This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json) Hash identifier: Dc8THnHZfljRokrmeCKv6VFn3Zf3C4CC4JZ2pWlRSHo= Subject key identifier: FD:50:FF:48:8B:6F:63:E4:4F:45:F3:B8:F1:30:19:1C:14:8D:05:58 Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de Certificate serial: 019B5004C86BDBA9A4B31DF1B4BE7BAA249C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft Manifest number: 15D7 Signing time: Wed 24 Dec 2025 11:00:49 +0000 Manifest this update: Wed 24 Dec 2025 11:00:49 +0000 Manifest next update: Thu 25 Dec 2025 11:00:49 +0000 Files and hashes: 1: 1-mxTaqS9jnMIVzPA52AOuEvFZm4.roa (hash: 1RjRiQMb+qYiL+Zpi5jDEokqMnjDRUg4dGO0fKP7lfA=) 2: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: Uat6Gt5pad6BBegEcRmLKCrHRb1fYfscF7B5qXyKOSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:04:c8:6b:db:a9:a4:b3:1d:f1:b4:be:7b:aa:24:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de Validity Not Before: Dec 24 11:00:49 2025 GMT Not After : Dec 25 11:00:49 2025 GMT Subject: CN=fd50ff488b6f63e44f45f3b8f130191c148d0558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:93:71:05:37:1c:c1:b3:00:e1:3f:ec:5c: 39:dd:2b:78:40:09:4d:a9:6f:97:f3:dd:8d:46:ef: 6d:32:94:ac:44:86:e6:5d:ad:0c:99:16:d4:ac:d1: bc:0e:9c:87:a2:f2:5f:f9:f8:12:b9:d3:8e:42:9c: d4:94:e7:42:7e:aa:8f:0c:e0:7b:ab:86:02:50:ef: 67:97:fa:db:99:64:e0:00:07:61:23:e2:4b:d9:42: 2c:39:90:1c:92:b0:3f:11:97:ba:d9:8e:2c:26:a1: 17:fc:4d:44:e8:bc:80:1a:30:95:3a:a1:81:ca:9c: 25:03:f0:a6:68:f1:e1:7f:d6:16:4d:79:5f:a4:45: 17:cf:20:ca:67:4d:2f:7b:84:80:87:58:85:11:ac: 80:e1:60:f2:de:a4:d4:cc:66:b9:4e:8c:f2:4d:15: d3:e8:78:2a:70:11:44:5b:0b:a7:ef:6e:6a:91:e1: 6e:5d:bd:4a:a0:b5:48:91:c0:7b:d6:15:27:f6:6a: cf:fb:55:0b:43:dd:b6:48:27:35:65:79:c7:be:9d: 7f:b9:bd:49:ab:ed:96:5a:a8:8a:18:f0:af:b8:e4: c2:27:a5:21:f7:ff:a4:69:52:6f:ea:f7:3f:c5:8a: 75:e9:7b:7c:b6:02:eb:8b:85:b0:df:0c:28:ba:c4: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:50:FF:48:8B:6F:63:E4:4F:45:F3:B8:F1:30:19:1C:14:8D:05:58 X509v3 Authority Key Identifier: keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f3:93:ab:3f:a0:e5:66:93:79:7e:3a:c8:f5:33:61:f5:39: 90:cc:bb:6f:f8:7f:df:69:8f:17:6e:33:bb:f5:11:48:0e:5b: 81:b7:10:55:c2:58:ae:82:7a:c8:e8:fa:ad:b7:05:80:1d:35: 6b:fc:39:6f:e1:83:29:e5:a2:57:fb:90:6b:b4:f9:bb:2f:bf: c9:2b:f6:5d:39:71:e6:18:3c:cf:fe:7c:3f:53:a8:2c:5a:50: f0:ea:55:3e:df:a6:0f:3f:54:d9:cb:5e:2d:a3:63:01:f3:7d: b2:d1:0e:e4:8c:68:bc:75:ca:31:ba:60:09:69:9a:22:45:a8: 99:51:2b:b2:61:87:c6:56:de:78:17:33:5a:68:47:16:cd:9d: a5:19:99:c6:2d:08:01:3d:48:46:b8:19:70:d0:55:2f:a1:c4: 5b:97:a0:39:d6:94:c3:d7:98:0d:7b:10:e3:54:1b:68:9c:8f: 05:ac:b4:d7:8a:41:9e:c9:2b:e4:40:2c:4c:7d:bc:90:33:49: bb:e2:2d:04:73:6c:60:74:96:d7:bc:c0:00:ee:a2:fa:1a:62: 45:89:82:37:66:cb:a8:a0:4c:b3:2d:be:ec:dc:30:b6:6d:05: 9f:d9:52:2d:dc:dd:da:24:c3:8f:a6:0c:96:ee:5d:58:63:d9: 4a:c1:9a:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBMhr26mksx3xtL57qiScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDNlNDYzZjExY2NhZDA1NWQxNjYyZTAwOGMyYTk0ZjQy ZGU5ZGUwHhcNMjUxMjI0MTEwMDQ5WhcNMjUxMjI1MTEwMDQ5WjAzMTEwLwYDVQQD EyhmZDUwZmY0ODhiNmY2M2U0NGY0NWYzYjhmMTMwMTkxYzE0OGQwNTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomOTcQU3HMGzAOE/7Fw53St4QAlN qW+X892NRu9tMpSsRIbmXa0MmRbUrNG8DpyHovJf+fgSudOOQpzUlOdCfqqPDOB7 q4YCUO9nl/rbmWTgAAdhI+JL2UIsOZAckrA/EZe62Y4sJqEX/E1E6LyAGjCVOqGB ypwlA/CmaPHhf9YWTXlfpEUXzyDKZ00ve4SAh1iFEayA4WDy3qTUzGa5TozyTRXT 6HgqcBFEWwun725qkeFuXb1KoLVIkcB71hUn9mrP+1ULQ922SCc1ZXnHvp1/ub1J q+2WWqiKGPCvuOTCJ6Uh9/+kaVJv6vc/xYp16Xt8tgLri4Ww3wwousScjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1Q/0iLb2PkT0XzuPEwGRwUjQVYMB8GA1UdIwQY MBaAFOfT5GPxHMrQVdFmLgCMKpT0LeneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUt MjJiODQ5OGI1MTViLzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUtMjJiODQ5OGI1MTVi LzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPOTqz+g 5WaTeX46yPUzYfU5kMy7b/h/32mPF24zu/URSA5bgbcQVcJYroJ6yOj6rbcFgB01 a/w5b+GDKeWiV/uQa7T5uy+/ySv2XTlx5hg8z/58P1OoLFpQ8OpVPt+mDz9U2cte LaNjAfN9stEO5IxovHXKMbpgCWmaIkWomVErsmGHxlbeeBczWmhHFs2dpRmZxi0I AT1IRrgZcNBVL6HEW5egOdaUw9eYDXsQ41QbaJyPBay014pBnskr5EAsTH28kDNJ u+ItBHNsYHSW17zAAO6i+hpiRYmCN2bLqKBMsy2+7Nwwtm0Fn9lSLdzd2iTDj6YM lu5dWGPZSsGa9g== -----END CERTIFICATE-----Generated at Wed Dec 24 13:35:47 2025 by rpki-client