This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json) Hash identifier: iNr52QsY1FETYi+pYL1aiibZDprU4wTG1ivUFVWtYgM= Subject key identifier: 3C:3B:3F:54:FC:8B:CA:20:7E:C0:0B:EA:B7:FE:F0:29:A1:3C:0A:A3 Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6 Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6 Certificate serial: 019AF276575C266820256195539E0E2247DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft Manifest number: 1515 Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=) 2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: 7UJp2AxZBa8z4Q+pu78YUCj60zJzVndL83eR+PgiMqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:57:5c:26:68:20:25:61:95:53:9e:0e:22:47:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=3c3b3f54fc8bca207ec00beab7fef029a13c0aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:21:70:c4:04:ce:c4:03:a9:3f:94:aa:00: f4:72:2d:9a:53:7c:f5:1c:a6:24:1f:ee:0a:56:a6: 90:ae:43:cf:09:c2:71:b8:1c:ff:d5:b1:31:89:fb: 92:47:1b:62:8d:c5:62:58:08:fe:25:50:62:7e:82: ca:94:b8:9e:8b:f6:f5:18:f5:95:8b:36:be:87:57: ec:5a:fc:1e:f6:6c:c4:03:5c:6e:7c:c8:14:af:82: a4:fc:c8:6d:66:cd:7c:f2:17:5b:29:11:69:cf:81: 33:58:cd:f2:6c:48:bd:06:4e:8a:32:e8:47:64:bf: 31:8a:2a:c1:23:60:bc:dd:cc:46:ca:48:09:d8:f7: c4:74:01:8f:92:c3:82:94:12:86:13:f7:8c:bf:72: fe:68:60:2b:f1:51:17:9c:57:31:16:72:9f:f9:2c: 97:92:ab:6d:56:24:4f:bd:12:bf:06:29:aa:58:64: 17:0e:07:3c:09:18:b8:35:96:8c:fa:cf:93:3c:39: 62:64:09:18:19:28:73:0a:43:0b:a8:15:30:49:cc: 90:e4:ff:09:06:82:08:f8:02:8e:a7:ba:4d:1d:a0: 0f:39:c7:4e:7a:88:41:e8:0f:36:3c:a7:a0:37:6e: 1b:77:df:0a:d2:5c:e6:3c:0f:a3:5f:f5:27:91:b6: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3B:3F:54:FC:8B:CA:20:7E:C0:0B:EA:B7:FE:F0:29:A1:3C:0A:A3 X509v3 Authority Key Identifier: keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:06:94:54:06:0e:29:61:ad:ec:49:bd:fb:4d:34:39:34:4b: f7:f9:ff:c8:33:ce:f1:c0:98:fe:0a:dd:2a:53:58:bb:1f:90: fe:ed:5b:e4:a9:94:62:74:12:85:7e:14:98:33:4a:e2:47:f5: 63:84:b0:b3:18:0c:cd:d1:80:fc:ce:ca:0f:88:0c:b0:d3:fe: 20:13:17:e9:48:ef:36:a9:a7:69:45:de:64:7b:7f:1d:1a:f5: 48:fb:0d:7c:9d:29:4a:e3:e3:fb:5b:3a:1f:8a:68:91:cd:46: 5d:f9:cb:12:be:f7:fa:d2:55:56:10:55:34:b3:10:16:76:0d: fc:7a:9a:92:21:a0:0c:71:f4:98:4e:92:63:a5:a2:50:cc:74: 8c:4d:77:f2:28:cc:8f:da:20:37:31:5a:0c:4e:6a:d8:5c:8e: d9:5a:c8:f0:06:9a:a0:12:5b:37:44:13:aa:d1:e1:77:ca:bb: a7:eb:44:3e:e6:0f:34:a1:51:81:e9:ee:e2:38:31:5a:32:10: cb:97:67:d7:7f:c3:37:b2:06:4c:25:9c:e1:96:0c:b7:36:aa: 06:40:e0:d2:26:eb:40:02:10:36:eb:0c:fe:15:95:c4:37:50: 91:ea:57:5e:d6:95:64:a1:4e:c0:87:22:c6:1d:fc:0e:63:f4: 0a:09:65:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydldcJmggJWGVU54OIkffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzA5OTk4Y2UzOWNmZGNhNjZlY2ZkOGRkM2FjMzg2NDRk M2M4YTYwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD EygzYzNiM2Y1NGZjOGJjYTIwN2VjMDBiZWFiN2ZlZjAyOWExM2MwYWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoEhcMQEzsQDqT+UqgD0ci2aU3z1 HKYkH+4KVqaQrkPPCcJxuBz/1bExifuSRxtijcViWAj+JVBifoLKlLiei/b1GPWV iza+h1fsWvwe9mzEA1xufMgUr4Kk/MhtZs188hdbKRFpz4EzWM3ybEi9Bk6KMuhH ZL8xiirBI2C83cxGykgJ2PfEdAGPksOClBKGE/eMv3L+aGAr8VEXnFcxFnKf+SyX kqttViRPvRK/BimqWGQXDgc8CRi4NZaM+s+TPDliZAkYGShzCkMLqBUwScyQ5P8J BoII+AKOp7pNHaAPOcdOeohB6A82PKegN24bd98K0lzmPA+jX/UnkbYLfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDw7P1T8i8ogfsAL6rf+8CmhPAqjMB8GA1UdIwQY MBaAFHvAmZjOOc/cpm7P2N06w4ZE08imMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMt MjJkNmNkMWUxYThhLzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMtMjJkNmNkMWUxYThh LzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngaUVAYO KWGt7Em9+000OTRL9/n/yDPO8cCY/grdKlNYux+Q/u1b5KmUYnQShX4UmDNK4kf1 Y4SwsxgMzdGA/M7KD4gMsNP+IBMX6UjvNqmnaUXeZHt/HRr1SPsNfJ0pSuPj+1s6 H4pokc1GXfnLEr73+tJVVhBVNLMQFnYN/HqakiGgDHH0mE6SY6WiUMx0jE138ijM j9ogNzFaDE5q2FyO2VrI8AaaoBJbN0QTqtHhd8q7p+tEPuYPNKFRgenu4jgxWjIQ y5dn13/DN7IGTCWc4ZYMtzaqBkDg0ibrQAIQNusM/hWVxDdQkepXXtaVZKFOwIci xh38DmP0Cgll6A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:13 2025 by rpki-client