This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json) Hash identifier: r8CqEM0vcl/FuWEPmxVvardMLaKHETaVSp+3qgyuZw8= Subject key identifier: E6:13:80:4E:7D:A9:30:9E:F8:03:2F:C3:9D:4A:74:11:2C:8E:13:1C Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b Certificate serial: 019B41A41AA6AF673ED5A7F20B24C8E771B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 16:00:31 +0000 Manifest this update: Sun 21 Dec 2025 16:00:31 +0000 Manifest next update: Mon 22 Dec 2025 16:00:31 +0000 Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: IsVxOOZ/9K1RzxxnXsy+7LECZfO5NzI37EGluia8JkE=) 2: h8XcxNlg2XITkIVJEK1ZC2_6O-w.roa (hash: Uox6k3C3t/z5iyZxizryiDRbognV5cGwqRlM+dbYzjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:1a:a6:af:67:3e:d5:a7:f2:0b:24:c8:e7:71:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b Validity Not Before: Dec 21 16:00:31 2025 GMT Not After : Dec 22 16:00:31 2025 GMT Subject: CN=e613804e7da9309ef8032fc39d4a74112c8e131c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:09:bf:e4:01:4e:4b:81:86:94:39:4d:8c: 17:63:b8:ff:f9:1c:36:5b:28:c7:52:30:cf:59:d9: 4d:f6:de:16:3a:f0:f5:89:29:53:e2:99:5e:5e:76: 10:bb:58:e4:9c:2b:16:6d:ff:db:0e:a0:9d:32:76: 1e:31:3c:aa:e9:30:6e:52:d9:b0:9b:52:be:06:d2: db:be:98:41:c7:05:1f:d2:1b:37:29:fe:0b:78:3d: 5b:9d:37:56:a9:f2:7a:65:b4:ac:72:71:53:65:56: b2:ee:30:8c:8d:ae:3e:2c:42:29:3d:3f:67:d4:5d: 14:d2:90:f5:5e:e7:70:10:4f:3d:f4:eb:5e:f2:a0: 91:69:eb:ae:30:38:93:9e:35:25:1f:ee:1c:02:4e: f7:4d:7f:5c:85:d0:e6:a2:67:a3:94:7b:ff:59:79: 99:1d:9e:0d:f2:d7:f9:f1:8a:af:2f:c6:85:b8:e1: 3e:14:99:4e:9b:7d:85:8a:6a:6c:7e:00:a0:5c:07: 6f:74:38:82:af:7b:85:d5:2a:ba:44:d2:59:0d:6c: 97:15:b9:9c:1f:cb:c6:9f:ae:be:12:1a:32:be:14: dd:b4:2c:b3:56:d0:5e:a2:58:e0:e8:d1:98:98:40: 72:7e:79:54:ae:24:79:e8:e1:56:9b:77:99:06:f1: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:13:80:4E:7D:A9:30:9E:F8:03:2F:C3:9D:4A:74:11:2C:8E:13:1C X509v3 Authority Key Identifier: keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:56:ca:b0:a6:e1:4a:9b:80:9d:f8:79:00:42:62:e3:c4:09: b2:cd:ef:2d:91:75:15:06:4d:59:c0:9e:0e:3a:63:28:80:7a: 82:aa:a7:6a:84:00:8f:a8:e6:8b:b1:ce:9c:5c:56:1b:26:49: b6:72:6b:d3:39:45:0a:33:1d:d6:6e:1e:9b:61:5e:5e:a4:69: e4:02:14:40:6c:16:cf:b0:f9:87:1f:64:0b:b9:0a:8b:fd:19: a2:58:c8:74:3a:d3:6b:95:d9:cf:ff:89:ee:3d:87:43:1a:b8: ec:4c:d3:94:d1:8d:b9:b1:3f:20:58:73:18:c4:18:60:95:22: 4a:34:fa:b4:42:30:7f:35:7c:54:e2:84:b3:dc:40:10:34:f7: 15:38:ab:ee:fe:22:bb:ce:ce:2f:f8:50:af:53:05:02:38:5b: 1c:e0:40:c0:22:28:3e:50:4a:a8:8d:68:32:09:59:b5:40:9f: 88:30:bf:60:66:a1:32:a8:b3:28:f4:20:f0:5f:a9:9d:c7:f4: 79:3c:16:74:f3:9f:6c:fe:25:46:93:75:f3:89:fe:31:01:bb: 87:e0:cd:77:8e:f3:e6:39:55:39:28:61:89:ef:59:10:9e:bd: aa:ab:c9:5f:94:ee:c3:d5:87:99:84:5e:39:f8:67:51:9b:05: cd:54:5b:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpBqmr2c+1afyCyTI53G5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmM0MGJjYWI1ZTkwNTNhYjZkYjdkMTllMmEzOGRmMWI2 ZjlhNGIwHhcNMjUxMjIxMTYwMDMxWhcNMjUxMjIyMTYwMDMxWjAzMTEwLwYDVQQD EyhlNjEzODA0ZTdkYTkzMDllZjgwMzJmYzM5ZDRhNzQxMTJjOGUxMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j8Jv+QBTkuBhpQ5TYwXY7j/+Rw2 WyjHUjDPWdlN9t4WOvD1iSlT4pleXnYQu1jknCsWbf/bDqCdMnYeMTyq6TBuUtmw m1K+BtLbvphBxwUf0hs3Kf4LeD1bnTdWqfJ6ZbSscnFTZVay7jCMja4+LEIpPT9n 1F0U0pD1XudwEE899Ote8qCRaeuuMDiTnjUlH+4cAk73TX9chdDmomejlHv/WXmZ HZ4N8tf58YqvL8aFuOE+FJlOm32FimpsfgCgXAdvdDiCr3uF1Sq6RNJZDWyXFbmc H8vGn66+EhoyvhTdtCyzVtBeoljg6NGYmEByfnlUriR56OFWm3eZBvEefQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYTgE59qTCe+AMvw51KdBEsjhMcMB8GA1UdIwQY MBaAFBG8QLyrXpBTq2230Z4qON8bb5pLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQt YWU0Zjg0ZTE2Y2ExLzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQtYWU0Zjg0ZTE2Y2Ex LzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFbKsKbh SpuAnfh5AEJi48QJss3vLZF1FQZNWcCeDjpjKIB6gqqnaoQAj6jmi7HOnFxWGyZJ tnJr0zlFCjMd1m4em2FeXqRp5AIUQGwWz7D5hx9kC7kKi/0ZoljIdDrTa5XZz/+J 7j2HQxq47EzTlNGNubE/IFhzGMQYYJUiSjT6tEIwfzV8VOKEs9xAEDT3FTir7v4i u87OL/hQr1MFAjhbHOBAwCIoPlBKqI1oMglZtUCfiDC/YGahMqizKPQg8F+pncf0 eTwWdPOfbP4lRpN184n+MQG7h+DNd47z5jlVOShhie9ZEJ69qqvJX5Tuw9WHmYRe OfhnUZsFzVRbjg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:56:15 2025 by rpki-client