ea:94:88:48:88:66:00:c6:0c:a1:85:19:30:11:ae:f8:a8:03: 39:71:9e:98:fa:a9:7f:a4:5b:06:dd:d4:06:bb:01:6e:b6:39: 31:78:1c:60:0e:b2:20:a8:5b:d0:14:d6:fe:5e:17:a3:7e:1b: 5b:06:c9:c9:60:1a:ea:89:e5:fa:31:48:89:df:4c:c6:18:ec: b9:42:b0:02:e5:75:c9:12:cf:ea:cf:7e:67:22:7c:e5:07:0c: 1f:31:d7:ac:6d:de:43:9b:ab:55:d7:7c:05:6b:f4:c3:8b:34: 19:bb:15:d4:87:82:db:9d:8d:bc:7a:62:ce:a3:ad:13:93:36: dd:82:b5:a4:84:4f:26:5b:82:21:27:0e:8c:4d:4e:90:47:d8: b4:75:f5:0d:c1:6c:0d:b4:aa:ed:2d:4a:e5:d2:1c:d8:aa:1b: 79:3e:14:cd:35:9b:52:57:c9:aa:f7:13:b3:98:ec:3a:1b:85: 1f:16:d1:d3:fc:ff:8f:cf:96:9d:6a:d2:48:5b:b7:f9:f3:37: 05:ba:a6:70:92:e1:24:5d:07:38:8f:58:22:ae:17:7c:df:e2: 8f:ca:49:5a:23:3c:12:1a:cd:02:1f:cd:17:72:e9:d3:1a:98: 39:a3:70:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZty/qa+IleglCbGa4GKAorBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2M4NjI2MTM4YmYxZTljYjNmZDFmZWMyNmM2OGM0YTYz NDA5NmIwHhcNMjUxMjMxMDYwMDQ5WhcNMjYwMTAxMDYwMDQ5WjAzMTEwLwYDVQQD EyhlZTQwYjkzY2U1OTE5Njk1MjEzMjhhYTM1ZGNhMDUwYjA5NjYzNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXyX7fq0TOrHKnMI3oeo6qkIWay9 sWlBpu20KN/exwBO3bQQgW9Cu7i0Wdcm0rXcAbgX/ELUTo/U7m7hKcexczritTib CAOPAWuhYMY63TaKKi1fizk+5BlVgOQkwDMR/f4HueASXHIJKdw16TkCa4FM317u /76Xh8E2Y3KYCEXH/L+IMJ8QKyWyl+iPnij59mgdzW5w6L4QMyIpFh/wUpgOzud5 +AFC7YPTDDkXFyb0Hb/SgmjpBDVsAVLbkGDT0DodpUTaMgeHl9lO69yCpDUYsD4y tAl3j+33kNhzyJh81x/6cYM6KWXWYQ2BbygdOIlT8cHd30lyoYYiZl+NyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5AuTzlkZaVITKKo13KBQsJZjQXMB8GA1UdIwQY MBaAFOfMhiYTi/Hpyz/R/sJsaMSmNAlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWIt ZjVjMDlmZjM4YTAwLzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWItZjVjMDlmZjM4YTAw LzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7Sgtc72 6/sJ8uPkcpnwOr+V6pSISIhmAMYMoYUZMBGu+KgDOXGemPqpf6RbBt3UBrsBbrY5 MXgcYA6yIKhb0BTW/l4Xo34bWwbJyWAa6onl+jFIid9MxhjsuUKwAuV1yRLP6s9+ ZyJ85QcMHzHXrG3eQ5urVdd8BWv0w4s0GbsV1IeC252NvHpizqOtE5M23YK1pIRP JluCIScOjE1OkEfYtHX1DcFsDbSq7S1K5dIc2KobeT4UzTWbUlfJqvcTs5jsOhuF HxbR0/z/j8+WnWrSSFu3+fM3BbqmcJLhJF0HOI9YIq4XfN/ij8pJWiM8EhrNAh/N F3Lp0xqYOaNw2w== -----END CERTIFICATE-----Generated at Wed Dec 31 07:45:24 2025 by rpki-client