This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json) Hash identifier: aj89mUwcrEAXgeQfpoPLd7tJitaTwGVQQlzbCcymKRQ= Subject key identifier: 24:F2:D0:DD:3B:FD:DB:A8:0D:B4:91:53:42:E8:8F:C0:31:C9:93:24 Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d Certificate serial: 019B0DB6D35DCD9AA42066890F20D3E6B664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft Manifest number: 10D8 Signing time: Thu 11 Dec 2025 14:00:44 +0000 Manifest this update: Thu 11 Dec 2025 14:00:44 +0000 Manifest next update: Fri 12 Dec 2025 14:00:44 +0000 Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=) 2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: buHoyiAivr8ighAyqq3B0hvzv0Dfo9qkmsrSI8kJak0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:d3:5d:cd:9a:a4:20:66:89:0f:20:d3:e6:b6:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d Validity Not Before: Dec 11 14:00:44 2025 GMT Not After : Dec 12 14:00:44 2025 GMT Subject: CN=24f2d0dd3bfddba80db4915342e88fc031c99324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:56:34:9e:e2:ce:42:3b:3f:5d:1c:44:38: bf:93:4b:5f:5e:f6:03:b0:60:78:84:14:0f:ce:18: 47:a6:3c:b0:6d:7e:85:db:8b:90:cc:a4:74:51:0b: 91:ee:29:81:52:1f:2f:91:ab:ea:cb:14:e5:fe:0b: 5f:09:82:3d:29:72:bc:af:67:b5:37:8f:8d:77:3b: 1c:f9:7e:4b:58:ad:63:30:11:a3:74:35:d6:90:61: f9:2d:1c:b5:cb:ab:59:7d:5d:7f:5f:91:a6:db:91: 21:32:9a:39:58:20:c3:36:37:a0:ca:4e:da:39:de: 46:be:fb:cc:4e:89:37:e1:7a:20:03:87:2b:18:8f: 3b:f8:f3:cf:14:94:eb:77:11:fb:32:ac:ad:4f:1a: bf:2f:c1:f7:11:08:36:19:f5:20:65:84:96:20:4c: db:19:5e:50:33:3a:d4:47:0d:8e:0e:8e:ab:38:56: a2:59:e1:f3:32:a6:e9:dc:20:a7:90:17:03:7e:ad: d0:02:28:3e:3b:f1:bf:59:b7:eb:39:23:a3:33:33: 30:49:bb:74:cd:a1:66:1f:48:1a:8b:01:cb:9e:8c: 80:62:9b:2e:0f:66:53:93:de:54:82:7b:39:4e:54: b7:c2:2d:9b:57:aa:ad:d6:34:d0:c4:6d:4d:fc:f2: 37:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F2:D0:DD:3B:FD:DB:A8:0D:B4:91:53:42:E8:8F:C0:31:C9:93:24 X509v3 Authority Key Identifier: keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:17:ff:b6:22:f1:b0:18:d5:76:b1:b4:20:3c:a7:d4:ff:28: 26:dc:6b:25:11:23:b9:59:f6:19:f7:22:cf:81:14:fc:0c:c9: df:6e:64:94:ba:bf:ce:44:39:19:8a:fc:ff:02:5c:d1:06:61: 81:fe:d3:05:9f:78:88:6c:a0:fa:1d:cf:db:67:6a:eb:94:8f: 98:b1:3c:44:ba:63:3f:1d:f7:5a:be:9a:a3:82:27:e8:00:10: 10:83:6f:f7:f2:3c:39:af:d3:f1:ae:29:4e:4e:3c:ff:6d:bb: 6c:71:7d:ee:7e:40:fc:53:e7:0f:63:e2:23:56:27:07:94:db: 3f:b2:6f:b3:cc:e0:2c:05:5d:41:00:4f:76:7a:d5:1d:ff:72: 06:38:e0:3b:9f:2f:5c:2c:3c:78:19:97:4b:92:c1:44:54:f5: a9:58:e0:1c:19:df:e6:bc:89:a9:86:b5:25:0e:55:11:82:6f: 9c:e6:74:68:7c:42:38:56:dc:56:54:11:f2:6c:8b:f4:b5:d4: 00:6d:9f:c4:3a:10:79:5f:c2:d8:c3:37:0d:b8:82:08:6f:25: 18:08:c9:0f:3b:01:df:96:f2:5e:3c:c4:57:df:98:b7:9a:f1: dc:62:83:3b:7c:8e:93:a1:26:a4:54:14:5a:fb:d5:0a:d7:0f: e1:d6:af:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNttNdzZqkIGaJDyDT5rZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjZjZmNkYTM5NzE2M2Q4MzVjODk3YWRlYTkwNzFlNjFj OGJjNGQwHhcNMjUxMjExMTQwMDQ0WhcNMjUxMjEyMTQwMDQ0WjAzMTEwLwYDVQQD EygyNGYyZDBkZDNiZmRkYmE4MGRiNDkxNTM0MmU4OGZjMDMxYzk5MzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0alWNJ7izkI7P10cRDi/k0tfXvYD sGB4hBQPzhhHpjywbX6F24uQzKR0UQuR7imBUh8vkavqyxTl/gtfCYI9KXK8r2e1 N4+Ndzsc+X5LWK1jMBGjdDXWkGH5LRy1y6tZfV1/X5Gm25EhMpo5WCDDNjegyk7a Od5GvvvMTok34XogA4crGI87+PPPFJTrdxH7MqytTxq/L8H3EQg2GfUgZYSWIEzb GV5QMzrURw2ODo6rOFaiWeHzMqbp3CCnkBcDfq3QAig+O/G/WbfrOSOjMzMwSbt0 zaFmH0gaiwHLnoyAYpsuD2ZTk95Ugns5TlS3wi2bV6qt1jTQxG1N/PI3AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTy0N07/duoDbSRU0Loj8AxyZMkMB8GA1UdIwQY MBaAFHsmz82jlxY9g1yJet6pBx5hyLxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEt NmNkNTFjODRjMDE1LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEtNmNkNTFjODRjMDE1 LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERf/tiLx sBjVdrG0IDyn1P8oJtxrJREjuVn2Gfciz4EU/AzJ325klLq/zkQ5GYr8/wJc0QZh gf7TBZ94iGyg+h3P22dq65SPmLE8RLpjPx33Wr6ao4In6AAQEINv9/I8Oa/T8a4p Tk48/227bHF97n5A/FPnD2PiI1YnB5TbP7Jvs8zgLAVdQQBPdnrVHf9yBjjgO58v XCw8eBmXS5LBRFT1qVjgHBnf5ryJqYa1JQ5VEYJvnOZ0aHxCOFbcVlQR8myL9LXU AG2fxDoQeV/C2MM3DbiCCG8lGAjJDzsB35byXjzEV9+Yt5rx3GKDO3yOk6EmpFQU WvvVCtcP4davbA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:06:34 2025 by rpki-client