This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json) Hash identifier: yPw3caW+r2apnUaB23dtj2r298/pmNMF6BR8Ae/ZOuU= Subject key identifier: BC:3B:A9:71:18:0C:61:32:22:28:1C:B3:7B:19:FA:30:7D:6D:F3:E2 Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba Certificate serial: 019BF3F59E4AE601FEF87FEB449416A04204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft Manifest number: 1779 Signing time: Sun 25 Jan 2026 07:01:58 +0000 Manifest this update: Sun 25 Jan 2026 07:01:58 +0000 Manifest next update: Mon 26 Jan 2026 07:01:58 +0000 Files and hashes: 1: 1-77MLKbMDtDiajP4cnfRaQ3miEM.roa (hash: uR4xAscZt2UY723RU9mF1OjyVpc+mJ5l3PG1PYSxgqc=) 2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: niku/C56FtbGVf5oiiZrdiMGjuIv6IFgwkZnTVQzcIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:9e:4a:e6:01:fe:f8:7f:eb:44:94:16:a0:42:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba Validity Not Before: Jan 25 07:01:58 2026 GMT Not After : Jan 26 07:01:58 2026 GMT Subject: CN=bc3ba971180c613222281cb37b19fa307d6df3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:ee:cd:0e:98:e2:10:d7:9c:94:f3:8a:c6: 3b:39:e4:a1:d7:ea:31:d3:d2:9a:80:da:17:7a:9b: 9f:87:f4:e2:3d:07:f1:6a:02:18:4f:d2:d7:27:2a: 19:b3:72:6a:80:95:6b:84:d9:f9:99:47:16:50:ce: be:9f:e4:b4:c6:cd:50:33:d1:94:90:1b:08:f7:11: 2e:76:7f:0b:83:0b:2c:96:b0:ef:42:7f:3f:e0:e6: a7:19:62:ed:ca:80:4a:ca:92:57:00:f0:d1:45:b5: 56:d1:9a:b6:86:68:73:3c:b0:ed:ae:c2:18:f9:87: d2:94:9b:91:88:1c:a9:a5:e1:64:1b:93:81:dd:49: f8:95:7f:b7:62:78:7a:3e:b6:37:98:c3:80:d4:8b: 14:ba:59:d4:3d:cf:f2:73:67:45:aa:f8:8e:21:a7: 62:64:3b:e7:d1:77:15:7e:ae:cd:4e:28:2f:fb:b7: 4a:cb:df:e7:88:0f:96:58:8f:d6:a5:56:75:45:c5: f9:34:68:83:58:ac:f2:f6:62:9d:0d:46:ec:b4:e7: 9f:f9:35:dc:b4:49:38:1e:ee:49:42:35:25:ab:fa: 29:35:d4:24:e1:c4:f7:35:49:54:dc:6a:93:33:10: eb:db:96:e0:d0:2e:c8:b6:53:34:b8:8a:7d:58:cf: 2c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3B:A9:71:18:0C:61:32:22:28:1C:B3:7B:19:FA:30:7D:6D:F3:E2 X509v3 Authority Key Identifier: keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:20:f7:d0:45:58:f8:d4:d4:bf:39:3c:ed:7f:61:f5:71:a9: 16:25:ad:63:38:92:eb:ba:3c:54:30:4c:06:88:4a:01:ed:30: 4d:0f:b4:13:68:71:e4:b4:23:50:c5:8b:2e:de:3c:51:bc:21: f0:f5:c3:aa:f2:8b:6d:c4:e8:ee:12:06:e5:d1:05:26:48:56: 2a:d7:30:a6:78:d9:bd:43:a3:78:07:bf:f8:63:13:99:82:7c: d7:7e:cd:a0:9c:e5:bd:71:4b:db:1c:ae:2d:39:84:1f:05:92: 62:9f:6e:57:89:27:6b:1c:4e:7a:62:d7:10:66:e3:d1:22:f7: 85:99:4b:ea:00:d0:e8:cd:bb:fd:83:ad:b1:a7:ac:51:cc:ab: 6a:e4:f2:f9:ce:42:55:8c:54:60:99:04:5f:ad:4e:fd:e7:b0: 28:e1:12:3f:61:85:3a:8e:29:02:a1:96:f8:dc:79:f3:d9:2b: 43:de:79:ee:97:e7:5b:3d:0c:81:16:7e:c2:52:bc:f9:20:70: bd:52:fc:01:d0:1c:9d:4a:73:79:fd:b9:16:7f:ec:32:56:60: f9:e8:ab:2b:cc:c3:aa:5e:13:3e:5e:39:6b:5e:8c:b0:2c:3b: de:43:e9:3d:eb:f5:f9:00:ed:f9:03:a9:9d:38:0a:b4:e1:4b: a1:88:e6:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9Z5K5gH++H/rRJQWoEIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmYwODZlMjEyNTA2OGQ5OWY1ZGMxZmNhNGM2MDE3MTc1 OWQxYmEwHhcNMjYwMTI1MDcwMTU4WhcNMjYwMTI2MDcwMTU4WjAzMTEwLwYDVQQD EyhiYzNiYTk3MTE4MGM2MTMyMjIyODFjYjM3YjE5ZmEzMDdkNmRmM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtLuzQ6Y4hDXnJTzisY7OeSh1+ox 09KagNoXepufh/TiPQfxagIYT9LXJyoZs3JqgJVrhNn5mUcWUM6+n+S0xs1QM9GU kBsI9xEudn8LgwsslrDvQn8/4OanGWLtyoBKypJXAPDRRbVW0Zq2hmhzPLDtrsIY +YfSlJuRiByppeFkG5OB3Un4lX+3Ynh6PrY3mMOA1IsUulnUPc/yc2dFqviOIadi ZDvn0XcVfq7NTigv+7dKy9/niA+WWI/WpVZ1RcX5NGiDWKzy9mKdDUbstOef+TXc tEk4Hu5JQjUlq/opNdQk4cT3NUlU3GqTMxDr25bg0C7ItlM0uIp9WM8sRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLw7qXEYDGEyIigcs3sZ+jB9bfPiMB8GA1UdIwQY MBaAFHm/CG4hJQaNmfXcH8pMYBcXWdG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wMjM2ZDItYjAwYi00NjQwLTkzYmUt NmJhZTNlOWVhNzRiLzEvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8wMjM2ZDItYjAwYi00NjQwLTkzYmUtNmJhZTNlOWVhNzRi LzEvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyD30EVY +NTUvzk87X9h9XGpFiWtYziS67o8VDBMBohKAe0wTQ+0E2hx5LQjUMWLLt48Ubwh 8PXDqvKLbcTo7hIG5dEFJkhWKtcwpnjZvUOjeAe/+GMTmYJ8137NoJzlvXFL2xyu LTmEHwWSYp9uV4knaxxOemLXEGbj0SL3hZlL6gDQ6M27/YOtsaesUcyrauTy+c5C VYxUYJkEX61O/eewKOESP2GFOo4pAqGW+Nx589krQ9557pfnWz0MgRZ+wlK8+SBw vVL8AdAcnUpzef25Fn/sMlZg+eirK8zDql4TPl45a16MsCw73kPpPev1+QDt+QOp nTgKtOFLoYjmzA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:29 2026 by rpki-client