This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft File: 58fsjXgFA9t8q8sUHWuZHNAppqI.mft (raw, json) Hash identifier: 5bAoVfvAjCJAh4gNGGpz5TZgjlfrxFpwHABOM6KgheY= Subject key identifier: 90:D1:05:B3:C0:C1:04:03:B0:51:8D:BA:50:24:AD:13:EC:DD:32:D8 Authority key identifier: E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2 Certificate issuer: /CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2 Certificate serial: 019B318CEE1E70378B0B1FF3E5ED7990B1C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft Manifest number: 117D Signing time: Thu 18 Dec 2025 13:01:18 +0000 Manifest this update: Thu 18 Dec 2025 13:01:18 +0000 Manifest next update: Fri 19 Dec 2025 13:01:18 +0000 Files and hashes: 1: 58fsjXgFA9t8q8sUHWuZHNAppqI.crl (hash: Yt7J1swmdFisvdC4nbq1/uvao+hKZ5AOsDH9bVyv7Bo=) 2: Gr2bTac37FdQF97pGkH13J5M8LQ.roa (hash: oaatGmufJtltyljxjCY0yrTcOMqVjEXZ2p4QbghN278=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:ee:1e:70:37:8b:0b:1f:f3:e5:ed:79:90:b1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c7ec8d780503db7cabcb141d6b991cd029a6a2 Validity Not Before: Dec 18 13:01:18 2025 GMT Not After : Dec 19 13:01:18 2025 GMT Subject: CN=90d105b3c0c10403b0518dba5024ad13ecdd32d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:18:0c:91:2d:cd:16:52:e8:36:76:b4:9a: 53:27:7d:2b:22:8f:bc:af:fe:03:e8:b1:76:e2:fe: e1:47:06:74:c4:31:16:9a:c0:64:7a:48:72:b7:e4: d5:53:ce:5c:7d:ce:70:88:1c:84:21:2c:c9:dd:27: d6:05:bf:f2:a4:68:e9:47:c3:5d:60:55:fd:d7:ac: dd:30:fe:df:18:0f:ad:cc:2d:8c:21:b2:b3:41:3a: 0b:29:f5:d5:00:6d:7d:88:2d:eb:03:e1:6f:8a:ba: c3:4d:52:f9:60:5a:15:2e:33:64:3a:b7:66:d8:41: dd:10:fa:92:d3:b4:73:85:c9:6c:59:b5:17:47:a9: 4f:7a:9b:bb:fe:e0:96:1a:87:cf:07:c2:97:ee:c9: 90:fe:ee:5f:30:1c:b9:a4:42:a7:ed:68:2d:68:74: cf:11:57:23:cc:64:26:a6:e0:14:74:7c:d1:ee:43: 55:49:e3:4c:87:c5:75:af:7c:56:e7:05:7f:79:c7: 03:08:69:05:4c:3d:5c:58:2b:8e:0d:a2:99:1f:ff: d8:20:81:6b:b1:0b:72:0b:e0:6e:cd:29:60:ff:da: bd:d6:5c:27:51:0e:4f:71:ec:b5:bc:14:2a:79:9b: a0:71:88:5d:bb:1d:af:09:42:b8:73:36:89:85:84: 81:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D1:05:B3:C0:C1:04:03:B0:51:8D:BA:50:24:AD:13:EC:DD:32:D8 X509v3 Authority Key Identifier: keyid:E7:C7:EC:8D:78:05:03:DB:7C:AB:CB:14:1D:6B:99:1C:D0:29:A6:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58fsjXgFA9t8q8sUHWuZHNAppqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/674e76-4245-402d-9c51-d2d2aba28e80/1/58fsjXgFA9t8q8sUHWuZHNAppqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8a:a5:be:37:5f:fa:b6:2e:1c:65:64:8a:80:cf:c1:b6:92: 