This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft File: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft (raw, json) Hash identifier: IdAudUWeubH2d7mZPWX5uIV2V6R/PmaSUUVLNwe4zug= Subject key identifier: 4F:74:D1:54:1A:6D:3C:E2:16:A3:69:99:3C:65:F9:1E:F6:CF:06:8A Authority key identifier: 7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54 Certificate issuer: /CN=7bcabe6490fa8bd572440fd6616a8430ee66d154 Certificate serial: 019B631E62FCC072BF6938AEA40D828C33F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft Manifest number: 0460 Signing time: Sun 28 Dec 2025 04:01:34 +0000 Manifest this update: Sun 28 Dec 2025 04:01:34 +0000 Manifest next update: Mon 29 Dec 2025 04:01:34 +0000 Files and hashes: 1: 6ribQUEUmAxt2wHXJd-U7f6yaRI.roa (hash: qhkI5RwGajokhxyxbM332dvPvFl03D+O4/wx5DmaCUo=) 2: e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl (hash: N6+WJMMnCRQMr+tGVpPmHXBgufQLhCGI4y4Wvckdkew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:62:fc:c0:72:bf:69:38:ae:a4:0d:82:8c:33:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcabe6490fa8bd572440fd6616a8430ee66d154 Validity Not Before: Dec 28 04:01:34 2025 GMT Not After : Dec 29 04:01:34 2025 GMT Subject: CN=4f74d1541a6d3ce216a369993c65f91ef6cf068a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7c:d0:ea:1e:6e:ad:26:b1:d9:25:18:54:57: 80:eb:5e:10:9f:ac:46:17:8c:f7:b6:7b:5b:ac:fd: 72:51:22:c3:a3:2f:55:0a:d6:76:82:8e:40:70:7f: 7c:db:47:7e:55:ad:a1:1f:e5:bf:ed:38:42:13:c8: df:a4:f4:a0:86:9a:89:63:63:61:4c:89:c7:79:41: 2b:6e:09:3d:72:ac:5a:d8:88:e7:a3:ce:9c:1f:59: bc:e0:c9:9c:96:71:97:c1:34:cc:35:be:69:13:e8: 48:6a:9a:5b:18:70:79:3c:fa:1c:ae:bd:11:f9:08: b6:cb:3d:ad:3e:db:1b:24:b3:e6:33:35:6b:ac:19: f1:e3:19:49:23:a6:db:d3:3a:06:dc:1e:f7:9e:45: 9b:8d:b3:9e:db:18:75:3d:35:61:ec:cc:2e:b7:e0: 0a:67:9a:4a:be:d3:4d:88:7a:cc:80:c3:61:a7:1d: 0d:bd:97:3a:2b:93:2f:e7:f1:42:4f:88:c9:51:1e: d4:29:c5:d9:e2:55:8d:f2:bc:a1:b9:a6:9f:78:26: 92:30:65:01:d4:65:41:fe:9e:3c:6e:51:db:d6:ac: 80:23:ec:68:6b:a9:77:2d:e4:58:e6:4d:3f:8d:ea: e4:36:61:2e:e3:55:8a:b6:47:fe:43:2d:67:05:09: 4f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:74:D1:54:1A:6D:3C:E2:16:A3:69:99:3C:65:F9:1E:F6:CF:06:8A X509v3 Authority Key Identifier: keyid:7B:CA:BE:64:90:FA:8B:D5:72:44:0F:D6:61:6A:84:30:EE:66:D1:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e62fee-da47-4777-9d39-1fece0592e9b/1/e8q-ZJD6i9VyRA_WYWqEMO5m0VQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:97:77:31:0e:29:43:5f:9e:38:d5:1c:4e:56:6f:9a:ef:62: 