This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft File: eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft (raw, json) Hash identifier: NDZkMMSorHfcWj91K40uoLjyoH/ypIqDzUwbaQ2ddLM= Subject key identifier: E5:59:95:4D:28:64:D5:0B:FB:9C:EF:06:F4:AD:4D:60:4E:FD:D1:F3 Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4 Certificate issuer: /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4 Certificate serial: 019B597712E129224CE094EB836C24B2C5B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft Manifest number: 0721 Signing time: Fri 26 Dec 2025 07:02:14 +0000 Manifest this update: Fri 26 Dec 2025 07:02:14 +0000 Manifest next update: Sat 27 Dec 2025 07:02:14 +0000 Files and hashes: 1: 1LjZlnRBJt_qRKMuzNTKcoTDPVg.roa (hash: uQEaVATrxncZCByVj7FOPBy+k/KEvq9+fzzZSw1GL2k=) 2: eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl (hash: PIALzyxNYjvRj+bv6+8k3hLFrHCC3Aoa4YqLROiCOiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:12:e1:29:22:4c:e0:94:eb:83:6c:24:b2:c5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4 Validity Not Before: Dec 26 07:02:14 2025 GMT Not After : Dec 27 07:02:14 2025 GMT Subject: CN=e559954d2864d50bfb9cef06f4ad4d604efdd1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:08:99:ef:86:95:7e:59:88:87:44:6e:b0:14: 3f:3e:46:2f:e6:de:1b:5a:44:17:69:29:29:8e:bd: 77:5c:cb:70:b5:6e:89:72:dd:12:6d:4e:79:68:71: ce:77:ba:a2:40:99:59:f8:58:26:5b:dd:74:05:d4: b8:a4:b1:da:3f:21:af:af:3f:41:dc:62:3f:39:d0: 2b:1e:78:10:68:6f:f0:d2:b3:a7:3f:9f:4f:e1:9e: d2:a4:be:8a:31:6f:9e:33:74:53:49:cf:4e:6c:b5: 17:c3:bf:6d:c1:3d:e2:97:40:2a:31:f4:c2:04:df: 6e:cc:fd:d4:2b:32:8e:91:f3:e6:70:62:e3:f6:04: 1e:7b:5e:52:d9:bb:e5:15:a1:5e:23:63:e0:30:2f: d8:a5:b6:bc:e4:7c:1f:7c:3f:d2:65:02:54:01:dc: 53:98:d0:74:d3:b4:d0:7c:a4:b3:c3:45:06:33:47: 70:6b:74:59:00:13:02:c9:4a:5d:76:43:75:80:2d: 9c:09:c2:b7:81:fd:cf:f7:7a:a9:1f:44:b0:ba:8a: 80:4f:f0:64:fb:0d:cc:35:82:72:82:bc:b9:d4:be: a4:d4:ed:58:5f:40:3c:4b:88:13:6d:3d:ad:68:09: 28:c1:db:a7:d6:53:50:d0:4c:79:6e:c9:b3:48:c4: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:59:95:4D:28:64:D5:0B:FB:9C:EF:06:F4:AD:4D:60:4E:FD:D1:F3 X509v3 Authority Key Identifier: keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:04:ba:e8:8a:c7:17:bc:97:f1:5e:3b:a4:06:d0:9e:f0:d6: c6:93:92:c3:2b:ee:bf:22:c5:67:e1:83:50:75:42:01:84:70: 7c:23:91:ae:3b:81:3d:d2:ac:b4:92:5a:19:49:c0:d7:7c:74: 40:81:41:1b:7f:46:96:1a:37:dc:43:b5:c4:28:db:20:03:70: ec:a9:f4:f0:79:39:17:66:41:3a:95:12:b0:aa:cd:01:0c:b9: 55:53:c1:4e:5e:df:21:28:59:88:e5:ba:49:25:60:60:f7:21: e5:47:4e:66:a1:77:de:03:af:11:e7:1c:2a:ea:ac:02:60:ad: 94:3b:e8:c7:28:11:5a:6c:8e:d8:97:96:38:98:e3:05:9a:e4: a1:05:f5:aa:74:88:ac:b0:2e:d3:a8:3d:03:70:30:4d:fc:c4: 60:d5:b0:45:55:86:67:a1:ee:37:51:83:2a:4d:52:4c:6c:6f: 24:db:dc:b4:fc:0e:f3:da:f2:26:f1:5c:db:ed:18:26:93:7f: 5a:aa:39:83:a3:cf:ce:57:34:06:50:3e:43:ce:81:68:e7:22: e0:1b:70:39:ea:63:e6:91:b5:cc:46:3f:47:6e:0f:3a:7a:a1: 7e:4c:fa:8f:2f:1f:ac:1b:ed:5c:95:b8:47:f0:25:e2:46:12: 2f:fc:9e:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdxLhKSJM4JTrg2wkssW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmQ1MzcyZTFlMTlkMDViZWRhMzUzYmQ2YTE1YmRkMzky OTFmYTQwHhcNMjUxMjI2MDcwMjE0WhcNMjUxMjI3MDcwMjE0WjAzMTEwLwYDVQQD EyhlNTU5OTU0ZDI4NjRkNTBiZmI5Y2VmMDZmNGFkNGQ2MDRlZmRkMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwiZ74aVflmIh0RusBQ/PkYv5t4b WkQXaSkpjr13XMtwtW6Jct0SbU55aHHOd7qiQJlZ+FgmW910BdS4pLHaPyGvrz9B 3GI/OdArHngQaG/w0rOnP59P4Z7SpL6KMW+eM3RTSc9ObLUXw79twT3il0AqMfTC BN9uzP3UKzKOkfPmcGLj9gQee15S2bvlFaFeI2PgMC/Ypba85HwffD/SZQJUAdxT mNB007TQfKSzw0UGM0dwa3RZABMCyUpddkN1gC2cCcK3gf3P93qpH0SwuoqAT/Bk +w3MNYJygry51L6k1O1YX0A8S4gTbT2taAkowdun1lNQ0Ex5bsmzSMSB9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVZlU0oZNUL+5zvBvStTWBO/dHzMB8GA1UdIwQY MBaAFHm9U3Lh4Z0Fvto1O9ahW905KR+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWIxVGN1SGhuUVctMmpVNzFxRmIzVGtwSDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYmUzNTAtNjlkYS00OTVkLTk2ZTIt YWJmYTgzZmNmZjY3LzEvZWIxVGN1SGhuUVctMmpVNzFxRmIzVGtwSDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mYmUzNTAtNjlkYS00OTVkLTk2ZTItYWJmYTgzZmNmZjY3 LzEvZWIxVGN1SGhuUVctMmpVNzFxRmIzVGtwSDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwS66IrH F7yX8V47pAbQnvDWxpOSwyvuvyLFZ+GDUHVCAYRwfCORrjuBPdKstJJaGUnA13x0 QIFBG39Glho33EO1xCjbIANw7Kn08Hk5F2ZBOpUSsKrNAQy5VVPBTl7fIShZiOW6 SSVgYPch5UdOZqF33gOvEeccKuqsAmCtlDvoxygRWmyO2JeWOJjjBZrkoQX1qnSI rLAu06g9A3AwTfzEYNWwRVWGZ6HuN1GDKk1STGxvJNvctPwO89ryJvFc2+0YJpN/ Wqo5g6PPzlc0BlA+Q86BaOci4BtwOepj5pG1zEY/R24POnqhfkz6jy8frBvtXJW4 R/Al4kYSL/yeJg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:54 2025 by rpki-client