This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json) Hash identifier: wu2q6dOy13mNqMsc5T/UQMpeTa3m/CiFkqYNohwz3Ag= Subject key identifier: 56:F5:B9:2F:81:14:1A:40:42:FB:4A:F2:B4:E6:DB:3A:67:1B:A8:4B Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6 Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6 Certificate serial: 019B0F6E20A2D6D6C15DC14CEFC61B00BA74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft Manifest number: 1524 Signing time: Thu 11 Dec 2025 22:00:34 +0000 Manifest this update: Thu 11 Dec 2025 22:00:34 +0000 Manifest next update: Fri 12 Dec 2025 22:00:34 +0000 Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=) 2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: /iSA6FWu1I1vErfdYO2ktKufxYvR9CcObrI6WhEHiyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:20:a2:d6:d6:c1:5d:c1:4c:ef:c6:1b:00:ba:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6 Validity Not Before: Dec 11 22:00:34 2025 GMT Not After : Dec 12 22:00:34 2025 GMT Subject: CN=56f5b92f81141a4042fb4af2b4e6db3a671ba84b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:a5:06:91:f7:95:63:37:db:4a:0f:d6:a5: 7b:33:32:26:0e:b9:44:f1:b9:fe:fe:10:84:fb:26: 4c:ea:09:87:5d:04:93:b7:37:d8:2b:90:73:d8:be: 02:8e:db:43:00:92:70:f1:8c:b3:b2:c9:92:79:06: 50:68:e1:7a:80:12:1f:e5:18:6f:7f:b2:1e:cd:ce: db:cd:fa:7c:04:d4:be:f6:08:d0:b7:b0:23:fc:0b: b5:03:05:1d:e5:0c:67:b4:f0:76:3f:2b:db:95:71: 4a:fd:8c:29:1d:5f:33:dc:e6:82:d5:ea:13:dd:8d: 72:34:2e:a2:7e:98:3f:cb:20:ab:de:a6:d4:4b:97: 39:8c:33:4a:9a:14:5e:fc:40:4b:39:2b:90:9e:9d: 56:75:26:38:0d:99:e6:19:58:4c:e0:4d:36:7d:9b: c4:30:82:a0:6e:62:bf:61:bb:70:c0:84:bf:7a:14: fc:89:d1:4e:f1:4d:2c:e8:7b:e1:76:65:e1:ef:d6: d8:d3:13:54:ea:bd:1d:34:8c:11:36:d2:33:63:72: 7a:eb:3e:2e:b5:7a:f0:a4:06:c0:1d:bb:55:07:92: b9:64:d0:9b:1d:e1:08:1b:2b:4e:f5:ce:da:df:6e: 1b:43:6c:81:a8:8e:5d:10:c5:37:d1:0e:c1:76:74: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F5:B9:2F:81:14:1A:40:42:FB:4A:F2:B4:E6:DB:3A:67:1B:A8:4B X509v3 Authority Key Identifier: keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:ad:fa:28:97:8f:0a:2a:f2:e2:7e:09:d4:5e:c4:ca:91:e6: 02:fe:71:43:56:c0:17:62:89:c0:d5:be:d5:39:ac:d9:3e:ee: b3:e0:4a:6b:43:df:25:27:14:82:5d:aa:f9:30:9e:2d:53:57: 74:24:80:88:1d:b2:59:f6:73:e6:b2:1c:36:10:3c:2b:77:25: c7:e4:6b:e6:c2:cd:7c:00:17:aa:77:a7:e4:71:7f:b1:f7:56: 9b:91:0a:67:c2:a7:60:ae:18:61:1a:b2:ad:79:b1:51:9b:e0: 0b:b7:c0:3d:f9:15:69:65:cf:8c:27:bc:e5:90:a1:e8:1f:a8: ec:92:76:01:2a:24:8c:6d:91:86:c0:e2:08:a1:fa:f8:c7:06: 1f:92:a0:3e:e6:76:d6:e7:e3:37:75:41:e4:7f:72:b0:ac:14: 4c:0a:e0:f8:47:bb:c6:71:fd:83:67:bb:d2:e6:4f:d4:87:6c: 3d:fc:6c:0d:f7:f1:8c:9b:57:dc:42:f6:bd:30:55:4a:14:ef: 5b:1c:26:d1:01:df:b3:19:a5:02:e9:32:dc:b6:78:a5:05:55: 76:b4:91:9e:89:eb:0c:e6:fa:d8:fc:5c:df:9e:17:d4:65:fd: 8d:40:ef:64:7d:0c:30:2d:df:68:7a:2d:6a:cc:eb:48:9f:57: 4e:d6:bc:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbiCi1tbBXcFM78YbALp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzA5OTk4Y2UzOWNmZGNhNjZlY2ZkOGRkM2FjMzg2NDRk M2M4YTYwHhcNMjUxMjExMjIwMDM0WhcNMjUxMjEyMjIwMDM0WjAzMTEwLwYDVQQD Eyg1NmY1YjkyZjgxMTQxYTQwNDJmYjRhZjJiNGU2ZGIzYTY3MWJhODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0KlBpH3lWM320oP1qV7MzImDrlE 8bn+/hCE+yZM6gmHXQSTtzfYK5Bz2L4CjttDAJJw8YyzssmSeQZQaOF6gBIf5Rhv f7Iezc7bzfp8BNS+9gjQt7Aj/Au1AwUd5QxntPB2PyvblXFK/YwpHV8z3OaC1eoT 3Y1yNC6ifpg/yyCr3qbUS5c5jDNKmhRe/EBLOSuQnp1WdSY4DZnmGVhM4E02fZvE MIKgbmK/YbtwwIS/ehT8idFO8U0s6HvhdmXh79bY0xNU6r0dNIwRNtIzY3J66z4u tXrwpAbAHbtVB5K5ZNCbHeEIGytO9c7a324bQ2yBqI5dEMU30Q7BdnQwUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb1uS+BFBpAQvtK8rTm2zpnG6hLMB8GA1UdIwQY MBaAFHvAmZjOOc/cpm7P2N06w4ZE08imMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMt MjJkNmNkMWUxYThhLzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMtMjJkNmNkMWUxYThh LzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwq36KJeP Ciry4n4J1F7EypHmAv5xQ1bAF2KJwNW+1Tms2T7us+BKa0PfJScUgl2q+TCeLVNX dCSAiB2yWfZz5rIcNhA8K3clx+Rr5sLNfAAXqnen5HF/sfdWm5EKZ8KnYK4YYRqy rXmxUZvgC7fAPfkVaWXPjCe85ZCh6B+o7JJ2ASokjG2RhsDiCKH6+McGH5KgPuZ2 1ufjN3VB5H9ysKwUTArg+Ee7xnH9g2e70uZP1IdsPfxsDffxjJtX3EL2vTBVShTv Wxwm0QHfsxmlAuky3LZ4pQVVdrSRnonrDOb62Pxc354X1GX9jUDvZH0MMC3faHot aszrSJ9XTta8CA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:33:22 2025 by rpki-client