This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft File: eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft (raw, json) Hash identifier: 1VWdtnOaM6hO4xHI5Mxn5iKg7CNHskmSn+etHNnC9/U= Subject key identifier: F1:3C:F0:9A:5E:89:8D:28:16:B8:34:38:69:9F:08:CB:C8:1F:98:CC Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4 Certificate issuer: /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4 Certificate serial: 019B5D542A9AB01E0B99E7CA282A82C61B2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft Manifest number: 0723 Signing time: Sat 27 Dec 2025 01:02:35 +0000 Manifest this update: Sat 27 Dec 2025 01:02:35 +0000 Manifest next update: Sun 28 Dec 2025 01:02:35 +0000 Files and hashes: 1: 1LjZlnRBJt_qRKMuzNTKcoTDPVg.roa (hash: uQEaVATrxncZCByVj7FOPBy+k/KEvq9+fzzZSw1GL2k=) 2: eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl (hash: wYow2ZxDMR+HguyswrCxv/z1sZD7OmGORltv4GzWbjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:54:2a:9a:b0:1e:0b:99:e7:ca:28:2a:82:c6:1b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4 Validity Not Before: Dec 27 01:02:35 2025 GMT Not After : Dec 28 01:02:35 2025 GMT Subject: CN=f13cf09a5e898d2816b83438699f08cbc81f98cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:04:21:12:eb:1f:32:b6:4a:14:f0:41:9a: ae:1e:59:44:43:eb:1c:14:4a:45:32:27:9b:a3:f2: 8c:43:09:34:49:4e:84:8b:7c:c4:73:69:8b:2f:8a: 95:62:cb:ea:c0:2c:4f:fa:bf:8f:67:18:d6:47:61: 1e:c7:9d:c6:ba:d7:d6:d8:8a:93:43:f7:08:d4:3d: df:17:47:d5:4b:10:3b:1c:62:62:f7:01:fb:02:ab: cc:5d:00:8b:23:19:af:3a:0c:6a:82:86:b5:9b:19: 8d:2b:7a:0a:79:6e:6d:46:f3:28:e5:da:1b:eb:17: d4:4a:79:e3:e2:bc:01:d7:08:bd:32:20:f0:9e:eb: b7:26:14:94:5f:f7:f5:cd:42:3c:53:f2:2d:e5:8e: 32:00:74:b5:a1:f4:cb:65:50:54:34:59:a6:2d:32: 3d:68:b1:c0:75:73:4e:45:9d:c5:26:67:d3:cb:b9: 76:db:64:97:34:2e:31:7e:f7:25:b5:d3:e4:04:7d: 28:5a:89:b3:29:59:a5:31:e6:36:b5:ee:a4:c5:3b: 94:00:2a:ba:aa:3b:5c:a5:8f:fd:d3:a2:24:a9:e5: ea:3f:9d:2b:03:4d:6b:df:cc:a3:81:d3:e7:4f:6b: 23:82:31:12:07:a0:af:d7:8f:d1:e8:3e:db:a7:59: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3C:F0:9A:5E:89:8D:28:16:B8:34:38:69:9F:08:CB:C8:1F:98:CC X509v3 Authority Key Identifier: keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:53:52:c5:6f:a8:31:c5:97:d6:60:45:85:85:fe:38:d5:4f: e8:a8:1e:a8:ce:6e:42:ae:9e:50:de:66:8a:42:c3:7b:2b:ec: 1a:7e:8a:c6:c1:8d:66:29:00:c0:79:69:d0:42:ac:70:5e:06: 95:22:fc:85:32:ba:a4:83:54:85:0a:5c:5b:47:ab:31:b9:ca: 9f:84:45:27:3f:52:bb:fe:12:df:8c:0f:29:50:2c:84:4e:ae: 48:91:f4:63:ca:3c:39:4a:30:74:86:f8:34:29:a2:7a:5a:0a: 50:03:db:2e:37:ef:56:c0:72:5f:f8:21:2d:6d:4f:1c:76:08: b2:61:f9:85:76:1a:35:e1:bf:c6:99:1a:f5:3e:e7:b0:b6:ab: 89:b8:0e:da:9e:03:f3:3d:eb:bc:a9:37:6e:7e:f7:b2:c9:94: f3:71:7f:97:d2:b8:ff:9a:2b:53:9d:30:69:11:7b:ec:21:98: a0:95:e9:ad:f7:1f:29:47:4b:2f:70:78:26:04:9c:90:a3:fb: 95:67:83:dd:7a:33:89:d2:f9:5a:56:a7:f1:e2:90:ea:8b:80: ea:63:4c:91:36:09:7c:66:8f:8b:91:62:ec:69:d8:bc:28:13: e5:e8:f6:ad:e8:2e:65:57:c0:fc:5a:64:20:ac:8e:1d:87:6a: 17:37:aa:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdVCqasB4LmefKKCqCxhssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmQ1MzcyZTFlMTlkMDViZWRhMzUzYmQ2YTE1YmRkMzky OTFmYTQwHhcNMjUxMjI3MDEwMjM1WhcNMjUxMjI4MDEwMjM1WjAzMTEwLwYDVQQD EyhmMTNjZjA5YTVlODk4ZDI4MTZiODM0Mzg2OTlmMDhjYmM4MWY5OGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKcEIRLrHzK2ShTwQZquHllEQ+sc FEpFMiebo/KMQwk0SU6Ei3zEc2mLL4qVYsvqwCxP+r+PZxjWR2Eex53GutfW2IqT Q/cI1D3fF0fVSxA7HGJi9wH7AqvMXQCLIxmvOgxqgoa1mxmNK3oKeW5tRvMo5dob 6xfUSnnj4rwB1wi9MiDwnuu3JhSUX/f1zUI8U/It5Y4yAHS1ofTLZVBUNFmmLTI9 aLHAdXNORZ3FJmfTy7l222SXNC4xfvcltdPkBH0oWomzKVmlMeY2te6kxTuUACq6 qjtcpY/906IkqeXqP50rA01r38yjgdPnT2sjgjESB6Cv14/R6D7bp1k7uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPE88JpeiY0oFrg0OGmfCMvIH5jMMB8GA1UdIwQY MBaAFHm9U3Lh4Z0Fvto1O9ahW905KR+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWIxVGN1SGhuUVctMmpVNzFxRmIzVGtwSDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYmUzNTAtNjlkYS00OTVkLTk2ZTIt YWJmYTgzZmNmZjY3LzEvZWIxVGN1SGhuUVctMmpVNzFxRmIzVGtwSDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mYmUzNTAtNjlkYS00OTVkLTk2ZTItYWJmYTgzZmNmZjY3 LzEvZWIxVGN1SGhuUVctMmpVNzFxRmIzVGtwSDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVNSxW+o McWX1mBFhYX+ONVP6KgeqM5uQq6eUN5mikLDeyvsGn6KxsGNZikAwHlp0EKscF4G lSL8hTK6pINUhQpcW0erMbnKn4RFJz9Su/4S34wPKVAshE6uSJH0Y8o8OUowdIb4 NCmieloKUAPbLjfvVsByX/ghLW1PHHYIsmH5hXYaNeG/xpka9T7nsLaribgO2p4D 8z3rvKk3bn73ssmU83F/l9K4/5orU50waRF77CGYoJXprfcfKUdLL3B4JgSckKP7 lWeD3XozidL5Wlan8eKQ6ouA6mNMkTYJfGaPi5Fi7GnYvCgT5ej2reguZVfA/Fpk IKyOHYdqFzeq1g== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:30 2025 by rpki-client