This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft File: 59PkY_EcytBV0WYuAIwqlPQt6d4.mft (raw, json) Hash identifier: omzUff90bDEFPqNtAPvGAdX2SsUBjSsbd3TQgkvRq9g= Subject key identifier: 52:2A:C6:EE:30:86:3E:D8:AF:FF:6B:5A:BC:97:09:1E:B3:D1:CB:2B Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de Certificate serial: 019B38D7FDB759DB461182B94841545041DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft Manifest number: 15CB Signing time: Fri 19 Dec 2025 23:00:37 +0000 Manifest this update: Fri 19 Dec 2025 23:00:37 +0000 Manifest next update: Sat 20 Dec 2025 23:00:37 +0000 Files and hashes: 1: 1-mxTaqS9jnMIVzPA52AOuEvFZm4.roa (hash: 1RjRiQMb+qYiL+Zpi5jDEokqMnjDRUg4dGO0fKP7lfA=) 2: 59PkY_EcytBV0WYuAIwqlPQt6d4.crl (hash: 0+mMqVR3R3kCb9QSvzCzIOpfOkLWnDcipxn6gRLjvd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:fd:b7:59:db:46:11:82:b9:48:41:54:50:41:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de Validity Not Before: Dec 19 23:00:37 2025 GMT Not After : Dec 20 23:00:37 2025 GMT Subject: CN=522ac6ee30863ed8afff6b5abc97091eb3d1cb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:1f:54:03:42:03:3c:a1:95:da:ae:ce:1d: f2:63:f1:94:06:fd:a7:20:06:30:7a:3f:01:e1:d4: 6f:e8:ec:16:72:0e:a5:5f:a4:20:3f:ff:88:9b:b4: f9:37:30:be:2e:50:bc:63:75:b4:b0:d6:c2:f3:c0: ba:cd:b0:8a:d1:c4:e8:b0:01:d1:c4:e6:98:1d:5b: 75:07:d6:27:a4:98:28:95:e2:cb:20:7f:5d:d3:b3: 8e:4c:23:38:8a:56:c3:81:35:05:08:47:20:f5:e8: d3:9b:24:04:1e:67:a1:2e:28:61:56:fa:ff:97:d8: a7:04:49:d5:3f:c6:5f:a7:e5:ef:3e:a2:9b:1e:2d: 04:93:cf:2e:ae:26:26:b6:35:75:a0:93:35:d5:00: eb:ee:e0:8f:6b:1c:09:48:5f:dc:7d:a4:ee:b5:3b: 36:ac:25:3b:d2:b4:c3:54:e8:75:02:e2:3e:05:6e: e6:af:04:b7:99:0e:0e:86:68:50:26:a6:d9:7b:ad: 0d:7b:e0:42:4f:e5:68:2c:55:b6:6f:a7:9f:3b:6b: 5e:63:8a:8b:fe:d0:a3:ec:b8:94:31:07:93:72:6d: db:e6:b9:9a:1d:39:9c:19:f9:79:20:fe:55:e5:60: 93:c4:b5:c8:7a:61:8a:3a:41:b3:56:73:16:bd:66: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2A:C6:EE:30:86:3E:D8:AF:FF:6B:5A:BC:97:09:1E:B3:D1:CB:2B X509v3 Authority Key Identifier: keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1e:bb:e3:58:aa:6f:3b:0b:15:c1:51:2f:74:22:a0:94:34: 02:29:e5:27:f5:24:79:4e:80:cf:0c:cb:fd:86:0f:56:92:55: 60:50:62:fb:b3:93:3e:92:e5:5a:ad:e2:2b:d8:0f:c0:c8:75: a0:ca:f8:be:f4:b7:0f:f2:85:6e:29:d6:76:32:8b:76:ee:5f: 43:36:32:7d:be:57:91:7e:64:61:4f:98:fb:87:1b:5e:59:74: c0:a1:1f:4a:94:2c:23:c6:47:a6:6f:c6:92:10:8f:f4:6b:24: 32:08:6d:21:20:c4:51:e0:c4:de:f4:6d:36:f2:a4:1e:25:42: 91:d2:2b:39:e5:c7:ef:ef:16:a7:bd:b3:f9:75:3a:1d:b7:bc: 84:86:bf:ec:83:4e:d5:d7:fe:da:b6:47:08:a2:7f:3e:8e:6a: 74:20:4e:e2:b7:10:f8:b3:5f:2a:8c:12:7d:35:31:d0:81:b7: 96:2e:c7:11:7d:d2:f6:59:7f:36:33:70:b2:a4:5c:ae:ef:25: 8d:1d:ed:05:6e:0e:7e:c5:40:fe:7c:09:52:6e:aa:3d:04:d9: e7:73:c6:03:ab:7a:8b:21:67:f8:af:57:7d:d6:09:62:a4:e6: d3:5c:d2:66:3e:ac:b7:2d:72:ff:3c:fa:44:d5:bf:69:4e:b1: ff:77:4b:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs41/23WdtGEYK5SEFUUEHeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZDNlNDYzZjExY2NhZDA1NWQxNjYyZTAwOGMyYTk0ZjQy ZGU5ZGUwHhcNMjUxMjE5MjMwMDM3WhcNMjUxMjIwMjMwMDM3WjAzMTEwLwYDVQQD Eyg1MjJhYzZlZTMwODYzZWQ4YWZmZjZiNWFiYzk3MDkxZWIzZDFjYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljAfVANCAzyhldquzh3yY/GUBv2n IAYwej8B4dRv6OwWcg6lX6QgP/+Im7T5NzC+LlC8Y3W0sNbC88C6zbCK0cTosAHR xOaYHVt1B9YnpJgoleLLIH9d07OOTCM4ilbDgTUFCEcg9ejTmyQEHmehLihhVvr/ l9inBEnVP8Zfp+XvPqKbHi0Ek88uriYmtjV1oJM11QDr7uCPaxwJSF/cfaTutTs2 rCU70rTDVOh1AuI+BW7mrwS3mQ4OhmhQJqbZe60Ne+BCT+VoLFW2b6efO2teY4qL /tCj7LiUMQeTcm3b5rmaHTmcGfl5IP5V5WCTxLXIemGKOkGzVnMWvWY2jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIqxu4whj7Yr/9rWryXCR6z0csrMB8GA1UdIwQY MBaAFOfT5GPxHMrQVdFmLgCMKpT0LeneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUt MjJiODQ5OGI1MTViLzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84YTZiNmUtOWJiNy00NWZjLTk3YmUtMjJiODQ5OGI1MTVi LzEvNTlQa1lfRWN5dEJWMFdZdUFJd3FsUFF0NmQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATx6741iq bzsLFcFRL3QioJQ0AinlJ/UkeU6AzwzL/YYPVpJVYFBi+7OTPpLlWq3iK9gPwMh1 oMr4vvS3D/KFbinWdjKLdu5fQzYyfb5XkX5kYU+Y+4cbXll0wKEfSpQsI8ZHpm/G khCP9GskMghtISDEUeDE3vRtNvKkHiVCkdIrOeXH7+8Wp72z+XU6Hbe8hIa/7INO 1df+2rZHCKJ/Po5qdCBO4rcQ+LNfKowSfTUx0IG3li7HEX3S9ll/NjNwsqRcru8l jR3tBW4OfsVA/nwJUm6qPQTZ53PGA6t6iyFn+K9XfdYJYqTm01zSZj6sty1y/zz6 RNW/aU6x/3dLxg== -----END CERTIFICATE-----Generated at Sat Dec 20 02:01:52 2025 by rpki-client