This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json) Hash identifier: wiN8DO5dCEbvusp12jRmA89QXl2dn/jYoKPoMLs3GXY= Subject key identifier: 12:7B:52:0C:CD:59:9C:CA:71:D5:3A:12:0B:B0:10:83:DC:CF:70:4B Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba Certificate serial: 019B2174D1BF57129156E38124604D182272 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft Manifest number: 170B Signing time: Mon 15 Dec 2025 10:01:02 +0000 Manifest this update: Mon 15 Dec 2025 10:01:02 +0000 Manifest next update: Tue 16 Dec 2025 10:01:02 +0000 Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=) 2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: 00CsKKRqmJSWCoyJmpjyUiIywldACwUksKwvkPCnaDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:d1:bf:57:12:91:56:e3:81:24:60:4d:18:22:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba Validity Not Before: Dec 15 10:01:02 2025 GMT Not After : Dec 16 10:01:02 2025 GMT Subject: CN=127b520ccd599cca71d53a120bb01083dccf704b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:57:b9:c1:1e:f2:36:8c:e5:04:17:7c:b6: 3d:30:a6:41:49:d3:84:d4:63:24:bf:ec:48:eb:fb: 29:fe:c6:fe:29:ea:bd:df:bf:bd:cb:c4:29:c3:77: 89:0d:f2:ab:69:48:36:ce:44:25:8b:6a:89:07:2c: 2b:98:2a:aa:91:ac:ce:74:63:90:32:db:5e:60:92: ad:3f:e2:ec:17:bb:42:cd:5c:16:46:48:37:37:c1: 3d:cd:7b:4c:48:28:66:aa:9d:67:40:d1:a7:1c:d4: 55:aa:08:fe:fb:32:5d:80:e1:c0:2f:a4:c5:8e:54: db:94:8e:07:0e:d5:d6:99:1c:76:25:ec:a6:cd:4f: 6d:22:7c:03:12:f3:62:e6:0b:df:d7:8e:2b:e2:be: d1:26:d5:90:6c:48:7a:98:f0:e1:33:fc:2f:2d:59: 90:e7:ed:e0:77:89:e6:5b:5a:aa:39:39:84:56:21: 53:03:c3:38:02:38:7a:1d:e3:64:55:2b:3d:81:06: 32:e8:e9:e4:15:80:a8:06:0d:78:f5:79:0e:18:72: 00:3e:cd:ae:a9:7e:05:04:6b:23:e1:63:45:32:cd: 0c:12:06:54:b2:5d:4d:69:26:ee:a4:92:de:0c:9c: cc:ef:db:47:79:20:47:5f:2c:e0:27:8c:36:67:07: ac:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7B:52:0C:CD:59:9C:CA:71:D5:3A:12:0B:B0:10:83:DC:CF:70:4B X509v3 Authority Key Identifier: keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:aa:06:14:76:c8:1d:ae:a1:2c:cf:4c:f3:42:30:78:c9:04: c4:6c:39:2e:0e:af:11:50:bb:25:f7:ff:5e:b1:bd:80:ec:fa: 22:ba:4f:c1:d0:92:91:53:37:26:7e:67:1a:0d:f8:a7:65:4b: e7:d3:64:53:e1:cf:20:85:f1:ed:6c:a6:58:ce:be:ef:27:ca: d0:62:02:f3:20:9f:01:70:65:19:a2:22:0f:08:ad:70:5e:3f: c6:f4:e3:cf:40:9c:c8:39:b0:ab:7d:54:a4:b7:3d:a7:c6:41: 76:10:07:21:1e:f0:37:c6:ab:35:28:ab:c1:9f:7f:47:67:37: 0a:aa:55:56:db:42:b0:a6:27:e6:f8:e6:cd:5a:1e:6b:8e:c9: 5c:79:f7:fa:54:a0:71:92:f1:5f:bd:d4:cf:f8:44:7d:c2:9b: e5:86:29:52:21:46:b7:0a:22:77:0a:ed:e4:8f:12:62:fc:fa: e8:58:1b:82:3d:a4:3b:2f:39:f8:43:35:f7:5a:50:94:55:b4: 7c:a0:95:17:66:8f:e4:46:27:7f:c8:c8:66:6a:85:6c:bf:d2: c1:39:52:03:e4:57:7b:30:18:97:e5:ca:8b:14:ef:f8:c4:0b: 70:b8:8e:66:22:40:81:d1:52:23:31:13:ba:62:4f:48:76:49: 62:43:51:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdNG/VxKRVuOBJGBNGCJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmYwODZlMjEyNTA2OGQ5OWY1ZGMxZmNhNGM2MDE3MTc1 OWQxYmEwHhcNMjUxMjE1MTAwMTAyWhcNMjUxMjE2MTAwMTAyWjAzMTEwLwYDVQQD EygxMjdiNTIwY2NkNTk5Y2NhNzFkNTNhMTIwYmIwMTA4M2RjY2Y3MDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ZXucEe8jaM5QQXfLY9MKZBSdOE 1GMkv+xI6/sp/sb+Keq937+9y8Qpw3eJDfKraUg2zkQli2qJBywrmCqqkazOdGOQ MtteYJKtP+LsF7tCzVwWRkg3N8E9zXtMSChmqp1nQNGnHNRVqgj++zJdgOHAL6TF jlTblI4HDtXWmRx2JeymzU9tInwDEvNi5gvf144r4r7RJtWQbEh6mPDhM/wvLVmQ 5+3gd4nmW1qqOTmEViFTA8M4Ajh6HeNkVSs9gQYy6OnkFYCoBg149XkOGHIAPs2u qX4FBGsj4WNFMs0MEgZUsl1NaSbupJLeDJzM79tHeSBHXyzgJ4w2ZweshwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJ7UgzNWZzKcdU6EguwEIPcz3BLMB8GA1UdIwQY MBaAFHm/CG4hJQaNmfXcH8pMYBcXWdG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wMjM2ZDItYjAwYi00NjQwLTkzYmUt NmJhZTNlOWVhNzRiLzEvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8wMjM2ZDItYjAwYi00NjQwLTkzYmUtNmJhZTNlOWVhNzRi LzEvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqoGFHbI Ha6hLM9M80IweMkExGw5Lg6vEVC7Jff/XrG9gOz6IrpPwdCSkVM3Jn5nGg34p2VL 59NkU+HPIIXx7WymWM6+7yfK0GIC8yCfAXBlGaIiDwitcF4/xvTjz0CcyDmwq31U pLc9p8ZBdhAHIR7wN8arNSirwZ9/R2c3CqpVVttCsKYn5vjmzVoea47JXHn3+lSg cZLxX73Uz/hEfcKb5YYpUiFGtwoidwrt5I8SYvz66Fgbgj2kOy85+EM191pQlFW0 fKCVF2aP5EYnf8jIZmqFbL/SwTlSA+RXezAYl+XKixTv+MQLcLiOZiJAgdFSIzET umJPSHZJYkNRJA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:17:31 2025 by rpki-client