83:93:99:2c:d0:50:29:39:b5:42:c3:71:96:c0:8f:1d:61:34: 67:e3:da:90:ab:45:0d:07:67:26:47:f0:e5:76:93:8f:f0:8c: bd:ee:be:93:31:50:09:40:60:ac:fc:cb:b1:80:70:c8:48:58: 50:4f:f6:92:6f:4d:05:73:68:69:f4:f7:07:05:91:b4:80:4f: f7:ca:bf:c7:8b:4b:2f:7e:aa:4a:2d:4c:d1:d0:73:b5:24:50: 62:ec:0c:4e:89:78:b4:71:51:1f:f4:7a:a1:46:3f:a0:27:50: 8b:5c:dd:fe:67:6b:e0:a3:a7:ce:ea:d1:5b:11:57:55:1c:c8: 83:9a:40:50:ef:88:d7:76:f0:7c:4a:92:3c:ca:0e:4e:2d:64: 02:69:f8:29:e8:ae:bc:92:52:20:3e:68:dd:75:e9:22:21:67: 42:9b:0e:36:3b:fd:00:33:66:f0:2f:3e:cf:f5:2e:82:b1:ef: c7:46:0d:d8:11:e2:9c:4b:ce:7a:9e:fd:28:d8:2c:c8:6c:14: 17:db:b3:09:79:d3:da:57:c6:31:46:16:3f:3d:0c:c6:57:b9: 23:d4:b9:a2:c7:92:a4:27:7b:78:7f:f3:31:e3:b0:8e:e6:36: c5:94:fd:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjO4ecDeLCx/z5e15kLHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzdlYzhkNzgwNTAzZGI3Y2FiY2IxNDFkNmI5OTFjZDAy OWE2YTIwHhcNMjUxMjE4MTMwMTE4WhcNMjUxMjE5MTMwMTE4WjAzMTEwLwYDVQQD Eyg5MGQxMDViM2MwYzEwNDAzYjA1MThkYmE1MDI0YWQxM2VjZGQzMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpgYDJEtzRZS6DZ2tJpTJ30rIo+8 r/4D6LF24v7hRwZ0xDEWmsBkekhyt+TVU85cfc5wiByEISzJ3SfWBb/ypGjpR8Nd YFX916zdMP7fGA+tzC2MIbKzQToLKfXVAG19iC3rA+FvirrDTVL5YFoVLjNkOrdm 2EHdEPqS07RzhclsWbUXR6lPepu7/uCWGofPB8KX7smQ/u5fMBy5pEKn7WgtaHTP EVcjzGQmpuAUdHzR7kNVSeNMh8V1r3xW5wV/eccDCGkFTD1cWCuODaKZH//YIIFr sQtyC+BuzSlg/9q91lwnUQ5Pcey1vBQqeZugcYhdux2vCUK4czaJhYSBmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDRBbPAwQQDsFGNulAkrRPs3TLYMB8GA1UdIwQY MBaAFOfH7I14BQPbfKvLFB1rmRzQKaaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThmc2pYZ0ZBOXQ4cThzVUhXdVpITkFwcHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82NzRlNzYtNDI0NS00MDJkLTljNTEt ZDJkMmFiYTI4ZTgwLzEvNThmc2pYZ0ZBOXQ4cThzVUhXdVpITkFwcHFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82NzRlNzYtNDI0NS00MDJkLTljNTEtZDJkMmFiYTI4ZTgw LzEvNThmc2pYZ0ZBOXQ4cThzVUhXdVpITkFwcHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYqlvjdf +rYuHGVkioDPwbaSg5OZLNBQKTm1QsNxlsCPHWE0Z+PakKtFDQdnJkfw5XaTj/CM ve6+kzFQCUBgrPzLsYBwyEhYUE/2km9NBXNoafT3BwWRtIBP98q/x4tLL36qSi1M 0dBztSRQYuwMTol4tHFRH/R6oUY/oCdQi1zd/mdr4KOnzurRWxFXVRzIg5pAUO+I 13bwfEqSPMoOTi1kAmn4KeiuvJJSID5o3XXpIiFnQpsONjv9ADNm8C8+z/UugrHv x0YN2BHinEvOep79KNgsyGwUF9uzCXnT2lfGMUYWPz0Mxle5I9S5oseSpCd7eH/z MeOwjuY2xZT9Nw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:22:31 2025 by rpki-client