This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft File: 58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json) Hash identifier: 1w7oY5hT3xdwPrPYzIyRIDTZDKyFDemdrLYJeekkgD4= Subject key identifier: 49:97:C0:D0:41:AF:23:01:EA:27:C7:76:8D:80:14:D9:A6:BF:3A:1F Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B Certificate issuer: /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b Certificate serial: 019AF389BAF68DDBA56E9F95E4CBE5628A49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft Manifest number: 0AA4 Signing time: Sat 06 Dec 2025 12:01:21 +0000 Manifest this update: Sat 06 Dec 2025 12:01:21 +0000 Manifest next update: Sun 07 Dec 2025 12:01:21 +0000 Files and hashes: 1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: 4/0DZMU0hl7HQU3Afi5+Rj9ykIHBZq/+chO+m81cAhI=) 2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ba:f6:8d:db:a5:6e:9f:95:e4:cb:e5:62:8a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b Validity Not Before: Dec 6 12:01:21 2025 GMT Not After : Dec 7 12:01:21 2025 GMT Subject: CN=4997c0d041af2301ea27c7768d8014d9a6bf3a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:40:1f:4b:ac:7e:10:74:0e:75:ae:05:ba:1c: 61:1e:91:18:25:fc:dd:b3:b2:8a:93:e9:bb:bd:d6: cd:b7:15:2a:18:ee:67:8a:94:90:83:47:7c:a8:ab: 88:5d:0f:6e:d4:6c:a3:64:40:8b:a7:8c:99:3d:1c: 89:fd:ce:b9:f5:f9:93:10:55:bc:49:78:1e:8d:31: c2:b8:67:f9:55:58:54:76:e2:67:4f:97:d0:4d:36: 06:e8:f8:d8:89:25:1b:f1:de:7f:a6:e7:44:35:cc: 68:23:88:7e:ad:d9:35:b2:0f:1b:d0:51:cb:6c:0c: 79:f0:ba:29:8b:cd:9b:9a:94:ba:ce:24:38:c2:bd: 82:c5:07:8e:31:16:2c:73:b9:a8:45:df:66:d4:c5: c6:c5:46:4f:d0:78:94:87:2a:19:f9:41:b6:5b:4d: bb:37:eb:04:cb:39:95:29:e5:19:60:d3:9d:05:5d: 58:7a:e6:13:ff:e6:01:7f:a4:0f:76:2b:80:1a:ff: 18:a6:08:08:e9:b4:55:c8:54:27:d8:3d:02:b0:a9: d9:3a:2a:9e:12:80:3b:04:42:8e:9b:e1:da:ea:0f: f4:d5:53:97:33:37:b0:a6:1f:05:a5:df:8d:9f:04: 32:7b:10:4c:50:2f:1b:8b:de:72:1b:b2:5d:df:b2: 97:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:97:C0:D0:41:AF:23:01:EA:27:C7:76:8D:80:14:D9:A6:BF:3A:1F X509v3 Authority Key Identifier: keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0f:83:77:f1:27:4c:1e:27:c5:00:39:26:a3:e1:23:d0:a3: f8:f0:c1:db:dd:4e:f7:92:77:27:01:c2:be:42:8a:d1:2a:96: 89:c0:12:7a:d9:f6:75:ec:08:4a:45:1e:ad:11:57:81:0a:c1: 59:06:c9:71:c5:4f:32:6f:a2:cb:7c:0e:ae:9b:ca:77:b7:09: 1d:35:12:4a:c7:e7:07:4f:2c:c8:d0:2f:b5:db:86:5d:ac:1a: c6:32:10:ec:4a:fd:9d:96:5d:4b:08:56:9f:f2:2d:85:97:de: 60:f7:c7:c5:eb:e2:b7:b3:28:00:fe:a6:1e:e4:ad:f7:59:8b: d3:a5:08:6e:36:f8:0a:80:32:b7:24:7f:0f:af:36:82:09:72: 10:c5:ed:97:9f:d4:dd:6b:0e:48:da:4e:cd:14:b3:fd:17:2d: ed:99:54:a5:bb:12:30:82:5a:33:fc:4b:65:87:69:8f:80:c5: d4:84:91:49:08:e9:45:d3:3f:1f:42:47:2a:45:24:59:36:f8: c6:aa:0c:a8:af:b1:aa:b3:9a:39:a5:be:13:57:31:33:ac:02: a5:95:22:05:24:f0:55:f6:d9:18:0f:09:25:0e:30:88:98:a9: 7d:18:d0:d7:33:40:85:73:ba:be:15:1b:5d:36:5a:97:9b:41: 16:44:ba:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibr2jdulbp+V5MvlYopJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2M4NjI2MTM4YmYxZTljYjNmZDFmZWMyNmM2OGM0YTYz NDA5NmIwHhcNMjUxMjA2MTIwMTIxWhcNMjUxMjA3MTIwMTIxWjAzMTEwLwYDVQQD Eyg0OTk3YzBkMDQxYWYyMzAxZWEyN2M3NzY4ZDgwMTRkOWE2YmYzYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0AfS6x+EHQOda4FuhxhHpEYJfzd s7KKk+m7vdbNtxUqGO5nipSQg0d8qKuIXQ9u1GyjZECLp4yZPRyJ/c659fmTEFW8 SXgejTHCuGf5VVhUduJnT5fQTTYG6PjYiSUb8d5/pudENcxoI4h+rdk1sg8b0FHL bAx58Lopi82bmpS6ziQ4wr2CxQeOMRYsc7moRd9m1MXGxUZP0HiUhyoZ+UG2W027 N+sEyzmVKeUZYNOdBV1YeuYT/+YBf6QPdiuAGv8YpggI6bRVyFQn2D0CsKnZOiqe EoA7BEKOm+Ha6g/01VOXMzewph8Fpd+NnwQyexBMUC8bi95yG7Jd37KXkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmXwNBBryMB6ifHdo2AFNmmvzofMB8GA1UdIwQY MBaAFOfMhiYTi/Hpyz/R/sJsaMSmNAlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWIt ZjVjMDlmZjM4YTAwLzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84NmNjNDctZjBjMC00NzNhLWIxMWItZjVjMDlmZjM4YTAw LzEvNTh5R0poT0w4ZW5MUDlILXdteG94S1kwQ1dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgA+Dd/En TB4nxQA5JqPhI9Cj+PDB291O95J3JwHCvkKK0SqWicASetn2dewISkUerRFXgQrB WQbJccVPMm+iy3wOrpvKd7cJHTUSSsfnB08syNAvtduGXawaxjIQ7Er9nZZdSwhW n/IthZfeYPfHxevit7MoAP6mHuSt91mL06UIbjb4CoAytyR/D682gglyEMXtl5/U 3WsOSNpOzRSz/Rct7ZlUpbsSMIJaM/xLZYdpj4DF1ISRSQjpRdM/H0JHKkUkWTb4 xqoMqK+xqrOaOaW+E1cxM6wCpZUiBSTwVfbZGA8JJQ4wiJipfRjQ1zNAhXO6vhUb XTZal5tBFkS6kQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:51 2025 by rpki-client