This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft File: ebBozkt45F5gxswUavYHsI-EPfw.mft (raw, json) Hash identifier: 1abG/YDLbHaVpVcyGSNxVo5rH9yf76TpM3aGCGywqHw= Subject key identifier: 31:CC:C7:E9:8C:1D:DA:E0:84:1E:84:98:19:AF:BD:58:19:E8:7B:B1 Authority key identifier: 79:B0:68:CE:4B:78:E4:5E:60:C6:CC:14:6A:F6:07:B0:8F:84:3D:FC Certificate issuer: /CN=79b068ce4b78e45e60c6cc146af607b08f843dfc Certificate serial: 019B5A887CBE49B543E16618CC29CE84CBEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebBozkt45F5gxswUavYHsI-EPfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft Manifest number: 77 Signing time: Fri 26 Dec 2025 12:00:52 +0000 Manifest this update: Fri 26 Dec 2025 12:00:52 +0000 Manifest next update: Sat 27 Dec 2025 12:00:52 +0000 Files and hashes: 1: ebBozkt45F5gxswUavYHsI-EPfw.crl (hash: P6snTRx/vrXrMuo2jxwUawheJCjQi+/Bq2pVH4f6jeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft rsync://rpki.ripe.net/repository/DEFAULT/ebBozkt45F5gxswUavYHsI-EPfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:7c:be:49:b5:43:e1:66:18:cc:29:ce:84:cb:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b068ce4b78e45e60c6cc146af607b08f843dfc Validity Not Before: Dec 26 12:00:52 2025 GMT Not After : Dec 27 12:00:52 2025 GMT Subject: CN=31ccc7e98c1ddae0841e849819afbd5819e87bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:df:84:b1:ea:f0:ee:ef:69:0b:d1:9d:d3: 89:6d:ce:b1:42:c1:d0:9a:1f:bf:d0:7a:cd:ea:85: 18:66:10:29:e5:37:b2:1e:68:ee:5b:e4:03:fc:6e: 6e:53:d8:5e:5a:13:e2:76:b2:1a:92:a2:f0:18:85: d6:87:80:a0:f9:0f:9b:5a:8a:17:e3:53:dd:23:0d: 2c:df:78:4a:c6:d1:9e:89:91:99:fa:10:06:b9:c0: 8b:9c:62:30:d5:20:ef:71:2c:14:3a:bd:e7:1e:0e: 9b:4f:bf:80:24:37:34:9a:f3:98:21:78:fe:b2:19: a9:ad:59:f2:76:20:ce:ed:bd:56:ad:fe:17:15:a4: da:d2:3a:21:c4:47:aa:27:d9:3b:62:16:ee:d0:c8: 64:85:3f:60:98:98:d3:2f:7f:4e:93:d3:0d:af:a9: c5:6b:0e:bd:f3:7b:de:89:32:eb:7b:6c:19:6f:95: 0d:6c:86:17:c7:86:56:af:72:28:d1:0c:33:78:4b: e6:c4:18:93:d3:78:a6:a6:30:97:25:51:10:c3:df: 6f:61:39:de:57:43:a3:e8:0c:8a:e0:f7:2f:0e:fd: a7:db:41:bd:9c:7b:a0:6c:b7:aa:7b:39:bb:6a:b2: 79:c7:30:16:6a:09:08:7e:98:22:f9:24:5d:4d:c2: 11:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CC:C7:E9:8C:1D:DA:E0:84:1E:84:98:19:AF:BD:58:19:E8:7B:B1 X509v3 Authority Key Identifier: keyid:79:B0:68:CE:4B:78:E4:5E:60:C6:CC:14:6A:F6:07:B0:8F:84:3D:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebBozkt45F5gxswUavYHsI-EPfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:63:8d:ad:ce:c8:fc:32:61:a5:16:48:f2:a9:51:39:81:50: