This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json) Hash identifier: n678uPN8OB7YDYLGyOkFKedFGhKXWyE8EwkP3616w3Y= Subject key identifier: 06:08:0F:45:6A:26:C1:11:14:4D:2C:AB:39:BC:E6:0D:BE:5F:D0:CE Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51 Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51 Certificate serial: 019B21769AD67F321ACB63F31ABAECB1AF87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft Manifest number: 1774 Signing time: Mon 15 Dec 2025 10:02:59 +0000 Manifest this update: Mon 15 Dec 2025 10:02:59 +0000 Manifest next update: Tue 16 Dec 2025 10:02:59 +0000 Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: CSaZKgdUcILVo8uAikwqYmVTUnyAksG58mNXkLIUMoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:9a:d6:7f:32:1a:cb:63:f3:1a:ba:ec:b1:af:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51 Validity Not Before: Dec 15 10:02:59 2025 GMT Not After : Dec 16 10:02:59 2025 GMT Subject: CN=06080f456a26c111144d2cab39bce60dbe5fd0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:b9:e6:d2:0d:af:fe:22:ca:51:25:f7:f0: 47:0b:94:16:90:2c:4e:65:4b:d4:5d:cc:11:54:ec: 1d:70:92:c0:11:de:98:15:04:70:51:6c:d0:54:79: 2a:de:3c:a9:c8:e6:b8:df:0f:5b:b9:1d:9c:ae:16: 91:9b:59:3e:82:b7:a1:51:a0:e3:30:7e:2a:e7:a3: f2:ad:e0:4d:e9:65:9f:7e:74:3e:ec:98:4b:4a:1a: 6d:64:a6:b7:5d:39:3f:2b:2e:3b:61:9a:01:b7:fd: a1:8a:01:34:8a:b9:72:42:79:3f:5d:77:7f:39:ea: c8:cc:d8:82:2c:70:e8:70:b1:5c:72:28:95:05:cf: 0c:25:d6:72:07:60:55:ce:30:68:c1:fd:45:2e:6f: d8:27:7c:a7:1f:de:16:70:62:5b:d1:b9:89:47:01: 7b:41:b9:63:b7:61:54:77:c1:cf:9f:96:b8:ab:6a: 30:94:39:ad:78:07:cd:8a:be:ef:bb:9d:4e:30:e5: d7:7e:7b:4a:f7:3b:23:2e:b1:e2:df:e0:38:c4:e1: bc:df:c8:7b:95:31:06:03:84:01:5e:17:2f:78:77: 36:2d:0d:48:d2:b6:78:aa:ca:3e:fc:82:57:66:be: 1f:d6:34:bf:75:91:72:47:89:58:8e:fd:f0:89:38: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:08:0F:45:6A:26:C1:11:14:4D:2C:AB:39:BC:E6:0D:BE:5F:D0:CE X509v3 Authority Key Identifier: keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:88:7a:44:b0:32:66:72:b1:28:a4:06:c0:69:94:1f:cd:64: 8b:92:c4:00:3d:a5:77:2c:fd:f7:22:0b:b5:f3:29:75:43:4b: 31:33:51:b3:a7:63:8e:2a:40:02:f6:6d:9e:ed:a4:dc:86:ee: a5:1f:dd:40:35:ed:3d:72:cd:d3:6f:9e:ab:8a:51:1a:a4:cf: da:bd:7d:66:ad:9e:80:00:78:00:4a:c7:49:25:1b:cf:4f:76: d0:72:60:3e:87:04:aa:2a:0c:ee:b9:71:74:40:4d:91:d2:f6: 31:96:aa:f2:54:60:7c:bb:cb:39:31:26:77:da:75:54:d4:9c: 02:3b:79:88:b0:c9:17:ad:32:90:de:67:2a:41:0e:3d:0d:8d: 85:67:24:64:55:fe:c7:10:c9:56:a7:f9:00:f8:d5:25:47:0c: a9:f4:cb:19:bc:3f:8d:c3:0a:6f:cd:98:3c:1f:1f:3b:51:d1: c3:61:80:b5:e5:f2:6d:b3:90:a3:1f:e9:1b:f3:ac:df:47:be: d7:0a:f1:26:5e:e6:58:85:d0:10:5b:0e:0d:50:aa:44:ea:02: a0:c5:00:53:88:b1:a8:53:6e:5d:61:d3:69:cb:c5:91:b6:d0: 4f:a4:0d:5f:79:70:17:ca:82:cc:99:12:b7:88:74:dc:42:91: 97:0f:12:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdprWfzIay2PzGrrssa+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzBjNTlhZjgxOGE4MWQ3ZmU3N2FmMWZiNzMwMmU0YjQx MTdlNTEwHhcNMjUxMjE1MTAwMjU5WhcNMjUxMjE2MTAwMjU5WjAzMTEwLwYDVQQD EygwNjA4MGY0NTZhMjZjMTExMTQ0ZDJjYWIzOWJjZTYwZGJlNWZkMGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukK55tINr/4iylEl9/BHC5QWkCxO ZUvUXcwRVOwdcJLAEd6YFQRwUWzQVHkq3jypyOa43w9buR2crhaRm1k+grehUaDj MH4q56PyreBN6WWffnQ+7JhLShptZKa3XTk/Ky47YZoBt/2higE0irlyQnk/XXd/ OerIzNiCLHDocLFcciiVBc8MJdZyB2BVzjBowf1FLm/YJ3ynH94WcGJb0bmJRwF7 Qbljt2FUd8HPn5a4q2owlDmteAfNir7vu51OMOXXfntK9zsjLrHi3+A4xOG838h7 lTEGA4QBXhcveHc2LQ1I0rZ4qso+/IJXZr4f1jS/dZFyR4lYjv3wiTj07QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYID0VqJsERFE0sqzm85g2+X9DOMB8GA1UdIwQY MBaAFHvAxZr4GKgdf+d68ftzAuS0EX5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThERm12Z1lxQjFfNTNyeC0zTUM1TFFSZmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zZmUwODctYTM1MC00MTNkLTg3YTEt OWFiYTU1YzllYjVmLzEvZThERm12Z1lxQjFfNTNyeC0zTUM1TFFSZmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zZmUwODctYTM1MC00MTNkLTg3YTEtOWFiYTU1YzllYjVm LzEvZThERm12Z1lxQjFfNTNyeC0zTUM1TFFSZmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIh6RLAy ZnKxKKQGwGmUH81ki5LEAD2ldyz99yILtfMpdUNLMTNRs6djjipAAvZtnu2k3Ibu pR/dQDXtPXLN02+eq4pRGqTP2r19Zq2egAB4AErHSSUbz0920HJgPocEqioM7rlx dEBNkdL2MZaq8lRgfLvLOTEmd9p1VNScAjt5iLDJF60ykN5nKkEOPQ2NhWckZFX+ xxDJVqf5APjVJUcMqfTLGbw/jcMKb82YPB8fO1HRw2GAteXybbOQox/pG/Os30e+ 1wrxJl7mWIXQEFsODVCqROoCoMUAU4ixqFNuXWHTacvFkbbQT6QNX3lwF8qCzJkS t4h03EKRlw8SRA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:52:48 2025 by rpki-client