This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft File: E8xjCawwp_wBXDNEy8gIYbTFR88.mft (raw, json) Hash identifier: +Nqp4Er8ZRjLBwsYZaYni1KAzah/PJWz3dQkjri3hwk= Subject key identifier: 8C:DE:0B:93:58:7C:22:BA:B4:E0:A1:F1:C0:F6:63:7A:34:DF:B8:1E Authority key identifier: 13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF Certificate issuer: /CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf Certificate serial: 019AF12E0BAD595115E11FCDBC30B2860C87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: E8xjCawwp_wBXDNEy8gIYbTFR88.crl (hash: NMi9ERcJwJI2EAxQlZLo8LWF8UyVoaRDf2XEGVuZFSo=) 2: jzVDE20GlCgVCg-KhJB_QzsLMCg.roa (hash: LaydqvlZJmK18FahUwbjtSgT6W86Q5gZmcNPgCbbqe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0b:ad:59:51:15:e1:1f:cd:bc:30:b2:86:0c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13cc6309ac30a7fc015c3344cbc80861b4c547cf Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=8cde0b93587c22bab4e0a1f1c0f6637a34dfb81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:08:57:97:a0:63:a6:fc:95:e6:92:5c:ab:ca: 88:8d:5e:62:94:d7:c6:fa:61:3f:c1:83:4e:45:49: da:37:93:73:cd:f8:c5:ca:30:f8:ec:5a:3e:e9:ab: e1:83:d6:57:50:2e:53:1d:89:fd:93:0e:da:46:49: 2c:b3:dd:c7:7c:81:fe:2a:2f:7f:7a:ea:70:cd:3b: 64:66:df:f0:b5:d2:7d:1f:87:9a:f6:9d:a4:d3:11: c7:cc:df:dc:a9:c1:dd:ce:f2:9b:b5:5d:04:bc:12: 9b:8b:52:3f:2d:94:e5:f5:f9:4d:40:27:1b:88:b7: 2e:e4:97:fe:0f:c5:a0:a8:b2:37:44:75:0c:40:36: b8:44:79:f8:2d:16:b5:bd:40:91:45:21:bf:85:b7: 14:43:64:56:87:e2:65:b1:19:45:a5:36:4b:77:12: 89:bf:b3:37:81:be:16:68:4d:ba:bd:cf:e8:d3:a6: eb:ce:7f:2a:7b:e0:dd:49:48:90:37:3a:ca:bb:2b: 82:80:dc:19:01:12:bb:9a:48:52:c8:c8:1c:3e:83: df:4c:d2:e4:76:91:c8:1d:68:d0:a7:49:c9:aa:23: 9d:e3:77:a7:59:a2:0c:2d:ca:1c:11:e5:c5:aa:8a: 74:8b:1f:fa:29:f7:93:58:1d:4e:78:42:5b:9f:03: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DE:0B:93:58:7C:22:BA:B4:E0:A1:F1:C0:F6:63:7A:34:DF:B8:1E X509v3 Authority Key Identifier: keyid:13:CC:63:09:AC:30:A7:FC:01:5C:33:44:CB:C8:08:61:B4:C5:47:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8xjCawwp_wBXDNEy8gIYbTFR88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/48d6aa-afd5-4168-b104-dd3765c2eee4/1/E8xjCawwp_wBXDNEy8gIYbTFR88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:7c:01:f6:53:d9:66:8e:05:d2:d6:ec:a6:97:71:c7:ce:11: e0:36:c1:2f:bb:0c:5a:c4:2a:93:98:34:ca:ae:e6:90:65:e1: a4:71:38:11:e5:8d:14:b8:4c:b4:b6:8f:a0:ee:54:c7:50:95: 52:52:9f:9e:35:a4:c3:e7:dc:30:70:19:8a:97:c0:ef:85:a0: cb:88:6e:ac:78:e1:5c:ee:e8:a2:07:ee:b3:c3:dc:ea:23:1d: 96:57:a9:ff:af:f7:40:fd:10:d7:49:53:d1:85:79:f9:b0:eb: 22:9f:10:b4:1b:33:ee:c0:28:cb:aa:3a:f9:72:0b:7a:86:88: 9a:9b:be:64:7b:de:3c:b2:12:8b:ab:89:a0:67:41:c6:7e:ff: 8a:36:bb:83:be:08:25:84:37:be:26:49:23:8b:79:e6:0b:f2: 0a:24:24:17:a3:01:5a:1f:af:1a:e1:1c:b7:8d:7d:69:29:27: 20:05:94:bf:7e:6f:d5:0d:1f:55:1e:d0:43:10:8f:4b:68:1d: a2:20:b0:b8:38:b8:c5:65:9d:45:12:aa:1c:2f:7a:8b:aa:2b: f6:ff:36:9a:16:d7:80:53:d1:fb:22:84:47:d4:31:56:1b:70: 7e:07:dd:6b:f4:ca:68:57:80:25:db:83:b5:e3:86:c4:3f:a5: 41:8a:dc:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgutWVEV4R/NvDCyhgyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzY2M2MzA5YWMzMGE3ZmMwMTVjMzM0NGNiYzgwODYxYjRj NTQ3Y2YwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD Eyg4Y2RlMGI5MzU4N2MyMmJhYjRlMGExZjFjMGY2NjM3YTM0ZGZiODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQhXl6BjpvyV5pJcq8qIjV5ilNfG +mE/wYNORUnaN5NzzfjFyjD47Fo+6avhg9ZXUC5THYn9kw7aRkkss93HfIH+Ki9/ eupwzTtkZt/wtdJ9H4ea9p2k0xHHzN/cqcHdzvKbtV0EvBKbi1I/LZTl9flNQCcb iLcu5Jf+D8WgqLI3RHUMQDa4RHn4LRa1vUCRRSG/hbcUQ2RWh+JlsRlFpTZLdxKJ v7M3gb4WaE26vc/o06brzn8qe+DdSUiQNzrKuyuCgNwZARK7mkhSyMgcPoPfTNLk dpHIHWjQp0nJqiOd43enWaIMLcocEeXFqop0ix/6KfeTWB1OeEJbnwObUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzeC5NYfCK6tOCh8cD2Y3o037geMB8GA1UdIwQY MBaAFBPMYwmsMKf8AVwzRMvICGG0xUfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQt ZGQzNzY1YzJlZWU0LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80OGQ2YWEtYWZkNS00MTY4LWIxMDQtZGQzNzY1YzJlZWU0 LzEvRTh4akNhd3dwX3dCWERORXk4Z0lZYlRGUjg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHwB9lPZ Zo4F0tbsppdxx84R4DbBL7sMWsQqk5g0yq7mkGXhpHE4EeWNFLhMtLaPoO5Ux1CV UlKfnjWkw+fcMHAZipfA74Wgy4hurHjhXO7oogfus8Pc6iMdllep/6/3QP0Q10lT 0YV5+bDrIp8QtBsz7sAoy6o6+XILeoaImpu+ZHvePLISi6uJoGdBxn7/ija7g74I JYQ3viZJI4t55gvyCiQkF6MBWh+vGuEct419aSknIAWUv35v1Q0fVR7QQxCPS2gd oiCwuDi4xWWdRRKqHC96i6or9v82mhbXgFPR+yKER9QxVhtwfgfda/TKaFeAJduD teOGxD+lQYrcTw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:19 2025 by rpki-client