aa:ff:26:cc:af:ee:bc:2d:10:d0:17:a2:0d:f7:59:72:55:16: b2:4b:25:f8:d1:31:c6:81:cd:40:74:f8:dd:29:17:59:a8:e1: 79:aa:25:48:41:8a:2e:12:83:eb:9e:c5:59:b7:ad:53:e9:37: 4d:80:72:59:72:69:14:08:dc:95:d2:e2:6c:50:9e:05:a4:ce: 6e:7f:39:53:4d:59:c1:dc:9e:cb:c2:0d:e9:f2:28:d5:87:a1: ae:6b:6b:18:59:35:12:31:e6:34:54:eb:be:cf:64:e9:e8:76: e4:27:75:d6:bc:ea:0c:55:69:cd:25:6d:24:12:f2:61:4e:12: 56:34:f7:03:8f:d1:0d:96:a1:e7:62:8c:17:1c:eb:a3:25:c5: 62:a9:9c:9a:7f:e6:83:b2:f0:0a:63:e3:e1:91:f3:df:7b:ee: b4:42:c3:aa:4a:76:6b:67:d4:97:63:ca:24:44:2e:b9:c9:b6: 6d:c7:6f:c8:41:41:ca:e3:77:a4:e0:77:9b:0f:9a:aa:32:d6: aa:9e:07:dc:5b:c3:be:a7:21:df:31:01:4e:a2:e0:da:d3:b9: e0:26:74:82:40:b0:1e:53:c7:f0:52:6c:87:7e:53:92:98:31: 85:e7:a5:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiHy+SbVD4WYYzCnOhMvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YjA2OGNlNGI3OGU0NWU2MGM2Y2MxNDZhZjYwN2IwOGY4 NDNkZmMwHhcNMjUxMjI2MTIwMDUyWhcNMjUxMjI3MTIwMDUyWjAzMTEwLwYDVQQD EygzMWNjYzdlOThjMWRkYWUwODQxZTg0OTgxOWFmYmQ1ODE5ZTg3YmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ffhLHq8O7vaQvRndOJbc6xQsHQ mh+/0HrN6oUYZhAp5TeyHmjuW+QD/G5uU9heWhPidrIakqLwGIXWh4Cg+Q+bWooX 41PdIw0s33hKxtGeiZGZ+hAGucCLnGIw1SDvcSwUOr3nHg6bT7+AJDc0mvOYIXj+ shmprVnydiDO7b1Wrf4XFaTa0johxEeqJ9k7Yhbu0MhkhT9gmJjTL39Ok9MNr6nF aw6983veiTLre2wZb5UNbIYXx4ZWr3Io0QwzeEvmxBiT03impjCXJVEQw99vYTne V0Oj6AyK4PcvDv2n20G9nHugbLeqezm7arJ5xzAWagkIfpgi+SRdTcIRQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHMx+mMHdrghB6EmBmvvVgZ6HuxMB8GA1UdIwQY MBaAFHmwaM5LeOReYMbMFGr2B7CPhD38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJCb3prdDQ1RjVneHN3VWF2WUhzSS1FUGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kN2VlNGUtYWMyOC00MjE2LWIzYjgt OThkZWJlNDAzMzIwLzEvZWJCb3prdDQ1RjVneHN3VWF2WUhzSS1FUGZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kN2VlNGUtYWMyOC00MjE2LWIzYjgtOThkZWJlNDAzMzIw LzEvZWJCb3prdDQ1RjVneHN3VWF2WUhzSS1FUGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWONrc7I /DJhpRZI8qlROYFQqv8mzK/uvC0Q0BeiDfdZclUWsksl+NExxoHNQHT43SkXWajh eaolSEGKLhKD657FWbetU+k3TYByWXJpFAjcldLibFCeBaTObn85U01Zwdyey8IN 6fIo1YehrmtrGFk1EjHmNFTrvs9k6eh25Cd11rzqDFVpzSVtJBLyYU4SVjT3A4/R DZah52KMFxzroyXFYqmcmn/mg7LwCmPj4ZHz33vutELDqkp2a2fUl2PKJEQuucm2 bcdvyEFByuN3pOB3mw+aqjLWqp4H3FvDvqch3zEBTqLg2tO54CZ0gkCwHlPH8FJs h35TkpgxheelCw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:16 2025 by rpki-client