This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json) Hash identifier: Bb0gs/CNNBncolcBj9UWmhlhQW8jwQLO8txX12gJ8mw= Subject key identifier: 63:BC:E8:94:96:61:2D:20:B1:5F:06:AF:69:68:B0:40:19:1C:F5:E7 Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b Certificate serial: 019B3CEC86BE04EC1D8B74CB2A8AFE35D594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft Manifest number: 0ACA Signing time: Sat 20 Dec 2025 18:01:32 +0000 Manifest this update: Sat 20 Dec 2025 18:01:32 +0000 Manifest next update: Sun 21 Dec 2025 18:01:32 +0000 Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: YE3gl+QI5xzr5OCaQUJ5aieWU5wKVxpDFt8ntLydA7A=) 2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:86:be:04:ec:1d:8b:74:cb:2a:8a:fe:35:d5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b Validity Not Before: Dec 20 18:01:32 2025 GMT Not After : Dec 21 18:01:32 2025 GMT Subject: CN=63bce89496612d20b15f06af6968b040191cf5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:20:8b:49:f9:b7:5a:57:4f:89:b4:ad:7a: 31:ae:96:47:95:89:23:d7:69:ab:a3:13:9d:43:59: 9a:cd:5e:35:34:be:59:41:7a:a6:fd:45:ca:69:6c: 58:1f:33:57:42:f5:86:42:5a:ee:33:e4:4d:ee:de: b4:3b:1c:58:94:65:ce:bd:51:db:16:f7:c2:44:40: 9b:38:c7:b8:19:27:e5:1b:cc:24:55:19:39:d6:b8: 12:b9:3a:b5:ee:3c:2a:30:2c:e8:78:78:18:e6:a4: 84:9a:e2:59:ff:53:2b:80:51:c8:09:9d:5f:e3:3e: eb:1a:c1:5f:3b:5b:ba:03:fb:3f:dc:e2:21:26:f8: 2a:96:5a:af:97:ba:46:14:ca:25:46:8a:f7:7a:46: 65:12:f6:c8:ed:65:bb:9b:ef:85:21:4a:6f:fb:56: 7f:a0:18:11:a9:3a:c3:22:4f:d1:b3:42:d5:05:77: d1:ce:ba:b1:a2:62:ef:9b:1b:fd:04:5c:eb:75:d0: 9e:a7:ce:b9:20:e8:50:b4:d8:6b:99:a2:ee:be:86: c0:c9:75:0a:cf:d2:bd:78:2d:2c:02:db:fb:b9:43: a4:20:95:2a:0e:2e:a3:65:2f:d6:6d:a3:7f:99:01: 78:6a:04:ba:5c:f1:44:de:a7:41:98:2b:8f:34:18: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BC:E8:94:96:61:2D:20:B1:5F:06:AF:69:68:B0:40:19:1C:F5:E7 X509v3 Authority Key Identifier: keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:56:51:ac:0c:f8:dc:73:64:d6:fb:ab:76:26:75:34:0b:29: b2:ba:33:72:fe:19:9a:40:1a:ee:00:ed:a6:54:37:ad:62:62: 2f:4a:07:a5:09:db:cc:61:69:8d:d8:81:5f:fa:0d:e3:71:43: fd:fb:ca:b3:91:a4:17:91:78:70:57:13:79:38:98:ef:3f:5d: 2e:39:12:fa:4a:a8:7a:9b:b4:77:97:f9:cb:de:12:cd:a9:ea: b9:45:c5:49:c0:fe:06:eb:11:b2:74:82:96:ef:c5:65:bf:12: cd:57:c3:78:ce:29:2e:31:86:cd:a7:53:57:2b:96:9f:0a:d2: a9:eb:47:19:33:5a:89:e8:f2:1d:27:63:93:d7:ee:17:23:af: 7e:cd:51:cc:62:78:79:83:28:cd:6d:ae:e4:ae:8b:08:47:c0: 11:10:e8:6e:9e:15:2d:96:c4:db:ac:2c:13:ef:81:86:99:95: 1e:cb:3a:3c:c8:22:59:86:4a:e9:df:0d:b9:17:70:a7:61:1c: fb:60:3c:54:31:b6:dc:e1:ef:d6:56:dc:13:9f:33:88:7e:e0: 2a:03:08:63:59:81:db:50:34:56:b8:cc:2a:e2:21:10:81:41: 11:64:81:01:a6:ec:97:07:64:83:49:60:66:29:90:6d:47:9b: fc:17:41:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Ia+BOwdi3TLKor+NdWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2M4NjI2MTM4YmYxZTljYjNmZDFmZWMyNmM2OGM0YTYz NDA5NmIwHhcNMjUxMjIwMTgwMTMyWhcNMjUxMjIxMTgwMTMyWjAzMTEwLwYDVQQD Eyg2M2JjZTg5NDk2NjEyZDIwYjE1ZjA2YWY2OTY4YjA0MDE5MWNmNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA350gi0n5t1pXT4m0rXoxrpZHlYkj 12mroxOdQ1mazV41NL5ZQXqm/UXKaWxYHzNXQvWGQlruM+RN7t60OxxYlGXOvVHb FvfCRECbOMe4GSflG8wkVRk51rgSuTq17jwqMCzoeHgY5qSEmuJZ/1MrgFHICZ1f 4z7rGsFfO1u6A/s/3OIhJvgqllqvl7pGFMolRor3ekZlEvbI7WW7m++FIUpv+1Z/ oBgRqTrDIk/Rs0LVBXfRzrqxomLvmxv9BFzrddCep865IOhQtNhrmaLuvobAyXUK z9K9eC0sAtv7uUOkIJUqDi6jZS/WbaN/mQF4agS6XPFE3qdBmCuPNBiGkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO86JSWYS0gsV8Gr2losEAZHPXnMB8GA1UdIwQY MBaAFOfMhiYTi/Hpyz/R/sJsaMSmNAlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWIt ZjVjMDlmZjM4YTAwLzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWItZjVjMDlmZjM4YTAw LzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVZRrAz4 3HNk1vurdiZ1NAspsrozcv4ZmkAa7gDtplQ3rWJiL0oHpQnbzGFpjdiBX/oN43FD /fvKs5GkF5F4cFcTeTiY7z9dLjkS+kqoepu0d5f5y94SzanquUXFScD+BusRsnSC lu/FZb8SzVfDeM4pLjGGzadTVyuWnwrSqetHGTNaiejyHSdjk9fuFyOvfs1RzGJ4 eYMozW2u5K6LCEfAERDobp4VLZbE26wsE++BhpmVHss6PMgiWYZK6d8NuRdwp2Ec +2A8VDG23OHv1lbcE58ziH7gKgMIY1mB21A0VrjMKuIhEIFBEWSBAabslwdkg0lg ZimQbUeb/BdBlg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:32 2025 by rpki-client