This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
File: ebt3Saveb12k6xxu0cV2gWF4RrA.mft (raw, json)
Hash identifier: SE/C/ec5H1Hr0jQEP5UMEAtp4oJ7OunnwF7WmKBX/rs=
Subject key identifier: 55:F7:3A:DC:C9:1D:F3:32:CA:31:E0:81:D4:1D:CF:3A:AA:8B:10:E0
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Certificate issuer: /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial: 019B1201FCABB6F4C023757B59C08489D3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
Manifest number: 097D
Signing time: Fri 12 Dec 2025 10:01:18 +0000
Manifest this update: Fri 12 Dec 2025 10:01:18 +0000
Manifest next update: Sat 13 Dec 2025 10:01:18 +0000
Files and hashes: 1: bl0YXPOKT5FVBbmJMmuUWnJJpJQ.roa (hash: anQ2QM09zxYro+RtzBLxpbtBcMvA6IQ4sZADz9vH7Xg=)
2: ebt3Saveb12k6xxu0cV2gWF4RrA.crl (hash: EDq4RWEhaUENG8KeBoLRGKMzeJuNRN4mJT+4zTzXz6s=)
3: uWoPBSuKtZ2HO_WxNhkewE8kmNI.roa (hash: QJNvWDQRN2z0KaQFQt1TsEZSkKfsSbNz4FWIaeOeQG0=)
4: ysLpSrgnmmTzkhRVlzuv5FBWJwk.roa (hash: +DWvNK3pPfAt+iVhG8TMJlLT0Gf6syZ46fMRz7iZ4B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:12:01:fc:ab:b6:f4:c0:23:75:7b:59:c0:84:89:d3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Validity
Not Before: Dec 12 10:01:18 2025 GMT
Not After : Dec 13 10:01:18 2025 GMT
Subject: CN=55f73adcc91df332ca31e081d41dcf3aaa8b10e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:47:eb:5b:cd:5d:d5:da:80:ed:db:7e:c6:
a9:4c:85:83:65:40:fc:90:c8:af:67:6b:0d:cf:8b:
77:29:53:7f:80:ac:39:79:0a:bc:ce:8f:46:78:59:
c4:07:57:32:77:f3:5e:51:55:8d:30:1c:36:08:f1:
0b:72:38:a7:77:6b:7f:9c:6b:02:af:4f:0c:32:e7:
aa:0d:20:cf:2e:cc:96:75:63:b6:64:ce:d7:0d:17:
a6:61:3c:94:93:50:4c:fb:21:99:50:4d:b0:d9:82:
d9:61:a2:05:a3:6d:78:50:5c:87:84:cf:09:64:76:
aa:51:a4:3f:90:be:5d:87:72:30:ad:7a:21:44:fc:
ac:6c:87:4c:6f:20:4b:dc:d8:96:e6:e4:44:31:0a:
bc:7b:a2:e9:f4:da:93:f1:ac:e9:7d:8f:ec:5e:fc:
f4:aa:64:ef:7e:39:4e:32:3a:1d:2d:94:09:22:da:
03:1f:1b:9d:2b:9e:51:4f:68:fc:a7:39:ea:eb:76:
2d:0c:d6:c7:9e:1e:1a:c9:07:2a:d9:bb:8e:d8:8d:
89:1a:ba:e4:d9:40:e0:98:7a:a5:a0:39:42:25:4f:
95:33:c1:cb:cf:94:99:d0:87:3a:cf:0d:4e:2d:bf:
26:5b:24:e8:2a:68:cd:50:8f:c5:67:80:d2:ca:23:
54:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F7:3A:DC:C9:1D:F3:32:CA:31:E0:81:D4:1D:CF:3A:AA:8B:10:E0
X509v3 Authority Key Identifier:
keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1f:72:85:15:6a:14:ea:3b:bf:df:83:4f:09:12:b5:27:ec:
48:2f:54:6c:51:8e:41:92:fa:d6:8a:9c:7b:4d:6b:b4:01:18:
9c:81:b5:c4:be:ab:23:f1:f3:39:59:91:96:1b:2d:38:37:ac:
41:8c:61:1c:7c:b1:f7:d1:61:9d:e2:97:8a:70:d8:ce:91:64:
08:7d:b4:0f:e5:5f:ba:fa:cc:4d:45:c1:12:6d:04:cb:92:f7:
8a:b6:3c:92:a8:4c:75:ff:70:3b:df:01:2e:84:6a:3b:4c:dc:
1f:5e:86:5a:8d:57:a7:1b:10:39:b5:55:71:83:1f:6c:35:43:
dd:66:9a:f4:10:ce:2c:4d:a7:5d:87:89:76:75:c4:e1:1f:3d:
f8:22:5a:b1:43:85:25:bf:e0:d2:3b:53:a3:ca:4e:2b:f3:7a:
47:9c:ed:9e:d7:84:72:e7:07:74:c2:c4:94:3d:62:25:79:9f:
15:f8:fe:a9:27:8b:cd:c3:da:86:d2:f9:b0:d4:72:3b:a2:d2:
d0:7c:39:73:7d:5f:8c:71:92:01:06:12:fd:df:b5:f7:77:33:
30:d8:32:16:96:a7:56:b5:92:87:a9:6a:90:d9:91:b4:96:8b:
bc:36:0d:44:7b:3a:6a:9e:c6:d9:49:70:31:3c:8e:4a:ad:67:
7c:05:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:20:30 2025 by rpki-client