This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft File: eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft (raw, json) Hash identifier: x5GeiPG2Qq3enV0vy5KqfDn9PZldgxOGrp5YzWUncwQ= Subject key identifier: 7A:DB:17:EB:D8:8E:6D:6F:EE:C3:FA:0D:8B:8F:38:9A:6D:F5:00:61 Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4 Certificate issuer: /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4 Certificate serial: 019AF12E36DEA62870C12CAE359D18EDE426 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft Manifest number: 06EB Signing time: Sat 06 Dec 2025 01:02:08 +0000 Manifest this update: Sat 06 Dec 2025 01:02:08 +0000 Manifest next update: Sun 07 Dec 2025 01:02:08 +0000 Files and hashes: 1: 1LjZlnRBJt_qRKMuzNTKcoTDPVg.roa (hash: uQEaVATrxncZCByVj7FOPBy+k/KEvq9+fzzZSw1GL2k=) 2: eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl (hash: ceCN1g/AQd6gV6dR5ynCEjYsptZhJac2KjIkmJKcNhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:36:de:a6:28:70:c1:2c:ae:35:9d:18:ed:e4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4 Validity Not Before: Dec 6 01:02:08 2025 GMT Not After : Dec 7 01:02:08 2025 GMT Subject: CN=7adb17ebd88e6d6feec3fa0d8b8f389a6df50061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:86:b7:28:b8:5e:93:37:c1:9e:61:5c:77:54: ef:a3:51:cd:e3:aa:b3:7a:42:a1:88:49:45:8a:bc: 92:5d:9d:be:ec:28:0e:d4:9e:e9:17:d2:3c:5d:c2: e9:5f:17:95:29:ab:21:ec:a3:76:1c:95:45:d1:42: 3b:68:12:cd:67:82:cb:8c:02:04:91:56:54:91:d9: 53:01:8f:60:fc:6e:0a:f1:02:68:0c:43:43:59:e4: 6f:9d:45:d3:e1:03:c5:a6:11:6d:0c:a2:42:fd:7f: e3:d9:f4:59:83:42:c9:2d:64:67:3e:19:2f:3b:1c: a4:b8:c1:01:c2:65:da:20:91:da:69:b9:9b:54:aa: f4:92:88:f4:2d:32:1d:cc:da:26:67:0c:25:9f:b9: 20:8a:6d:93:1e:5b:1f:33:d9:a4:bc:ce:37:8f:01: ea:e1:d7:1b:67:bf:ec:5e:b8:ca:db:be:1d:5d:57: 27:40:b9:33:19:75:0d:64:e9:5e:29:f6:42:26:cd: 83:90:b1:96:53:4f:e3:16:ec:ef:48:db:d4:3f:ad: fd:4f:08:40:1e:70:d9:b1:f2:7a:88:29:68:c8:04: df:9b:2a:5e:11:67:fb:2d:55:98:e1:ac:9f:4b:6d: 3c:9d:d7:92:c2:84:31:4c:86:b5:43:29:9a:82:34: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DB:17:EB:D8:8E:6D:6F:EE:C3:FA:0D:8B:8F:38:9A:6D:F5:00:61 X509v3 Authority Key Identifier: keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c2:d1:8b:04:f3:f5:5c:78:ed:a3:50:91:aa:eb:f1:13:f3: 88:53:e3:22:df:92:e5:55:a5:13:67:44:7d:75:98:f3:ec:73: 93:08:ea:f1:69:e6:09:e5:b9:6c:87:bb:47:37:97:5d:0e:6d: 16:1d:63:32:09:7b:87:d1:0b:be:a7:63:7d:a5:74:94:2e:a2: a4:d0:f2:c6:78:33:42:16:97:1e:b5:df:85:57:b3:0c:d3:81: f6:42:e1:5e:64:57:d3:bb:28:ee:ad:a5:42:e7:0e:5f:a7:5d: 49:9a:ac:12:f7:12:20:c5:55:f1:0c:63:b0:14:4d:02:79:d0: d2:a9:5a:2c:5c:df:b6:d2:42:18:52:b9:68:2d:d3:9a:97:20: 37:07:38:93:fb:84:97:98:20:e9:c2:43:c8:f6:0b:71:48:18: 0c:c4:34:dd:40:01:32:f2:1e:a0:ed:d8:39:8b:fb:d0:9c:3b: 12:79:51:46:02:0e:4f:e0:b0:eb:19:a5:0d:39:49:1e:fb:2d: 34:b2:0c:97:48:78:72:a6:2f:fd:80:c7:2a:28:e6:5c:db:5f: 18:4f:00:eb:fe:20:41:d0:5c:70:8d:5f:6c:51:5d:20:5b:3a: a3:c2:86:a5:d1:6d:6f:c9:78:23:2a:b7:61:25:70:4d:75:fb: a7:69:16:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjbepihwwSyuNZ0Y7eQmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmQ1MzcyZTFlMTlkMDViZWRhMzUzYmQ2YTE1YmRkMzky OTFmYTQwHhcNMjUxMjA2MDEwMjA4WhcNMjUxMjA3MDEwMjA4WjAzMTEwLwYDVQQD Eyg3YWRiMTdlYmQ4OGU2ZDZmZWVjM2ZhMGQ4YjhmMzg5YTZkZjUwMDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4a3KLhekzfBnmFcd1Tvo1HN46qz ekKhiElFirySXZ2+7CgO1J7pF9I8XcLpXxeVKash7KN2HJVF0UI7aBLNZ4LLjAIE kVZUkdlTAY9g/G4K8QJoDENDWeRvnUXT4QPFphFtDKJC/X/j2fRZg0LJLWRnPhkv OxykuMEBwmXaIJHaabmbVKr0koj0LTIdzNomZwwln7kgim2THlsfM9mkvM43jwHq 4dcbZ7/sXrjK274dXVcnQLkzGXUNZOleKfZCJs2DkLGWU0/jFuzvSNvUP639TwhA HnDZsfJ6iCloyATfmypeEWf7LVWY4ayfS208ndeSwoQxTIa1QymagjTIFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrbF+vYjm1v7sP6DYuPOJpt9QBhMB8GA1UdIwQY MBaAFHm9U3Lh4Z0Fvto1O9ahW905KR+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWIxVGN1SGhuUVctMmpVNzFxRmIzVGtwSDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYmUzNTAtNjlkYS00OTVkLTk2ZTIt YWJmYTgzZmNmZjY3LzEvZWIxVGN1SGhuUVctMmpVNzFxRmIzVGtwSDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9mYmUzNTAtNjlkYS00OTVkLTk2ZTItYWJmYTgzZmNmZjY3 LzEvZWIxVGN1SGhuUVctMmpVNzFxRmIzVGtwSDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMLRiwTz 9Vx47aNQkarr8RPziFPjIt+S5VWlE2dEfXWY8+xzkwjq8WnmCeW5bIe7RzeXXQ5t Fh1jMgl7h9ELvqdjfaV0lC6ipNDyxngzQhaXHrXfhVezDNOB9kLhXmRX07so7q2l QucOX6ddSZqsEvcSIMVV8QxjsBRNAnnQ0qlaLFzfttJCGFK5aC3TmpcgNwc4k/uE l5gg6cJDyPYLcUgYDMQ03UABMvIeoO3YOYv70Jw7EnlRRgIOT+Cw6xmlDTlJHvst NLIMl0h4cqYv/YDHKijmXNtfGE8A6/4gQdBccI1fbFFdIFs6o8KGpdFtb8l4Iyq3 YSVwTXX7p2kWgg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:43 2025 by rpki-client