This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json) Hash identifier: hPk7MJnec48+eK6awGe6MNOV4AQ72ggdiLS6T6jPB3Y= Subject key identifier: 69:D8:88:2F:C3:38:F3:C7:B6:6B:C4:11:DF:4D:27:03:64:B6:51:4E Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf Certificate serial: 019AF5AEEC254A4D7E57BD773153AE2078C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft Manifest number: 03BE Signing time: Sat 06 Dec 2025 22:01:12 +0000 Manifest this update: Sat 06 Dec 2025 22:01:12 +0000 Manifest next update: Sun 07 Dec 2025 22:01:12 +0000 Files and hashes: 1: 5TJg2Iv73VFNhdExw4W7yWYaSDc.roa (hash: itYnIaMtVgddsFyZfv3i+VtQbQhHkGAFRlMGBpEoryI=) 2: Tzl5NFiih_Oo3si8dnUw8wkuo2I.roa (hash: 6Qg5GxXMwFQB8Qi2Ip90XrbOE+HYQ3G3PbvVVea81ok=) 3: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: oRv9lut2MzNjwmaDYygT1SsHjemXTT7vF9kEUS3or7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:ec:25:4a:4d:7e:57:bd:77:31:53:ae:20:78:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf Validity Not Before: Dec 6 22:01:12 2025 GMT Not After : Dec 7 22:01:12 2025 GMT Subject: CN=69d8882fc338f3c7b66bc411df4d270364b6514e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:01:81:1c:02:35:3d:82:1c:c9:b6:b1:26: c1:03:a0:c4:6e:0e:25:4e:03:bb:99:e6:c7:3d:6c: a3:73:60:24:a9:2c:5a:b6:8e:4b:09:3f:26:2b:de: 02:d8:ce:ca:cd:d6:d4:fd:fd:12:40:e6:f8:b8:27: 33:9b:66:6d:a3:db:b2:37:16:a7:19:1e:76:24:fe: 82:8d:19:c5:c0:24:bf:a3:82:29:4a:d3:7f:b2:3b: a2:29:d3:ef:11:f7:87:d9:e9:2e:33:64:78:87:85: ec:d5:ad:1f:6f:9f:e6:57:21:2d:fd:e6:7d:f8:c9: a7:59:71:da:8f:d7:cf:c5:dd:df:de:17:34:17:8e: 2f:3b:55:aa:15:c4:b4:ba:cb:13:98:71:02:27:91: 3b:5d:17:23:e6:c6:a7:3a:97:bb:45:5a:fe:ea:1d: 8e:a4:f2:f9:36:29:04:55:4f:f4:d7:6d:60:5e:85: 5b:e2:79:7d:fa:a6:c0:38:b0:3c:6a:94:6d:1a:b2: e5:b7:05:cc:78:e3:fd:c8:d8:4e:40:e9:60:6f:fa: c8:37:04:02:73:3a:47:e0:ed:44:0f:3e:d6:a4:e2: 42:ff:d2:30:85:4e:b5:a8:fe:e6:17:14:7c:f0:ab: d2:85:1c:cf:32:ea:92:48:1e:58:a0:c4:f8:2d:ee: e2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D8:88:2F:C3:38:F3:C7:B6:6B:C4:11:DF:4D:27:03:64:B6:51:4E X509v3 Authority Key Identifier: keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:60:5e:11:88:43:1e:dc:4c:56:f1:7b:c4:d5:af:53:08:e5: 83:9c:dc:06:5f:cb:8a:6f:36:d8:a9:e1:46:f3:58:7b:ef:dd: 35:0a:3e:03:4f:f7:cb:4d:ec:96:23:f6:27:37:7b:e8:04:36: b8:dc:e8:7f:76:2a:3f:9c:94:56:2f:9b:93:15:87:d7:4c:0d: 2d:49:ed:8b:65:1c:b5:61:91:86:da:bc:68:7e:e2:30:41:dd: 38:c7:7e:5c:56:3f:ab:58:5d:59:ca:6b:f2:79:9d:0c:31:0a: f7:8b:03:be:4a:ab:fa:0d:81:f1:2a:2c:2f:97:c7:06:a9:27: f7:f0:90:18:d1:e3:e1:27:fa:53:89:d7:00:dd:18:56:a4:d8: 0d:b2:7c:25:87:42:ef:54:65:25:99:44:69:4d:1e:52:a2:eb: ab:dd:64:41:f7:7a:3f:64:a3:08:e7:ab:11:7d:91:40:ae:21: 2e:65:b0:b7:ea:13:96:b9:1a:3a:e1:81:21:79:b1:fa:ea:a3: 2f:f0:2f:51:32:8a:de:3b:07:46:60:c4:82:fc:72:c1:50:67: cc:22:13:99:1b:1c:7c:c1:e4:b4:34:04:9e:5d:e4:b8:cd:37: 09:2f:cf:bc:fb:99:6e:5d:31:06:30:b0:17:0f:f7:c3:bb:24: cb:25:39:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ruwlSk1+V713MVOuIHjGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiY2IxMjdjN2NkNzc4NjA3Mjk2Yjg4Mzg2ZTg5NGFlMWRl Mzg1YmYwHhcNMjUxMjA2MjIwMTEyWhcNMjUxMjA3MjIwMTEyWjAzMTEwLwYDVQQD Eyg2OWQ4ODgyZmMzMzhmM2M3YjY2YmM0MTFkZjRkMjcwMzY0YjY1MTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMIBgRwCNT2CHMm2sSbBA6DEbg4l TgO7mebHPWyjc2AkqSxato5LCT8mK94C2M7KzdbU/f0SQOb4uCczm2Zto9uyNxan GR52JP6CjRnFwCS/o4IpStN/sjuiKdPvEfeH2ekuM2R4h4Xs1a0fb5/mVyEt/eZ9 +MmnWXHaj9fPxd3f3hc0F44vO1WqFcS0ussTmHECJ5E7XRcj5sanOpe7RVr+6h2O pPL5NikEVU/0121gXoVb4nl9+qbAOLA8apRtGrLltwXMeOP9yNhOQOlgb/rINwQC czpH4O1EDz7WpOJC/9IwhU61qP7mFxR88KvShRzPMuqSSB5YoMT4Le7iSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnYiC/DOPPHtmvEEd9NJwNktlFOMB8GA1UdIwQY MBaAFHvLEnx813hgcpa4g4bolK4d44W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWIt MmUyMGE3OWY3MTQ1LzEvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWItMmUyMGE3OWY3MTQ1 LzEvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2BeEYhD HtxMVvF7xNWvUwjlg5zcBl/Lim822KnhRvNYe+/dNQo+A0/3y03sliP2Jzd76AQ2 uNzof3YqP5yUVi+bkxWH10wNLUnti2UctWGRhtq8aH7iMEHdOMd+XFY/q1hdWcpr 8nmdDDEK94sDvkqr+g2B8SosL5fHBqkn9/CQGNHj4Sf6U4nXAN0YVqTYDbJ8JYdC 71RlJZlEaU0eUqLrq91kQfd6P2SjCOerEX2RQK4hLmWwt+oTlrkaOuGBIXmx+uqj L/AvUTKK3jsHRmDEgvxywVBnzCITmRscfMHktDQEnl3kuM03CS/PvPuZbl0xBjCw Fw/3w7skyyU5rw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:20 2025 by rpki-client