This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json) Hash identifier: 0ahXxsYeF7ITeaarel9H9urNDfgCrfsz6HY0Jl+r8ek= Subject key identifier: 76:00:54:11:5B:12:0D:A3:9D:5D:4D:64:7C:19:46:0F:93:A4:B7:C2 Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf Certificate serial: 019B337B60B14188FFA38207C4F15F70FDF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft Manifest number: 03DE Signing time: Thu 18 Dec 2025 22:01:21 +0000 Manifest this update: Thu 18 Dec 2025 22:01:21 +0000 Manifest next update: Fri 19 Dec 2025 22:01:21 +0000 Files and hashes: 1: 5TJg2Iv73VFNhdExw4W7yWYaSDc.roa (hash: itYnIaMtVgddsFyZfv3i+VtQbQhHkGAFRlMGBpEoryI=) 2: Tzl5NFiih_Oo3si8dnUw8wkuo2I.roa (hash: 6Qg5GxXMwFQB8Qi2Ip90XrbOE+HYQ3G3PbvVVea81ok=) 3: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: AvOmeT0bgakIGWZoWnGle+XvIbdTh3X3D0k0K4pkyL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:60:b1:41:88:ff:a3:82:07:c4:f1:5f:70:fd:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf Validity Not Before: Dec 18 22:01:21 2025 GMT Not After : Dec 19 22:01:21 2025 GMT Subject: CN=760054115b120da39d5d4d647c19460f93a4b7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:b6:37:be:d6:73:88:35:37:f3:5c:e7:ec: c6:2a:78:ba:c8:9d:68:af:78:bb:40:e5:13:a6:36: c9:5d:fb:05:a7:4e:86:1a:3f:f6:86:7d:70:63:3f: 0c:28:5c:8e:a1:46:0f:40:86:31:31:05:6c:3d:b2: b9:aa:a5:a8:92:90:3e:a6:49:46:d8:60:0a:19:81: 53:60:c8:aa:5b:94:0a:3b:b3:b9:de:ac:09:9b:c7: ff:d5:f8:c9:b5:2b:fc:24:55:a9:4b:47:92:a1:cf: 5b:bc:f7:6d:b3:1f:db:75:0f:8d:c5:78:a9:af:ec: 0d:00:73:26:69:58:53:35:86:67:f2:5f:51:9a:50: 5f:d0:3e:67:60:0e:91:d8:bf:4d:4a:98:d4:7f:81: 1b:b0:39:e6:8c:59:f2:c5:51:57:7f:8a:2d:da:48: ab:82:b0:d9:95:75:54:a8:be:51:97:b2:81:41:8d: 11:2f:f9:36:9f:32:fe:04:ae:78:b0:34:4b:e0:08: 6f:5c:b7:cc:fb:6e:48:21:14:fe:2c:05:72:68:8e: 39:03:87:96:df:ba:20:32:53:1c:1e:d5:ca:72:cd: 96:cf:89:75:5c:a9:89:b0:2b:3a:d6:0a:69:6a:4d: c3:02:75:2a:c6:33:fc:be:65:16:df:d0:15:42:01: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:00:54:11:5B:12:0D:A3:9D:5D:4D:64:7C:19:46:0F:93:A4:B7:C2 X509v3 Authority Key Identifier: keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0d:16:55:80:1c:63:e4:18:04:63:ef:00:c7:ef:15:83:b9: 81:a8:2e:da:f5:ff:df:3a:d8:4c:14:06:20:e8:2e:49:81:e9: e8:fa:09:18:1b:c2:38:6f:cf:d7:92:cb:91:e0:ab:a1:a8:43: 94:8e:28:49:95:6a:1c:1b:25:74:33:a1:3d:3e:7a:66:1d:5c: bb:d5:f0:8b:e2:e6:d2:5d:83:19:65:1c:42:42:95:7c:3a:52: ba:db:a4:d2:c3:cf:5b:72:c1:56:d0:32:86:1b:fe:85:ae:ba: 7f:4f:c1:f4:16:81:f1:db:b7:a5:7c:75:93:c2:b4:79:c5:9e: 48:3a:23:c1:b8:e0:f4:3a:4a:ca:65:e5:67:bf:c2:16:e7:c6: 76:fe:4e:ad:96:5f:d2:fb:07:cf:9d:94:39:8e:5f:cf:9d:ab: bf:24:b3:4c:bd:d3:f7:77:0f:8a:70:30:8c:96:89:87:13:7c: 6a:a8:37:46:a5:c5:d1:0b:98:9e:39:1e:87:cf:d5:2a:6e:54: 3c:61:54:48:38:91:51:b2:90:69:dd:b1:b8:ba:f3:ff:cc:47: a6:88:c6:81:bd:b0:e8:80:df:46:b2:ea:f7:8f:08:e9:85:c5: ee:c1:58:7d:0c:32:f5:e8:8f:22:40:d8:29:88:98:a9:b7:ae: 10:00:f3:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze2CxQYj/o4IHxPFfcP3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiY2IxMjdjN2NkNzc4NjA3Mjk2Yjg4Mzg2ZTg5NGFlMWRl Mzg1YmYwHhcNMjUxMjE4MjIwMTIxWhcNMjUxMjE5MjIwMTIxWjAzMTEwLwYDVQQD Eyg3NjAwNTQxMTViMTIwZGEzOWQ1ZDRkNjQ3YzE5NDYwZjkzYTRiN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYi2N77Wc4g1N/Nc5+zGKni6yJ1o r3i7QOUTpjbJXfsFp06GGj/2hn1wYz8MKFyOoUYPQIYxMQVsPbK5qqWokpA+pklG 2GAKGYFTYMiqW5QKO7O53qwJm8f/1fjJtSv8JFWpS0eSoc9bvPdtsx/bdQ+NxXip r+wNAHMmaVhTNYZn8l9RmlBf0D5nYA6R2L9NSpjUf4EbsDnmjFnyxVFXf4ot2kir grDZlXVUqL5Rl7KBQY0RL/k2nzL+BK54sDRL4AhvXLfM+25IIRT+LAVyaI45A4eW 37ogMlMcHtXKcs2Wz4l1XKmJsCs61gppak3DAnUqxjP8vmUW39AVQgEtQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYAVBFbEg2jnV1NZHwZRg+TpLfCMB8GA1UdIwQY MBaAFHvLEnx813hgcpa4g4bolK4d44W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWIt MmUyMGE3OWY3MTQ1LzEvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWItMmUyMGE3OWY3MTQ1 LzEvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACg0WVYAc Y+QYBGPvAMfvFYO5gagu2vX/3zrYTBQGIOguSYHp6PoJGBvCOG/P15LLkeCroahD lI4oSZVqHBsldDOhPT56Zh1cu9Xwi+Lm0l2DGWUcQkKVfDpSutuk0sPPW3LBVtAy hhv+ha66f0/B9BaB8du3pXx1k8K0ecWeSDojwbjg9DpKymXlZ7/CFufGdv5OrZZf 0vsHz52UOY5fz52rvySzTL3T93cPinAwjJaJhxN8aqg3RqXF0QuYnjkeh8/VKm5U PGFUSDiRUbKQad2xuLrz/8xHpojGgb2w6IDfRrLq948I6YXF7sFYfQwy9eiPIkDY KYiYqbeuEADzsQ== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:08 2025 by rpki-client