This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft File: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft (raw, json) Hash identifier: TyhUxn4/gxP09HtoUCAI5rRDh+ZKto05va8PFVIUXT8= Subject key identifier: 16:F3:FB:06:6C:ED:00:74:1B:B8:B9:99:9B:80:18:4B:6A:D0:D5:C0 Authority key identifier: 7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54 Certificate issuer: /CN=7bcabe6490fa8bd572440fd6616a8430ee66d154 Certificate serial: 019AF12D54B6D93FE5567BF39B0E04D79D88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft Manifest number: 0425 Signing time: Sat 06 Dec 2025 01:01:11 +0000 Manifest this update: Sat 06 Dec 2025 01:01:11 +0000 Manifest next update: Sun 07 Dec 2025 01:01:11 +0000 Files and hashes: 1: 6ribQUEUmAxt2wHXJd-U7f6yaRI.roa (hash: qhkI5RwGajokhxyxbM332dvPvFl03D+O4/wx5DmaCUo=) 2: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl (hash: kC2Bfg8XgEzK72/JIc4oxYFzRaMjjXQYR2jgJEcfARA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:54:b6:d9:3f:e5:56:7b:f3:9b:0e:04:d7:9d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcabe6490fa8bd572440fd6616a8430ee66d154 Validity Not Before: Dec 6 01:01:11 2025 GMT Not After : Dec 7 01:01:11 2025 GMT Subject: CN=16f3fb066ced00741bb8b9999b80184b6ad0d5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:dc:7b:db:69:7f:78:c7:f7:cc:f5:94:a0: 01:8d:56:be:09:4b:b8:42:c9:83:d3:a4:9c:a9:ee: a7:e4:e3:67:b9:01:75:11:09:f6:90:05:69:69:8a: 12:58:49:27:fb:38:c3:00:92:82:c8:65:cb:18:af: 52:8f:03:1e:01:10:20:c1:8e:39:0a:14:3e:6b:f9: cb:00:9d:aa:89:29:90:d7:3e:fa:c1:4c:b8:d9:39: a8:06:67:07:05:fe:13:06:8d:8d:d7:54:a5:73:ea: 83:60:23:b8:e1:b6:75:9d:bf:f0:69:eb:7d:a8:2f: c4:ac:fa:25:38:7f:b8:41:a0:b2:bb:bf:37:80:4e: f4:da:60:54:9a:c9:49:c8:92:e3:c2:1e:36:ec:a3: 17:2b:97:93:3c:42:09:67:22:83:3c:87:a0:3c:ea: ff:1f:b9:4b:95:22:56:96:52:4a:c7:d8:3f:ff:4d: e4:79:11:62:f7:a2:c6:e4:9a:8f:ea:ab:41:af:4a: 2d:cf:1f:e2:67:9f:8c:53:63:00:e3:f4:29:bf:7b: 27:6f:bd:a0:0c:42:5d:a4:bc:98:33:cb:0b:2b:c7: 5a:0c:2e:64:5f:0e:55:4a:36:28:46:76:f8:86:33: 3e:a4:f2:a3:1a:33:13:a9:b9:42:f7:16:f7:7b:f4: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F3:FB:06:6C:ED:00:74:1B:B8:B9:99:9B:80:18:4B:6A:D0:D5:C0 X509v3 Authority Key Identifier: keyid:7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:45:5a:0f:73:59:b6:43:77:ca:b4:8a:84:69:87:4c:45:58: ae:90:fb:a3:cb:cc:ee:4e:c6:14:8b:f1:03:03:63:c7:85:e8: 04:98:50:94:45:c4:31:c0:8f:a1:27:8f:84:33:4f:f9:1f:0c: db:96:fb:4f:3e:66:33:d1:eb:b5:c1:bf:d7:f9:fc:45:8b:fe: b5:1f:47:be:ff:70:91:22:41:4b:34:79:10:a1:33:93:dd:77: 1a:08:61:e9:e6:3e:c4:06:92:7d:b5:5e:28:60:53:be:b2:4f: 4a:61:e3:da:43:6e:24:e1:51:bc:7f:b2:af:c1:d0:2e:f4:f4: 37:b9:b5:dc:e0:59:17:d6:43:84:e8:2a:bf:8f:4c:9a:03:db: 99:e4:3c:74:72:ba:b6:47:ad:10:47:a6:88:7e:55:be:5f:c8: 63:db:66:bf:70:de:1d:f4:ca:c0:55:32:e0:a5:ca:ae:af:45: 9a:61:31:06:ae:81:8a:d6:92:ad:82:71:24:9e:24:91:62:36: d6:cf:00:1f:be:82:87:d6:7e:eb:a4:56:70:5d:af:22:cd:3d: 74:cb:e2:a8:cf:cb:1f:c5:08:03:09:72:1c:bc:06:ab:66:72: fc:53:36:5a:e4:8b:f4:27:cb:b9:78:e8:ef:7a:22:b4:bf:2b: 67:2b:1c:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVS22T/lVnvzmw4E152IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiY2FiZTY0OTBmYThiZDU3MjQ0MGZkNjYxNmE4NDMwZWU2 NmQxNTQwHhcNMjUxMjA2MDEwMTExWhcNMjUxMjA3MDEwMTExWjAzMTEwLwYDVQQD EygxNmYzZmIwNjZjZWQwMDc0MWJiOGI5OTk5YjgwMTg0YjZhZDBkNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB7ce9tpf3jH98z1lKABjVa+CUu4 QsmD06Scqe6n5ONnuQF1EQn2kAVpaYoSWEkn+zjDAJKCyGXLGK9SjwMeARAgwY45 ChQ+a/nLAJ2qiSmQ1z76wUy42TmoBmcHBf4TBo2N11Slc+qDYCO44bZ1nb/waet9 qC/ErPolOH+4QaCyu783gE702mBUmslJyJLjwh427KMXK5eTPEIJZyKDPIegPOr/ H7lLlSJWllJKx9g//03keRFi96LG5JqP6qtBr0otzx/iZ5+MU2MA4/Qpv3snb72g DEJdpLyYM8sLK8daDC5kXw5VSjYoRnb4hjM+pPKjGjMTqblC9xb3e/S3MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbz+wZs7QB0G7i5mZuAGEtq0NXAMB8GA1UdIwQY MBaAFHvKvmSQ+ovVckQP1mFqhDDuZtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lNjJmZWUtZGE0Ny00Nzc3LTlkMzkt MWZlY2UwNTkyZTliLzEvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lNjJmZWUtZGE0Ny00Nzc3LTlkMzktMWZlY2UwNTkyZTli LzEvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0VaD3NZ tkN3yrSKhGmHTEVYrpD7o8vM7k7GFIvxAwNjx4XoBJhQlEXEMcCPoSePhDNP+R8M 25b7Tz5mM9HrtcG/1/n8RYv+tR9Hvv9wkSJBSzR5EKEzk913Gghh6eY+xAaSfbVe KGBTvrJPSmHj2kNuJOFRvH+yr8HQLvT0N7m13OBZF9ZDhOgqv49MmgPbmeQ8dHK6 tketEEemiH5Vvl/IY9tmv3DeHfTKwFUy4KXKrq9FmmExBq6BitaSrYJxJJ4kkWI2 1s8AH76Ch9Z+66RWcF2vIs09dMviqM/LH8UIAwlyHLwGq2Zy/FM2WuSL9CfLuXjo 73oitL8rZyscjg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:51 2025 by rpki-client