This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft File: ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json) Hash identifier: 7edm95gTX5+nzDhCUTQ1rcy1dk8fNMxqpnF/kroc3R8= Subject key identifier: AE:BE:99:6D:FE:6C:1B:B3:7E:B4:3A:C6:ED:46:A7:BE:F4:3D:87:52 Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0 Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0 Certificate serial: 019B5908268EE519683526BEF065629CFCEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft Manifest number: 17AE Signing time: Fri 26 Dec 2025 05:01:04 +0000 Manifest this update: Fri 26 Dec 2025 05:01:04 +0000 Manifest next update: Sat 27 Dec 2025 05:01:04 +0000 Files and hashes: 1: L1ShoUFH_3QzKX_ke8HAX0Fww6c.roa (hash: FUc2MDD+4o/7JlgpFpcB29tfev/YxELBDTuLaAO672I=) 2: ZrX8NZOF_lteMSM3oZka22ZVn3E.roa (hash: cAb9eZ4FePRwUO0ACpP0sUggRm8S5e53qPUlHsPvg2Q=) 3: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: jpMqKoW+9xv6TFtAShjTrCGxg9Jq8SogWXs7hpfv9sQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:26:8e:e5:19:68:35:26:be:f0:65:62:9c:fc:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0 Validity Not Before: Dec 26 05:01:04 2025 GMT Not After : Dec 27 05:01:04 2025 GMT Subject: CN=aebe996dfe6c1bb37eb43ac6ed46a7bef43d8752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:e3:bc:2b:16:59:02:6f:6a:c8:54:2b:7f: e3:04:21:e1:2d:00:cb:42:f2:2e:e9:09:41:18:8c: f1:0a:3d:2f:29:42:aa:13:63:33:27:6e:95:3f:4f: e5:5a:4d:0a:09:13:ea:3f:e3:24:d7:1e:77:bd:3a: 8e:a7:d7:0b:28:31:f7:6b:4d:b8:da:f7:dc:75:df: ff:df:32:42:22:9d:54:50:72:64:38:91:a8:c6:20: 13:47:dc:93:5a:a4:99:39:7b:9c:8f:6d:07:4a:9e: fa:6a:ec:93:10:dc:88:27:6e:7c:1c:7b:c9:bc:6c: 30:aa:6f:00:f8:4a:d1:1d:15:90:1c:e1:7c:51:e5: 46:7c:5c:52:dc:ef:4f:cb:de:40:e7:01:8a:1d:e0: 05:ed:28:3b:82:7a:4d:ef:42:a8:b5:31:8a:95:27: ed:8b:06:58:11:7d:a2:42:04:6e:b2:1a:fd:23:e0: fe:27:4f:39:69:40:a4:e1:15:18:d8:02:61:8a:03: a4:9a:55:52:97:86:23:54:ba:e8:d7:9e:e5:89:bd: 38:c9:f0:e4:73:d1:cd:58:12:01:b1:11:50:85:c7: fc:7f:b2:99:c4:95:8e:2c:c6:c4:6e:66:09:ab:00: 7f:25:29:a8:ce:a1:58:34:e6:3e:77:b4:6e:d0:a1: bc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BE:99:6D:FE:6C:1B:B3:7E:B4:3A:C6:ED:46:A7:BE:F4:3D:87:52 X509v3 Authority Key Identifier: keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:0e:73:93:a2:4b:46:f8:38:45:3e:20:6a:ec:d3:7d:42:eb: 5e:72:ff:87:e3:2f:b0:78:20:6b:bd:07:7d:c7:94:60:9b:49: d9:c8:81:5e:e4:c8:73:53:0c:df:19:2b:6d:72:a3:4b:a9:65: 81:28:8a:a2:6f:ce:56:00:b1:25:9e:c2:41:86:25:bb:cc:68: 68:fb:73:d0:e0:02:a1:d3:74:91:85:ca:92:6b:98:f8:c8:fc: 76:f8:78:3d:28:1c:c3:da:15:5c:02:3e:fe:02:df:a6:6a:50: 13:d4:0b:91:d0:f2:c8:14:d3:6e:f9:36:68:08:d8:dd:bd:8e: 2a:9a:f7:a0:05:42:45:55:6c:d5:a2:20:f3:a4:73:65:f6:da: 5b:6d:e9:5b:40:b8:35:33:fe:49:ce:0c:54:3a:83:22:22:2c: 25:ba:18:9c:d7:67:a6:3f:c1:b4:a3:2c:07:dd:0b:71:6c:a7: 5f:1d:86:5c:39:4b:8d:df:38:1e:f1:10:81:71:83:09:63:87: 9a:b5:b4:cf:8d:e3:fd:6b:74:19:ac:de:06:b7:35:2d:a7:66: 02:0d:ef:95:e9:f4:79:3c:e4:78:bb:00:bd:72:e2:8a:93:0b: 7d:44:50:32:7d:f7:89:13:13:db:ec:1c:6b:71:9a:fc:98:09: 5d:a4:10:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCCaO5RloNSa+8GVinPzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3 MzJlZTAwHhcNMjUxMjI2MDUwMTA0WhcNMjUxMjI3MDUwMTA0WjAzMTEwLwYDVQQD EyhhZWJlOTk2ZGZlNmMxYmIzN2ViNDNhYzZlZDQ2YTdiZWY0M2Q4NzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjazjvCsWWQJvashUK3/jBCHhLQDL QvIu6QlBGIzxCj0vKUKqE2MzJ26VP0/lWk0KCRPqP+Mk1x53vTqOp9cLKDH3a024 2vfcdd//3zJCIp1UUHJkOJGoxiATR9yTWqSZOXucj20HSp76auyTENyIJ258HHvJ vGwwqm8A+ErRHRWQHOF8UeVGfFxS3O9Py95A5wGKHeAF7Sg7gnpN70KotTGKlSft iwZYEX2iQgRushr9I+D+J085aUCk4RUY2AJhigOkmlVSl4YjVLro157lib04yfDk c9HNWBIBsRFQhcf8f7KZxJWOLMbEbmYJqwB/JSmozqFYNOY+d7Ru0KG8XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6+mW3+bBuzfrQ6xu1Gp770PYdSMB8GA1UdIwQY MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt Y2VjMjJlYTc5NTEzLzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArg5zk6JL Rvg4RT4gauzTfULrXnL/h+MvsHgga70HfceUYJtJ2ciBXuTIc1MM3xkrbXKjS6ll gSiKom/OVgCxJZ7CQYYlu8xoaPtz0OACodN0kYXKkmuY+Mj8dvh4PSgcw9oVXAI+ /gLfpmpQE9QLkdDyyBTTbvk2aAjY3b2OKpr3oAVCRVVs1aIg86RzZfbaW23pW0C4 NTP+Sc4MVDqDIiIsJboYnNdnpj/BtKMsB90LcWynXx2GXDlLjd84HvEQgXGDCWOH mrW0z43j/Wt0GazeBrc1LadmAg3vlen0eTzkeLsAvXLiipMLfURQMn33iRMT2+wc a3Ga/JgJXaQQqA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:17 2025 by rpki-client