This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json) Hash identifier: TFBsM3pqCf13dCJzCVMC6h4ubUcdInBDTOF7P180sFk= Subject key identifier: 78:FD:4F:32:76:08:64:ED:B7:E4:31:24:05:1E:33:E9:C0:32:89:53 Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11 Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11 Certificate serial: 190AE40F3F123CCA752DF14050B63318C78CC52D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft Manifest number: 0504 Signing time: Wed 17 Dec 2025 12:06:39 +0000 Manifest this update: Wed 17 Dec 2025 12:01:39 +0000 Manifest next update: Thu 18 Dec 2025 15:27:39 +0000 Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: ZYGqDb+AhPoRiZ0umJZQJE1bCZzbmgw5f1H4hnR3bg4=) 2: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0a:e4:0f:3f:12:3c:ca:75:2d:f1:40:50:b6:33:18:c7:8c:c5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11 Validity Not Before: Dec 17 12:01:39 2025 GMT Not After : Dec 18 15:27:39 2025 GMT Subject: CN=78FD4F32760864EDB7E43124051E33E9C0328953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8d:f5:cd:15:66:34:6b:b7:f7:c2:51:6d:30: b3:dc:04:e5:60:6f:e8:ab:ca:d5:f8:32:26:4a:d4: a9:63:5d:49:2c:d1:cb:07:95:20:db:ae:8f:69:6f: 33:c7:f0:a1:a2:8d:f2:c6:c4:1d:43:10:4c:41:1d: a9:23:ce:49:32:6b:2f:a7:be:d1:ad:23:af:84:c8: 45:6f:2c:db:af:ca:84:d7:a7:9f:35:9d:8d:84:ae: 62:98:7b:d7:6b:fc:09:fc:cd:cc:ee:2d:60:0a:4c: af:78:bd:f5:f8:76:14:c9:64:3b:fa:a7:da:d6:7e: f8:b2:ac:78:78:4a:ef:5c:87:7c:15:01:99:b1:f5: d0:31:78:62:2b:a9:88:e2:91:5c:74:9b:ba:c6:63: 84:b7:d4:10:98:e2:df:bb:b6:8d:74:6f:a3:f7:fe: 82:19:6b:8e:93:58:0e:ca:8b:cf:44:37:9b:1c:8c: 89:33:eb:22:10:42:58:b9:29:cc:c9:b1:51:37:31: b4:ba:34:45:f4:4e:24:8e:10:77:f4:b5:f4:e3:95: 16:b2:b8:69:0b:5e:90:80:88:ca:d9:5a:89:a5:8a: 1a:d1:60:70:3c:5a:50:f8:cf:1b:89:8c:f9:54:0e: 73:69:4c:0f:a6:5a:1c:b7:7a:6d:0e:9f:22:35:fe: 2d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FD:4F:32:76:08:64:ED:B7:E4:31:24:05:1E:33:E9:C0:32:89:53 X509v3 Authority Key Identifier: keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b3:e9:4b:03:ed:96:ce:b2:91:5e:98:63:fb:02:f9:86:73: e7:13:91:a4:3e:79:58:80:d4:03:91:77:f6:8d:1d:ce:4c:72: 45:3a:47:d7:47:8e:17:d9:6a:90:38:06:1a:fb:7d:a2:52:09: 71:ca:af:52:13:12:9e:cb:06:75:5b:f2:2d:a6:79:ac:46:46: b6:38:bd:0e:98:be:bc:d4:48:4b:91:12:d2:ff:60:0d:0f:11: a5:9c:a9:a1:d2:a9:9c:28:e6:a0:cb:b3:3b:b6:65:4e:79:66: b0:5f:7b:1e:df:a4:5b:b6:89:bf:5c:ef:f2:0d:66:ea:60:aa: e5:f6:0e:40:01:20:5d:41:4b:ff:f0:95:7a:21:ea:3b:64:f9: f1:61:8d:7f:f5:81:7f:f8:62:60:89:4f:3b:16:64:05:d1:2b: 9c:86:6c:43:08:2c:70:d5:39:86:3c:9b:9b:99:4d:e9:5f:da: 43:36:8b:90:14:13:72:84:25:d5:d1:d5:4c:53:1d:92:49:7f: cf:8d:d1:55:10:1b:1f:92:08:a3:b7:8f:77:16:05:e0:b0:aa: f6:af:c0:72:5c:b5:ed:20:df:97:78:39:f2:42:44:91:44:b3: 90:23:7a:0d:b8:59:82:da:6f:08:48:3e:25:eb:49:1a:35:e3: a4:c4:cf:d1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUGQrkDz8SPMp1LfFAULYzGMeMxS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZThiYzk4NzYxNzRkOWE3Mzg1ZmNlOTM0M2UyYmI3ZDk4 ZjUyM2IxMTAeFw0yNTEyMTcxMjAxMzlaFw0yNTEyMTgxNTI3MzlaMDMxMTAvBgNV BAMTKDc4RkQ0RjMyNzYwODY0RURCN0U0MzEyNDA1MUUzM0U5QzAzMjg5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfjfXNFWY0a7f3wlFtMLPcBOVg b+irytX4MiZK1KljXUks0csHlSDbro9pbzPH8KGijfLGxB1DEExBHakjzkkyay+n vtGtI6+EyEVvLNuvyoTXp581nY2ErmKYe9dr/An8zczuLWAKTK94vfX4dhTJZDv6 p9rWfviyrHh4Su9ch3wVAZmx9dAxeGIrqYjikVx0m7rGY4S31BCY4t+7to10b6P3 /oIZa46TWA7Ki89EN5scjIkz6yIQQli5KczJsVE3MbS6NEX0TiSOEHf0tfTjlRay uGkLXpCAiMrZWomlihrRYHA8WlD4zxuJjPlUDnNpTA+mWhy3em0OnyI1/i1/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUeP1PMnYIZO235DEkBR4z6cAyiVMwHwYDVR0j BBgwFoAU6LyYdhdNmnOF/Ok0Piu32Y9SOxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzAvRThCQzk4NzYxNzREOUE3Mzg1RkNFOTM0M0UyQkI3RDk4RjUyM0IxMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMeVlkaGRObW5PRl9PazBQaXUzMlk5 U094RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTQ3NmQ2Mi05 Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMC9FOEJDOTg3NjE3NEQ5QTczODVG Q0U5MzQzRTJCQjdEOThGNTIzQjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7PpSwPtls6ykV6YY/sC +YZz5xORpD55WIDUA5F39o0dzkxyRTpH10eOF9lqkDgGGvt9olIJccqvUhMSnssG dVvyLaZ5rEZGtji9Dpi+vNRIS5ES0v9gDQ8RpZypodKpnCjmoMuzO7ZlTnlmsF97 Ht+kW7aJv1zv8g1m6mCq5fYOQAEgXUFL//CVeiHqO2T58WGNf/WBf/hiYIlPOxZk BdErnIZsQwgscNU5hjybm5lN6V/aQzaLkBQTcoQl1dHVTFMdkkl/z43RVRAbH5II o7ePdxYF4LCq9q/Acly17SDfl3g58kJEkUSzkCN6DbhZgtpvCEg+JetJGjXjpMTP 0Q== -----END CERTIFICATE-----Generated at Wed Dec 17 19:08:26 2025 by rpki-client