This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft File: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft (raw, json) Hash identifier: Mp35jKk/Ea8sXtIRSEywrIgCQ9A3xHoxzVp18hS4WxM= Subject key identifier: 55:AA:E7:2A:1D:B9:A9:DD:59:31:76:50:02:5A:ED:9F:6C:DD:DB:39 Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33 Certificate issuer: /CN=79bb370b0c9a06fd82cb7100d903859b09f50333 Certificate serial: 019B19BCD6C3744DA06113C094EB6A8F8921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft Manifest number: 1490 Signing time: Sat 13 Dec 2025 22:02:44 +0000 Manifest this update: Sat 13 Dec 2025 22:02:44 +0000 Manifest next update: Sun 14 Dec 2025 22:02:44 +0000 Files and hashes: 1: BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa (hash: hSczRhljFIoa/6OnEWTHUCmzoj5N2dcbKHbecT1X5S0=) 2: UThfbWvZb2PXAmFnxUbwmcadIvs.roa (hash: SO7N8NAXEb8d0CKRuGu75MSAjtkwodWQ5MaMjLOJVMY=) 3: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl (hash: X3kqe3+ftbI8hut1JCs1CIBN4L1j2+OHkSm1IG+XqQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:d6:c3:74:4d:a0:61:13:c0:94:eb:6a:8f:89:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333 Validity Not Before: Dec 13 22:02:44 2025 GMT Not After : Dec 14 22:02:44 2025 GMT Subject: CN=55aae72a1db9a9dd59317650025aed9f6cdddb39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:41:6c:e2:9c:78:51:a5:f7:21:70:5e:89: 49:8a:26:fc:e5:0d:aa:24:59:db:21:94:e2:23:b1: d1:0e:60:f2:a3:08:76:b6:61:7d:76:58:29:25:8c: 6c:3d:95:07:e5:79:e5:36:22:79:81:8e:54:1e:43: 16:d0:b5:06:db:60:4d:61:c5:a1:dc:35:3d:bd:d4: b2:51:37:17:c8:db:36:33:49:db:e0:e9:97:b0:5c: 60:21:20:4c:84:10:42:e0:f3:db:b2:84:ea:b5:c3: 59:8e:d0:fc:fc:35:bc:ad:15:9f:8f:a9:b5:43:27: d8:78:c6:b7:e7:98:52:06:6f:06:7d:72:63:42:82: 60:8f:04:19:a7:93:53:1c:6f:5a:3c:05:cc:9d:e8: 12:f8:d0:34:85:e3:db:59:9f:02:f8:de:87:e0:0e: c1:6d:43:c0:4f:ea:b0:df:68:65:10:ad:d6:98:ef: 9d:5c:0d:36:c6:c5:9e:89:94:76:1c:a5:03:f8:77: b4:47:65:c3:32:7f:a1:9b:3a:bc:3a:49:0e:b7:1d: 5b:62:56:7e:e1:e0:dd:7d:46:34:58:1f:93:fc:f8: d9:28:cc:11:0b:af:ce:73:db:e5:d1:e1:94:4e:8d: d2:2e:b4:d6:fb:ac:89:14:22:f6:73:e9:02:30:b4: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AA:E7:2A:1D:B9:A9:DD:59:31:76:50:02:5A:ED:9F:6C:DD:DB:39 X509v3 Authority Key Identifier: keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ce:97:5d:98:ad:3a:96:26:f9:9b:c1:60:53:c7:06:66:51: 