This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json) Hash identifier: NcMJ6qiw8e/l4DB+UaOkneNwRGvFWJk7CGCcvT7lWgI= Subject key identifier: 2A:AB:C0:AF:39:B5:95:2E:94:36:74:11:23:E1:6D:9B:14:CC:F6:8B Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019BF5E3B00F0ECC1F9E7728767E97ABF343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft Manifest number: 0CA4 Signing time: Sun 25 Jan 2026 16:01:38 +0000 Manifest this update: Sun 25 Jan 2026 16:01:38 +0000 Manifest next update: Mon 26 Jan 2026 16:01:38 +0000 Files and hashes: 1: 1-iqnIyKfffTeip77QQglSkGC66k.asa (hash: tm5ocWQ4F8iL11rdh167B46m++zYGle2Ua0389CC5aI=) 2: 1-nCQN0VaQ2ael-H6q4WDuaNQ3YY.asa (hash: KIdLVAXXfbqG6AUAL9K0nR+wv3qEFvVz82UnXZsV/e0=) 3: 4drBeY0WR_A1GPJtZA4YXlykfh4.roa (hash: uPxG8eo/1XvDANn6qBOuvVB20xa9nluualatLIHzSnQ=) 4: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: JTqfrrTCZ+nKjnrtQmP5nJRMTHrF49hEhhV8dkEcG9s=) 5: 7uHJu7In6geY62mGLWsA-BkgXxQ.roa (hash: pCDrNYSeQf8254wV63If3iDd+pDCOI3GCLUFpM1rWQ4=) 6: BOsl0qn4uIqkA_a-sd3d5l-tYXE.asa (hash: WTaPLVm9v1a65g9j7GNkbyW3n2otJVScGC1bf2hl4GA=) 7: BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa (hash: hmgm/Pnh2iZKFyyt03L0VwIKzZWIKaWyCr/JtLV+SZ0=) 8: OpTtVKAksYNEjp3sCGLjB77TEtQ.roa (hash: CAYkdDo7AOeXQO9VIZQbkqyLJ0Mm55TJfWGJgk3xupc=) 9: m_98aREObyeD712Ey5gRbDiZuLo.roa (hash: O+Oki3q+yMkC01ENxqqfabIW79L+GAIiTNddxHZ4sdw=) 10: o0nlrJylYIGYsWBjRFGVnG7mqFk.roa (hash: ytLMden+iVQSZ4MVhXxgpNGbvtp5EMg2V51G3jlU0Tc=) 11: qEsk61krs4UNghsWKgM1rpZTsAA.roa (hash: zR7J3cxzeRnLNGTYl/CdMoo52lC6GVsx4Ud+EzU7nAE=) 12: xSo_S4mp4KylJ282tG2KBfx1kB4.roa (hash: y6cL2LAD2UaFnNZj8A3tj8qtOaCatFdh20b64QN2mxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:b0:0f:0e:cc:1f:9e:77:28:76:7e:97:ab:f3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Jan 25 16:01:38 2026 GMT Not After : Jan 26 16:01:38 2026 GMT Subject: CN=2aabc0af39b5952e9436741123e16d9b14ccf68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d7:b9:ad:22:a1:21:11:d2:06:14:e1:fd:89: 89:fd:58:e0:dc:4b:bd:df:b4:50:b6:6b:6e:be:b8: a3:f8:35:e9:54:ef:7a:9d:01:cf:b1:08:6c:de:d4: 91:66:9a:f3:df:cf:e2:e4:75:4d:27:ee:84:aa:f6: bc:54:83:f5:fd:ee:87:47:31:e4:00:d8:65:94:da: c7:3b:f0:39:09:65:c0:60:ba:33:01:21:33:f8:6d: d6:21:a6:e9:2a:d9:e8:60:96:cf:1e:fe:7c:42:19: 81:4f:85:0f:af:d2:99:ab:83:34:3e:f6:c6:ae:d5: 0e:f5:e6:c5:21:37:4c:8c:33:ab:f2:26:b6:e0:1a: 4d:74:33:2f:b8:2a:6d:5c:f8:d7:f2:7e:95:e3:dc: 62:d5:dc:a0:28:4b:ba:d2:26:5e:2f:e8:50:2a:c3: