This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json) Hash identifier: lSOV/plIx3WTFThIZ+fRcCB+vlOeZZ/0c2hiXnoUEHA= Subject key identifier: 52:3C:24:82:26:88:AF:1A:85:C7:9C:FA:EE:93:2B:14:35:1B:C1:C8 Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11 Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11 Certificate serial: 2679C0B2AE72AD811E688CF941FF5A942CBD917B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft Manifest number: 04F4 Signing time: Sat 06 Dec 2025 02:26:39 +0000 Manifest this update: Sat 06 Dec 2025 02:21:39 +0000 Manifest next update: Sun 07 Dec 2025 02:50:39 +0000 Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: SqVcsJlvQV16kKnhpKw9eYT989T0JI6bUljUGu1upz8=) 2: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:79:c0:b2:ae:72:ad:81:1e:68:8c:f9:41:ff:5a:94:2c:bd:91:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11 Validity Not Before: Dec 6 02:21:39 2025 GMT Not After : Dec 7 02:50:39 2025 GMT Subject: CN=523C24822688AF1A85C79CFAEE932B14351BC1C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1c:2c:a0:eb:ca:3d:43:c0:a1:ff:fc:31:4c: 90:25:b3:d6:9c:bb:e5:ce:13:47:df:3b:34:00:b0: a9:bb:45:05:32:f5:38:9c:8a:c0:c0:6c:c7:e2:8f: 47:ca:f9:da:1a:37:df:6a:7f:91:64:66:ff:40:a8: e4:c4:e3:3d:0a:7e:4f:c4:99:42:de:08:0a:05:9e: c1:6f:ed:dc:b4:07:e6:3e:d6:57:18:10:d6:42:ca: ab:00:a8:94:c7:45:27:81:87:c9:a0:a7:4e:f9:1b: 79:38:b3:bf:a6:23:a6:76:19:d2:1d:5b:3b:26:4e: a9:b2:f3:fd:7d:b1:d9:b2:67:5b:b2:5f:25:e7:7a: 46:cc:e4:5d:1a:91:54:fc:c1:88:2a:75:80:08:36: b8:89:ca:ce:e7:a2:74:11:c9:78:89:23:4f:da:a9: 7f:21:e3:b6:76:84:9b:44:36:63:a5:75:b8:e7:e0: e7:a2:4d:34:d4:69:5f:ca:5f:26:57:6a:3c:de:ef: 09:91:dc:97:c4:d9:d6:e9:e3:80:2f:6f:d3:0e:6b: e9:0c:35:83:f1:93:1a:55:83:ec:bc:3b:b2:d8:cf: 25:13:dc:ff:70:4c:9f:29:ff:ed:0f:10:47:04:d0: 62:08:93:48:a2:13:31:3a:71:33:6b:cb:06:2f:66: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3C:24:82:26:88:AF:1A:85:C7:9C:FA:EE:93:2B:14:35:1B:C1:C8 X509v3 Authority Key Identifier: keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:49:06:f0:e2:af:98:b5:d1:c2:6f:da:48:e7:6b:23:0c:b1: 1e:3f:ad:f1:67:61:fc:52:2a:9f:7a:79:03:92:bf:83:03:86: 74:71:82:dd:af:ac:d4:83:a4:f0:6d:c5:ef:93:53:7f:a2:32: 46:86:77:de:7c:75:78:f7:df:33:ab:1b:92:7a:26:3c:8d:b7: e1:a9:48:42:5c:d9:cc:a7:fc:e2:23:1a:1c:68:4e:63:d9:71: e0:65:ea:7e:d2:16:93:fd:1d:17:02:f7:a9:41:7f:2b:23:ff: bf:8a:65:11:50:0d:a8:ab:b7:fe:1f:79:1d:7c:93:12:be:59: 21:4b:ac:05:0d:46:8e:d4:30:80:57:67:56:af:16:1c:f1:cb: 9c:50:76:4a:67:42:ef:85:28:2f:13:32:00:1e:d0:c1:61:75: 85:7c:94:c6:b6:81:69:42:21:a1:8c:1f:4d:ce:e7:40:70:7f: e6:49:0b:25:17:83:d1:84:d5:c4:d7:1d:25:11:64:ff:76:fb: 09:0a:98:fc:fb:d4:75:7f:b2:2a:29:3e:77:de:32:26:2d:26: be:dc:9e:d7:c2:bd:3c:96:eb:60:91:c3:76:45:60:2a:2f:23: a4:20:52:98:3e:bc:8b:c5:38:d6:35:c4:30:9b:c3:2e:43:29: 0e:fe:26:54 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJnnAsq5yrYEeaIz5Qf9alCy9kXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZThiYzk4NzYxNzRkOWE3Mzg1ZmNlOTM0M2UyYmI3ZDk4 ZjUyM2IxMTAeFw0yNTEyMDYwMjIxMzlaFw0yNTEyMDcwMjUwMzlaMDMxMTAvBgNV BAMTKDUyM0MyNDgyMjY4OEFGMUE4NUM3OUNGQUVFOTMyQjE0MzUxQkMxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHCyg68o9Q8Ch//wxTJAls9ac u+XOE0ffOzQAsKm7RQUy9TicisDAbMfij0fK+doaN99qf5FkZv9AqOTE4z0Kfk/E mULeCAoFnsFv7dy0B+Y+1lcYENZCyqsAqJTHRSeBh8mgp075G3k4s7+mI6Z2GdId WzsmTqmy8/19sdmyZ1uyXyXnekbM5F0akVT8wYgqdYAINriJys7nonQRyXiJI0/a qX8h47Z2hJtENmOldbjn4OeiTTTUaV/KXyZXajze7wmR3JfE2dbp44Avb9MOa+kM NYPxkxpVg+y8O7LYzyUT3P9wTJ8p/+0PEEcE0GIIk0iiEzE6cTNrywYvZrYXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUUjwkgiaIrxqFx5z67pMrFDUbwcgwHwYDVR0j BBgwFoAU6LyYdhdNmnOF/Ok0Piu32Y9SOxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzAvRThCQzk4NzYxNzREOUE3Mzg1RkNFOTM0M0UyQkI3RDk4RjUyM0IxMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMeVlkaGRObW5PRl9PazBQaXUzMlk5 U094RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTQ3NmQ2Mi05 Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMC9FOEJDOTg3NjE3NEQ5QTczODVG Q0U5MzQzRTJCQjdEOThGNTIzQjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUkG8OKvmLXRwm/aSOdr IwyxHj+t8Wdh/FIqn3p5A5K/gwOGdHGC3a+s1IOk8G3F75NTf6IyRoZ33nx1ePff M6sbknomPI234alIQlzZzKf84iMaHGhOY9lx4GXqftIWk/0dFwL3qUF/KyP/v4pl EVANqKu3/h95HXyTEr5ZIUusBQ1GjtQwgFdnVq8WHPHLnFB2SmdC74UoLxMyAB7Q wWF1hXyUxraBaUIhoYwfTc7nQHB/5kkLJReD0YTVxNcdJRFk/3b7CQqY/PvUdX+y Kik+d94yJi0mvtye18K9PJbrYJHDdkVgKi8jpCBSmD68i8U41jXEMJvDLkMpDv4m VA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:06:45 2025 by rpki-client