This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft File: 59aKnrhqgmTp3cMSKEm4DMNC9dw.mft (raw, json) Hash identifier: u6EbFIUOUcAiEP6tpYagjHv5FhttgmopOWxTVdWNdU8= Subject key identifier: 91:F3:44:F2:21:94:FF:15:3F:8B:3A:6B:21:5E:75:5C:20:36:9A:34 Authority key identifier: E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC Certificate issuer: /CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc Certificate serial: 019B589A66DC15ED223ADAC1E10BF8A3EE58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft Manifest number: 14B0 Signing time: Fri 26 Dec 2025 03:01:12 +0000 Manifest this update: Fri 26 Dec 2025 03:01:12 +0000 Manifest next update: Sat 27 Dec 2025 03:01:12 +0000 Files and hashes: 1: 59aKnrhqgmTp3cMSKEm4DMNC9dw.crl (hash: sx7o17s1eS0E+U6R/YJgN/R74m13vb1vZr3RgTTia8w=) 2: qetS73-OE2CSttiMvug0TDfkr54.roa (hash: f7CQ5AXCS66V7YOxpVoih8o6XmqrwIeswAWr26eRNls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:9a:66:dc:15:ed:22:3a:da:c1:e1:0b:f8:a3:ee:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d68a9eb86a8264e9ddc3122849b80cc342f5dc Validity Not Before: Dec 26 03:01:12 2025 GMT Not After : Dec 27 03:01:12 2025 GMT Subject: CN=91f344f22194ff153f8b3a6b215e755c20369a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:fb:8d:37:7c:a6:44:ad:53:57:0c:0a:5c: e8:4f:63:12:1a:24:2b:e2:f5:62:a9:e4:e4:cc:6e: f7:cb:c3:1c:cb:99:02:8a:6c:51:e5:a6:19:76:27: 25:d3:e3:c0:af:ae:00:a4:68:88:77:5f:5d:a5:84: 6d:e9:7b:a3:6f:96:4e:13:e4:b6:c4:b5:47:31:fc: 5e:ff:7c:d3:ad:70:83:c4:7f:7a:83:7f:cf:8a:fd: a4:2b:96:da:6a:ed:3d:86:2d:a7:11:d7:c9:23:a7: 6f:90:3d:51:8d:de:c9:b9:86:69:94:ba:bb:9d:1b: 28:13:7b:1f:01:92:01:17:81:8c:77:22:5d:73:a4: 9b:5e:a9:72:35:7b:94:e3:a9:f9:d8:f3:74:d1:04: 6f:ac:37:66:8d:fe:3d:68:39:0d:06:56:d0:7e:0c: f9:bd:fc:c3:42:9c:51:ff:c1:d8:b7:db:45:ae:24: 7c:87:3a:a4:97:ab:f4:b6:96:1b:30:12:cb:c9:55: 96:9e:a8:d3:74:76:41:b8:51:7a:72:f6:51:47:db: 0e:7c:46:66:e1:33:c9:33:39:af:8e:29:db:45:7a: 9f:65:c2:1c:59:0f:e4:98:65:93:fd:cc:c8:ce:ed: 3d:fe:91:9b:c9:a7:f1:b8:2d:e1:e6:56:70:72:dd: f9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F3:44:F2:21:94:FF:15:3F:8B:3A:6B:21:5E:75:5C:20:36:9A:34 X509v3 Authority Key Identifier: keyid:E7:D6:8A:9E:B8:6A:82:64:E9:DD:C3:12:28:49:B8:0C:C3:42:F5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59aKnrhqgmTp3cMSKEm4DMNC9dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/565ea1-2a36-4403-941e-f0d40f029673/1/59aKnrhqgmTp3cMSKEm4DMNC9dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:cf:29:b2:bb:6c:7e:ff:1e:cc:9a:60:c0:7c:e4:72:56:1f: 