This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft File: EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json) Hash identifier: G6HHW9xr+DSZALCQgA8bX6uHK6iWEuOl/LNt3hiN1o8= Subject key identifier: C3:A0:9D:BD:81:E5:45:A0:43:22:BD:2C:95:FC:B6:C5:AB:C9:DA:9B Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93 Certificate issuer: /CN=1012216458bd7605ff95540fd204eb93a477f393 Certificate serial: 019B3833E36733ABAB26C1AD82E010AC2A24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft Manifest number: 0D3B Signing time: Fri 19 Dec 2025 20:01:23 +0000 Manifest this update: Fri 19 Dec 2025 20:01:23 +0000 Manifest next update: Sat 20 Dec 2025 20:01:23 +0000 Files and hashes: 1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: WRtXeEcusVaKFKRLPdx9mZ6/UWFC9N3hwKE/OkBQB50=) 2: hMWp2eYYKaaUSIum5EmKLwWKUa4.roa (hash: 8+yLsr+nQz8cs8V3LX83Tse1Iso+npvbmYLm0xnhp94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:e3:67:33:ab:ab:26:c1:ad:82:e0:10:ac:2a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393 Validity Not Before: Dec 19 20:01:23 2025 GMT Not After : Dec 20 20:01:23 2025 GMT Subject: CN=c3a09dbd81e545a04322bd2c95fcb6c5abc9da9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0e:e7:17:8a:09:f3:d9:b0:69:2e:a4:f5:64: 78:9a:5c:c4:5b:4c:d0:dd:b4:a0:25:e9:89:c0:13: c5:44:d7:0d:d4:cb:0f:bb:48:d9:b8:9b:05:e0:95: b8:26:c8:fa:f4:7e:fd:eb:87:0a:c4:01:5a:54:2a: fd:28:ed:e8:89:45:95:1c:c9:cc:f5:c7:1d:10:18: 0d:d5:c6:c3:3b:59:16:07:e1:28:50:c1:de:7a:65: ba:7e:23:ef:46:10:27:2a:fc:7f:21:33:98:77:23: 14:01:c0:40:ab:a9:72:26:35:80:53:5c:1b:93:50: 18:10:2c:8a:56:b8:b7:8c:70:47:85:94:ec:c0:72: bc:a7:92:6a:51:8d:2e:27:af:6e:14:2e:33:ba:02: 51:2f:7c:9a:a8:d0:16:7e:bc:02:6e:2c:16:b0:06: 3b:17:1e:a7:ab:b1:6f:2d:d5:6c:3f:83:a0:5f:8b: e7:f8:ed:f8:9e:85:b3:66:69:a9:82:20:52:99:da: 33:9a:94:e3:29:f0:a5:3c:44:f7:1a:75:ea:48:16: 3c:9e:ac:0d:6e:7c:81:10:5f:57:3f:29:f8:71:e0: 01:87:86:ba:f8:09:5b:d7:54:8a:50:42:2e:ec:81: 0c:84:69:60:90:ac:74:aa:7c:cd:fc:c5:10:5b:7d: 65:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A0:9D:BD:81:E5:45:A0:43:22:BD:2C:95:FC:B6:C5:AB:C9:DA:9B X509v3 Authority Key Identifier: keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:92:16:dc:47:57:21:89:c1:de:85:80:7e:81:31:12:5b:43: 4f:97:f4:8b:9a:11:79:6a:60:55:07:e9:87:f4:58:d5:71:5e: d1:a3:bb:91:08:01:7d:f6:b9:99:65:9a:aa:d3:96:ec:66:b6: 85:53:50:1a:ef:43:70:3e:27:aa:4d:02:86:a7:90:32:df:dd: 1f:ad:46:60:f6:be:a7:87:14:0b:5f:72:ad:1e:41:13:61:6c: 24:92:7f:12:24:1c:f6:a5:33:0f:e8:a6:28:9a:70:04:0f:3f: e7:b0:63:47:f6:c2:dd:a4:13:c8:e2:8f:48:fa:0c:55:f4:6b: 74:00:9e:4a:f8:e7:53:0a:67:a7:ad:8c:c4:be:72:37:f7:21: 52:df:05:dd:23:21:e4:b9:23:19:dd:f3:d4:85:6a:9c:48:79: c6:12:88:1a:d9:08:5d:b0:c2:37:c8:72:0b:e8:02:1e:b8:05: ef:36:61:2c:26:b0:90:cb:c8:82:b9:14:8f:5d:14:c7:ee:70: d5:00:ad:34:0d:dd:37:ff:a8:f1:c7:12:c4:f0:67:55:e1:e9: 19:a9:99:3d:f1:15:4e:47:7e:92:4c:c4:63:4f:29:06:c5:12: e1:56:c1:48:08:b1:17:ed:06:30:79:33:23:14:a2:5c:2b:39: 94:f3:da:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M+NnM6urJsGtguAQrCokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMTIyMTY0NThiZDc2MDVmZjk1NTQwZmQyMDRlYjkzYTQ3 N2YzOTMwHhcNMjUxMjE5MjAwMTIzWhcNMjUxMjIwMjAwMTIzWjAzMTEwLwYDVQQD EyhjM2EwOWRiZDgxZTU0NWEwNDMyMmJkMmM5NWZjYjZjNWFiYzlkYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw7nF4oJ89mwaS6k9WR4mlzEW0zQ 3bSgJemJwBPFRNcN1MsPu0jZuJsF4JW4Jsj69H7964cKxAFaVCr9KO3oiUWVHMnM 9ccdEBgN1cbDO1kWB+EoUMHeemW6fiPvRhAnKvx/ITOYdyMUAcBAq6lyJjWAU1wb k1AYECyKVri3jHBHhZTswHK8p5JqUY0uJ69uFC4zugJRL3yaqNAWfrwCbiwWsAY7 Fx6nq7FvLdVsP4OgX4vn+O34noWzZmmpgiBSmdozmpTjKfClPET3GnXqSBY8nqwN bnyBEF9XPyn4ceABh4a6+Alb11SKUEIu7IEMhGlgkKx0qnzN/MUQW31lOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOgnb2B5UWgQyK9LJX8tsWrydqbMB8GA1UdIwQY MBaAFBASIWRYvXYF/5VUD9IE65Okd/OTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWIt MDlmZWFhMTRlMzFlLzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81MmJlNTYtZWM3Yi00NDM0LTkzZWItMDlmZWFhMTRlMzFl LzEvRUJJaFpGaTlkZ1hfbFZRUDBnVHJrNlIzODVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZIW3EdX IYnB3oWAfoExEltDT5f0i5oReWpgVQfph/RY1XFe0aO7kQgBffa5mWWaqtOW7Ga2 hVNQGu9DcD4nqk0ChqeQMt/dH61GYPa+p4cUC19yrR5BE2FsJJJ/EiQc9qUzD+im KJpwBA8/57BjR/bC3aQTyOKPSPoMVfRrdACeSvjnUwpnp62MxL5yN/chUt8F3SMh 5LkjGd3z1IVqnEh5xhKIGtkIXbDCN8hyC+gCHrgF7zZhLCawkMvIgrkUj10Ux+5w 1QCtNA3dN/+o8ccSxPBnVeHpGamZPfEVTkd+kkzEY08pBsUS4VbBSAixF+0GMHkz IxSiXCs5lPPasw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:48:17 2025 by rpki-client