This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft File: c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json) Hash identifier: VkMtMpiHtAL+u1gMdkjNAgXux4Qui5ipQJ1LrrbZgq4= Subject key identifier: 9C:51:4C:EE:17:50:B8:F2:AA:E8:34:17:81:4F:62:8D:20:90:FF:99 Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78 Certificate issuer: /CN=739f3ebcd26792b913c1dcb9941996e998f16078 Certificate serial: 019AF2769EC8FE8AC51C40403C244E410BC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: 8ZSiBVB9h2VqcjNcGsXVM5lUjmI.roa (hash: hKEwzTFWQZO4iHIgYWy7xoBKPXgQqTPB0mui/ew+61o=) 2: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: j4r5i6n1Jdb4dwfoeggIRKPj2oxIEyLKK2JkxlbNp7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9e:c8:fe:8a:c5:1c:40:40:3c:24:4e:41:0b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=9c514cee1750b8f2aae83417814f628d2090ff99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:f7:1a:27:4b:d6:34:a2:f5:83:ed:c3:d1: e5:48:a4:e8:ea:a3:95:0c:6a:9e:62:d1:84:39:1d: 76:bd:1e:f3:f3:ec:b2:02:47:6c:19:b0:47:b0:33: e3:d8:c9:2d:65:07:66:a6:f8:4c:5c:7f:c2:97:eb: 6c:37:d8:29:bc:e8:8f:68:9a:e2:26:fe:76:77:15: f1:12:bb:c6:a7:95:be:28:01:d4:a7:67:c9:24:b5: a6:c6:d5:31:50:c0:15:f2:b3:46:29:8f:3f:bb:ef: 22:d6:5d:43:33:3b:c2:a5:f9:56:31:16:92:c0:93: c5:4e:71:c8:47:93:35:2a:d3:62:3d:ea:fd:b3:ea: 23:4a:bf:b7:e0:8b:dd:58:98:68:6f:b1:08:64:56: fb:81:ab:af:00:20:e5:74:19:dc:5a:fd:22:4d:41: f9:ef:02:7f:0a:86:fb:77:4c:8c:d5:8a:47:19:c0: a3:79:ed:ec:4a:94:a3:7f:79:ec:d7:89:b2:7d:46: 5e:ba:66:16:9f:96:88:27:55:6c:9b:b8:18:3a:da: c7:4f:65:0f:0d:31:35:3b:47:c2:ae:6f:7c:cd:42: e9:1e:b9:db:3e:02:e3:13:f6:7e:d6:32:8a:69:75: 23:3e:b9:22:fc:97:a3:6b:93:29:e7:4f:2d:fe:d1: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:51:4C:EE:17:50:B8:F2:AA:E8:34:17:81:4F:62:8D:20:90:FF:99 X509v3 Authority Key Identifier: keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e9:26:40:83:16:28:aa:2f:4a:27:62:50:53:56:ad:f6:6e: 2c:51:c4:cf:94:ac:27:98:9e:e4:34:2d:f9:0f:9f:f8:c0:01: 98:ed:bf:db:9d:17:1a:92:b3:aa:3e:0c:7b:78:a7:90:46:a6: 21:e4:de:d1:df:37:bf:29:ae:86:0d:cb:19:0b:de:16:f5:48: 8c:38:20:ca:14:f7:41:36:24:3f:9a:55:b3:30:79:27:40:5f: 76:d7:e6:41:a1:56:67:f2:ab:33:2e:b8:02:a0:8b:38:90:c2: b1:86:e1:b6:55:4e:70:9d:95:68:35:b7:5c:c2:a3:06:3a:8f: e9:a1:a4:80:54:58:14:67:f5:8f:dc:ce:08:5e:d2:6d:ff:26: e4:c3:63:8a:38:b9:d2:30:de:42:04:a2:44:92:e7:99:90:20: 53:fe:2f:f2:c4:38:5e:c9:67:70:78:83:4a:8e:20:00:0a:5f: cd:d7:ed:58:22:17:de:54:f2:04:b3:97:7d:0a:47:20:97:ef: 74:15:11:69:f2:4e:38:02:f2:6f:be:2b:07:71:8d:c5:a4:b8: c6:a6:2a:8e:25:e2:f1:2a:05:f5:a9:65:73:9a:79:cc:6a:2c: 72:5e:46:e8:9f:44:9d:a0:78:06:bc:99:6b:53:7f:dd:ef:79: 91:eb:b8:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp7I/orFHEBAPCROQQvIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczOWYzZWJjZDI2NzkyYjkxM2MxZGNiOTk0MTk5NmU5OThm MTYwNzgwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD Eyg5YzUxNGNlZTE3NTBiOGYyYWFlODM0MTc4MTRmNjI4ZDIwOTBmZjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAren3GidL1jSi9YPtw9HlSKTo6qOV DGqeYtGEOR12vR7z8+yyAkdsGbBHsDPj2MktZQdmpvhMXH/Cl+tsN9gpvOiPaJri Jv52dxXxErvGp5W+KAHUp2fJJLWmxtUxUMAV8rNGKY8/u+8i1l1DMzvCpflWMRaS wJPFTnHIR5M1KtNiPer9s+ojSr+34IvdWJhob7EIZFb7gauvACDldBncWv0iTUH5 7wJ/Cob7d0yM1YpHGcCjee3sSpSjf3ns14myfUZeumYWn5aIJ1Vsm7gYOtrHT2UP DTE1O0fCrm98zULpHrnbPgLjE/Z+1jKKaXUjPrki/Jeja5Mp508t/tHiuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxRTO4XULjyqug0F4FPYo0gkP+ZMB8GA1UdIwQY MBaAFHOfPrzSZ5K5E8HcuZQZlumY8WB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzU4LXZOSm5rcmtUd2R5NWxCbVc2Wmp4WUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMmQ5OWUtYTdjMS00M2U4LTkzZjUt YTExYTk2ZDIxODYxLzEvYzU4LXZOSm5rcmtUd2R5NWxCbVc2Wmp4WUhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kMmQ5OWUtYTdjMS00M2U4LTkzZjUtYTExYTk2ZDIxODYx LzEvYzU4LXZOSm5rcmtUd2R5NWxCbVc2Wmp4WUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiukmQIMW KKovSidiUFNWrfZuLFHEz5SsJ5ie5DQt+Q+f+MABmO2/250XGpKzqj4Me3inkEam IeTe0d83vymuhg3LGQveFvVIjDggyhT3QTYkP5pVszB5J0BfdtfmQaFWZ/KrMy64 AqCLOJDCsYbhtlVOcJ2VaDW3XMKjBjqP6aGkgFRYFGf1j9zOCF7Sbf8m5MNjiji5 0jDeQgSiRJLnmZAgU/4v8sQ4XslncHiDSo4gAApfzdftWCIX3lTyBLOXfQpHIJfv dBURafJOOALyb74rB3GNxaS4xqYqjiXi8SoF9allc5p5zGoscl5G6J9EnaB4BryZ a1N/3e95keu4uw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:33 2025 by rpki-client