This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft File: EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json) Hash identifier: uE9MDOuu0PWaRd9dYKGZcR1iX+POX8WXJvOuO7s8idY= Subject key identifier: 1F:A1:AB:C7:AF:58:A7:76:49:21:E2:A7:3A:05:CB:F2:5E:53:D7:36 Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82 Certificate issuer: /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882 Certificate serial: 019B3AC6D29B8F3DFBC74D876B10906AFD1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft Manifest number: 0215 Signing time: Sat 20 Dec 2025 08:01:07 +0000 Manifest this update: Sat 20 Dec 2025 08:01:07 +0000 Manifest next update: Sun 21 Dec 2025 08:01:07 +0000 Files and hashes: 1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: /7Legi2yUkkyJId3hXfi6j3ff/JEM6DbAQcDQ1dCmOY=) 2: vGF2KAvK3aprRRdgwH5KABdGMAU.roa (hash: RXv+kUD5G+c5aahHL6+Y+Di5kkYa37mIJ1HvrhSMRbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:d2:9b:8f:3d:fb:c7:4d:87:6b:10:90:6a:fd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882 Validity Not Before: Dec 20 08:01:07 2025 GMT Not After : Dec 21 08:01:07 2025 GMT Subject: CN=1fa1abc7af58a7764921e2a73a05cbf25e53d736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bf:ae:99:ff:31:db:4b:73:48:40:5d:d8:0d: 6a:61:d8:5f:23:62:c8:b6:b1:a2:87:98:67:71:85: 67:ed:52:1f:ac:70:ff:26:9e:5e:24:2c:4b:d7:e4: 37:b5:bb:9b:55:bd:ca:60:72:76:22:4d:c5:6e:2a: 32:f0:08:10:70:05:a8:ef:b8:d0:e4:99:d9:8d:1d: fe:9d:ff:96:6c:74:86:7a:11:6a:f9:b8:5c:1e:72: 66:97:99:ed:75:38:87:e1:cd:11:66:7f:e6:32:bf: f0:73:60:10:90:3b:96:af:15:d0:91:5a:57:37:b9: 00:b1:8f:b1:5d:9c:da:54:fb:72:b7:98:ec:c7:c2: eb:8f:5b:e6:eb:eb:84:b3:c3:fe:2d:b4:40:72:37: ee:d1:ec:b0:83:fb:a7:e0:90:e9:c4:22:7f:6c:b6: 59:19:58:95:b8:f0:53:81:3e:e0:cc:f0:73:99:bb: 77:d5:40:5e:9c:7f:fd:15:64:17:7e:64:da:e6:1b: f5:d3:a5:a6:64:1d:63:ea:59:a9:a9:f1:df:94:83: 87:a4:c4:96:82:21:59:8d:95:02:2e:be:59:74:8e: 3e:4e:67:03:e9:d4:fc:a5:59:7e:31:58:99:90:8d: 2d:07:3b:54:d7:d4:73:84:98:49:9c:4a:41:a3:3d: 40:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A1:AB:C7:AF:58:A7:76:49:21:E2:A7:3A:05:CB:F2:5E:53:D7:36 X509v3 Authority Key Identifier: keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0d:dc:db:c3:ba:f2:40:9a:c8:30:6d:2a:d5:a1:4c:40:c9: bc:9f:35:ff:ae:a9:8e:be:dd:95:70:6f:80:18:bc:8f:45:fe: 96:1d:e1:aa:6a:b2:83:8d:02:e0:be:9a:51:b7:95:15:b7:52: 83:b4:88:85:22:2d:a7:7b:b3:ab:dc:c3:da:39:20:c1:f6:2b: 9d:26:48:54:59:fb:10:de:de:80:ff:83:73:cf:6f:e8:3f:5d: d8:fd:1c:2f:06:98:32:9d:77:2a:74:3c:88:37:e1:54:95:06: 75:fb:aa:78:c8:86:e3:3a:ec:3b:b3:9e:bc:23:55:39:7c:28: 29:6f:86:fd:5e:6f:81:e6:25:02:28:cb:a3:f5:40:ba:2a:87: a4:05:37:f5:ca:2c:7a:48:7a:d0:89:c4:27:00:16:86:c5:7f: 8d:2e:28:87:52:a7:71:13:cd:16:9c:49:b4:95:35:98:1f:78: 3b:a1:2b:38:6a:81:a0:73:7b:12:2a:d6:a0:a2:c2:6b:5a:d0: 2b:b2:ff:b4:2a:f2:2f:41:8f:bf:2e:8c:ff:bb:83:19:cc:c1: eb:f9:79:03:e3:c4:fa:2a:2a:c2:04:e3:19:af:09:7e:ca:3d: c9:39:6b:95:1d:5e:09:67:1d:ac:27:ce:27:d9:5f:ec:6d:9b: a8:3a:f4:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xtKbjz37x02HaxCQav0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjA0OGFhZjViYjQyZjZjNGQ5ZDM4N2FkMjdhN2ViMjE5 ZjM4ODIwHhcNMjUxMjIwMDgwMTA3WhcNMjUxMjIxMDgwMTA3WjAzMTEwLwYDVQQD EygxZmExYWJjN2FmNThhNzc2NDkyMWUyYTczYTA1Y2JmMjVlNTNkNzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb+umf8x20tzSEBd2A1qYdhfI2LI trGih5hncYVn7VIfrHD/Jp5eJCxL1+Q3tbubVb3KYHJ2Ik3Fbioy8AgQcAWo77jQ 5JnZjR3+nf+WbHSGehFq+bhcHnJml5ntdTiH4c0RZn/mMr/wc2AQkDuWrxXQkVpX N7kAsY+xXZzaVPtyt5jsx8Lrj1vm6+uEs8P+LbRAcjfu0eywg/un4JDpxCJ/bLZZ GViVuPBTgT7gzPBzmbt31UBenH/9FWQXfmTa5hv106WmZB1j6lmpqfHflIOHpMSW giFZjZUCLr5ZdI4+TmcD6dT8pVl+MViZkI0tBztU19RzhJhJnEpBoz1APQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+hq8evWKd2SSHipzoFy/JeU9c2MB8GA1UdIwQY MBaAFBGwSKr1u0L2xNnTh60np+shnziCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83YmU5YjItMmUxOS00ZmUwLWIxN2Et NWNmM2U3NmExZWJjLzEvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS83YmU5YjItMmUxOS00ZmUwLWIxN2EtNWNmM2U3NmExZWJj LzEvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbw3c28O6 8kCayDBtKtWhTEDJvJ81/66pjr7dlXBvgBi8j0X+lh3hqmqyg40C4L6aUbeVFbdS g7SIhSItp3uzq9zD2jkgwfYrnSZIVFn7EN7egP+Dc89v6D9d2P0cLwaYMp13KnQ8 iDfhVJUGdfuqeMiG4zrsO7OevCNVOXwoKW+G/V5vgeYlAijLo/VAuiqHpAU39cos ekh60InEJwAWhsV/jS4oh1KncRPNFpxJtJU1mB94O6ErOGqBoHN7EirWoKLCa1rQ K7L/tCryL0GPvy6M/7uDGczB6/l5A+PE+ioqwgTjGa8Jfso9yTlrlR1eCWcdrCfO J9lf7G2bqDr0lQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:41:44 2025 by rpki-client