This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft File: eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json) Hash identifier: YpCJcxSokw0nYJGvPMhJTN8/RE0UfHK7nWxD4QV3ATs= Subject key identifier: 50:40:83:22:6B:20:93:7F:AE:F9:F7:F9:AC:4C:B3:71:40:54:81:48 Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba Certificate serial: 019AF31B61BA9E5C84D4D3AE6900D482742D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 10:00:48 +0000 Manifest this update: Sat 06 Dec 2025 10:00:48 +0000 Manifest next update: Sun 07 Dec 2025 10:00:48 +0000 Files and hashes: 1: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (hash: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=) 2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: GVOz41b8+NkmEl0SI3vWADJOfvsv3wufGRBBN1hFE/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:61:ba:9e:5c:84:d4:d3:ae:69:00:d4:82:74:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba Validity Not Before: Dec 6 10:00:48 2025 GMT Not After : Dec 7 10:00:48 2025 GMT Subject: CN=504083226b20937faef9f7f9ac4cb37140548148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:26:aa:c2:d2:39:d0:30:75:5e:5f:36:3b:a2: 0b:50:da:8b:f7:9b:bd:2e:c4:14:c0:c3:09:95:9f: 8a:71:a9:c1:1a:b5:e8:7b:6c:d3:66:05:24:79:8e: 8f:98:20:11:8a:d5:de:b0:77:57:ab:b2:00:e5:74: 6d:48:4d:df:82:97:4e:85:3d:a4:a4:d4:a1:3f:5d: a1:31:28:a8:f8:46:91:83:7c:c0:a0:0e:c3:89:96: c6:dd:27:ce:dc:b4:af:3d:bb:ae:8c:dc:7c:b1:84: a0:30:ee:5d:86:89:0e:76:02:06:fb:ee:1a:b6:e1: 92:56:7c:e2:a2:bd:8a:e4:a0:09:1b:a5:62:d3:05: 61:70:d5:3f:70:42:4d:d7:a6:ee:0c:a1:91:58:fa: 70:56:0b:09:c8:8a:9b:20:25:1b:c0:ac:10:3e:9f: 5f:80:a3:77:12:9b:eb:74:f9:c8:f8:11:c1:40:88: 91:94:0a:7b:b3:4d:39:6d:17:47:38:2e:1b:a0:fd: de:2a:8f:70:c6:b3:df:b4:97:ed:9b:b7:2e:61:95: 6f:20:b5:41:e8:38:82:23:01:b7:62:6b:60:21:ed: 57:5b:23:f2:67:4e:f9:79:99:9d:05:25:ab:3b:b6: b8:54:83:72:a0:41:fd:d9:ba:67:47:e0:0c:0b:f3: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:40:83:22:6B:20:93:7F:AE:F9:F7:F9:AC:4C:B3:71:40:54:81:48 X509v3 Authority Key Identifier: keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e3:4b:60:ab:aa:9f:ef:87:21:c0:76:15:58:a5:2a:6e:db: c7:7e:fb:54:a3:c9:17:6f:ca:07:a0:f0:c1:a9:0f:f3:fb:12: ca:5d:08:98:9c:ad:bb:61:75:83:84:02:22:2f:36:93:f3:5b: 09:e0:e2:ae:fb:52:c4:72:a6:c5:72:0b:5a:60:23:c3:35:dc: f5:4c:60:78:06:20:3b:7c:0f:3f:04:38:10:76:c7:fe:32:3f: 81:81:06:dc:bc:54:02:d1:22:0b:ac:76:7b:70:b2:ec:53:ba: 85:a0:c4:e3:33:f4:a5:6b:ac:58:d7:9c:bb:f0:49:4e:bc:b5: de:d0:cf:36:ca:16:75:14:bc:70:e3:da:78:d4:9b:18:2d:ac: 78:1e:56:aa:c1:ae:89:af:10:ad:d3:3c:4c:37:76:5a:62:95: d7:23:8b:10:28:fe:84:7c:da:c8:0b:a9:56:75:87:97:64:ed: d1:b1:dd:9b:3e:ff:56:88:7c:f3:32:4c:f7:7d:6e:91:00:68: a5:5b:ef:c5:84:fa:f9:bc:cc:5f:a7:1e:19:a5:6d:46:95:16: fc:51:56:57:3f:90:f6:f5:7f:e5:30:8d:63:aa:c8:6a:31:5d: 1a:ad:63:4c:e8:87:39:90:b7:d5:1c:a3:4e:e0:cd:5a:26:1f: ae:37:b4:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2G6nlyE1NOuaQDUgnQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YmYwODZlMjEyNTA2OGQ5OWY1ZGMxZmNhNGM2MDE3MTc1 OWQxYmEwHhcNMjUxMjA2MTAwMDQ4WhcNMjUxMjA3MTAwMDQ4WjAzMTEwLwYDVQQD Eyg1MDQwODMyMjZiMjA5MzdmYWVmOWY3ZjlhYzRjYjM3MTQwNTQ4MTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSaqwtI50DB1Xl82O6ILUNqL95u9 LsQUwMMJlZ+KcanBGrXoe2zTZgUkeY6PmCARitXesHdXq7IA5XRtSE3fgpdOhT2k pNShP12hMSio+EaRg3zAoA7DiZbG3SfO3LSvPbuujNx8sYSgMO5dhokOdgIG++4a tuGSVnzior2K5KAJG6Vi0wVhcNU/cEJN16buDKGRWPpwVgsJyIqbICUbwKwQPp9f gKN3EpvrdPnI+BHBQIiRlAp7s005bRdHOC4boP3eKo9wxrPftJftm7cuYZVvILVB 6DiCIwG3YmtgIe1XWyPyZ075eZmdBSWrO7a4VINyoEH92bpnR+AMC/OQ3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBAgyJrIJN/rvn3+axMs3FAVIFIMB8GA1UdIwQY MBaAFHm/CG4hJQaNmfXcH8pMYBcXWdG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wMjM2ZDItYjAwYi00NjQwLTkzYmUt NmJhZTNlOWVhNzRiLzEvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8wMjM2ZDItYjAwYi00NjQwLTkzYmUtNmJhZTNlOWVhNzRi LzEvZWI4SWJpRWxCbzJaOWR3ZnlreGdGeGRaMGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmONLYKuq n++HIcB2FVilKm7bx377VKPJF2/KB6DwwakP8/sSyl0ImJytu2F1g4QCIi82k/Nb CeDirvtSxHKmxXILWmAjwzXc9UxgeAYgO3wPPwQ4EHbH/jI/gYEG3LxUAtEiC6x2 e3Cy7FO6haDE4zP0pWusWNecu/BJTry13tDPNsoWdRS8cOPaeNSbGC2seB5WqsGu ia8QrdM8TDd2WmKV1yOLECj+hHzayAupVnWHl2Tt0bHdmz7/Voh88zJM931ukQBo pVvvxYT6+bzMX6ceGaVtRpUW/FFWVz+Q9vV/5TCNY6rIajFdGq1jTOiHOZC31Ryj TuDNWiYfrje0Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:56:18 2025 by rpki-client