This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft File: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json) Hash identifier: U3m4t1UIajTtCgmpS7M6o3XJWVXFnwez4UkDucTOFFY= Subject key identifier: 2C:DC:6E:01:5C:79:7E:61:90:10:EC:FF:8A:BE:28:B7:F3:C1:3B:C2 Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF Certificate issuer: /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff Certificate serial: 019B2D78B9FD7C6E6769BB9797D9690F4168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft Manifest number: 0F8E Signing time: Wed 17 Dec 2025 18:00:45 +0000 Manifest this update: Wed 17 Dec 2025 18:00:45 +0000 Manifest next update: Thu 18 Dec 2025 18:00:45 +0000 Files and hashes: 1: Z7fNj1YJ8aSn3r_MEyl5vIDYUPE.roa (hash: WsvnlIuXrT6wZCrahcudQBBAK43k6FKEOxnr2kwJ0Ew=) 2: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: o6sGgWbtMXPkXmZrWao6x7v48ruvrahcMlnOSUOT6xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:b9:fd:7c:6e:67:69:bb:97:97:d9:69:0f:41:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff Validity Not Before: Dec 17 18:00:45 2025 GMT Not After : Dec 18 18:00:45 2025 GMT Subject: CN=2cdc6e015c797e619010ecff8abe28b7f3c13bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:75:b2:9f:70:06:c0:b7:ff:28:7a:11:93: 6e:a1:4e:2e:df:4f:08:e8:2f:e5:ee:d4:53:32:83: 96:93:e9:8e:07:8c:88:40:cd:71:b8:cd:e5:55:14: 6a:32:2c:a9:e9:ad:8f:76:fc:18:75:61:4f:79:ce: 94:51:b5:1a:ae:b8:63:7d:ee:6b:5b:2f:57:0c:7e: a3:f8:95:61:01:6b:44:8e:4f:59:f9:6a:d4:83:1a: ea:52:35:da:d4:54:53:92:2c:e3:66:81:5f:1c:98: d0:2d:cb:d7:74:41:61:69:70:8a:4d:56:9f:55:68: a2:e6:cc:7f:55:04:fb:6d:d3:21:24:22:04:96:30: 6b:16:49:fa:22:79:19:c0:fe:bc:56:c4:83:ce:f4: bc:27:b1:82:d9:95:8c:c9:d8:f9:90:da:40:30:36: a8:2a:3a:fe:c4:22:ea:0d:af:96:bc:6e:d6:2a:c9: 1b:b8:90:b1:d7:7b:8f:02:0c:fb:42:e4:d3:b2:d1: a7:a8:1e:c2:59:cc:d2:a3:1a:f6:87:65:e3:73:50: c8:5f:e0:d2:a6:11:2e:cc:24:9a:82:99:50:3f:27: e4:03:1e:ac:79:ee:60:12:a8:33:3d:a2:fa:22:ad: 91:50:38:09:25:c9:29:ba:c4:fb:b5:06:c5:8e:5c: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DC:6E:01:5C:79:7E:61:90:10:EC:FF:8A:BE:28:B7:F3:C1:3B:C2 X509v3 Authority Key Identifier: keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:33:17:23:28:32:b4:df:09:8f:f3:00:5b:f0:e2:d4:b2:61: b7:6f:f8:d4:51:82:0f:08:87:d9:fc:d6:0a:2d:b9:17:87:02: 4d:8e:ce:96:a0:ec:1c:41:c4:8d:37:8e:31:b5:ad:1b:08:02: 9c:75:43:95:8a:e5:e8:f2:0a:c4:2b:e8:99:e6:4a:b6:7c:5c: 4b:34:f4:c7:cf:98:05:0f:c9:bf:c5:55:db:1b:88:4e:a7:7f: 88:f0:de:05:1b:51:9e:16:d3:20:54:ef:c9:7e:64:bb:19:91: 30:e9:2f:c6:67:f2:aa:cf:17:ea:d1:e5:ed:c5:e4:8f:2d:bc: 88:85:be:98:90:b0:89:a1:69:7f:65:b6:fa:f4:90:de:d7:ae: 82:c6:55:9a:3e:98:c4:d5:7c:7a:77:c8:e5:b2:bf:4b:be:9e: b6:40:c9:da:9a:da:d3:15:dd:5a:26:c8:5e:55:c7:cc:af:44: 7e:b2:9a:48:c9:a4:88:2e:48:e1:a0:c9:fa:df:ec:0c:4e:19: e3:97:b9:76:6b:b2:0c:3d:ee:85:70:57:ff:e3:e0:3e:3e:f0: e0:0a:da:0d:cd:7a:b7:2b:e6:a6:b4:ab:9f:e8:53:8c:3b:04: 1c:c8:24:9a:95:8e:7f:dd:41:94:52:81:3f:70:65:7a:06:dd: 3e:41:f7:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteLn9fG5nabuXl9lpD0FoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YjZjZWFjNWQ0MmE2MzdmMzZiYTFlM2ZkYWU5MGFkNWZl ZTJjZmYwHhcNMjUxMjE3MTgwMDQ1WhcNMjUxMjE4MTgwMDQ1WjAzMTEwLwYDVQQD EygyY2RjNmUwMTVjNzk3ZTYxOTAxMGVjZmY4YWJlMjhiN2YzYzEzYmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApih1sp9wBsC3/yh6EZNuoU4u308I 6C/l7tRTMoOWk+mOB4yIQM1xuM3lVRRqMiyp6a2PdvwYdWFPec6UUbUarrhjfe5r Wy9XDH6j+JVhAWtEjk9Z+WrUgxrqUjXa1FRTkizjZoFfHJjQLcvXdEFhaXCKTVaf VWii5sx/VQT7bdMhJCIEljBrFkn6InkZwP68VsSDzvS8J7GC2ZWMydj5kNpAMDao Kjr+xCLqDa+WvG7WKskbuJCx13uPAgz7QuTTstGnqB7CWczSoxr2h2Xjc1DIX+DS phEuzCSagplQPyfkAx6see5gEqgzPaL6Iq2RUDgJJckpusT7tQbFjlwhawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzcbgFceX5hkBDs/4q+KLfzwTvCMB8GA1UdIwQY MBaAFHm2zqxdQqY382uh4/2ukK1f7iz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAt NGZlM2Y2MTExMGRlLzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAtNGZlM2Y2MTExMGRl LzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjMXIygy tN8Jj/MAW/Di1LJht2/41FGCDwiH2fzWCi25F4cCTY7OlqDsHEHEjTeOMbWtGwgC nHVDlYrl6PIKxCvomeZKtnxcSzT0x8+YBQ/Jv8VV2xuITqd/iPDeBRtRnhbTIFTv yX5kuxmRMOkvxmfyqs8X6tHl7cXkjy28iIW+mJCwiaFpf2W2+vSQ3teugsZVmj6Y xNV8enfI5bK/S76etkDJ2pra0xXdWibIXlXHzK9EfrKaSMmkiC5I4aDJ+t/sDE4Z 45e5dmuyDD3uhXBX/+PgPj7w4AraDc16tyvmprSrn+hTjDsEHMgkmpWOf91BlFKB P3BlegbdPkH3xg== -----END CERTIFICATE-----Generated at Wed Dec 17 20:49:20 2025 by rpki-client