This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json) Hash identifier: VKwwWODLRfspJdS5C7ZTg3hv4Obj3kyof/HpDgBASfE= Subject key identifier: 6A:DF:63:96:4D:22:B1:8F:20:A0:23:27:71:CA:4C:21:80:C5:82:C3 Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d Certificate serial: 019B364516C75DAC5220B67C1BAD9C3E0FE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft Manifest number: 10ED Signing time: Fri 19 Dec 2025 11:00:56 +0000 Manifest this update: Fri 19 Dec 2025 11:00:56 +0000 Manifest next update: Sat 20 Dec 2025 11:00:56 +0000 Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=) 2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: Uth5DjPGsNEdDsrTczMfxjL+RQaAOi80SpCo71G0G+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:16:c7:5d:ac:52:20:b6:7c:1b:ad:9c:3e:0f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d Validity Not Before: Dec 19 11:00:56 2025 GMT Not After : Dec 20 11:00:56 2025 GMT Subject: CN=6adf63964d22b18f20a0232771ca4c2180c582c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:c2:9a:21:49:46:65:1d:74:05:07:c0:ae: cf:fe:74:da:fe:a5:e0:a2:6b:3b:f6:91:e6:4b:30: 4b:88:43:37:e4:61:bb:53:da:ba:4e:88:f4:14:fe: b7:b7:be:59:2d:b8:3b:45:a4:b8:a3:1c:76:9a:e7: 70:4b:ad:b3:4e:9f:44:ec:5b:3d:e0:17:66:6a:18: 80:7a:17:34:6a:89:87:b1:a8:c6:cc:9b:5a:78:d1: 15:a3:28:67:ca:ca:5c:e3:1f:83:eb:97:47:1b:a3: e9:7c:d9:fd:c2:22:5b:a0:bc:3f:47:98:39:2a:9d: ed:ba:c9:26:8d:8e:72:1b:fc:24:f4:e0:fb:37:1a: 94:25:23:97:d5:03:82:76:d9:a8:ab:c8:92:3f:ac: 71:9c:f7:db:9a:fb:4f:0b:40:1a:59:b2:2e:06:55: 38:a3:45:2e:92:c1:89:44:b6:b7:2e:6a:c6:4a:fc: 76:b9:85:01:a1:60:a8:7f:e3:92:aa:9e:c5:90:d8: d6:6f:aa:0b:85:13:6e:d4:b5:07:50:fc:77:68:76: fa:c4:e2:93:82:b0:fc:2c:4f:04:8b:1a:0b:80:60: d3:b5:47:36:2e:16:e1:0b:bc:95:a5:9c:a3:07:80: ef:90:de:63:19:31:d6:11:3e:89:89:42:d3:2e:a9: 56:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DF:63:96:4D:22:B1:8F:20:A0:23:27:71:CA:4C:21:80:C5:82:C3 X509v3 Authority Key Identifier: keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:4e:0f:a1:56:6a:7a:42:00:fb:73:de:b4:b0:72:15:34:94: 6e:3e:7b:82:72:43:49:11:8a:b4:6c:cd:8d:c0:cd:3e:aa:10: ea:33:4a:a1:18:89:a1:13:41:6d:df:5e:ae:c9:89:8d:ca:a3: c7:fc:c6:13:11:f4:b9:33:c6:49:c4:38:bc:27:a4:9b:df:7f: 31:b9:a9:95:24:d7:c6:ec:87:4b:71:b1:98:0b:87:cf:6e:58: 76:26:b0:d1:9c:6e:2e:42:af:a4:12:a0:b3:a4:36:1e:0d:b2: c6:6d:86:1a:f9:af:81:ab:29:01:6c:11:b2:34:b9:4d:3a:58: 07:04:63:ab:3e:d3:36:ba:8d:8e:f2:c0:9b:29:d4:54:0c:e4: 7a:44:95:19:e4:a6:a1:ed:4f:36:46:77:96:c1:ab:ed:fd:3a: 7a:b4:66:45:54:66:e0:31:be:f9:89:5f:5b:fc:5d:ed:3a:81: 95:73:68:5f:c5:af:94:47:cf:05:b5:18:ba:3e:50:1b:a3:f7: d2:2f:6f:97:1b:49:c7:05:ec:9d:7f:09:f3:b0:0c:25:40:8d: 5e:d9:dd:88:ea:ea:72:7f:d1:51:c1:57:55:ae:11:39:42:f3: b5:5e:82:3c:63:ad:29:11:1c:ed:42:69:da:77:6d:d0:0d:2e: f9:5e:9f:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RRbHXaxSILZ8G62cPg/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjZjZmNkYTM5NzE2M2Q4MzVjODk3YWRlYTkwNzFlNjFj OGJjNGQwHhcNMjUxMjE5MTEwMDU2WhcNMjUxMjIwMTEwMDU2WjAzMTEwLwYDVQQD Eyg2YWRmNjM5NjRkMjJiMThmMjBhMDIzMjc3MWNhNGMyMTgwYzU4MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBnCmiFJRmUddAUHwK7P/nTa/qXg oms79pHmSzBLiEM35GG7U9q6Toj0FP63t75ZLbg7RaS4oxx2mudwS62zTp9E7Fs9 4BdmahiAehc0aomHsajGzJtaeNEVoyhnyspc4x+D65dHG6PpfNn9wiJboLw/R5g5 Kp3tuskmjY5yG/wk9OD7NxqUJSOX1QOCdtmoq8iSP6xxnPfbmvtPC0AaWbIuBlU4 o0UuksGJRLa3LmrGSvx2uYUBoWCof+OSqp7FkNjWb6oLhRNu1LUHUPx3aHb6xOKT grD8LE8EixoLgGDTtUc2LhbhC7yVpZyjB4DvkN5jGTHWET6JiULTLqlWBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrfY5ZNIrGPIKAjJ3HKTCGAxYLDMB8GA1UdIwQY MBaAFHsmz82jlxY9g1yJet6pBx5hyLxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEt NmNkNTFjODRjMDE1LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEtNmNkNTFjODRjMDE1 LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR04PoVZq ekIA+3PetLByFTSUbj57gnJDSRGKtGzNjcDNPqoQ6jNKoRiJoRNBbd9ersmJjcqj x/zGExH0uTPGScQ4vCekm99/MbmplSTXxuyHS3GxmAuHz25Ydiaw0ZxuLkKvpBKg s6Q2Hg2yxm2GGvmvgaspAWwRsjS5TTpYBwRjqz7TNrqNjvLAmynUVAzkekSVGeSm oe1PNkZ3lsGr7f06erRmRVRm4DG++YlfW/xd7TqBlXNoX8WvlEfPBbUYuj5QG6P3 0i9vlxtJxwXsnX8J87AMJUCNXtndiOrqcn/RUcFXVa4ROULztV6CPGOtKREc7UJp 2ndt0A0u+V6fXQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:14:05 2025 by rpki-client