This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft File: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json) Hash identifier: 4aB/dlFAAnU7gqED34eKRMt3D/KeqysMkhbpuORaL7c= Subject key identifier: 0C:A2:A8:00:D7:98:78:7C:D4:45:A0:40:E1:6F:CB:3A:93:62:41:E7 Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C Certificate issuer: /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c Certificate serial: 019AF12DF84D879F87E8A443C66A58C979CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft Manifest number: 071D Signing time: Sat 06 Dec 2025 01:01:52 +0000 Manifest this update: Sat 06 Dec 2025 01:01:52 +0000 Manifest next update: Sun 07 Dec 2025 01:01:52 +0000 Files and hashes: 1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: w06aKKXbdva998gGfhXOoyBK0nWyotjsNTcf580g5Wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f8:4d:87:9f:87:e8:a4:43:c6:6a:58:c9:79:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c Validity Not Before: Dec 6 01:01:52 2025 GMT Not After : Dec 7 01:01:52 2025 GMT Subject: CN=0ca2a800d798787cd445a040e16fcb3a936241e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:69:a4:0e:f7:36:e4:80:70:33:93:b9:a3: 78:7d:ad:81:ac:43:13:46:9c:1e:f2:5d:9a:04:cc: 8d:f5:80:cd:0e:e6:16:85:7b:f6:5a:f2:15:00:5b: d7:cd:47:07:92:60:78:93:f7:e5:d5:d2:a3:d3:12: eb:d1:12:3d:d0:fd:1a:c5:00:06:53:03:97:ec:5f: 4b:c3:19:a8:36:7f:2c:b4:c2:f8:e2:43:60:c7:c3: 45:79:c9:ff:9c:b8:8e:d6:3a:23:87:06:95:8e:55: 0c:fb:93:39:e1:1d:f1:37:d5:f5:aa:04:78:3a:d8: 05:25:90:6f:62:39:50:77:8f:7a:f3:6a:7f:85:eb: de:57:9f:5e:40:fe:82:ed:0b:ab:a5:99:dc:a4:a5: 67:b7:2e:68:c6:7c:8b:01:52:f1:76:d3:15:81:48: 39:73:ec:04:8e:44:81:74:b4:b9:17:52:d3:f0:b6: e9:62:6d:17:46:e9:19:6c:79:2e:61:87:4e:87:fc: 12:7c:66:a2:b0:30:c4:b6:8d:b8:8f:4e:b8:f8:7d: 15:40:ee:24:19:85:8b:22:39:03:4e:a7:ef:9e:c7: 47:3b:58:4a:bb:d2:d8:86:51:f1:10:63:df:1e:4d: 31:92:f1:f9:b5:64:fe:03:6c:b6:97:58:cf:c6:b8: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A2:A8:00:D7:98:78:7C:D4:45:A0:40:E1:6F:CB:3A:93:62:41:E7 X509v3 Authority Key Identifier: keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cd:da:d5:28:e1:84:56:02:46:1e:3e:99:6c:90:11:9d:e3: 04:05:61:ad:18:11:b0:13:d5:74:59:fb:c8:b3:35:4a:ce:e6: 39:08:f0:4a:aa:93:ec:80:63:3e:08:ba:79:4f:f9:f0:23:0f: 28:33:35:05:f7:b0:f0:9a:21:d3:2e:ad:e6:76:14:49:b1:3e: 4e:8b:b5:ad:1c:8e:b3:a3:c3:ef:2f:45:2c:ac:c8:5b:0e:7e: 35:39:37:16:c0:6d:1f:b3:5f:25:6d:d6:ac:f5:d8:b0:5d:1f: 30:2e:f3:cc:21:90:0f:7f:a5:3b:2e:cf:da:ec:60:ce:a8:7d: 9d:0b:b0:76:33:f5:99:95:69:e7:7c:1e:39:c4:e1:d0:e0:4a: 3f:d6:82:42:19:be:d2:19:2c:61:92:37:d6:02:b2:1d:5c:f2: fd:de:cf:73:a9:a3:cb:49:de:ca:96:33:8d:5e:51:6e:ae:be: 93:a8:57:61:9c:e2:7e:e3:e7:06:72:79:81:5e:f8:b5:c7:ae: 5a:38:74:1c:19:db:29:63:24:f7:24:55:64:84:dd:13:97:7c: a6:dd:03:0b:9b:25:06:07:5a:f2:58:3e:b9:59:4f:7d:b1:0b: fd:c7:10:08:ea:9c:c9:11:e6:04:99:5b:18:0f:97:5f:10:dd: 84:3a:29:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfhNh5+H6KRDxmpYyXnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzdiZTUyMWQxN2E2YTU5MmNjNjFmNzkxNGMyNWYxNjk1 N2NjOWMwHhcNMjUxMjA2MDEwMTUyWhcNMjUxMjA3MDEwMTUyWjAzMTEwLwYDVQQD EygwY2EyYTgwMGQ3OTg3ODdjZDQ0NWEwNDBlMTZmY2IzYTkzNjI0MWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsBppA73NuSAcDOTuaN4fa2BrEMT Rpwe8l2aBMyN9YDNDuYWhXv2WvIVAFvXzUcHkmB4k/fl1dKj0xLr0RI90P0axQAG UwOX7F9LwxmoNn8stML44kNgx8NFecn/nLiO1jojhwaVjlUM+5M54R3xN9X1qgR4 OtgFJZBvYjlQd49682p/heveV59eQP6C7QurpZncpKVnty5oxnyLAVLxdtMVgUg5 c+wEjkSBdLS5F1LT8LbpYm0XRukZbHkuYYdOh/wSfGaisDDEto24j064+H0VQO4k GYWLIjkDTqfvnsdHO1hKu9LYhlHxEGPfHk0xkvH5tWT+A2y2l1jPxrg2ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyiqADXmHh81EWgQOFvyzqTYkHnMB8GA1UdIwQY MBaAFHvHvlIdF6alksxh95FMJfFpV8ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzIt MTA1ZDgwMDIxNDlkLzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzItMTA1ZDgwMDIxNDlk LzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADM3a1Sjh hFYCRh4+mWyQEZ3jBAVhrRgRsBPVdFn7yLM1Ss7mOQjwSqqT7IBjPgi6eU/58CMP KDM1Bfew8Joh0y6t5nYUSbE+Tou1rRyOs6PD7y9FLKzIWw5+NTk3FsBtH7NfJW3W rPXYsF0fMC7zzCGQD3+lOy7P2uxgzqh9nQuwdjP1mZVp53weOcTh0OBKP9aCQhm+ 0hksYZI31gKyHVzy/d7Pc6mjy0neypYzjV5Rbq6+k6hXYZzifuPnBnJ5gV74tceu Wjh0HBnbKWMk9yRVZITdE5d8pt0DC5slBgda8lg+uVlPfbEL/ccQCOqcyRHmBJlb GA+XXxDdhDopiw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:31 2025 by rpki-client