This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft File: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json) Hash identifier: ztv3XOL5KFgCGUA690O4f5tGWDP6JvyzP+b+hDIjW+8= Subject key identifier: 03:2B:48:DF:A7:C1:E7:F2:C0:0A:C9:98:44:B6:A3:BF:23:1C:83:31 Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C Certificate issuer: /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c Certificate serial: 019B66FBCC1D42B19B48CAAE6C76DA01E346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft Manifest number: 075A Signing time: Sun 28 Dec 2025 22:02:16 +0000 Manifest this update: Sun 28 Dec 2025 22:02:16 +0000 Manifest next update: Mon 29 Dec 2025 22:02:16 +0000 Files and hashes: 1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: M/fbdVdxGahhket9J/anRDqOQJN/2cRHnP+o+Yxt2ng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:cc:1d:42:b1:9b:48:ca:ae:6c:76:da:01:e3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c Validity Not Before: Dec 28 22:02:16 2025 GMT Not After : Dec 29 22:02:16 2025 GMT Subject: CN=032b48dfa7c1e7f2c00ac99844b6a3bf231c8331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9b:d0:1d:a1:bc:fb:45:2d:21:a6:f6:3c:e2: c8:e3:ec:d5:20:1f:3f:fa:fa:d7:a6:72:d4:31:29: ef:af:85:90:b4:8f:6f:fd:6d:95:5b:92:e7:d3:ce: e1:59:45:c7:86:a3:f5:3a:8f:d0:66:4f:67:1a:76: 1e:19:8c:d1:fd:2c:52:2c:82:33:e6:c0:9e:58:64: 09:cc:6f:d5:3f:31:46:35:83:90:d0:29:0f:01:83: a4:2d:ae:bd:16:0a:61:49:80:2c:11:a9:8f:ae:22: da:22:36:e5:08:e7:12:f3:28:1c:4a:02:5f:1a:78: 98:eb:47:35:df:4e:0e:f6:00:8c:fe:9a:3e:cf:2c: da:aa:1d:80:7d:9d:82:b6:be:74:c2:0b:8b:1a:cd: b1:fe:b6:92:b2:d9:22:4f:78:1e:88:59:4a:68:1f: 47:b0:b6:ec:f3:ea:cb:4a:b9:49:10:3d:f7:df:ea: 51:f7:95:68:f9:09:fd:1e:bd:9c:9e:e5:a7:51:09: 95:dd:48:87:11:55:95:c9:76:b1:c2:c3:4e:2c:60: d5:e4:ea:05:7a:05:f4:02:35:cd:34:16:88:a3:31: 00:9a:9b:bb:b9:ae:83:d7:76:28:3d:c2:06:10:db: cd:08:ea:16:8f:c6:9d:45:b5:ff:77:6f:6d:48:11: b7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2B:48:DF:A7:C1:E7:F2:C0:0A:C9:98:44:B6:A3:BF:23:1C:83:31 X509v3 Authority Key Identifier: keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:16:74:28:fd:9d:cf:3a:b9:5d:a3:dd:88:0e:d8:d1:7c:6f: 07:0a:a0:30:d9:d6:bf:01:07:95:74:f7:fe:ba:15:78:ee:3f: 12:c7:fa:3b:14:a7:e5:f2:6d:3e:4e:44:cf:aa:97:aa:ca:ef: 89:fe:d1:ed:12:c6:67:cb:6b:20:05:aa:ae:93:7e:95:5a:e5: bd:b9:b8:72:0c:1a:f3:99:bb:b1:46:09:ba:df:9c:ac:b4:dc: 5b:4d:8a:e8:f8:f2:27:cf:a4:7f:c0:02:2d:91:92:02:56:25: 58:d7:21:93:54:f2:03:68:1f:b9:1a:d5:d1:85:e3:1d:21:41: 6c:24:cd:2e:bb:2b:fc:21:ab:85:c5:d3:e3:cc:4f:d2:7f:ed: ba:3a:a7:e8:2b:f6:b6:ee:22:5c:6e:d1:e4:ed:ca:80:ab:d4: b5:6b:c2:af:4b:15:ff:d6:02:68:89:ce:52:5e:ac:6b:28:bc: 77:d7:2e:c6:a6:c0:19:89:3b:4e:8d:78:74:34:9e:04:db:40: 76:84:ef:14:25:76:70:17:6e:b0:a8:20:f7:1b:da:52:27:28: c7:88:19:c3:6c:fd:11:c7:ba:3b:3e:37:83:a3:88:d8:f8:af: 81:e4:d9:a2:a6:18:4d:89:47:a6:f5:28:51:dc:f5:64:54:cd: f5:4e:91:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+8wdQrGbSMqubHbaAeNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzdiZTUyMWQxN2E2YTU5MmNjNjFmNzkxNGMyNWYxNjk1 N2NjOWMwHhcNMjUxMjI4MjIwMjE2WhcNMjUxMjI5MjIwMjE2WjAzMTEwLwYDVQQD EygwMzJiNDhkZmE3YzFlN2YyYzAwYWM5OTg0NGI2YTNiZjIzMWM4MzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pvQHaG8+0UtIab2POLI4+zVIB8/ +vrXpnLUMSnvr4WQtI9v/W2VW5Ln087hWUXHhqP1Oo/QZk9nGnYeGYzR/SxSLIIz 5sCeWGQJzG/VPzFGNYOQ0CkPAYOkLa69FgphSYAsEamPriLaIjblCOcS8ygcSgJf GniY60c1304O9gCM/po+zyzaqh2AfZ2Ctr50wguLGs2x/raSstkiT3geiFlKaB9H sLbs8+rLSrlJED333+pR95Vo+Qn9Hr2cnuWnUQmV3UiHEVWVyXaxwsNOLGDV5OoF egX0AjXNNBaIozEAmpu7ua6D13YoPcIGENvNCOoWj8adRbX/d29tSBG38QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMrSN+nwefywArJmES2o78jHIMxMB8GA1UdIwQY MBaAFHvHvlIdF6alksxh95FMJfFpV8ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzIt MTA1ZDgwMDIxNDlkLzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lMmJlNWMtMGU2Ny00ZjgyLTk3YzItMTA1ZDgwMDIxNDlk LzEvZThlLVVoMFhwcVdTekdIM2tVd2w4V2xYekp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxZ0KP2d zzq5XaPdiA7Y0XxvBwqgMNnWvwEHlXT3/roVeO4/Esf6OxSn5fJtPk5Ez6qXqsrv if7R7RLGZ8trIAWqrpN+lVrlvbm4cgwa85m7sUYJut+crLTcW02K6PjyJ8+kf8AC LZGSAlYlWNchk1TyA2gfuRrV0YXjHSFBbCTNLrsr/CGrhcXT48xP0n/tujqn6Cv2 tu4iXG7R5O3KgKvUtWvCr0sV/9YCaInOUl6sayi8d9cuxqbAGYk7To14dDSeBNtA doTvFCV2cBdusKgg9xvaUicox4gZw2z9Ece6Oz43g6OI2PivgeTZoqYYTYlHpvUo Udz1ZFTN9U6RDg== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:09 2025 by rpki-client