This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json) Hash identifier: KUKH/eTzqCbWammrvcIYYxY5EXPuFXfFzMI8DTDNBSs= Subject key identifier: 09:98:DA:EC:2A:74:CD:96:5A:B9:04:55:73:F2:5B:EA:B9:CA:E5:62 Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d Certificate serial: 019B6A69258F3DF351E8D02F8E42C6EFCF1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft Manifest number: 1108 Signing time: Mon 29 Dec 2025 14:00:34 +0000 Manifest this update: Mon 29 Dec 2025 14:00:34 +0000 Manifest next update: Tue 30 Dec 2025 14:00:34 +0000 Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=) 2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: lgWhFhct3d2A5nHmXxF1vDaenMNpU73XLqdAvpk15gg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:69:25:8f:3d:f3:51:e8:d0:2f:8e:42:c6:ef:cf:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d Validity Not Before: Dec 29 14:00:34 2025 GMT Not After : Dec 30 14:00:34 2025 GMT Subject: CN=0998daec2a74cd965ab9045573f25beab9cae562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:ec:d6:6e:42:ac:69:94:e2:b7:5e:f7:c5: b6:eb:3e:31:74:f6:ad:17:b4:dc:b6:3d:b9:fd:c0: 3e:56:84:08:d2:ab:eb:10:8c:3f:4e:19:b8:1e:33: 6f:3f:ae:00:e2:97:b8:a2:51:be:91:16:4c:3d:ea: 30:00:f9:c9:44:fc:ab:45:49:81:bd:51:b3:5e:f9: ae:6f:58:05:57:c0:82:79:fa:54:99:37:31:b2:a3: 14:42:96:cf:81:46:f2:41:4d:56:c1:34:27:23:bf: 18:09:5b:4e:10:2c:09:c2:d7:94:62:1e:bb:17:91: 77:72:1d:f4:4b:39:32:1d:2e:9e:ab:04:95:7a:54: d0:30:c6:ef:8c:59:06:d9:6b:41:aa:4a:bb:fe:70: dc:b6:68:47:03:44:c0:a1:e0:d4:a7:02:42:43:f8: da:af:73:83:15:52:0d:75:53:1f:9d:83:a0:63:dc: 04:8b:e3:d7:ca:20:1c:60:31:63:03:46:b0:8b:ce: 3d:cf:ad:9b:d9:6a:7a:c0:de:ec:17:e2:37:b9:2c: 39:6d:92:10:b6:78:75:72:8b:c1:49:6a:d1:5a:cd: 4c:b3:1f:54:15:ff:30:81:5b:c8:09:ae:14:60:93: 4a:52:2c:3c:88:b2:e1:a7:8a:28:77:a2:19:42:71: f2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:98:DA:EC:2A:74:CD:96:5A:B9:04:55:73:F2:5B:EA:B9:CA:E5:62 X509v3 Authority Key Identifier: keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:75:3d:00:4f:4f:c2:79:9d:97:df:69:35:55:e0:d7:b7:6a: eb:9a:0b:2c:38:dc:19:71:2a:16:dc:90:0b:1d:ad:1f:d3:3a: 2b:14:75:81:87:89:d4:e8:36:2e:dd:f0:c1:db:0b:5e:27:05: 0f:83:91:e8:d9:07:2a:6c:39:9c:05:5b:3a:84:3f:17:3d:43: 5e:ce:11:8e:62:16:45:17:87:d2:88:0e:36:ad:b5:81:04:24: ac:25:bd:59:fd:e1:4a:bd:ee:15:0f:8d:12:b7:53:49:50:48: 14:c3:21:60:a7:f3:1c:71:25:d8:1c:ad:1d:e7:c6:05:d2:24: 20:a6:b9:31:a6:5e:73:6a:7c:23:6f:86:07:85:70:ca:1c:17: ae:93:3a:31:22:f9:17:24:e3:ba:94:09:7a:79:5b:04:9a:bb: 65:90:b5:52:63:62:fe:49:06:0a:39:72:6b:8a:80:fd:9f:3b: eb:b7:1f:ea:f6:ae:21:02:16:da:42:3e:29:55:c4:d9:e4:a3: b4:18:02:83:de:31:29:b6:5b:d2:86:59:07:59:31:66:0b:95: 97:b2:4c:3d:16:32:40:52:cb:ee:fe:33:2b:62:e2:b0:9a:cb: a3:be:c6:17:f1:26:37:7c:30:09:9e:85:c5:7a:08:20:6e:36: 17:9b:6b:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtqaSWPPfNR6NAvjkLG788bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjZjZmNkYTM5NzE2M2Q4MzVjODk3YWRlYTkwNzFlNjFj OGJjNGQwHhcNMjUxMjI5MTQwMDM0WhcNMjUxMjMwMTQwMDM0WjAzMTEwLwYDVQQD EygwOTk4ZGFlYzJhNzRjZDk2NWFiOTA0NTU3M2YyNWJlYWI5Y2FlNTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK7s1m5CrGmU4rde98W26z4xdPat F7Tctj25/cA+VoQI0qvrEIw/Thm4HjNvP64A4pe4olG+kRZMPeowAPnJRPyrRUmB vVGzXvmub1gFV8CCefpUmTcxsqMUQpbPgUbyQU1WwTQnI78YCVtOECwJwteUYh67 F5F3ch30SzkyHS6eqwSVelTQMMbvjFkG2WtBqkq7/nDctmhHA0TAoeDUpwJCQ/ja r3ODFVINdVMfnYOgY9wEi+PXyiAcYDFjA0awi849z62b2Wp6wN7sF+I3uSw5bZIQ tnh1covBSWrRWs1Msx9UFf8wgVvICa4UYJNKUiw8iLLhp4ood6IZQnHygwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmY2uwqdM2WWrkEVXPyW+q5yuViMB8GA1UdIwQY MBaAFHsmz82jlxY9g1yJet6pBx5hyLxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEt NmNkNTFjODRjMDE1LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEtNmNkNTFjODRjMDE1 LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3U9AE9P wnmdl99pNVXg17dq65oLLDjcGXEqFtyQCx2tH9M6KxR1gYeJ1Og2Lt3wwdsLXicF D4OR6NkHKmw5nAVbOoQ/Fz1DXs4RjmIWRReH0ogONq21gQQkrCW9Wf3hSr3uFQ+N ErdTSVBIFMMhYKfzHHEl2BytHefGBdIkIKa5MaZec2p8I2+GB4VwyhwXrpM6MSL5 FyTjupQJenlbBJq7ZZC1UmNi/kkGCjlya4qA/Z8767cf6vauIQIW2kI+KVXE2eSj tBgCg94xKbZb0oZZB1kxZguVl7JMPRYyQFLL7v4zK2LisJrLo77GF/EmN3wwCZ6F xXoIIG42F5trZw== -----END CERTIFICATE-----Generated at Mon Dec 29 23:47:39 2025 by rpki-client