This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft File: ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft (raw, json) Hash identifier: V4EK/4i1CqsPMx2XMCnxIoRzCCadYbx7BjSwxnoO74o= Subject key identifier: BA:40:C6:2F:42:F3:C4:6E:72:77:86:B7:6A:FC:AA:9E:CB:3B:AD:A9 Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A Certificate issuer: /CN=79bc498edc4189584874b7cb45025ef542481b6a Certificate serial: 019AF31B33D488FD99076485146CECE9A208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:00:37 +0000 Manifest this update: Sat 06 Dec 2025 10:00:37 +0000 Manifest next update: Sun 07 Dec 2025 10:00:37 +0000 Files and hashes: 1: ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa (hash: eH4HREDaejA4whIwpydNeuM6y5JIFXG0KP1gYkkghPQ=) 2: ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl (hash: 9DnUG0WrIz49DUb8TxESrdoiiL39D0M53c38QBQWPvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:33:d4:88:fd:99:07:64:85:14:6c:ec:e9:a2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a Validity Not Before: Dec 6 10:00:37 2025 GMT Not After : Dec 7 10:00:37 2025 GMT Subject: CN=ba40c62f42f3c46e727786b76afcaa9ecb3bada9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d0:49:55:ae:18:99:da:4f:bc:a3:cc:a4:74: 6a:37:37:a6:cd:61:37:9c:2c:2f:65:55:4d:6c:82: 02:90:ef:2f:f3:08:54:39:fa:48:bc:01:76:0e:07: 4c:49:82:b5:7c:aa:44:1c:44:8d:69:89:ea:31:f3: 37:cc:e7:33:f6:e3:f5:50:29:ea:e8:2f:ab:64:50: 2f:98:70:9b:f7:4d:67:f3:d5:49:40:a5:01:be:c7: ac:fd:03:69:8e:03:dc:aa:f2:e8:27:b4:60:ab:1b: 2f:7d:7b:c2:61:e3:16:e3:f8:10:b5:0a:54:32:15: d7:18:1e:7f:d4:43:3c:7b:be:ec:dc:c7:0c:03:fb: 0f:1e:12:fc:f7:a8:28:2f:de:c6:e7:44:bc:c4:de: bc:66:b5:80:ef:c0:5b:9f:e7:06:1e:1a:f0:d7:28: 2a:5c:0c:44:42:b8:c2:8e:1b:77:f4:0a:84:4d:dd: b2:32:08:d1:22:cc:70:c6:d2:0c:f0:44:48:ae:30: d3:bb:ef:1b:2f:3b:63:85:2b:c4:da:4d:9d:1c:3c: da:b3:0b:e3:9c:9b:13:c5:72:62:9f:0f:0b:9e:6f: 62:57:63:65:e2:ea:be:a2:fc:2f:1d:75:1a:c6:ea: 84:e3:35:d4:a5:2f:d4:b8:f9:c4:d5:a8:5c:15:af: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:40:C6:2F:42:F3:C4:6E:72:77:86:B7:6A:FC:AA:9E:CB:3B:AD:A9 X509v3 Authority Key Identifier: keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:70:32:c7:b2:67:27:e4:00:7b:f8:ff:d9:af:b7:0b:23:b2: d8:37:39:57:f5:66:cd:01:2b:b7:a8:e8:25:90:6b:66:b5:13: e5:b1:58:62:ae:67:1f:81:3b:1e:74:86:fd:af:f6:17:46:92: 34:f4:4b:11:f7:c9:0c:27:7e:32:d0:ee:a3:a6:87:b9:da:43: 5c:76:c4:0e:8f:5e:21:11:61:8e:ca:95:98:b6:55:e5:ca:b2: 35:a6:e1:c9:15:3d:ef:58:df:7a:c9:f3:81:ab:55:1b:5a:c4: 45:87:ab:8a:5c:fc:f9:97:ff:23:3c:17:80:7d:43:92:98:b9: 58:2b:3a:b1:8e:06:ff:5b:7e:a4:90:37:28:65:63:b3:97:a7: 8e:00:57:b7:10:19:49:89:c0:17:93:6a:30:6d:96:c6:c6:bc: 3a:08:b9:a9:99:45:0c:6e:02:e9:85:7a:a6:f1:fe:01:36:48: b3:71:c9:36:23:3b:19:45:5f:f3:04:6c:fe:f1:64:16:af:bd: b3:71:55:0b:d2:de:24:bf:46:6d:17:de:30:a7:55:e5:92:91: ad:f5:01:c0:7b:b5:be:bc:df:be:71:32:86:ae:f4:a1:e5:dd: f9:68:19:0f:06:41:7f:8d:1b:9c:77:2c:24:cc:88:d6:f3:f9: 27:c5:52:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzPUiP2ZB2SFFGzs6aIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmM0OThlZGM0MTg5NTg0ODc0YjdjYjQ1MDI1ZWY1NDI0 ODFiNmEwHhcNMjUxMjA2MTAwMDM3WhcNMjUxMjA3MTAwMDM3WjAzMTEwLwYDVQQD EyhiYTQwYzYyZjQyZjNjNDZlNzI3Nzg2Yjc2YWZjYWE5ZWNiM2JhZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59BJVa4YmdpPvKPMpHRqNzemzWE3 nCwvZVVNbIICkO8v8whUOfpIvAF2DgdMSYK1fKpEHESNaYnqMfM3zOcz9uP1UCnq 6C+rZFAvmHCb901n89VJQKUBvses/QNpjgPcqvLoJ7RgqxsvfXvCYeMW4/gQtQpU MhXXGB5/1EM8e77s3McMA/sPHhL896goL97G50S8xN68ZrWA78Bbn+cGHhrw1ygq XAxEQrjCjht39AqETd2yMgjRIsxwxtIM8ERIrjDTu+8bLztjhSvE2k2dHDzaswvj nJsTxXJinw8Lnm9iV2Nl4uq+ovwvHXUaxuqE4zXUpS/UuPnE1ahcFa+9kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpAxi9C88RucneGt2r8qp7LO62pMB8GA1UdIwQY MBaAFHm8SY7cQYlYSHS3y0UCXvVCSBtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Zjc4NGMtZDEyMS00MTdlLWJjZDIt ZTNiNDA2Yzc5ODBlLzEvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80Zjc4NGMtZDEyMS00MTdlLWJjZDItZTNiNDA2Yzc5ODBl LzEvZWJ4Smp0eEJpVmhJZExmTFJRSmU5VUpJRzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHAyx7Jn J+QAe/j/2a+3CyOy2Dc5V/VmzQErt6joJZBrZrUT5bFYYq5nH4E7HnSG/a/2F0aS NPRLEffJDCd+MtDuo6aHudpDXHbEDo9eIRFhjsqVmLZV5cqyNabhyRU971jfesnz gatVG1rERYerilz8+Zf/IzwXgH1Dkpi5WCs6sY4G/1t+pJA3KGVjs5enjgBXtxAZ SYnAF5NqMG2Wxsa8Ogi5qZlFDG4C6YV6pvH+ATZIs3HJNiM7GUVf8wRs/vFkFq+9 s3FVC9LeJL9GbRfeMKdV5ZKRrfUBwHu1vrzfvnEyhq70oeXd+WgZDwZBf40bnHcs JMyI1vP5J8VSHA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:58 2025 by rpki-client