This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft File: 59eZrg792Ybd53-zWtChCCPLly8.mft (raw, json) Hash identifier: 2ndZyPBQ5hE638G7HMknyd0gpzLiAR4BHzTwoiJge1M= Subject key identifier: 9D:AD:E7:45:86:86:48:57:15:EA:EA:BF:11:B0:0E:01:4F:C6:4B:38 Authority key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F Certificate issuer: /CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f Certificate serial: 019AF12DE60F16029B9238615636E1D52059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 01:01:48 +0000 Manifest this update: Sat 06 Dec 2025 01:01:48 +0000 Manifest next update: Sun 07 Dec 2025 01:01:48 +0000 Files and hashes: 1: 59eZrg792Ybd53-zWtChCCPLly8.crl (hash: oAd7RZyS5e6nLyQYUtq1NEL6mUX7W+Xo/Nq15e363Fc=) 2: Kvx8CFJShgrk9zFYI0lUsh--CwU.roa (hash: PVmg//o7LkW03D9ltn/laGXzfCJ6cNBsJDyBEL8Jj7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e6:0f:16:02:9b:92:38:61:56:36:e1:d5:20:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f Validity Not Before: Dec 6 01:01:48 2025 GMT Not After : Dec 7 01:01:48 2025 GMT Subject: CN=9dade7458686485715eaeabf11b00e014fc64b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:dd:c3:61:04:f9:d1:e0:5d:f9:e8:1a:e2: b6:4e:86:8e:16:d5:9d:62:ee:10:4d:e8:4d:3b:c3: 35:fb:0f:ed:40:f5:98:b0:f7:99:50:32:b2:7e:80: 21:c1:9d:34:6c:2a:1b:3a:56:e7:1f:5e:6b:52:71: 12:b2:63:ff:08:78:11:cc:9f:0f:1d:79:a1:cb:3d: 5d:45:c1:7c:09:c3:e3:79:8f:d5:50:70:92:5c:a6: 2a:4e:79:bd:5e:ed:c8:cc:d6:ec:84:77:32:4f:10: b2:05:e9:b5:46:62:c0:6b:3e:7e:80:1c:c7:4a:ae: ee:90:a6:9c:d4:5a:07:86:38:f6:e2:ee:96:be:a7: 25:13:e9:8f:ba:7c:26:33:b3:dd:3e:02:69:4d:f0: bb:21:d9:03:3b:84:ed:2d:80:f0:42:fb:fc:b0:5d: d8:f6:2c:66:1f:54:65:60:6f:4a:d7:61:ce:61:86: e3:3a:bf:d4:0f:b2:a6:5e:10:04:73:60:d6:3e:c6: 45:0b:57:93:fc:40:53:23:b0:34:2f:31:02:50:03: 5e:68:dd:98:dc:d9:ae:4f:34:85:0e:b7:62:ff:71: 36:4d:47:be:41:cf:27:f6:66:0b:bd:3a:1c:61:02: 74:77:f6:bf:e7:a1:9a:f3:9b:3b:3d:4c:c1:8d:bb: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AD:E7:45:86:86:48:57:15:EA:EA:BF:11:B0:0E:01:4F:C6:4B:38 X509v3 Authority Key Identifier: keyid:E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2f:c4:a6:0c:9a:93:97:e7:9f:b9:59:a2:9d:da:1b:cc:82: d7:01:69:48:3f:40:54:d7:94:a3:62:56:28:28:d7:66:fb:87: f7:c5:b4:38:5d:ec:ac:b5:90:32:c9:4b:d6:ae:a4:a5:b5:cb: de:21:c6:58:1d:76:09:ad:9b:4b:2a:de:e2:1a:cc:a8:43:de: fe:04:a7:05:66:74:d6:58:0f:53:37:1c:71:5e:a4:17:44:7d: 76:bd:8a:b7:89:23:26:41:34:83:32:26:94:f3:fd:d9:58:eb: 73:a2:e3:15:94:3d:b1:e8:a6:b1:37:e9:69:7f:d6:43:71:06: 3a:28:0d:5c:14:da:44:6e:b7:6f:af:4c:d6:b1:ca:fc:23:3d: ee:32:78:65:d2:8d:83:6a:26:17:6e:e4:a6:07:e2:f1:a7:a9: 2c:ef:cc:b6:92:99:5a:44:72:11:43:c3:44:be:ec:5d:5b:f8: bd:5a:48:f9:51:b8:e7:bd:89:e2:90:39:6b:62:4c:0d:f0:17: 2d:3f:0b:07:88:89:fa:b8:d6:d2:bb:32:59:af:53:9b:f8:fa: 27:92:c3:da:73:a5:9e:42:48:c8:dd:14:74:04:0e:40:66:be: d5:f0:be:0a:9e:03:49:1a:32:e1:c1:3d:46:a2:ec:1a:78:d5: b3:b4:45:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeYPFgKbkjhhVjbh1SBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDc5OWFlMGVmZGQ5ODZkZGU3N2ZiMzVhZDBhMTA4MjNj Yjk3MmYwHhcNMjUxMjA2MDEwMTQ4WhcNMjUxMjA3MDEwMTQ4WjAzMTEwLwYDVQQD Eyg5ZGFkZTc0NTg2ODY0ODU3MTVlYWVhYmYxMWIwMGUwMTRmYzY0YjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGPdw2EE+dHgXfnoGuK2ToaOFtWd Yu4QTehNO8M1+w/tQPWYsPeZUDKyfoAhwZ00bCobOlbnH15rUnESsmP/CHgRzJ8P HXmhyz1dRcF8CcPjeY/VUHCSXKYqTnm9Xu3IzNbshHcyTxCyBem1RmLAaz5+gBzH Sq7ukKac1FoHhjj24u6WvqclE+mPunwmM7PdPgJpTfC7IdkDO4TtLYDwQvv8sF3Y 9ixmH1RlYG9K12HOYYbjOr/UD7KmXhAEc2DWPsZFC1eT/EBTI7A0LzECUANeaN2Y 3NmuTzSFDrdi/3E2TUe+Qc8n9mYLvTocYQJ0d/a/56Ga85s7PUzBjbs/1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2t50WGhkhXFerqvxGwDgFPxks4MB8GA1UdIwQY MBaAFOfXma4O/dmG3ed/s1rQoQgjy5cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xMTA4MWItNGVmOS00ZTJmLTgxNTMt Mjg3OTM3OTQwZDdiLzEvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xMTA4MWItNGVmOS00ZTJmLTgxNTMtMjg3OTM3OTQwZDdi LzEvNTllWnJnNzkyWWJkNTMteld0Q2hDQ1BMbHk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi/Epgya k5fnn7lZop3aG8yC1wFpSD9AVNeUo2JWKCjXZvuH98W0OF3srLWQMslL1q6kpbXL 3iHGWB12Ca2bSyre4hrMqEPe/gSnBWZ01lgPUzcccV6kF0R9dr2Kt4kjJkE0gzIm lPP92Vjrc6LjFZQ9seimsTfpaX/WQ3EGOigNXBTaRG63b69M1rHK/CM97jJ4ZdKN g2omF27kpgfi8aepLO/MtpKZWkRyEUPDRL7sXVv4vVpI+VG4572J4pA5a2JMDfAX LT8LB4iJ+rjW0rsyWa9Tm/j6J5LD2nOlnkJIyN0UdAQOQGa+1fC+Cp4DSRoy4cE9 RqLsGnjVs7RFqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:41 2025 by rpki-client