This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft File: eybPzaOXFj2DXIl63qkHHmHIvE0.mft (raw, json) Hash identifier: KyOgndXs77rvHhaqkqeTNQczYKEc16Jz+RydvhmaRBc= Subject key identifier: 0C:08:98:80:D5:C8:D1:25:F5:50:FE:49:80:BC:7A:73:41:92:32:88 Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d Certificate serial: 019AF2AD742D6573EBB7170C16F8CD01250B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft Manifest number: 10CA Signing time: Sat 06 Dec 2025 08:00:44 +0000 Manifest this update: Sat 06 Dec 2025 08:00:44 +0000 Manifest next update: Sun 07 Dec 2025 08:00:44 +0000 Files and hashes: 1: 6b9XwBCGr1FOVry4-VB0C8bnI6M.roa (hash: nDxeXgpifBbGq1IXSj6MAvLAf7XxRAUJ6/Z7N+TkTpY=) 2: eybPzaOXFj2DXIl63qkHHmHIvE0.crl (hash: RnOk/pR7Zc+YKXpzCpbybfPeukTtsItmmn24bpg3o64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:74:2d:65:73:eb:b7:17:0c:16:f8:cd:01:25:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d Validity Not Before: Dec 6 08:00:44 2025 GMT Not After : Dec 7 08:00:44 2025 GMT Subject: CN=0c089880d5c8d125f550fe4980bc7a7341923288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:cd:73:d9:fc:e7:c3:70:03:f8:3a:a1:d1: f8:b7:3f:c2:a3:d4:63:5d:36:b2:e8:fc:ab:48:22: 6b:7f:e4:7b:43:e8:fe:75:98:8d:88:7f:a2:9b:5e: a3:d8:c2:3c:8f:ed:7d:9d:05:a6:8b:d6:06:f1:94: cd:96:47:2f:bb:05:6b:fa:d2:ec:2c:a6:42:f0:a7: a0:c5:f3:44:bc:a2:e7:ba:ae:0f:10:82:74:fa:92: 44:c4:51:04:16:f3:13:a0:f2:cd:46:44:81:d4:7a: 49:f5:f4:3e:20:fc:d4:86:9d:29:52:c7:b1:d4:3d: a1:2d:92:ad:6e:cf:8c:21:9c:79:b0:b1:ad:48:47: bb:05:60:92:6d:91:f7:69:cd:3b:e1:49:a5:e3:71: 41:e7:11:df:ba:b2:63:82:fd:b8:d4:0e:36:28:1c: 78:cb:72:fa:a1:16:42:d1:c5:29:e2:cb:c2:3c:a3: 2a:69:64:2c:d9:cc:cd:44:26:84:46:78:16:bc:85: ad:69:5f:a3:c6:c6:21:48:a1:fb:63:75:a0:df:da: c1:3c:59:5e:91:5d:65:7e:8f:46:12:f3:93:ce:68: d7:87:1b:05:d7:7d:06:a1:dc:06:af:f7:ac:84:d6: de:23:71:8b:1d:81:4a:fb:6e:69:aa:4f:f1:a5:a6: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:08:98:80:D5:C8:D1:25:F5:50:FE:49:80:BC:7A:73:41:92:32:88 X509v3 Authority Key Identifier: keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:44:5a:23:66:e0:01:5f:53:66:27:9b:84:64:6e:c5:4c:56: 19:49:c2:31:95:09:0b:f8:4a:c4:a4:33:d7:ba:cf:1a:12:cc: f8:08:57:65:47:92:21:0e:ce:75:43:2a:38:5a:ab:41:01:63: 90:3e:c1:3d:18:4f:59:0d:b5:51:31:78:cb:08:59:45:ab:f6: 23:fe:da:8d:da:55:36:1d:bb:cd:dc:f6:d1:6b:0c:71:45:17: 10:4b:d0:fc:16:59:15:e5:63:e8:da:13:02:f4:a7:f6:ee:32: d1:28:8f:d7:3f:4b:ee:14:86:7f:bb:23:8f:47:7a:05:3f:63: f0:2c:4c:47:46:96:e6:83:1e:5b:d6:f9:ce:c4:d4:e7:4e:7f: da:2e:57:cb:fa:3d:0a:68:1c:4a:14:48:85:4d:e8:83:fd:11: f9:8d:60:0f:99:eb:ef:88:8c:dc:5e:e9:ff:13:4f:6d:1f:77: 32:c7:17:8e:d3:c8:ec:0c:e0:44:cb:2d:38:05:ea:ba:94:51: 18:ad:91:08:07:48:e7:61:a7:c0:46:39:3a:3b:a6:d1:1b:ad: b9:c6:22:34:34:f0:b0:df:9a:49:c1:96:9e:c1:d6:38:34:06: 76:ed:bc:72:25:da:71:21:5b:41:b9:c4:7c:c8:3d:96:86:d6: d7:5e:f9:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXQtZXPrtxcMFvjNASULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjZjZmNkYTM5NzE2M2Q4MzVjODk3YWRlYTkwNzFlNjFj OGJjNGQwHhcNMjUxMjA2MDgwMDQ0WhcNMjUxMjA3MDgwMDQ0WjAzMTEwLwYDVQQD EygwYzA4OTg4MGQ1YzhkMTI1ZjU1MGZlNDk4MGJjN2E3MzQxOTIzMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhPNc9n858NwA/g6odH4tz/Co9Rj XTay6PyrSCJrf+R7Q+j+dZiNiH+im16j2MI8j+19nQWmi9YG8ZTNlkcvuwVr+tLs LKZC8KegxfNEvKLnuq4PEIJ0+pJExFEEFvMToPLNRkSB1HpJ9fQ+IPzUhp0pUsex 1D2hLZKtbs+MIZx5sLGtSEe7BWCSbZH3ac074Uml43FB5xHfurJjgv241A42KBx4 y3L6oRZC0cUp4svCPKMqaWQs2czNRCaERngWvIWtaV+jxsYhSKH7Y3Wg39rBPFle kV1lfo9GEvOTzmjXhxsF130GodwGr/eshNbeI3GLHYFK+25pqk/xpaYh/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwImIDVyNEl9VD+SYC8enNBkjKIMB8GA1UdIwQY MBaAFHsmz82jlxY9g1yJet6pBx5hyLxNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEt NmNkNTFjODRjMDE1LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84OTc1N2EtOTExYS00MWI3LWJhZDEtNmNkNTFjODRjMDE1 LzEvZXliUHphT1hGajJEWElsNjNxa0hIbUhJdkUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkRaI2bg AV9TZiebhGRuxUxWGUnCMZUJC/hKxKQz17rPGhLM+AhXZUeSIQ7OdUMqOFqrQQFj kD7BPRhPWQ21UTF4ywhZRav2I/7ajdpVNh27zdz20WsMcUUXEEvQ/BZZFeVj6NoT AvSn9u4y0SiP1z9L7hSGf7sjj0d6BT9j8CxMR0aW5oMeW9b5zsTU505/2i5Xy/o9 CmgcShRIhU3og/0R+Y1gD5nr74iM3F7p/xNPbR93MscXjtPI7AzgRMstOAXqupRR GK2RCAdI52GnwEY5Ojum0RutucYiNDTwsN+aScGWnsHWODQGdu28ciXacSFbQbnE fMg9lobW1175fA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:49 2025 by rpki-client