This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft File: 58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json) Hash identifier: DVSnUVAnc+ya6xB7fsCiPb8eKOmfBglLGAruwhvN2GY= Subject key identifier: 67:C3:6D:40:01:DB:31:40:F4:AB:A8:95:BF:53:D1:62:6B:C5:91:12 Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2 Certificate issuer: /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2 Certificate serial: 019B582C0AB4EDF78D13E677C1930434A284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft Manifest number: 1191 Signing time: Fri 26 Dec 2025 01:00:39 +0000 Manifest this update: Fri 26 Dec 2025 01:00:39 +0000 Manifest next update: Sat 27 Dec 2025 01:00:39 +0000 Files and hashes: 1: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: 4Sbls+Zo1IjdGsama9EC0mUlrOK3buOsbxUUCT6JcPE=) 2: Gr2bTac37FdQF97pGkH13J5M8LQ.roa (hash: oaatGmufJtltyljxjCY0yrTcOMqVjEXZ2p4QbghN278=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:2c:0a:b4:ed:f7:8d:13:e6:77:c1:93:04:34:a2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2 Validity Not Before: Dec 26 01:00:39 2025 GMT Not After : Dec 27 01:00:39 2025 GMT Subject: CN=67c36d4001db3140f4aba895bf53d1626bc59112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:eb:de:a9:74:59:69:75:d2:8b:ed:dc:45: 02:78:a0:c1:c7:a5:d2:dd:e0:6a:62:20:c9:07:b5: ab:53:a6:de:cf:f3:a1:79:a5:f2:a9:23:fa:a5:3a: c7:f1:0e:73:11:bd:1f:e1:fd:01:3f:c6:9f:c8:60: 65:73:ca:c5:be:aa:86:3f:9d:82:73:f2:67:9f:b2: 8d:f4:e4:e8:36:4e:db:54:65:59:15:d1:d2:c9:a2: 81:9b:37:12:15:75:ad:ac:d1:25:1a:a0:bb:7e:e0: 2e:55:01:12:6f:0b:a9:5d:f6:60:99:29:7f:6f:24: fc:c8:bb:e9:0e:31:fd:8e:e4:b7:98:55:4d:e1:61: 9c:be:eb:a2:12:43:ae:24:2b:65:cd:51:41:a3:75: b6:ed:7a:82:bf:3f:81:3b:5a:c5:6f:f0:d6:b2:c2: 50:ce:21:de:58:f5:12:1e:06:ff:d4:bd:c4:aa:58: 1d:5c:a3:50:b2:65:cb:92:c5:60:3c:21:4d:50:46: 92:9f:a6:c6:21:a5:c9:f7:43:e9:12:49:27:3d:a3: 33:84:1a:e5:31:ac:b1:d8:70:3e:0e:da:57:2c:cc: 57:47:39:53:af:ad:d0:c8:25:5d:ba:8b:86:1d:0a: 21:2a:ff:5a:85:00:ce:c5:3c:c4:28:04:cf:f8:df: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C3:6D:40:01:DB:31:40:F4:AB:A8:95:BF:53:D1:62:6B:C5:91:12 X509v3 Authority Key Identifier: keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:97:f0:47:c7:af:a6:b0:02:4c:cb:e0:61:3e:26:90:7c:1e: 9c:f8:1e:a4:74:9b:51:5a:86:a1:c7:80:1e:52:12:88:29:22: bd:1e:da:bb:a5:47:f7:ee:e7:35:a1:05:50:b7:51:d6:95:62: f7:68:35:8d:34:2e:78:12:f3:45:4f:f4:c8:2b:96:d5:4b:b5: 6b:be:78:fe:57:d2:13:7e:be:cf:4d:21:bb:f5:87:a9:42:2d: ac:7f:04:cf:12:74:49:ac:e4:90:ec:02:bb:52:5c:19:71:01: 56:3d:c4:3b:53:39:4c:15:2c:e9:09:96:1b:b3:cb:ec:5f:69: a3:88:c0:d7:0f:f7:86:8d:51:8f:80:6f:a2:03:fa:2a:eb:d1: 4d:36:56:54:6b:d1:22:b6:c2:be:23:37:86:57:7b:7a:e0:b8: 3e:37:21:81:b5:17:58:af:e2:96:95:d5:15:53:1d:c8:02:b0: c5:c7:fb:d1:08:6b:09:39:1d:51:fe:2f:8a:1a:f0:23:76:b7: b6:f9:97:89:41:30:90:3a:eb:ad:b7:0e:56:c3:55:1a:3c:62: 0c:0c:4e:b8:90:b3:23:90:c7:78:b5:49:ad:87:f5:c0:48:e2: 4c:a5:60:96:96:20:b6:06:7d:cb:5f:ad:28:80:fe:dd:b5:87: 09:ad:c7:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYLAq07feNE+Z3wZMENKKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzdlYzhkNzgwNTAzZGI3Y2FiY2IxNDFkNmI5OTFjZDAy OWE2YTIwHhcNMjUxMjI2MDEwMDM5WhcNMjUxMjI3MDEwMDM5WjAzMTEwLwYDVQQD Eyg2N2MzNmQ0MDAxZGIzMTQwZjRhYmE4OTViZjUzZDE2MjZiYzU5MTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fzr3ql0WWl10ovt3EUCeKDBx6XS 3eBqYiDJB7WrU6bez/OheaXyqSP6pTrH8Q5zEb0f4f0BP8afyGBlc8rFvqqGP52C c/Jnn7KN9OToNk7bVGVZFdHSyaKBmzcSFXWtrNElGqC7fuAuVQESbwupXfZgmSl/ byT8yLvpDjH9juS3mFVN4WGcvuuiEkOuJCtlzVFBo3W27XqCvz+BO1rFb/DWssJQ ziHeWPUSHgb/1L3EqlgdXKNQsmXLksVgPCFNUEaSn6bGIaXJ90PpEkknPaMzhBrl Mayx2HA+DtpXLMxXRzlTr63QyCVduouGHQohKv9ahQDOxTzEKATP+N+WmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfDbUAB2zFA9Kuolb9T0WJrxZESMB8GA1UdIwQY MBaAFOfH7I14BQPbfKvLFB1rmRzQKaaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThmc2pYZ0ZBOXQ4cThzVUhXdVpITkFwcHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82NzRlNzYtNDI0NS00MDJkLTljNTEt ZDJkMmFiYTI4ZTgwLzEvNThmc2pYZ0ZBOXQ4cThzVUhXdVpITkFwcHFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82NzRlNzYtNDI0NS00MDJkLTljNTEtZDJkMmFiYTI4ZTgw LzEvNThmc2pYZ0ZBOXQ4cThzVUhXdVpITkFwcHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJfwR8ev prACTMvgYT4mkHwenPgepHSbUVqGoceAHlISiCkivR7au6VH9+7nNaEFULdR1pVi 92g1jTQueBLzRU/0yCuW1Uu1a754/lfSE36+z00hu/WHqUItrH8EzxJ0SazkkOwC u1JcGXEBVj3EO1M5TBUs6QmWG7PL7F9po4jA1w/3ho1Rj4BvogP6KuvRTTZWVGvR IrbCviM3hld7euC4PjchgbUXWK/ilpXVFVMdyAKwxcf70QhrCTkdUf4vihrwI3a3 tvmXiUEwkDrrrbcOVsNVGjxiDAxOuJCzI5DHeLVJrYf1wEjiTKVglpYgtgZ9y1+t KID+3bWHCa3HQA== -----END CERTIFICATE-----Generated at Fri Dec 26 10:59:36 2025 by rpki-client