This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft File: 59CqrsABapJr7tz991g1gVW3G-8.mft (raw, json) Hash identifier: BeK5G76OS8PNr7UpMI4Ylv6ajMl8cTYEkLTrtL3mICw= Subject key identifier: 5C:CD:86:D8:B1:10:DD:E4:69:47:58:70:AD:8F:57:2D:87:52:6D:00 Authority key identifier: E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF Certificate issuer: /CN=e7d0aaaec0016a926beedcfdf758358155b71bef Certificate serial: 019AF19B99238926375D6141381076E5E39E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft Manifest number: 09EF Signing time: Sat 06 Dec 2025 03:01:37 +0000 Manifest this update: Sat 06 Dec 2025 03:01:37 +0000 Manifest next update: Sun 07 Dec 2025 03:01:37 +0000 Files and hashes: 1: 59CqrsABapJr7tz991g1gVW3G-8.crl (hash: gbx3QPgeP8k2bBX7+dBzClgZt7/gzdm1u4Y6X0IGEbE=) 2: TWbavJSlzl0yvrhE4VudASOWZFo.roa (hash: ur2N9sV1aoXG7CrT2cW2W2OoDmeobx2g2/VRIr5D2Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:99:23:89:26:37:5d:61:41:38:10:76:e5:e3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d0aaaec0016a926beedcfdf758358155b71bef Validity Not Before: Dec 6 03:01:37 2025 GMT Not After : Dec 7 03:01:37 2025 GMT Subject: CN=5ccd86d8b110dde469475870ad8f572d87526d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a1:1e:10:f5:46:10:b9:6d:ae:77:92:be:11: 59:da:bc:fe:cc:b1:7f:e3:ce:7d:5c:d7:67:13:5e: 28:0c:f2:13:29:65:f3:6d:38:02:e3:57:65:30:95: 82:d5:3a:e5:9f:c9:ed:a1:92:6d:b0:83:fc:4d:89: 4f:0a:8d:6a:34:a7:74:cb:d5:ca:a3:d7:10:bf:be: 88:53:24:d9:ba:ab:01:48:5c:49:36:66:95:c6:aa: 1f:12:dd:7a:e8:d3:e8:76:b8:98:59:d9:e0:0c:42: b7:a6:72:cf:88:56:6d:40:d4:a1:1a:2f:9c:bc:8e: e8:c7:51:e6:8f:8b:c9:51:b4:dd:c7:48:28:9a:30: e5:1a:9a:a2:9c:2b:d2:d0:1c:a8:f5:a8:99:ea:37: 48:e4:47:a9:9d:f0:bb:e9:a5:17:ba:b8:00:0a:03: c7:3e:67:62:dd:ec:b7:cd:38:ba:68:af:67:40:52: 0a:79:39:59:2e:c2:43:39:fc:3c:f4:93:37:a2:fc: 6a:4c:ca:c5:42:18:cd:61:07:15:df:b1:d3:30:6e: 2e:14:a6:01:cb:c9:a0:25:8d:37:fb:bc:3c:bc:96: b4:fa:57:e2:c7:82:9e:f7:9d:d5:bc:10:7e:18:9b: 93:91:f3:78:04:00:ea:36:09:17:4c:6d:af:62:fc: 52:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CD:86:D8:B1:10:DD:E4:69:47:58:70:AD:8F:57:2D:87:52:6D:00 X509v3 Authority Key Identifier: keyid:E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bd:45:1e:ba:26:88:a1:26:b9:40:e7:cc:31:bc:56:18:ec: d0:49:8b:07:7f:69:83:3f:7d:51:55:9a:7d:7f:90:45:fc:6b: 