This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft File: 58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json) Hash identifier: dh0beO65KVI8J9ek/0V5UZi8egAG8DQSPs+sH0T5Z4c= Subject key identifier: E3:69:D8:A5:E9:CA:C9:AB:3A:94:6E:3A:49:93:03:6E:E9:66:B2:16 Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2 Certificate issuer: /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2 Certificate serial: 019AF1D211F098D9090A1A75F4E3AC926C9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: vCbl5NrkDOtyoAzT1r9LAxBRT1yCua/UWubMvCZDACo=) 2: Gr2bTac37FdQF97pGkH13J5M8LQ.roa (hash: oaatGmufJtltyljxjCY0yrTcOMqVjEXZ2p4QbghN278=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:11:f0:98:d9:09:0a:1a:75:f4:e3:ac:92:6c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=e369d8a5e9cac9ab3a946e3a4993036ee966b216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:d5:8a:f8:29:d3:84:7d:50:ee:b0:da:f2: 8b:97:c7:92:96:84:e7:7e:38:ad:e3:7f:56:0e:3c: ca:08:9d:d6:b5:75:2e:a8:a9:01:d8:f9:c6:f6:a8: 6b:3d:b2:4f:cf:16:18:8c:90:52:30:25:44:64:82: e5:3b:2f:d6:25:de:bf:b0:16:89:6f:16:23:74:3b: ab:68:5b:22:a4:8e:17:34:37:0e:26:a5:bc:92:e8: c4:f5:eb:3a:73:98:5f:8d:0d:1e:83:98:70:9b:fa: f9:8d:d5:81:1b:1a:df:a9:2d:25:5a:b7:3c:b3:72: 35:5a:18:b6:96:d9:a1:a9:be:09:e3:31:f2:47:80: 77:90:40:6a:ef:2b:f8:59:04:4e:3a:b7:f6:b5:0f: 4d:5d:95:92:aa:1d:f5:b7:13:c1:28:44:23:c8:92: 6f:0f:2d:aa:6d:6d:3a:4c:25:82:76:58:2f:1f:3b: 4f:1f:1b:ba:e5:17:22:49:d9:cc:87:c0:de:4e:db: 57:d3:c0:79:e3:71:11:03:5f:c3:50:94:86:44:d2: 17:37:e3:7f:fb:20:71:71:8f:ec:bb:67:1a:1b:5d: d1:85:55:24:e7:e6:a1:56:52:14:16:71:b4:e0:17: c1:4f:7a:53:f8:83:a3:2c:0b:99:12:1e:86:af:ea: ce:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:69:D8:A5:E9:CA:C9:AB:3A:94:6E:3A:49:93:03:6E:E9:66:B2:16 X509v3 Authority Key Identifier: keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8e:45:56:68:1c:d4:e6:0e:3a:ac:e7:06:2d:5c:a2:bb:5e: d5:3c:c1:b5:13:39:19:18:62:8f:43:7c:c1:b0:a0:cf:8d:7e: 88:f0:bc:52:4a:29:07:88:f2:56:c4:96:bc:d9:a8:af:37:a4: 2a:aa:49:b8:28:8f:ba:df:85:c8:c9:a6:35:00:a6:e1:68:c2: 66:c7:eb:c3:e8:65:99:ba:95:80:25:7b:1b:a6:8f:b2:9e:ad: 39:0e:6c:21:11:02:7f:b3:b6:54:67:4e:8d:43:57:0c:20:b4: a7:0e:0d:81:e5:3b:88:ed:e1:01:b3:c8:7d:a5:26:32:0b:fb: 82:02:45:00:1c:1b:43:6d:42:e0:21:c9:9e:8b:16:42:6c:9c: 90:53:6b:e2:fc:c8:b3:43:29:fc:22:19:6e:4b:08:6f:a1:0f: 2a:be:49:c7:51:fb:9a:10:cf:bb:79:3c:7c:87:f8:3b:11:f0: b0:36:d2:de:00:7e:64:42:ca:11:8c:ec:fb:f2:56:02:9f:7c: 64:a9:b2:b2:5a:f5:4e:53:b6:63:7c:99:30:e7:e0:48:ca:c2: 7a:9d:6e:a9:8c:79:3c:09:52:db:ee:02:95:e9:35:1e:f5:33: 78:c8:32:68:fe:41:29:92:d4:d3:43:80:ce:b2:31:fa:fb:77: d4:9d:85:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hHwmNkJChp19OOskmyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzdlYzhkNzgwNTAzZGI3Y2FiY2IxNDFkNmI5OTFjZDAy OWE2YTIwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD EyhlMzY5ZDhhNWU5Y2FjOWFiM2E5NDZlM2E0OTkzMDM2ZWU5NjZiMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWbVivgp04R9UO6w2vKLl8eSloTn fjit439WDjzKCJ3WtXUuqKkB2PnG9qhrPbJPzxYYjJBSMCVEZILlOy/WJd6/sBaJ bxYjdDuraFsipI4XNDcOJqW8kujE9es6c5hfjQ0eg5hwm/r5jdWBGxrfqS0lWrc8 s3I1Whi2ltmhqb4J4zHyR4B3kEBq7yv4WQROOrf2tQ9NXZWSqh31txPBKEQjyJJv Dy2qbW06TCWCdlgvHztPHxu65RciSdnMh8DeTttX08B543ERA1/DUJSGRNIXN+N/ +yBxcY/su2caG13RhVUk5+ahVlIUFnG04BfBT3pT+IOjLAuZEh6Gr+rOIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONp2KXpysmrOpRuOkmTA27pZrIWMB8GA1UdIwQY MBaAFOfH7I14BQPbfKvLFB1rmRzQKaaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThmc2pYZ0ZBOXQ4cThzVUhXdVpITkFwcHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82NzRlNzYtNDI0NS00MDJkLTljNTEt ZDJkMmFiYTI4ZTgwLzEvNThmc2pYZ0ZBOXQ4cThzVUhXdVpITkFwcHFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82NzRlNzYtNDI0NS00MDJkLTljNTEtZDJkMmFiYTI4ZTgw LzEvNThmc2pYZ0ZBOXQ4cThzVUhXdVpITkFwcHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS45FVmgc 1OYOOqznBi1corte1TzBtRM5GRhij0N8wbCgz41+iPC8UkopB4jyVsSWvNmorzek KqpJuCiPut+FyMmmNQCm4WjCZsfrw+hlmbqVgCV7G6aPsp6tOQ5sIRECf7O2VGdO jUNXDCC0pw4NgeU7iO3hAbPIfaUmMgv7ggJFABwbQ21C4CHJnosWQmyckFNr4vzI s0Mp/CIZbksIb6EPKr5Jx1H7mhDPu3k8fIf4OxHwsDbS3gB+ZELKEYzs+/JWAp98 ZKmyslr1TlO2Y3yZMOfgSMrCep1uqYx5PAlS2+4Clek1HvUzeMgyaP5BKZLU00OA zrIx+vt31J2FZA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:12 2025 by rpki-client