9b:89:fa:7d:51:69:21:a1:a7:ad:9a:66:54:c2:6a:5a:20:ae: 6c:86:0f:1e:ba:5f:64:a2:37:d6:4e:77:a4:ec:95:54:a1:48: 4a:8c:d3:91:b0:f9:eb:20:e7:0f:d1:b5:1c:f5:75:7a:3f:5c: 35:e8:34:87:ca:b5:63:d0:1a:db:51:13:e7:b8:e2:01:57:5a: ec:a6:8e:1d:bd:bd:dc:73:aa:f3:9e:7b:63:99:fc:c2:e1:4a: 82:ed:1c:93:19:83:1b:26:71:ee:c9:36:7d:bd:2a:ee:e3:e8: 3d:ad:a3:c9:8c:86:ff:9b:fa:02:7e:5f:89:de:97:67:3f:3f: b3:9d:76:fc:a8:a0:43:22:b1:81:f3:5f:b6:04:d4:7f:39:d2: cf:0e:a0:83:34:70:28:1d:ce:12:c3:dd:81:61:bd:cc:d6:7f: 4a:0a:6b:15:c7:fa:0b:78:0f:a0:d8:69:c6:a9:6f:84:45:9f: ee:34:aa:d1:72:cc:b3:df:11:04:b2:3d:50:e8:8b:21:76:ba: 68:1a:d4:b2:32:d6:11:26:3e:ba:43:b6:16:7d:4e:d3:a5:7d: 49:08:09:5a:7f:d1:d9:72:b2:a5:ff:2e:7d:fa:bf:f3:6c:62: 4c:1b:23:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYmmbcFe0iOtrB4Qv4o+5YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDY4YTllYjg2YTgyNjRlOWRkYzMxMjI4NDliODBjYzM0 MmY1ZGMwHhcNMjUxMjI2MDMwMTEyWhcNMjUxMjI3MDMwMTEyWjAzMTEwLwYDVQQD Eyg5MWYzNDRmMjIxOTRmZjE1M2Y4YjNhNmIyMTVlNzU1YzIwMzY5YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeH7jTd8pkStU1cMClzoT2MSGiQr 4vViqeTkzG73y8Mcy5kCimxR5aYZdicl0+PAr64ApGiId19dpYRt6Xujb5ZOE+S2 xLVHMfxe/3zTrXCDxH96g3/Piv2kK5baau09hi2nEdfJI6dvkD1Rjd7JuYZplLq7 nRsoE3sfAZIBF4GMdyJdc6SbXqlyNXuU46n52PN00QRvrDdmjf49aDkNBlbQfgz5 vfzDQpxR/8HYt9tFriR8hzqkl6v0tpYbMBLLyVWWnqjTdHZBuFF6cvZRR9sOfEZm 4TPJMzmvjinbRXqfZcIcWQ/kmGWT/czIzu09/pGbyafxuC3h5lZwct35jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHzRPIhlP8VP4s6ayFedVwgNpo0MB8GA1UdIwQY MBaAFOfWip64aoJk6d3DEihJuAzDQvXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUt ZjBkNDBmMDI5NjczLzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy81NjVlYTEtMmEzNi00NDAzLTk0MWUtZjBkNDBmMDI5Njcz LzEvNTlhS25yaHFnbVRwM2NNU0tFbTRETU5DOWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM8psrts fv8ezJpgwHzkclYfm4n6fVFpIaGnrZpmVMJqWiCubIYPHrpfZKI31k53pOyVVKFI SozTkbD56yDnD9G1HPV1ej9cNeg0h8q1Y9Aa21ET57jiAVda7KaOHb293HOq8557 Y5n8wuFKgu0ckxmDGyZx7sk2fb0q7uPoPa2jyYyG/5v6An5fid6XZz8/s512/Kig QyKxgfNftgTUfznSzw6ggzRwKB3OEsPdgWG9zNZ/SgprFcf6C3gPoNhpxqlvhEWf 7jSq0XLMs98RBLI9UOiLIXa6aBrUsjLWESY+ukO2Fn1O06V9SQgJWn/R2XKypf8u ffq/82xiTBsjqA== -----END CERTIFICATE-----Generated at Fri Dec 26 09:38:15 2025 by rpki-client