This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft File: ebBozkt45F5gxswUavYHsI-EPfw.mft (raw, json) Hash identifier: fcCwsCEIy0F9nlX75tyho3v6Et9okygW3oGH5mqOMk4= Subject key identifier: 28:5D:8B:A6:E9:E8:A5:4E:E9:7B:E7:13:1A:42:8D:FC:5C:FB:85:AD Authority key identifier: 79:B0:68:CE:4B:78:E4:5E:60:C6:CC:14:6A:F6:07:B0:8F:84:3D:FC Certificate issuer: /CN=79b068ce4b78e45e60c6cc146af607b08f843dfc Certificate serial: 019AF23F8B7F2E4849BDEFE3208B7C446229 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebBozkt45F5gxswUavYHsI-EPfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft Manifest number: 41 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: ebBozkt45F5gxswUavYHsI-EPfw.crl (hash: Kmv4a9s6pEN6vmlM98YChpyI8XXjaSDpfm1pNrflbhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft rsync://rpki.ripe.net/repository/DEFAULT/ebBozkt45F5gxswUavYHsI-EPfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8b:7f:2e:48:49:bd:ef:e3:20:8b:7c:44:62:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b068ce4b78e45e60c6cc146af607b08f843dfc Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=285d8ba6e9e8a54ee97be7131a428dfc5cfb85ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:3c:3b:67:60:0d:c7:63:02:89:86:48:63: 44:c0:ee:58:0f:b0:73:d2:8c:d5:b7:08:81:bb:6d: ed:74:33:6d:b9:c0:e8:b5:0d:7d:fd:d1:50:73:3d: 58:67:ba:f8:e0:37:91:12:60:a9:7e:c7:cd:69:63: b0:2d:9e:e4:dd:9c:8d:be:fc:dc:29:2d:2c:1a:d3: 48:e2:c0:fa:15:0c:1f:9b:95:43:ab:ea:bf:61:70: 34:96:24:65:3c:20:05:9b:bf:42:5b:35:f7:16:ca: 78:70:a5:a8:77:50:5a:01:bc:14:4e:8a:0f:98:53: cb:ec:19:95:2f:c8:b5:af:81:09:52:51:cd:bc:46: aa:63:b6:f5:a4:fc:cd:94:18:ce:10:70:e5:34:c9: a7:a5:49:93:07:ed:db:d3:09:bd:4e:4a:68:7c:68: 47:02:19:da:bd:6a:e9:c9:4c:33:1b:90:26:91:93: 69:51:be:09:60:6a:0f:a9:e4:62:ec:0b:a9:d7:88: b8:ab:98:0f:a4:4a:af:b0:03:b3:01:1d:69:c8:87: f5:8f:18:e7:67:a5:ea:d9:af:b9:c4:d4:0e:25:a1: 66:e9:a7:a8:56:dd:b2:cc:d3:dd:de:d0:5d:bf:b6: 02:ba:f4:0a:8a:1d:74:91:af:75:5d:b4:60:b7:73: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5D:8B:A6:E9:E8:A5:4E:E9:7B:E7:13:1A:42:8D:FC:5C:FB:85:AD X509v3 Authority Key Identifier: keyid:79:B0:68:CE:4B:78:E4:5E:60:C6:CC:14:6A:F6:07:B0:8F:84:3D:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebBozkt45F5gxswUavYHsI-EPfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d7ee4e-ac28-4216-b3b8-98debe403320/1/ebBozkt45F5gxswUavYHsI-EPfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:1b:7f:aa:60:c2:6b:36:c9:03:aa:2a:88:2b:00:c8:c4:1f: