This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft File: c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json) Hash identifier: uuzHUAIiFCGFzrIKDBIWDjZO+k2NV1JfU21sJynpvT4= Subject key identifier: AC:1D:A5:08:AA:8D:8F:ED:E4:1C:25:0E:72:07:F3:C9:6C:8B:AD:DE Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78 Certificate issuer: /CN=739f3ebcd26792b913c1dcb9941996e998f16078 Certificate serial: 019B8195A8D34424FCDFE040105B35C131D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft Manifest number: 17AC Signing time: Sat 03 Jan 2026 02:00:27 +0000 Manifest this update: Sat 03 Jan 2026 02:00:27 +0000 Manifest next update: Sun 04 Jan 2026 02:00:27 +0000 Files and hashes: 1: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: aXMWDzXbmu5WXm4vJq6sA8hY6dh4v1fzxpAOTQ7i/vQ=) 2: vHNaMxjl_jxvOB7TUQY7frZB4BA.roa (hash: tPeRf17Q/t/ooDmwNWzZrhi14ldaBDrCWvBhdfbsIYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:95:a8:d3:44:24:fc:df:e0:40:10:5b:35:c1:31:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078 Validity Not Before: Jan 3 02:00:27 2026 GMT Not After : Jan 4 02:00:27 2026 GMT Subject: CN=ac1da508aa8d8fede41c250e7207f3c96c8badde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:df:d3:b8:f2:0f:c3:16:b4:bd:04:df:4e:f0: 2e:12:3b:fa:37:f4:a4:10:70:88:a2:90:13:00:0f: 79:61:31:dc:5e:05:7d:ae:09:21:88:27:27:4b:33: 9c:5e:44:b4:09:f6:99:5a:88:ea:bb:c4:59:10:98: 2e:06:ae:d3:6f:8f:91:62:87:d0:09:63:21:44:3d: 13:42:45:13:05:ad:61:21:4b:70:7e:bc:38:5d:0a: 3e:b3:17:65:90:c9:42:22:e7:1b:1c:4d:e8:fe:ab: d0:b3:eb:83:82:50:2d:be:06:25:9f:28:12:76:e4: 91:1e:82:b2:fb:78:44:61:68:6f:40:a6:8b:e0:48: bc:f9:3f:39:95:66:26:1c:b3:50:ea:bd:3e:e6:37: 8e:13:02:8e:7e:cb:82:5e:b0:a8:b7:8a:c5:1d:f0: cd:0d:a6:5e:58:85:ab:f2:2e:30:07:e2:6c:c6:08: c8:fe:b8:f1:23:c6:81:6c:ae:32:c3:9a:0a:8a:b7: 58:d2:5e:f7:a6:2e:21:d9:5a:b7:e8:95:65:96:01: b4:c7:d8:ea:93:78:7c:d9:22:25:8b:20:77:f3:08: 63:7f:b9:2d:cc:cb:ed:71:8a:37:15:5b:c3:2e:c1: 95:1e:43:ec:3d:a6:35:76:6a:dc:a0:36:0e:e8:e4: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1D:A5:08:AA:8D:8F:ED:E4:1C:25:0E:72:07:F3:C9:6C:8B:AD:DE X509v3 Authority Key Identifier: keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b4:b9:41:21:41:0b:a8:8f:2f:5e:76:a5:b0:af:e3:09:c2: f3:6d:e7:65:ef:df:66:10:d3:77:e3:9c:ae:db:4d:4a:3a:46: 