This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft File: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json) Hash identifier: a3psUDXM1pWb3GmhYC0x5Ue3zBdL81SpjAKFr6ipFhM= Subject key identifier: 93:6B:E6:47:79:AD:4E:17:F0:B6:74:29:FC:3F:D6:26:90:E9:CA:A2 Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF Certificate issuer: /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff Certificate serial: 019B3AFE0BD6834F4081580BD11F2D50CA46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft Manifest number: 0F95 Signing time: Sat 20 Dec 2025 09:01:26 +0000 Manifest this update: Sat 20 Dec 2025 09:01:26 +0000 Manifest next update: Sun 21 Dec 2025 09:01:26 +0000 Files and hashes: 1: Z7fNj1YJ8aSn3r_MEyl5vIDYUPE.roa (hash: WsvnlIuXrT6wZCrahcudQBBAK43k6FKEOxnr2kwJ0Ew=) 2: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: FbzrpKT47bndviO66u7R2OoXsxtBIgmgXyJwW6RPwN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:0b:d6:83:4f:40:81:58:0b:d1:1f:2d:50:ca:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff Validity Not Before: Dec 20 09:01:26 2025 GMT Not After : Dec 21 09:01:26 2025 GMT Subject: CN=936be64779ad4e17f0b67429fc3fd62690e9caa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:99:c8:e0:d9:da:40:62:a8:a5:4c:0f:99:6a: 0f:fa:79:34:f4:c4:68:3c:b8:6f:c6:a0:3e:92:14: c3:f5:c2:1a:60:34:2b:db:44:85:fd:18:44:9b:87: 84:d8:bb:19:ef:ca:a4:05:e9:26:93:55:9d:14:35: 11:dc:b3:32:1a:30:94:ee:b1:7e:ce:0c:48:d1:a3: 0a:11:1f:1e:ec:74:3a:91:6f:2c:26:ea:c5:ef:68: 44:63:0f:ed:d8:ef:f3:e1:75:10:86:85:20:ad:40: cf:48:de:c0:9b:b4:ae:90:5e:a5:9f:ce:13:89:54: 28:74:03:ff:6f:39:64:06:f9:cd:f8:ed:7e:b9:2a: 78:b7:48:cd:e0:7e:a2:69:f9:d5:7a:95:c0:45:e9: 52:67:8c:9c:7b:86:1b:f3:d0:70:64:e2:1f:64:5b: bf:02:73:af:a3:d2:17:80:9b:03:12:e5:f6:07:c9: de:d1:d6:f7:68:43:d0:e3:89:03:81:04:16:8a:d3: a6:7a:26:d5:b8:e3:b7:da:31:6c:52:9e:62:cf:43: 97:f9:28:96:c5:8d:dd:71:5e:79:51:84:29:24:e5: e1:df:d4:bd:ae:4e:99:95:0e:83:1a:78:da:7f:03: 80:d6:94:7d:f2:07:64:29:0c:df:b6:2b:43:6e:c2: a0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6B:E6:47:79:AD:4E:17:F0:B6:74:29:FC:3F:D6:26:90:E9:CA:A2 X509v3 Authority Key Identifier: keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:00:30:20:f3:34:93:44:71:df:15:e0:17:73:79:a5:61:52: d8:79:f2:2e:12:e8:4b:70:ca:e8:0a:17:00:88:d5:22:21:11: bd:60:8a:17:29:cf:41:81:5c:6e:b6:e3:dd:65:15:77:e9:23: 3b:e7:c8:fe:b5:fa:97:bc:b1:d7:5d:82:8c:11:dc:50:82:25: 87:6e:bd:3f:64:f0:c5:31:b1:00:3d:7e:0a:d3:a7:fb:90:62: d0:5d:75:60:68:a6:f3:2a:93:17:89:ab:cb:fe:4f:f4:da:45: 9e:d9:f5:c4:bf:ab:57:0a:2a:bb:67:54:95:15:5b:5a:e0:ae: 67:5e:72:62:b0:57:d7:4b:f8:40:3f:bd:dc:64:da:c6:26:37: 12:33:28:01:75:fe:3b:65:ce:6a:19:55:54:f4:bf:b7:bc:5a: e1:00:b8:14:af:cd:d9:aa:92:7d:17:42:b2:d1:d5:26:9c:cc: f4:04:86:47:72:27:00:f5:a6:d8:a2:f0:f0:c1:bc:9b:de:3a: 1a:6b:6e:4b:bc:94:4d:eb:d4:5c:a4:02:0d:37:86:50:03:23: db:61:d8:07:ec:b0:d4:64:0f:b7:9c:d1:df:38:58:89:b5:a9: 65:4e:3b:fe:f2:d1:0c:4c:5b:55:ac:66:f2:06:b0:11:13:14: de:e5:04:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/gvWg09AgVgL0R8tUMpGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YjZjZWFjNWQ0MmE2MzdmMzZiYTFlM2ZkYWU5MGFkNWZl ZTJjZmYwHhcNMjUxMjIwMDkwMTI2WhcNMjUxMjIxMDkwMTI2WjAzMTEwLwYDVQQD Eyg5MzZiZTY0Nzc5YWQ0ZTE3ZjBiNjc0MjlmYzNmZDYyNjkwZTljYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJnI4NnaQGKopUwPmWoP+nk09MRo PLhvxqA+khTD9cIaYDQr20SF/RhEm4eE2LsZ78qkBekmk1WdFDUR3LMyGjCU7rF+ zgxI0aMKER8e7HQ6kW8sJurF72hEYw/t2O/z4XUQhoUgrUDPSN7Am7SukF6ln84T iVQodAP/bzlkBvnN+O1+uSp4t0jN4H6iafnVepXARelSZ4yce4Yb89BwZOIfZFu/ AnOvo9IXgJsDEuX2B8ne0db3aEPQ44kDgQQWitOmeibVuOO32jFsUp5iz0OX+SiW xY3dcV55UYQpJOXh39S9rk6ZlQ6DGnjafwOA1pR98gdkKQzftitDbsKgYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNr5kd5rU4X8LZ0Kfw/1iaQ6cqiMB8GA1UdIwQY MBaAFHm2zqxdQqY382uh4/2ukK1f7iz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAt NGZlM2Y2MTExMGRlLzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAtNGZlM2Y2MTExMGRl LzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgAwIPM0 k0Rx3xXgF3N5pWFS2HnyLhLoS3DK6AoXAIjVIiERvWCKFynPQYFcbrbj3WUVd+kj O+fI/rX6l7yx112CjBHcUIIlh269P2TwxTGxAD1+CtOn+5Bi0F11YGim8yqTF4mr y/5P9NpFntn1xL+rVwoqu2dUlRVbWuCuZ15yYrBX10v4QD+93GTaxiY3EjMoAXX+ O2XOahlVVPS/t7xa4QC4FK/N2aqSfRdCstHVJpzM9ASGR3InAPWm2KLw8MG8m946 GmtuS7yUTevUXKQCDTeGUAMj22HYB+yw1GQPt5zR3zhYibWpZU47/vLRDExbVaxm 8gawERMU3uUEJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:41:28 2025 by rpki-client