This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft File: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json) Hash identifier: Ee+mUPvbwYyG97aAWH6n5fD38hLiv6VF1WTWTIOFRRQ= Subject key identifier: A8:F2:3B:6F:DF:30:59:56:D5:F0:95:7D:E7:F0:4C:99:B1:77:67:15 Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11 Certificate issuer: /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11 Certificate serial: 7E43AD44D7C6CDE0F42B939D16335A39651B90D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft Manifest number: 0513 Signing time: Mon 29 Dec 2025 02:51:39 +0000 Manifest this update: Mon 29 Dec 2025 02:46:39 +0000 Manifest next update: Tue 30 Dec 2025 04:42:39 +0000 Files and hashes: 1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: L8pW7gRPwuoyWj3ziiGE33JbT5NNX6rxCQzUH8y64y8=) 2: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:43:ad:44:d7:c6:cd:e0:f4:2b:93:9d:16:33:5a:39:65:1b:90:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11 Validity Not Before: Dec 29 02:46:39 2025 GMT Not After : Dec 30 04:42:39 2025 GMT Subject: CN=A8F23B6FDF305956D5F0957DE7F04C99B1776715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:8c:3c:79:ec:9d:d9:d8:b8:66:57:da:c0: f8:e2:0a:47:f8:e6:7c:f8:1a:49:60:29:a3:4c:c1: 68:8b:f4:49:e5:f3:47:1b:5d:6c:d6:8c:4d:07:c8: 4d:e4:71:25:2e:1a:cf:d9:0a:d4:1f:53:59:f7:aa: c6:52:80:11:1f:a6:d3:a3:b0:19:32:4e:e5:e6:ca: b8:fb:bf:59:c2:c8:1c:c9:6e:88:7c:b1:56:c3:c2: 1c:03:35:57:d8:35:4b:02:4a:d3:f6:0d:b8:45:47: 26:3c:70:7e:62:28:61:43:b1:13:72:64:93:9a:17: 92:7d:ec:f2:40:f5:a0:bf:68:9f:0d:29:76:1b:77: ce:fc:fc:4f:6c:98:61:a1:f0:7b:34:02:66:53:0f: 79:4f:b0:d0:2d:70:97:21:cf:30:57:b9:0c:30:84: f3:b7:35:e3:b7:fd:2e:2e:02:3c:6a:85:22:cb:9d: d2:e0:11:36:1e:47:c1:3f:0e:40:72:ad:6f:46:97: 68:8a:13:cc:8c:03:a8:9b:7f:58:1e:91:73:71:3d: e3:33:f5:17:c8:96:f6:58:93:6e:4d:f7:4b:e9:93: 6e:39:fb:fa:4d:f7:bd:8a:ef:e6:ea:ec:5a:04:84: 9b:b1:7a:4a:6e:98:21:77:d8:65:9a:a1:07:b8:d2: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F2:3B:6F:DF:30:59:56:D5:F0:95:7D:E7:F0:4C:99:B1:77:67:15 X509v3 Authority Key Identifier: keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:12:b9:7b:a1:43:4a:5b:2a:19:f1:23:a8:b6:c0:65:81:48: 82:69:22:03:96:8b:16:bc:a1:0e:e8:e4:62:80:ad:a8:f3:f7: d0:1a:6e:cc:56:30:68:07:c8:5b:82:a1:3f:94:9a:26:56:3c: 88:44:b9:e2:fd:02:59:00:84:61:17:54:ef:7a:fb:cc:d3:b7: 44:99:1d:0c:0f:3d:03:fa:ca:f2:93:06:d1:cf:9c:97:69:20: 58:e3:58:6e:b0:ce:bd:e8:d5:d3:e9:1e:82:fe:bf:f1:01:87: 41:a6:4f:81:89:32:59:a0:43:9d:78:53:f8:d8:b0:a6:f8:21: 93:2e:3a:3d:4d:36:9d:e0:b1:14:19:80:ce:db:fd:03:b2:92: 5e:2f:bd:07:6c:85:91:42:48:cb:19:6a:df:8a:c2:83:44:eb: aa:6e:02:b8:00:2f:47:a7:c0:3a:f9:28:74:fd:6e:9a:b5:6b: 54:34:4a:b3:e6:1a:60:1a:bf:e4:1c:64:38:56:7e:30:4a:b4: 69:0d:7a:60:07:c6:cb:58:9d:f8:b2:a7:a9:a4:ce:7d:e5:e4: 23:fa:fa:11:f9:7a:cf:2d:2a:3e:11:8c:c0:f0:45:e3:10:9f: 48:c2:27:a1:9f:4a:7e:49:f1:20:99:a4:16:1f:bc:63:d6:c6: 9e:64:6f:3b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfkOtRNfGzeD0K5OdFjNaOWUbkNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZThiYzk4NzYxNzRkOWE3Mzg1ZmNlOTM0M2UyYmI3ZDk4 ZjUyM2IxMTAeFw0yNTEyMjkwMjQ2MzlaFw0yNTEyMzAwNDQyMzlaMDMxMTAvBgNV BAMTKEE4RjIzQjZGREYzMDU5NTZENUYwOTU3REU3RjA0Qzk5QjE3NzY3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLH4w8eeyd2di4ZlfawPjiCkf4 5nz4GklgKaNMwWiL9Enl80cbXWzWjE0HyE3kcSUuGs/ZCtQfU1n3qsZSgBEfptOj sBkyTuXmyrj7v1nCyBzJboh8sVbDwhwDNVfYNUsCStP2DbhFRyY8cH5iKGFDsRNy ZJOaF5J97PJA9aC/aJ8NKXYbd878/E9smGGh8Hs0AmZTD3lPsNAtcJchzzBXuQww hPO3NeO3/S4uAjxqhSLLndLgETYeR8E/DkByrW9Gl2iKE8yMA6ibf1gekXNxPeMz 9RfIlvZYk25N90vpk245+/pN972K7+bq7FoEhJuxekpumCF32GWaoQe40lPfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqPI7b98wWVbV8JV95/BMmbF3ZxUwHwYDVR0j BBgwFoAU6LyYdhdNmnOF/Ok0Piu32Y9SOxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzAvRThCQzk4NzYxNzREOUE3Mzg1RkNFOTM0M0UyQkI3RDk4RjUyM0IxMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMeVlkaGRObW5PRl9PazBQaXUzMlk5 U094RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTQ3NmQ2Mi05 Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMC9FOEJDOTg3NjE3NEQ5QTczODVG Q0U5MzQzRTJCQjdEOThGNTIzQjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRK5e6FDSlsqGfEjqLbA ZYFIgmkiA5aLFryhDujkYoCtqPP30BpuzFYwaAfIW4KhP5SaJlY8iES54v0CWQCE YRdU73r7zNO3RJkdDA89A/rK8pMG0c+cl2kgWONYbrDOvejV0+kegv6/8QGHQaZP gYkyWaBDnXhT+Niwpvghky46PU02neCxFBmAztv9A7KSXi+9B2yFkUJIyxlq34rC g0Trqm4CuAAvR6fAOvkodP1umrVrVDRKs+YaYBq/5BxkOFZ+MEq0aQ16YAfGy1id +LKnqaTOfeXkI/r6Efl6zy0qPhGMwPBF4xCfSMInoZ9KfknxIJmkFh+8Y9bGnmRv Ow== -----END CERTIFICATE-----Generated at Mon Dec 29 10:02:36 2025 by rpki-client