67:3b:07:71:98:77:6c:fc:28:5d:eb:3d:1b:9f:f0:e0:88:81: b4:7c:6a:1c:fe:0e:40:d1:13:24:8f:17:56:0b:ad:dc:4d:2d: 22:a5:c0:53:a3:46:fc:d2:53:dc:01:8b:9c:16:a2:99:d6:c2: 18:09:c7:ee:49:c8:06:8d:90:a9:9b:20:e7:d2:02:8b:ca:9e: 53:77:3c:48:57:3a:fb:64:f7:ae:6d:de:43:f0:5a:6c:e8:d7: da:57:29:73:66:3e:98:18:01:15:5f:48:6c:42:0a:0c:da:1f: 1f:a1:1c:67:3b:1e:b3:97:f2:d7:e7:16:f4:cc:40:1b:73:c3: d4:55:4f:bf:2f:c5:fa:63:08:be:49:46:5b:d2:39:ff:11:47: 24:e0:5c:e2:97:d9:2e:50:2f:4c:97:d4:e1:4c:72:f3:d0:d5: 1a:1b:10:f7:d8:87:2c:76:51:21:b5:90:53:8b:13:4a:78:5a: b9:5d:f9:0d:b8:85:ea:c6:8e:9f:c3:96:2e:ba:6e:e5:6f:6d: ef:73:11:5b:a1:c5:b0:db:72:78:45:b1:97:bc:7d:f3:ac:f4: 10:31:1a:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBlajTRCT83+BAEFs1wTHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczOWYzZWJjZDI2NzkyYjkxM2MxZGNiOTk0MTk5NmU5OThm MTYwNzgwHhcNMjYwMTAzMDIwMDI3WhcNMjYwMTA0MDIwMDI3WjAzMTEwLwYDVQQD EyhhYzFkYTUwOGFhOGQ4ZmVkZTQxYzI1MGU3MjA3ZjNjOTZjOGJhZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59/TuPIPwxa0vQTfTvAuEjv6N/Sk EHCIopATAA95YTHcXgV9rgkhiCcnSzOcXkS0CfaZWojqu8RZEJguBq7Tb4+RYofQ CWMhRD0TQkUTBa1hIUtwfrw4XQo+sxdlkMlCIucbHE3o/qvQs+uDglAtvgYlnygS duSRHoKy+3hEYWhvQKaL4Ei8+T85lWYmHLNQ6r0+5jeOEwKOfsuCXrCot4rFHfDN DaZeWIWr8i4wB+JsxgjI/rjxI8aBbK4yw5oKirdY0l73pi4h2Vq36JVllgG0x9jq k3h82SIliyB38whjf7ktzMvtcYo3FVvDLsGVHkPsPaY1dmrcoDYO6OT4pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwdpQiqjY/t5BwlDnIH88lsi63eMB8GA1UdIwQY MBaAFHOfPrzSZ5K5E8HcuZQZlumY8WB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzU4LXZOSm5rcmtUd2R5NWxCbVc2Wmp4WUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMmQ5OWUtYTdjMS00M2U4LTkzZjUt YTExYTk2ZDIxODYxLzEvYzU4LXZOSm5rcmtUd2R5NWxCbVc2Wmp4WUhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kMmQ5OWUtYTdjMS00M2U4LTkzZjUtYTExYTk2ZDIxODYx LzEvYzU4LXZOSm5rcmtUd2R5NWxCbVc2Wmp4WUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7S5QSFB C6iPL152pbCv4wnC823nZe/fZhDTd+OcrttNSjpGZzsHcZh3bPwoXes9G5/w4IiB tHxqHP4OQNETJI8XVgut3E0tIqXAU6NG/NJT3AGLnBaimdbCGAnH7knIBo2QqZsg 59ICi8qeU3c8SFc6+2T3rm3eQ/BabOjX2lcpc2Y+mBgBFV9IbEIKDNofH6EcZzse s5fy1+cW9MxAG3PD1FVPvy/F+mMIvklGW9I5/xFHJOBc4pfZLlAvTJfU4Uxy89DV GhsQ99iHLHZRIbWQU4sTSnhauV35DbiF6saOn8OWLrpu5W9t73MRW6HFsNtyeEWx l7x986z0EDEaWg== -----END CERTIFICATE-----Generated at Sat Jan 3 03:56:01 2026 by rpki-client