This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft File: Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json) Hash identifier: pylu28teOXJxXpvuvPk0jbisspDLsoxDsK9q+5CrvTA= Subject key identifier: 88:0D:0D:61:72:45:C5:1E:A8:2C:5E:07:1F:FD:15:97:77:7D:18:FB Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 019B3C7FD71F1AB688381FE545A650BDC25C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 16:02:49 +0000 Manifest this update: Sat 20 Dec 2025 16:02:49 +0000 Manifest next update: Sun 21 Dec 2025 16:02:49 +0000 Files and hashes: 1: 5G5BM-esfF_6C_xQG_XyVMwxyOE.roa (hash: DTEsWku/je4v/TwdVnousshkC1Z9Nk6/Nslvyo2EP34=) 2: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: 3o/VcKYY/MR+owH26IOElffzmN7P61nUVbWrt92Ltck=) 3: TETu_fLUe48vZB1pOjmaY0SlQQA.roa (hash: gDCE6MhOeAd0nfmLm0m4CAZB11EUzJkcQQpOLfihn0E=) 4: VngaLO49HwnzixCSQrMS5QePJOo.roa (hash: SORIRInRNS+ArP5XpLLGilyF1yJehSCjMcuXLbTFsfc=) 5: YSDMeB2OTSIw6d7x_-ya3YNBb4I.roa (hash: 5DEymavmL/Oqd88L6GTzb0QEXTGCoR8MdiyKdDZSrJI=) 6: drdL02MmNzHMMHIF4yacPWU2kg0.roa (hash: KhAY+4DUpLSPm7dfV38gtwL9yM7jnqqyzPFAlnLXewY=) 7: fTBhrrSBbBFDDDSeRz_t6BtiuYI.roa (hash: jsgnIPPUhjpCdO1fNL/ROC4wGawaLCPOPIUu0X3J2DY=) 8: qS-QZXFJVFLsxStfDN8QKYsFoWA.roa (hash: ub+puMkCknG+9jJcf4x1TFPFmm3wndXxu70WFu0aS+k=) 9: tCyUX7lLcCHL4Eg9b-YCZ8hKq84.roa (hash: ZHN59gKlvLQCayzjjY8TreGgGDaR4N6wRPXQfVrVtuk=) 10: vBseKRkIdbzZO1ddn-ofvdi2GJA.roa (hash: ND3FeKVlWj+XXYRRpKXvYZfwYIWF0c8k6ow+131ixZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:d7:1f:1a:b6:88:38:1f:e5:45:a6:50:bd:c2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: Dec 20 16:02:49 2025 GMT Not After : Dec 21 16:02:49 2025 GMT Subject: CN=880d0d617245c51ea82c5e071ffd1597777d18fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:b4:c8:25:b3:32:5c:8d:80:69:d1:fa:a8: 0c:fb:ad:2c:8d:0b:5f:ed:1a:ba:0f:7a:7b:35:7d: de:65:1f:9d:4b:e7:57:f2:7b:bb:4d:42:b8:7d:0b: 34:44:c6:d6:cb:7c:4b:b5:7e:79:94:2e:fb:d6:75: 80:79:5d:60:71:7d:62:db:2f:21:e0:d1:2b:38:5a: 85:66:ff:70:e6:2a:e7:dc:f3:b4:13:ec:f3:4a:4c: 40:12:0f:f9:65:38:25:3b:d0:a8:b1:48:b6:94:c5: 6f:98:ed:55:33:e5:a1:28:20:43:56:1d:9e:e1:02: 06:38:a5:43:69:e0:7c:20:f7:cb:b9:dc:ad:70:a2: ee:c2:9c:0e:f9:95:7d:37:4e:2d:0b:c0:ac:ef:67: 7f:a7:71:a4:d1:79:2f:f5:d8:5c:11:fa:d2:ca:99: 20:16:11:65:03:d5:b0:52:bf:31:e8:34:3b:8b:6b: 9e:bc:f3:dd:5f:1c:2f:bd:02:66:74:fe:0e:4e:ac: