This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json) Hash identifier: 8TdiajF2JVZ3QgTibvOsnysOfXOkHnXuQypIxBXDuFc= Subject key identifier: 62:75:73:93:E1:55:71:FC:91:29:49:33:C0:56:E2:AB:AF:4A:81:73 Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6 Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6 Certificate serial: 019B41A41F04BE693CD21C0182A36C6CEF70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft Manifest number: 153E Signing time: Sun 21 Dec 2025 16:00:33 +0000 Manifest this update: Sun 21 Dec 2025 16:00:33 +0000 Manifest next update: Mon 22 Dec 2025 16:00:33 +0000 Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=) 2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: 6a+gXBgJiGWS86PASqVQmMA0fhMHswsnTKQTDGU2tpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:1f:04:be:69:3c:d2:1c:01:82:a3:6c:6c:ef:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6 Validity Not Before: Dec 21 16:00:33 2025 GMT Not After : Dec 22 16:00:33 2025 GMT Subject: CN=62757393e15571fc91294933c056e2abaf4a8173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:9e:a8:5c:35:83:f3:b1:68:fd:ee:86:49: 42:ca:14:04:ce:cd:4a:0c:11:d1:ce:59:ee:d3:0e: 2b:93:a9:a2:ad:bd:f5:72:ba:11:9e:f5:9d:f1:dd: 09:32:5e:d7:19:42:1a:7a:d1:e6:47:82:5a:da:ff: ee:3b:38:78:4e:4a:db:c9:4f:71:60:9a:3e:94:1a: f9:23:4f:fc:1b:08:27:30:10:12:18:e5:e0:bf:3b: 95:d2:ec:be:26:ab:08:b5:cd:00:07:dd:47:17:db: 4a:64:f9:d7:da:de:18:f2:8f:fc:89:97:49:d2:c2: 9b:05:51:3a:ca:e3:d3:f3:68:b1:f0:15:52:aa:1d: a2:2b:0e:63:5e:0b:12:2b:0b:0c:b9:e2:e2:fa:34: 51:ed:de:fc:4b:f5:db:09:b6:8e:b7:87:1f:d9:83: cf:8b:8c:b7:3f:79:ee:b7:6d:9c:92:37:96:da:23: f4:19:07:b1:1f:ea:14:43:a3:44:3a:05:a2:3c:22: a7:a4:03:ba:9b:79:35:1b:93:ab:26:c3:58:eb:af: 19:4d:f6:68:57:93:cd:b0:b3:8a:10:cd:13:02:d9: 68:c0:33:61:58:e4:99:67:db:5c:3f:3c:79:77:8f: 09:74:a8:21:14:d7:3e:21:85:71:d9:34:7e:7c:02: 9b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:75:73:93:E1:55:71:FC:91:29:49:33:C0:56:E2:AB:AF:4A:81:73 X509v3 Authority Key Identifier: keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:57:86:79:01:81:c4:c5:a2:48:44:c7:1e:e8:e7:5f:4a:f2: 0b:59:02:16:c9:b5:3e:d2:84:7a:5b:45:f7:a0:6f:c9:9b:ef: e0:0b:67:86:43:57:5a:f8:b0:1d:3b:03:11:cf:7b:e3:4a:42: ee:bd:9c:b6:f6:20:9e:32:77:bd:23:7e:df:24:9d:b9:74:23: 5c:29:90:b8:cf:31:2e:c4:4d:7b:b7:44:bc:dd:4e:f8:16:5d: c7:bc:71:e5:38:ee:e3:e8:31:3b:50:d1:52:ea:4e:8a:e7:ae: f3:01:50:a7:af:9c:2b:64:2d:19:0d:15:0c:c3:3f:b5:f4:f0: 00:77:d5:71:bd:78:4d:39:ef:1a:75:82:5b:04:d6:5e:1e:fc: 63:70:76:15:7f:fb:a1:f5:1a:9d:84:70:35:e7:4d:40:da:a1: eb:4a:68:c7:aa:e9:d6:bc:20:d4:09:39:cb:7f:9c:b0:f7:c4: 99:31:a0:03:63:b8:39:c3:0d:a9:66:3c:28:cf:2e:5a:f2:1f: fa:8e:63:a2:a8:50:d2:30:b4:02:63:0f:ea:bf:eb:ea:d6:20: e1:4e:6a:bd:08:7b:0a:79:90:ea:fd:fd:b7:02:41:8f:c1:bb: 23:53:02:1f:75:d4:b1:e7:fb:be:c7:af:f2:4d:c6:fc:54:92: eb:ce:91:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpB8Evmk80hwBgqNsbO9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzA5OTk4Y2UzOWNmZGNhNjZlY2ZkOGRkM2FjMzg2NDRk M2M4YTYwHhcNMjUxMjIxMTYwMDMzWhcNMjUxMjIyMTYwMDMzWjAzMTEwLwYDVQQD Eyg2Mjc1NzM5M2UxNTU3MWZjOTEyOTQ5MzNjMDU2ZTJhYmFmNGE4MTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfGeqFw1g/OxaP3uhklCyhQEzs1K DBHRzlnu0w4rk6mirb31croRnvWd8d0JMl7XGUIaetHmR4Ja2v/uOzh4TkrbyU9x YJo+lBr5I0/8GwgnMBASGOXgvzuV0uy+JqsItc0AB91HF9tKZPnX2t4Y8o/8iZdJ 0sKbBVE6yuPT82ix8BVSqh2iKw5jXgsSKwsMueLi+jRR7d78S/XbCbaOt4cf2YPP i4y3P3nut22ckjeW2iP0GQexH+oUQ6NEOgWiPCKnpAO6m3k1G5OrJsNY668ZTfZo V5PNsLOKEM0TAtlowDNhWOSZZ9tcPzx5d48JdKghFNc+IYVx2TR+fAKbuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJ1c5PhVXH8kSlJM8BW4quvSoFzMB8GA1UdIwQY MBaAFHvAmZjOOc/cpm7P2N06w4ZE08imMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMt MjJkNmNkMWUxYThhLzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMtMjJkNmNkMWUxYThh LzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFeGeQGB xMWiSETHHujnX0ryC1kCFsm1PtKEeltF96BvyZvv4AtnhkNXWviwHTsDEc9740pC 7r2ctvYgnjJ3vSN+3ySduXQjXCmQuM8xLsRNe7dEvN1O+BZdx7xx5Tju4+gxO1DR UupOiueu8wFQp6+cK2QtGQ0VDMM/tfTwAHfVcb14TTnvGnWCWwTWXh78Y3B2FX/7 ofUanYRwNedNQNqh60pox6rp1rwg1Ak5y3+csPfEmTGgA2O4OcMNqWY8KM8uWvIf +o5joqhQ0jC0AmMP6r/r6tYg4U5qvQh7CnmQ6v39twJBj8G7I1MCH3XUsef7vsev 8k3G/FSS686ReQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:39:18 2025 by rpki-client