5d:89:a6:63:a9:3b:84:c9:f4:b5:eb:fd:05:cf:46:fb:85:be: a7:d2:8b:64:21:a0:3f:ef:5a:1b:40:67:08:30:49:cd:f8:4e: aa:b9:26:75:77:35:7a:18:76:fa:63:d2:03:7f:24:0b:42:7c: 1c:a0:8b:35:19:de:ad:d3:e9:8a:ac:d6:54:cc:73:a8:02:aa: 71:15:b8:a7:f0:ba:5c:fc:19:1b:38:58:50:46:6a:92:34:c6: 40:a4:d5:e9:c2:ad:1a:e3:ff:95:da:47:00:71:b1:b0:52:0a: 9a:37:2c:c4:2f:d9:70:d5:bf:88:94:7f:40:91:e6:cf:fe:38: 9f:e2:2f:0f:0b:67:28:ba:d4:0e:c8:88:84:b8:0a:58:a1:cd: 66:b4:65:ee:4a:80:53:1d:b8:1b:30:4f:ab:ec:ec:76:90:1c: 4e:ef:f4:ac:af:00:4d:fe:0c:d5:13:cd:2b:bc:a6:7f:f6:dc: 2c:1f:cc:6d:07:da:ac:a0:22:27:6c:96:a2:a5:36:15:37:0b: 7d:1b:8d:5f:77:99:93:13:9e:60:9d:81:ef:f7:35:a2:f9:09: 99:d6:d2:2f:cb:2d:07:1b:59:37:cf:a3:9e:7b:c5:55:ff:e5: 0a:27:45:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvNbDdE2gYRPAlOtqj4khMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmIzNzBiMGM5YTA2ZmQ4MmNiNzEwMGQ5MDM4NTliMDlm NTAzMzMwHhcNMjUxMjEzMjIwMjQ0WhcNMjUxMjE0MjIwMjQ0WjAzMTEwLwYDVQQD Eyg1NWFhZTcyYTFkYjlhOWRkNTkzMTc2NTAwMjVhZWQ5ZjZjZGRkYjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLdBbOKceFGl9yFwXolJiib85Q2q JFnbIZTiI7HRDmDyowh2tmF9dlgpJYxsPZUH5XnlNiJ5gY5UHkMW0LUG22BNYcWh 3DU9vdSyUTcXyNs2M0nb4OmXsFxgISBMhBBC4PPbsoTqtcNZjtD8/DW8rRWfj6m1 QyfYeMa355hSBm8GfXJjQoJgjwQZp5NTHG9aPAXMnegS+NA0hePbWZ8C+N6H4A7B bUPAT+qw32hlEK3WmO+dXA02xsWeiZR2HKUD+He0R2XDMn+hmzq8OkkOtx1bYlZ+ 4eDdfUY0WB+T/PjZKMwRC6/Oc9vl0eGUTo3SLrTW+6yJFCL2c+kCMLT/pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWq5yoduandWTF2UAJa7Z9s3ds5MB8GA1UdIwQY MBaAFHm7NwsMmgb9gstxANkDhZsJ9QMzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJzM0N3eWFCdjJDeTNFQTJRT0Ztd24xQXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83ZWYyZWUtYzQwZC00YjIyLWExOGYt NTNmMjVkNDM2ZTJjLzEvZWJzM0N3eWFCdjJDeTNFQTJRT0Ztd24xQXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83ZWYyZWUtYzQwZC00YjIyLWExOGYtNTNmMjVkNDM2ZTJj LzEvZWJzM0N3eWFCdjJDeTNFQTJRT0Ztd24xQXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo86XXZit OpYm+ZvBYFPHBmZRXYmmY6k7hMn0tev9Bc9G+4W+p9KLZCGgP+9aG0BnCDBJzfhO qrkmdXc1ehh2+mPSA38kC0J8HKCLNRnerdPpiqzWVMxzqAKqcRW4p/C6XPwZGzhY UEZqkjTGQKTV6cKtGuP/ldpHAHGxsFIKmjcsxC/ZcNW/iJR/QJHmz/44n+IvDwtn KLrUDsiIhLgKWKHNZrRl7kqAUx24GzBPq+zsdpAcTu/0rK8ATf4M1RPNK7ymf/bc LB/MbQfarKAiJ2yWoqU2FTcLfRuNX3eZkxOeYJ2B7/c1ovkJmdbSL8stBxtZN8+j nnvFVf/lCidFaA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:44 2025 by rpki-client