This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json) Hash identifier: jl30JYQ8TU9+e4NF2NtpR9HorcZVFPFUYuVrGm49u2g= Subject key identifier: 75:F2:6F:81:91:59:04:BF:E0:04:7C:F0:C3:91:94:3E:B1:E9:64:FE Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54 Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54 Certificate serial: 019AF31C8211A36401F930092D4C2893115B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft Manifest number: 07E8 Signing time: Sat 06 Dec 2025 10:02:02 +0000 Manifest this update: Sat 06 Dec 2025 10:02:02 +0000 Manifest next update: Sun 07 Dec 2025 10:02:02 +0000 Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: +sjg//jhaDgEOEP/srSWRoIJWtbeEk6TD/b/wxyEcgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:82:11:a3:64:01:f9:30:09:2d:4c:28:93:11:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54 Validity Not Before: Dec 6 10:02:02 2025 GMT Not After : Dec 7 10:02:02 2025 GMT Subject: CN=75f26f81915904bfe0047cf0c391943eb1e964fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:21:93:21:92:3f:d8:8d:6c:d4:af:f1:3e:89: 8c:a3:2a:ca:56:12:e2:0e:5b:95:9f:c9:85:7e:04: 0b:8a:2a:a4:4b:0e:58:8e:ba:e2:17:bb:58:f2:30: 41:b6:7c:4b:bd:85:98:5c:ba:59:ae:3e:99:86:af: ef:0d:d1:c8:95:9e:1e:dd:d8:dd:6b:42:22:53:ba: 8b:ae:16:37:70:a5:43:8d:e5:e7:9c:c4:61:f5:13: 37:d9:57:3b:90:c0:d6:27:41:79:34:98:ee:15:6a: 36:e4:a7:15:71:ee:e7:2b:3d:05:86:67:b2:3a:63: 4d:7b:81:76:9a:a5:62:e7:78:a0:4e:09:5a:c9:a0: 79:9d:52:9d:60:f6:97:fd:b3:c9:af:c1:c8:dd:82: 63:53:e7:62:9a:8d:6b:62:d0:5e:3b:b9:9a:a1:00: 22:83:90:ed:55:17:f5:70:76:8f:26:cf:d9:7a:4f: c3:14:4d:fc:40:5c:5e:c6:25:c4:47:05:66:48:2f: f7:1e:15:7f:51:cd:6d:bc:74:c5:13:d9:75:28:e6: 15:ad:67:68:73:dd:f6:06:ed:45:b2:fb:94:9b:17: 97:5b:bc:ed:1d:9c:db:07:6d:76:4e:ae:85:cf:9e: a8:ed:d8:36:7d:dc:f1:84:79:08:c5:db:84:ea:27: 48:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F2:6F:81:91:59:04:BF:E0:04:7C:F0:C3:91:94:3E:B1:E9:64:FE X509v3 Authority Key Identifier: keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:2a:c0:18:41:06:08:2f:15:ca:3a:31:83:72:23:68:e8:82: 1e:09:16:b0:9e:4e:ff:04:8b:2a:6a:f0:95:c8:de:54:62:ef: b1:37:43:0c:c9:02:ba:a0:2d:af:bf:7f:ac:f3:39:be:04:86: d1:23:d2:24:0d:61:aa:d6:d3:80:e4:00:b2:86:a5:a5:38:ce: fc:52:a1:5d:16:0a:e7:54:61:44:07:89:cb:89:68:35:46:01: 6c:ce:55:e7:69:3d:00:88:af:14:c3:9a:32:83:d0:f5:ea:7c: bf:f8:d2:e2:90:b7:9e:77:5a:06:a1:1a:54:94:56:53:84:b3: 77:dd:9b:c9:86:23:50:16:47:78:7b:5d:26:7d:07:2d:91:03: 3d:d0:55:fc:dc:98:5d:29:4e:c1:ac:da:25:c5:a1:0e:5f:dd: b2:1b:41:8f:d7:79:8c:e6:c9:b1:e6:a4:e5:37:59:b5:89:f9: ad:1c:f4:b4:39:2c:48:4c:99:2c:e2:8d:6c:8d:6b:fa:22:06: 40:f4:f6:a5:72:c9:2c:88:fe:09:4e:70:e2:ef:c0:53:88:59: 7a:7c:f5:f6:76:00:ad:69:58:60:db:ab:ad:b5:e7:83:1b:cd: 85:c1:7b:22:14:6b:80:87:2e:38:64:8e:11:a4:ac:8a:34:84: f0:b8:5b:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIIRo2QB+TAJLUwokxFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzkyZTZkZjMxYjM1NDVhMTk2ZmUwMzViY2I1YTI1MzA2 YTdmNTQwHhcNMjUxMjA2MTAwMjAyWhcNMjUxMjA3MTAwMjAyWjAzMTEwLwYDVQQD Eyg3NWYyNmY4MTkxNTkwNGJmZTAwNDdjZjBjMzkxOTQzZWIxZTk2NGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iGTIZI/2I1s1K/xPomMoyrKVhLi DluVn8mFfgQLiiqkSw5YjrriF7tY8jBBtnxLvYWYXLpZrj6Zhq/vDdHIlZ4e3djd a0IiU7qLrhY3cKVDjeXnnMRh9RM32Vc7kMDWJ0F5NJjuFWo25KcVce7nKz0Fhmey OmNNe4F2mqVi53igTglayaB5nVKdYPaX/bPJr8HI3YJjU+dimo1rYtBeO7maoQAi g5DtVRf1cHaPJs/Zek/DFE38QFxexiXERwVmSC/3HhV/Uc1tvHTFE9l1KOYVrWdo c932Bu1FsvuUmxeXW7ztHZzbB212Tq6Fz56o7dg2fdzxhHkIxduE6idIlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXyb4GRWQS/4AR88MORlD6x6WT+MB8GA1UdIwQY MBaAFHvJLm3zGzVFoZb+A1vLWiUwan9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDct NGJkYjU4ODEyMDg2LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDctNGJkYjU4ODEyMDg2 LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsyrAGEEG CC8Vyjoxg3IjaOiCHgkWsJ5O/wSLKmrwlcjeVGLvsTdDDMkCuqAtr79/rPM5vgSG 0SPSJA1hqtbTgOQAsoalpTjO/FKhXRYK51RhRAeJy4loNUYBbM5V52k9AIivFMOa MoPQ9ep8v/jS4pC3nndaBqEaVJRWU4Szd92byYYjUBZHeHtdJn0HLZEDPdBV/NyY XSlOwazaJcWhDl/dshtBj9d5jObJseak5TdZtYn5rRz0tDksSEyZLOKNbI1r+iIG QPT2pXLJLIj+CU5w4u/AU4hZenz19nYArWlYYNurrbXngxvNhcF7IhRrgIcuOGSO EaSsijSE8LhbUg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:14 2025 by rpki-client