This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json) Hash identifier: EpHuqLkanBvABhgO618tUDHxNMRnVFS/X0OdXGf4lMs= Subject key identifier: 6B:00:59:86:A8:4F:20:76:E4:FF:61:FE:13:4F:52:34:4F:63:8A:28 Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb Certificate serial: 019B3AFE45BC9EF25A9DA2F4BFDE7D9B6663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 09:01:41 +0000 Manifest this update: Sat 20 Dec 2025 09:01:41 +0000 Manifest next update: Sun 21 Dec 2025 09:01:41 +0000 Files and hashes: 1: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (hash: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=) 2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: 8p/4eYsASomOJl6RttxXqfCOEyK+csSLgKldy7cFtcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:45:bc:9e:f2:5a:9d:a2:f4:bf:de:7d:9b:66:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb Validity Not Before: Dec 20 09:01:41 2025 GMT Not After : Dec 21 09:01:41 2025 GMT Subject: CN=6b005986a84f2076e4ff61fe134f52344f638a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:b2:b0:c6:c3:4f:c4:2e:d9:df:bc:7b:9b: 12:f3:2f:b6:9c:8f:f2:39:30:9a:67:70:7c:e0:7f: 67:85:b9:8b:4d:e5:2b:0c:5b:31:ad:89:cf:35:62: ff:a3:a6:5a:64:41:76:bd:63:a4:35:ed:57:9e:d9: ae:b0:a6:c0:4a:16:59:5a:81:fe:66:7d:5b:d4:04: 54:58:0b:a3:f3:25:bd:ee:4e:17:42:23:07:c5:b2: e4:81:2f:1c:cb:a4:c8:5a:77:af:64:bd:7d:36:47: 1b:c1:ab:fa:9d:96:e2:84:a8:eb:7b:a2:59:22:7f: 16:1a:a8:d5:ac:88:95:4e:48:2f:51:2c:93:4e:b6: 74:53:d2:ff:03:ec:2b:07:83:9a:ec:93:ec:cc:14: 18:cb:5a:e9:dc:96:43:ad:df:6d:5c:3f:39:f1:25: 96:62:14:c3:60:81:88:55:0f:b9:1a:e0:f3:9b:c1: 18:c0:96:b0:c9:a6:a6:34:e4:21:44:ae:eb:36:df: 8c:14:c1:85:00:b2:e1:2a:87:3f:a7:99:19:22:36: 72:56:77:a8:da:3e:40:2e:9f:74:f7:46:63:a2:68: 9f:53:f2:f3:90:cc:da:98:33:8f:8d:e0:be:c6:45: 4e:91:d1:2d:fb:02:d8:00:6e:b4:42:7e:7c:40:8f: 50:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:00:59:86:A8:4F:20:76:E4:FF:61:FE:13:4F:52:34:4F:63:8A:28 X509v3 Authority Key Identifier: keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:2d:cc:26:9f:1b:61:e1:0b:97:13:fe:de:ce:07:f6:fe:bb: 00:5e:68:dc:a6:9a:58:e3:73:b4:e7:13:8e:de:7a:67:f4:6a: d3:62:ed:3f:53:f8:36:d7:4a:4d:ac:5e:88:d6:ff:59:3f:ed: f4:c3:d5:15:06:d3:93:bf:0e:8f:4e:97:18:a9:33:66:a5:af: b8:64:48:0f:72:29:fb:28:cd:3c:41:c6:6b:d9:25:31:1b:f0: e9:a1:64:0c:72:eb:88:35:e2:a6:f0:af:c8:88:11:cb:e3:7c: e1:79:9c:f1:5b:b0:0d:53:8f:d1:c8:30:cb:57:b0:5c:bd:6a: a3:11:80:27:bc:e8:5a:e4:d8:4c:9e:b7:ad:ca:b8:4c:63:e2: c3:b6:39:e5:f2:01:eb:5d:7f:a3:30:f8:96:0b:9e:24:d3:a8: 64:08:d6:d8:25:5c:f2:96:ca:3f:39:40:0d:6f:8e:46:d1:ff: 55:9c:0e:af:e6:73:dc:2b:33:9e:0e:ce:18:04:7b:77:a7:fa: 90:30:72:aa:b6:e2:0d:b1:2b:ed:33:1c:0b:03:9e:ae:b4:aa: c9:d1:8d:38:88:47:60:26:64:6b:15:2b:41:99:86:03:56:62: 63:76:56:75:34:32:34:3c:44:1e:2d:80:c2:d2:96:2d:8e:5a: 9e:7e:b3:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/kW8nvJanaL0v959m2ZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWYyNTgyODM1MTdkZjE5ODU5Mzg4ZTEzYmFkMWFlMDI2 OGE1ZmIwHhcNMjUxMjIwMDkwMTQxWhcNMjUxMjIxMDkwMTQxWjAzMTEwLwYDVQQD Eyg2YjAwNTk4NmE4NGYyMDc2ZTRmZjYxZmUxMzRmNTIzNDRmNjM4YTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj6ysMbDT8Qu2d+8e5sS8y+2nI/y OTCaZ3B84H9nhbmLTeUrDFsxrYnPNWL/o6ZaZEF2vWOkNe1XntmusKbAShZZWoH+ Zn1b1ARUWAuj8yW97k4XQiMHxbLkgS8cy6TIWnevZL19Nkcbwav6nZbihKjre6JZ In8WGqjVrIiVTkgvUSyTTrZ0U9L/A+wrB4Oa7JPszBQYy1rp3JZDrd9tXD858SWW YhTDYIGIVQ+5GuDzm8EYwJawyaamNOQhRK7rNt+MFMGFALLhKoc/p5kZIjZyVneo 2j5ALp9090ZjomifU/LzkMzamDOPjeC+xkVOkdEt+wLYAG60Qn58QI9QVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsAWYaoTyB25P9h/hNPUjRPY4ooMB8GA1UdIwQY MBaAFIufJYKDUX3xmFk4jhO60a4CaKX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81MjhlMjEtMjNiMi00NDM2LWJjOGIt OGY1ZTk5N2FiMWI1LzEvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81MjhlMjEtMjNiMi00NDM2LWJjOGItOGY1ZTk5N2FiMWI1 LzEvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArC3MJp8b YeELlxP+3s4H9v67AF5o3KaaWONztOcTjt56Z/Rq02LtP1P4NtdKTaxeiNb/WT/t 9MPVFQbTk78Oj06XGKkzZqWvuGRID3Ip+yjNPEHGa9klMRvw6aFkDHLriDXipvCv yIgRy+N84Xmc8VuwDVOP0cgwy1ewXL1qoxGAJ7zoWuTYTJ63rcq4TGPiw7Y55fIB 611/ozD4lgueJNOoZAjW2CVc8pbKPzlADW+ORtH/VZwOr+Zz3Cszng7OGAR7d6f6 kDByqrbiDbEr7TMcCwOerrSqydGNOIhHYCZkaxUrQZmGA1ZiY3ZWdTQyNDxEHi2A wtKWLY5ann6zLg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:34:16 2025 by rpki-client