eb:3c:b8:1d:ae:ef:78:91:c0:74:29:e0:fc:06:e5: 8e:65:98:d7:14:89:74:e8:a1:1a:c2:8d:93:95:be: 5d:f4:11:50:93:7b:a5:8a:75:99:b1:ac:31:ab:88: fd:1b:e9:88:df:36:4e:60:5f:e2:80:a9:da:38:80: 31:a5:fc:87:a3:56:51:d5:2c:90:ea:c3:ce:19:21: 63:e8:6c:79:f9:e7:99:03:39:36:cd:74:15:b6:c1: 2d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AB:C0:AF:39:B5:95:2E:94:36:74:11:23:E1:6D:9B:14:CC:F6:8B X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9d:b5:e0:a8:f7:d0:66:65:da:95:60:67:8f:c8:94:5d:f8: 08:b6:63:e4:9a:0b:7f:f7:21:f4:a8:e4:02:9f:b4:84:dd:39: 55:40:0a:9e:a9:9c:3a:34:e0:b3:2f:a0:ce:20:32:08:8a:ec: 0c:03:de:df:56:08:c4:f8:e1:b5:3f:64:e6:f6:f8:c6:45:aa: d3:14:88:96:ea:44:68:ec:b1:f4:13:c3:3a:38:46:30:26:31: 13:84:40:2e:c6:72:fc:36:5d:cf:76:ef:be:14:04:e5:13:1e: 68:5f:7c:fd:04:10:1a:80:03:77:8f:24:34:92:19:c9:bd:00: 19:23:b6:38:40:5a:65:73:44:98:ad:30:b1:b0:70:40:ad:ed: 9f:f3:9e:93:d0:b2:dd:09:01:96:ea:06:1f:94:d3:ad:90:f6: 04:8f:63:a1:29:89:83:9e:52:fc:44:1f:69:f5:c5:69:7a:11: 30:d5:8c:2d:a6:07:05:bf:4d:87:80:9f:fc:8e:fd:48:6a:3e: f3:8f:69:f5:ab:7f:9e:ee:e1:96:45:80:21:9e:30:18:54:22: f4:2d:68:19:14:76:b8:04:97:0f:0f:1e:e0:8a:6f:1e:e6:a2: fc:68:b6:e9:d7:2f:67:fa:72:e0:82:42:5a:5c:04:ca:54:7b: ef:fe:1e:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv147APDswfnncodn6Xq/NDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjYwMTI1MTYwMTM4WhcNMjYwMTI2MTYwMTM4WjAzMTEwLwYDVQQD EygyYWFiYzBhZjM5YjU5NTJlOTQzNjc0MTEyM2UxNmQ5YjE0Y2NmNjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3te5rSKhIRHSBhTh/YmJ/Vjg3Eu9 37RQtmtuvrij+DXpVO96nQHPsQhs3tSRZprz38/i5HVNJ+6Eqva8VIP1/e6HRzHk ANhllNrHO/A5CWXAYLozASEz+G3WIabpKtnoYJbPHv58QhmBT4UPr9KZq4M0PvbG rtUO9ebFITdMjDOr8ia24BpNdDMvuCptXPjX8n6V49xi1dygKEu60iZeL+hQKsPr PLgdru94kcB0KeD8BuWOZZjXFIl06KEawo2Tlb5d9BFQk3ulinWZsawxq4j9G+mI 3zZOYF/igKnaOIAxpfyHo1ZR1SyQ6sPOGSFj6Gx5+eeZAzk2zXQVtsEtqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqrwK85tZUulDZ0ESPhbZsUzPaLMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZ214Kj3 0GZl2pVgZ4/IlF34CLZj5JoLf/ch9KjkAp+0hN05VUAKnqmcOjTgsy+gziAyCIrs DAPe31YIxPjhtT9k5vb4xkWq0xSIlupEaOyx9BPDOjhGMCYxE4RALsZy/DZdz3bv vhQE5RMeaF98/QQQGoADd48kNJIZyb0AGSO2OEBaZXNEmK0wsbBwQK3tn/Oek9Cy 3QkBluoGH5TTrZD2BI9joSmJg55S/EQfafXFaXoRMNWMLaYHBb9Nh4Cf/I79SGo+ 849p9at/nu7hlkWAIZ4wGFQi9C1oGRR2uASXDw8e4IpvHuai/Gi26dcvZ/py4IJC WlwEylR77/4edA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:40:30 2026 by rpki-client