82:99:b7:8f:74:e1:06:ba:ac:ba:0d:33:f1:46:f3:e6:09:76: d9:40:2e:cf:6a:f7:68:70:5c:43:07:52:a4:b3:27:b8:60:74: 3a:11:ab:e6:e1:ac:2d:fd:c1:3f:1c:91:ff:b2:87:c2:15:5e: 6a:4d:cb:b2:c8:59:dc:ec:e7:a0:49:b6:66:84:0b:59:37:35: 40:66:60:5e:85:f3:69:d3:46:ac:93:17:33:3f:34:30:e1:4f: 18:37:2f:e5:86:d4:e3:f4:28:e2:60:aa:2c:60:80:b6:84:f4: be:63:74:95:94:bf:df:f5:d1:81:ee:31:1d:98:b9:ba:89:51: 86:d8:4e:d6:fb:67:c7:30:44:0b:77:a4:7c:47:5a:8d:e9:6a: 58:6d:d2:11:85:0e:12:a6:43:78:3e:26:e9:88:28:9f:88:5b: 72:b3:c9:c0:07:60:02:f9:9f:ac:a6:ce:a8:a2:ff:53:dc:95: 53:0e:26:ec:62:c2:78:9c:e5:20:5c:75:a8:a6:63:18:f4:cb: cb:da:9e:af:3d:f1:43:43:51:e1:f5:46:68:b0:11:36:e5:e7: 59:44:47:31:98:c3:44:48:54:65:18:5c:69:de:eb:4b:f1:7f: b3:63:2e:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHmL8wHK/aTiupA2CjDPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiY2FiZTY0OTBmYThiZDU3MjQ0MGZkNjYxNmE4NDMwZWU2 NmQxNTQwHhcNMjUxMjI4MDQwMTM0WhcNMjUxMjI5MDQwMTM0WjAzMTEwLwYDVQQD Eyg0Zjc0ZDE1NDFhNmQzY2UyMTZhMzY5OTkzYzY1ZjkxZWY2Y2YwNjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonzQ6h5urSax2SUYVFeA614Qn6xG F4z3tntbrP1yUSLDoy9VCtZ2go5AcH9820d+Va2hH+W/7ThCE8jfpPSghpqJY2Nh TInHeUErbgk9cqxa2Ijno86cH1m84MmclnGXwTTMNb5pE+hIappbGHB5PPocrr0R +Qi2yz2tPtsbJLPmMzVrrBnx4xlJI6bb0zoG3B73nkWbjbOe2xh1PTVh7Mwut+AK Z5pKvtNNiHrMgMNhpx0NvZc6K5Mv5/FCT4jJUR7UKcXZ4lWN8ryhuaafeCaSMGUB 1GVB/p48blHb1qyAI+xoa6l3LeRY5k0/jerkNmEu41WKtkf+Qy1nBQlPzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE900VQabTziFqNpmTxl+R72zwaKMB8GA1UdIwQY MBaAFHvKvmSQ+ovVckQP1mFqhDDuZtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lNjJmZWUtZGE0Ny00Nzc3LTlkMzkt MWZlY2UwNTkyZTliLzEvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lNjJmZWUtZGE0Ny00Nzc3LTlkMzktMWZlY2UwNTkyZTli LzEvZThxLVpKRDZpOVZ5UkFfV1lXcUVNTzVtMFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJd3MQ4p Q1+eONUcTlZvmu9igpm3j3ThBrqsug0z8Ubz5gl22UAuz2r3aHBcQwdSpLMnuGB0 OhGr5uGsLf3BPxyR/7KHwhVeak3LsshZ3OznoEm2ZoQLWTc1QGZgXoXzadNGrJMX Mz80MOFPGDcv5YbU4/Qo4mCqLGCAtoT0vmN0lZS/3/XRge4xHZi5uolRhthO1vtn xzBEC3ekfEdajelqWG3SEYUOEqZDeD4m6Ygon4hbcrPJwAdgAvmfrKbOqKL/U9yV Uw4m7GLCeJzlIFx1qKZjGPTLy9qerz3xQ0NR4fVGaLARNuXnWURHMZjDREhUZRhc ad7rS/F/s2Mupw== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:41 2025 by rpki-client