This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft File: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json) Hash identifier: ovEy6IURDDd44MLsN2HKVtp12g0/s3hwv5VBiN4yTNo= Subject key identifier: 35:59:BE:28:03:42:08:DF:82:65:2F:A3:A8:51:C2:C5:F4:AC:E1:51 Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C Certificate issuer: /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c Certificate serial: 019B236436131B6FA25AA7492F13671D1E35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft Manifest number: 0737 Signing time: Mon 15 Dec 2025 19:02:08 +0000 Manifest this update: Mon 15 Dec 2025 19:02:08 +0000 Manifest next update: Tue 16 Dec 2025 19:02:08 +0000 Files and hashes: 1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: ik+WI55MHOu1/uvYwmnynJc4VW/ANbgmb0V0584AyEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:36:13:1b:6f:a2:5a:a7:49:2f:13:67:1d:1e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c Validity Not Before: Dec 15 19:02:08 2025 GMT Not After : Dec 16 19:02:08 2025 GMT Subject: CN=3559be28034208df82652fa3a851c2c5f4ace151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:96:1b:8f:c8:9d:93:ca:3a:9a:9a:b4:c7:99: 30:ca:5a:95:3a:05:75:67:af:f6:e3:14:eb:e3:9e: e3:7e:77:15:7c:69:4e:24:4b:ed:35:0f:9b:f8:48: cd:f5:3d:97:07:7c:02:fb:3d:01:e2:9f:4a:f8:f2: 48:e5:64:f0:0a:f7:3e:fc:77:a0:b7:d5:13:86:c1: c9:ef:25:76:6e:30:7c:30:23:d8:ab:ad:4c:02:a6: a4:bd:9c:75:1a:c5:8f:17:c2:8f:39:69:73:50:4f: ec:7d:ba:00:53:a9:34:1a:f4:31:be:06:ff:a8:0f: 1c:99:bb:ea:ec:09:23:c7:67:33:4c:2f:27:8e:19: 84:81:23:2a:b7:be:2a:f7:da:d5:1f:b3:32:e8:ce: 1e:eb:22:6a:0e:13:90:1e:0d:ae:28:52:57:93:51: 76:a5:63:5a:2f:a2:f5:37:d5:83:1d:d2:20:d3:59: 91:3d:f0:bc:0e:87:8e:d6:3c:08:b9:7f:6a:cf:6e: cc:79:ed:29:15:61:a7:7f:1c:06:71:2f:f2:8a:2a: 00:7b:aa:51:ac:2a:b8:d6:cb:77:24:ee:40:d8:0a: 1c:a9:28:23:96:40:51:e2:dd:8a:86:84:00:ab:d8: 49:13:a7:9e:03:35:7d:41:a8:a0:09:07:3f:dd:7b: 88:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:59:BE:28:03:42:08:DF:82:65:2F:A3:A8:51:C2:C5:F4:AC:E1:51 X509v3 Authority Key Identifier: keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:32:80:ed:51:74:c5:6f:37:2e:06:59:f1:b4:fb:89:a9:73: af:14:8c:4b:54:45:fe:6c:c1:37:15:d6:fa:f9:bf:ee:3b:f5: 6c:b6:c2:b5:50:9e:aa:28:a3:cc:b7:51:98:31:d8:14:33:fc: 91:ff:7d:bc:ba:ff:98:7b:8a:0c:c5:05:3a:9f:c7:c5:55:85: d2:1d:ed:2c:1e:2b:70:0e:79:a2:dd:44:47:14:01:09:32:94: ad:eb:e5:19:9d:cd:14:d5:24:14:0f:95:06:1a:99:f3:63:12: c3:79:5f:11:3a:96:ed:cc:1a:a0:5e:4a:05:59:6b:b5:8a:bd: 59:6b:fe:41:71:ed:62:a7:0e:f7:02:66:b8:e2:b2:16:e4:95: 7d:33:75:cf:6e:a6:76:89:62:41:39:b8:27:6f:9a:d3:d2:5d: a4:7b:a9:91:09:a5:e3:28:b7:3c:57:b4:fe:ee:88:39:14:79: 93:c0:7a:6d:74:80:c0:6c:43:89:0d:ad:5e:46:1f:58:b8:6d: c2:c4:18:f0:57:d0:93:f3:c1:f9:c7:1d:7c:69:f3:48:69:46: f7:32:8f:08:54:d8:42:5b:65:8b:f5:96:4d:90:db:e3:50:51: 71:91:9b:c1:b9:50:67:d1:4d:22:d6:9d:36:c3:e0:7e:3f:7b: 30:32:26:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZDYTG2+iWqdJLxNnHR41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzdiZTUyMWQxN2E2YTU5MmNjNjFmNzkxNGMyNWYxNjk1 N2NjOWMwHhcNMjUxMjE1MTkwMjA4WhcNMjUxMjE2MTkwMjA4WjAzMTEwLwYDVQQD EygzNTU5YmUyODAzNDIwOGRmODI2NTJmYTNhODUxYzJjNWY0YWNlMTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JYbj8idk8o6mpq0x5kwylqVOgV1 Z6/24xTr457jfncVfGlOJEvtNQ+b+EjN9T2XB3wC+z0B4p9K+PJI5WTwCvc+/Heg t9UThsHJ7yV2bjB8MCPYq61MAqakvZx1GsWPF8KPOWlzUE/sfboAU6k0GvQxvgb/ qA8cmbvq7Akjx2czTC8njhmEgSMqt74q99rVH7My6M4e6yJqDhOQHg2uKFJXk1F2 pWNaL6L1N9WDHdIg01mRPfC8DoeO1jwIuX9qz27Mee0pFWGnfxwGcS/yiioAe6pR rCq41st3JO5A2AocqSgjlkBR4t2KhoQAq9hJE6eeAzV9QaigCQc/3XuIYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVZvigDQgjfgmUvo6hRwsX0rOFRMB8GA1UdIwQY MBaAFHvHvlIdF6alksxh95FMJfFpV8ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzIt MTA1ZDgwMDIxNDlkLzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzItMTA1ZDgwMDIxNDlk LzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDKA7VF0 xW83LgZZ8bT7ialzrxSMS1RF/mzBNxXW+vm/7jv1bLbCtVCeqiijzLdRmDHYFDP8 kf99vLr/mHuKDMUFOp/HxVWF0h3tLB4rcA55ot1ERxQBCTKUrevlGZ3NFNUkFA+V BhqZ82MSw3lfETqW7cwaoF5KBVlrtYq9WWv+QXHtYqcO9wJmuOKyFuSVfTN1z26m doliQTm4J2+a09JdpHupkQml4yi3PFe0/u6IORR5k8B6bXSAwGxDiQ2tXkYfWLht wsQY8FfQk/PB+ccdfGnzSGlG9zKPCFTYQltli/WWTZDb41BRcZGbwblQZ9FNItad NsPgfj97MDImew== -----END CERTIFICATE-----Generated at Tue Dec 16 00:32:33 2025 by rpki-client