This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json) Hash identifier: fNFjwj0roGWOLPJKzwZjqdCcWtjHcyO+DsKkoinRcQM= Subject key identifier: 4A:CC:53:3F:6E:5E:E2:6C:E9:28:E5:EA:B6:3E:B1:EA:0D:38:18:97 Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31 Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31 Certificate serial: 019AF19B4388A0D06058406CE93C2EBF0599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=) 2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: wr91LRNdNjB1/+cHv2HrXVALamcpAK16ZIBawVzqE0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:43:88:a0:d0:60:58:40:6c:e9:3c:2e:bf:05:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31 Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=4acc533f6e5ee26ce928e5eab63eb1ea0d381897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:89:15:f2:58:da:78:44:cd:4d:f7:6b:73: f8:43:40:e7:b1:c5:23:54:4b:d4:90:08:85:4c:bd: 59:8f:aa:7c:45:40:d1:1a:52:f4:93:6d:3f:2e:25: d7:d1:95:55:dc:e1:3e:2a:6f:b3:c9:38:0a:f8:0a: 6e:ac:13:93:a2:e5:66:8c:00:5f:91:09:ad:39:ef: 38:7a:73:a9:c8:4b:9b:8d:ae:c5:07:53:83:d5:7b: 53:e2:45:b1:8e:48:d2:49:9b:55:8d:0e:67:8e:9e: bd:1b:49:b5:ff:bc:a9:47:0f:93:41:42:d2:1e:b6: bc:5f:26:1a:cd:a4:b7:26:3b:75:38:54:b0:fa:f7: a9:43:62:dc:d5:d2:64:f0:f8:4e:4f:13:11:5d:12: 1a:99:59:54:95:90:83:d5:10:7a:1f:18:93:ab:57: b3:79:6a:4a:b7:a5:7d:7f:f4:90:d8:90:19:a9:d7: 4a:fa:8b:f6:7a:fd:f3:ef:9a:6b:78:34:e5:cb:91: 92:64:20:d6:ed:8a:b3:e8:e2:08:ba:30:62:68:d2: df:93:38:84:e1:b0:25:e4:c1:e4:f7:cd:f6:4f:3e: a9:c3:07:a0:6b:e3:88:d9:92:8e:4a:b6:3d:2d:79: 97:f4:16:cd:88:37:06:a7:48:b8:f9:a4:05:78:60: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CC:53:3F:6E:5E:E2:6C:E9:28:E5:EA:B6:3E:B1:EA:0D:38:18:97 X509v3 Authority Key Identifier: keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:bc:8c:21:50:0d:8d:13:f7:18:44:a6:de:92:eb:3b:c9:2e: 57:f5:ad:6e:95:d4:64:ab:d6:c0:06:df:a8:4a:75:5b:64:da: 54:5c:9f:c7:f2:a2:6a:56:be:44:9b:32:97:cd:64:3c:79:8c: f8:81:11:bb:77:09:cb:51:73:f2:a5:ca:4d:d1:4f:1a:d0:4d: 16:21:5e:fd:fd:11:64:cd:01:26:30:7a:35:0c:b2:18:62:eb: 18:9e:83:31:ea:cf:fb:69:36:bd:47:33:d5:f1:c0:bf:22:a1: 55:ef:a9:b2:aa:3f:3b:2e:cc:34:bb:c4:ef:35:51:32:23:9b: b9:b1:2c:62:40:e6:19:f0:2e:58:ab:7f:34:3a:a4:51:d5:90: 93:7f:60:16:fe:26:e9:62:84:05:63:35:46:4d:94:04:ec:a6: c9:6d:f9:a0:4c:a0:5d:a5:5f:d2:67:8d:cc:5c:4c:89:9d:42: d9:dd:d6:73:0a:91:50:b4:34:a4:65:35:64:65:2d:a9:f0:30: 6f:bb:5e:a2:6f:9e:9f:77:78:1d:81:9a:05:6a:74:49:13:9f: 8a:54:3f:71:e8:6c:e6:e3:cb:77:85:d6:98:e3:ed:64:d3:32: 85:fb:29:f9:24:dc:71:b4:bc:b2:64:ed:07:bb:a1:4a:15:d5: 51:9a:17:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0OIoNBgWEBs6TwuvwWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWYwMmRiZDk3MjU5NWEzMWNhYmVhYjBjZDk1ZDcwNmE4 Y2RkMzEwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD Eyg0YWNjNTMzZjZlNWVlMjZjZTkyOGU1ZWFiNjNlYjFlYTBkMzgxODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+OJFfJY2nhEzU33a3P4Q0DnscUj VEvUkAiFTL1Zj6p8RUDRGlL0k20/LiXX0ZVV3OE+Km+zyTgK+ApurBOTouVmjABf kQmtOe84enOpyEubja7FB1OD1XtT4kWxjkjSSZtVjQ5njp69G0m1/7ypRw+TQULS Hra8XyYazaS3Jjt1OFSw+vepQ2Lc1dJk8PhOTxMRXRIamVlUlZCD1RB6HxiTq1ez eWpKt6V9f/SQ2JAZqddK+ov2ev3z75preDTly5GSZCDW7Yqz6OIIujBiaNLfkziE 4bAl5MHk9832Tz6pwwega+OI2ZKOSrY9LXmX9BbNiDcGp0i4+aQFeGAZ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErMUz9uXuJs6Sjl6rY+seoNOBiXMB8GA1UdIwQY MBaAFM+fAtvZcllaMcq+qwzZXXBqjN0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejU4QzI5bHlXVm94eXI2ckRObGRjR3FNM1RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80ZTdjZjktYTlkZi00YmEzLWFmNzct ZTI3MDdlMTk3NTQxLzEvejU4QzI5bHlXVm94eXI2ckRObGRjR3FNM1RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80ZTdjZjktYTlkZi00YmEzLWFmNzctZTI3MDdlMTk3NTQx LzEvejU4QzI5bHlXVm94eXI2ckRObGRjR3FNM1RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7yMIVAN jRP3GESm3pLrO8kuV/WtbpXUZKvWwAbfqEp1W2TaVFyfx/Kiala+RJsyl81kPHmM +IERu3cJy1Fz8qXKTdFPGtBNFiFe/f0RZM0BJjB6NQyyGGLrGJ6DMerP+2k2vUcz 1fHAvyKhVe+psqo/Oy7MNLvE7zVRMiObubEsYkDmGfAuWKt/NDqkUdWQk39gFv4m 6WKEBWM1Rk2UBOymyW35oEygXaVf0meNzFxMiZ1C2d3WcwqRULQ0pGU1ZGUtqfAw b7teom+en3d4HYGaBWp0SROfilQ/cehs5uPLd4XWmOPtZNMyhfsp+STccbS8smTt B7uhShXVUZoXGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:05 2025 by rpki-client