b7:a8:8f:37:bc:a8:55:e8:6c:34:58:23:be:30:8c: ca:dc:80:6c:75:22:c6:e6:b6:92:fd:36:d8:01:87: 6f:72:50:7f:b1:b5:ce:20:f6:fe:15:1b:f3:ad:38: 1d:d5:6c:ac:4c:e7:cb:01:0e:cb:67:68:c4:a8:c4: ad:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0D:0D:61:72:45:C5:1E:A8:2C:5E:07:1F:FD:15:97:77:7D:18:FB X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:cf:d3:98:7b:8d:d0:b2:b6:6a:d8:2f:bf:66:ee:70:04:af: 7d:cb:f5:71:fd:33:71:45:c1:78:35:c5:aa:e7:d0:91:24:39: 88:f9:c6:c2:fb:a2:7c:af:99:2b:a5:da:1c:ee:82:cb:63:55: 87:74:53:28:ad:b6:74:35:b1:6e:69:79:27:2c:eb:26:68:91: 2d:c4:0b:eb:d1:c4:1b:97:82:2e:a0:8e:8e:8e:20:1e:57:04: 41:b9:cb:5a:8e:31:a6:5c:30:7c:ab:28:11:04:48:59:0e:d9: b0:82:45:9f:ee:9e:27:fc:b9:df:40:b5:e8:22:09:4f:ca:35: 11:6d:dd:32:ce:1b:ed:4c:04:af:c1:10:67:ec:42:25:c7:32: da:5d:2d:8e:8f:b8:db:0a:ec:89:a0:04:d5:8d:82:a8:cc:71: 5a:33:74:0d:ea:61:c3:b3:01:9f:72:90:c4:2d:5d:2d:0f:b9: 5e:0a:56:05:b2:37:7a:a4:53:57:f8:de:d4:ce:c5:ce:44:4d: 5b:af:a8:73:8b:93:06:71:fd:07:e1:58:0e:cf:3e:e5:79:ff: 2a:0f:4e:ac:07:54:4e:6a:c8:c6:0e:2f:0d:d7:2c:65:20:4b: 80:61:35:ae:30:5a:60:21:52:59:8c:56:5f:a1:b6:fd:16:4d: ee:ad:dd:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f9cfGraIOB/lRaZQvcJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjUxMjIwMTYwMjQ5WhcNMjUxMjIxMTYwMjQ5WjAzMTEwLwYDVQQD Eyg4ODBkMGQ2MTcyNDVjNTFlYTgyYzVlMDcxZmZkMTU5Nzc3N2QxOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGi0yCWzMlyNgGnR+qgM+60sjQtf 7Rq6D3p7NX3eZR+dS+dX8nu7TUK4fQs0RMbWy3xLtX55lC771nWAeV1gcX1i2y8h 4NErOFqFZv9w5irn3PO0E+zzSkxAEg/5ZTglO9CosUi2lMVvmO1VM+WhKCBDVh2e 4QIGOKVDaeB8IPfLudytcKLuwpwO+ZV9N04tC8Cs72d/p3Gk0Xkv9dhcEfrSypkg FhFlA9WwUr8x6DQ7i2uevPPdXxwvvQJmdP4OTqy3qI83vKhV6Gw0WCO+MIzK3IBs dSLG5raS/TbYAYdvclB/sbXOIPb+FRvzrTgd1WysTOfLAQ7LZ2jEqMSt5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgNDWFyRcUeqCxeBx/9FZd3fRj7MB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZc/TmHuN 0LK2atgvv2bucASvfcv1cf0zcUXBeDXFqufQkSQ5iPnGwvuifK+ZK6XaHO6Cy2NV h3RTKK22dDWxbml5JyzrJmiRLcQL69HEG5eCLqCOjo4gHlcEQbnLWo4xplwwfKso EQRIWQ7ZsIJFn+6eJ/y530C16CIJT8o1EW3dMs4b7UwEr8EQZ+xCJccy2l0tjo+4 2wrsiaAE1Y2CqMxxWjN0Dephw7MBn3KQxC1dLQ+5XgpWBbI3eqRTV/je1M7FzkRN W6+oc4uTBnH9B+FYDs8+5Xn/Kg9OrAdUTmrIxg4vDdcsZSBLgGE1rjBaYCFSWYxW X6G2/RZN7q3dbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:12:01 2025 by rpki-client