1c:0a:5f:e3:43:d1:2f:5e:ea:2b:43:b2:f0:11:f1:0b:54:4d: d8:36:a7:2e:24:7c:94:18:5c:a7:04:8a:2a:8e:8d:30:2c:04: 2c:01:3c:a8:ce:41:4b:a4:4b:64:c0:7c:0c:c4:c2:7f:55:31: 0f:47:55:5e:bf:aa:c9:96:84:b5:bc:cd:d6:00:5f:6d:59:f9: 27:d0:7c:b0:46:15:d3:69:bd:d3:99:a4:e4:e3:ed:d5:fa:06: f8:94:a5:fd:75:ad:a3:08:d6:11:da:ff:77:4b:9e:ce:c0:bc: 1b:c8:85:3f:2d:38:9a:d3:5c:c3:62:19:71:9d:01:7c:2f:4e: 51:ff:48:87:aa:18:e4:9d:2a:d3:f3:a5:22:13:11:0e:d8:c4: d9:07:12:aa:95:cd:47:93:e0:36:5e:44:61:ee:9f:86:fe:20: 47:53:cf:ca:34:e3:8b:a9:e9:d7:a6:33:1d:85:2f:44:8e:6c: 24:4c:a5:42:50:50:75:c5:6a:36:c6:4c:1a:c8:d1:02:77:84: d1:1a:18:b1:97:35:cf:4f:2f:19:63:47:dd:a5:23:bd:f5:cf: 88:5e:8a:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5kjiSY3XWFBOBB25eOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDBhYWFlYzAwMTZhOTI2YmVlZGNmZGY3NTgzNTgxNTVi NzFiZWYwHhcNMjUxMjA2MDMwMTM3WhcNMjUxMjA3MDMwMTM3WjAzMTEwLwYDVQQD Eyg1Y2NkODZkOGIxMTBkZGU0Njk0NzU4NzBhZDhmNTcyZDg3NTI2ZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaEeEPVGELltrneSvhFZ2rz+zLF/ 4859XNdnE14oDPITKWXzbTgC41dlMJWC1Trln8ntoZJtsIP8TYlPCo1qNKd0y9XK o9cQv76IUyTZuqsBSFxJNmaVxqofEt166NPodriYWdngDEK3pnLPiFZtQNShGi+c vI7ox1Hmj4vJUbTdx0gomjDlGpqinCvS0Byo9aiZ6jdI5EepnfC76aUXurgACgPH Pmdi3ey3zTi6aK9nQFIKeTlZLsJDOfw89JM3ovxqTMrFQhjNYQcV37HTMG4uFKYB y8mgJY03+7w8vJa0+lfix4Ke953VvBB+GJuTkfN4BADqNgkXTG2vYvxSHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzNhtixEN3kaUdYcK2PVy2HUm0AMB8GA1UdIwQY MBaAFOfQqq7AAWqSa+7c/fdYNYFVtxvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTlDcXJzQUJhcEpyN3R6OTkxZzFnVlczRy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy83NGNjMzQtMDdjNC00ZDBiLThkMWIt N2RjMjZkNTZkMDVkLzEvNTlDcXJzQUJhcEpyN3R6OTkxZzFnVlczRy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy83NGNjMzQtMDdjNC00ZDBiLThkMWItN2RjMjZkNTZkMDVk LzEvNTlDcXJzQUJhcEpyN3R6OTkxZzFnVlczRy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXL1FHrom iKEmuUDnzDG8Vhjs0EmLB39pgz99UVWafX+QRfxrHApf40PRL17qK0Oy8BHxC1RN 2DanLiR8lBhcpwSKKo6NMCwELAE8qM5BS6RLZMB8DMTCf1UxD0dVXr+qyZaEtbzN 1gBfbVn5J9B8sEYV02m905mk5OPt1foG+JSl/XWtowjWEdr/d0uezsC8G8iFPy04 mtNcw2IZcZ0BfC9OUf9Ih6oY5J0q0/OlIhMRDtjE2QcSqpXNR5PgNl5EYe6fhv4g R1PPyjTji6np16YzHYUvRI5sJEylQlBQdcVqNsZMGsjRAneE0RoYsZc1z08vGWNH 3aUjvfXPiF6KiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:04 2025 by rpki-client