d2:32:85:68:d9:c5:41:e9:ac:84:fa:ad:4a:aa:05:c8:0a:9b: 3c:1c:9e:ad:99:00:d2:33:a0:42:dc:18:f0:20:d7:a5:91:9a: 9b:f7:61:22:8a:2f:c4:97:d8:50:59:e9:b0:4a:50:5c:f5:bb: bc:5a:ac:f3:2f:9a:29:14:37:93:9c:9c:fd:4f:5b:06:b0:53: ca:87:6f:da:81:9d:7f:2f:b9:51:33:16:d8:73:79:dd:69:e7: 62:18:ed:a8:71:16:2f:0e:3b:2b:fd:92:35:75:85:0b:5c:99: 1d:b9:35:fd:58:b8:76:c3:cf:a8:3c:b8:9f:67:2d:76:c7:34: 30:ec:30:af:58:fc:54:cb:6c:8b:eb:10:cb:89:c2:3f:88:d2: ad:00:b0:32:05:2b:51:5e:35:2f:42:2f:9f:e0:44:f6:df:60: 8f:6a:95:e9:7f:a2:a1:c3:db:59:02:bc:c4:8d:31:fe:16:c9: 60:90:63:7c:8a:c9:92:f8:db:83:e5:d7:38:27:3a:84:2e:2f: 2f:b4:8f:80:38:ce:fc:58:7a:52:73:c4:0b:9e:0f:ce:3b:00: f0:ba:47:00:0c:2e:d5:71:2f:5c:ca:34:85:26:2c:99:f4:96: 0b:f9:63:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4t/LkhJve/jIIt8RGIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YjA2OGNlNGI3OGU0NWU2MGM2Y2MxNDZhZjYwN2IwOGY4 NDNkZmMwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD EygyODVkOGJhNmU5ZThhNTRlZTk3YmU3MTMxYTQyOGRmYzVjZmI4NWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRE8O2dgDcdjAomGSGNEwO5YD7Bz 0ozVtwiBu23tdDNtucDotQ19/dFQcz1YZ7r44DeREmCpfsfNaWOwLZ7k3ZyNvvzc KS0sGtNI4sD6FQwfm5VDq+q/YXA0liRlPCAFm79CWzX3Fsp4cKWod1BaAbwUTooP mFPL7BmVL8i1r4EJUlHNvEaqY7b1pPzNlBjOEHDlNMmnpUmTB+3b0wm9TkpofGhH AhnavWrpyUwzG5AmkZNpUb4JYGoPqeRi7Aup14i4q5gPpEqvsAOzAR1pyIf1jxjn Z6Xq2a+5xNQOJaFm6aeoVt2yzNPd3tBdv7YCuvQKih10ka91XbRgt3O/4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChdi6bp6KVO6XvnExpCjfxc+4WtMB8GA1UdIwQY MBaAFHmwaM5LeOReYMbMFGr2B7CPhD38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJCb3prdDQ1RjVneHN3VWF2WUhzSS1FUGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kN2VlNGUtYWMyOC00MjE2LWIzYjgt OThkZWJlNDAzMzIwLzEvZWJCb3prdDQ1RjVneHN3VWF2WUhzSS1FUGZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kN2VlNGUtYWMyOC00MjE2LWIzYjgtOThkZWJlNDAzMzIw LzEvZWJCb3prdDQ1RjVneHN3VWF2WUhzSS1FUGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlht/qmDC azbJA6oqiCsAyMQf0jKFaNnFQemshPqtSqoFyAqbPByerZkA0jOgQtwY8CDXpZGa m/dhIoovxJfYUFnpsEpQXPW7vFqs8y+aKRQ3k5yc/U9bBrBTyodv2oGdfy+5UTMW 2HN53WnnYhjtqHEWLw47K/2SNXWFC1yZHbk1/Vi4dsPPqDy4n2ctdsc0MOwwr1j8 VMtsi+sQy4nCP4jSrQCwMgUrUV41L0Ivn+BE9t9gj2qV6X+iocPbWQK8xI0x/hbJ YJBjfIrJkvjbg+XXOCc6hC4vL7SPgDjO/Fh6UnPEC54PzjsA8LpHAAwu1XEvXMo0 hSYsmfSWC/ljRg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:16 2025 by rpki-client