This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft File: EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft (raw, json) Hash identifier: AkKKub+MKq+iape+YxIqwpM7U3W/rEEkAF975QdDlQw= Subject key identifier: 9A:60:6D:B8:1B:67:FE:5A:B8:68:7D:00:05:CE:B8:C0:EA:75:69:00 Authority key identifier: 10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50 Certificate issuer: /CN=1015129921e7e15faef736024a4337340c857050 Certificate serial: 019AF08854F2C1F0AEF0E38517FCB4BB1682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft Manifest number: ED Signing time: Fri 05 Dec 2025 22:00:57 +0000 Manifest this update: Fri 05 Dec 2025 22:00:57 +0000 Manifest next update: Sat 06 Dec 2025 22:00:57 +0000 Files and hashes: 1: EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl (hash: wP4zbuIfv59N0gZ+CP73hl85nKjX2ZS/3bvMi/xRURM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:54:f2:c1:f0:ae:f0:e3:85:17:fc:b4:bb:16:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1015129921e7e15faef736024a4337340c857050 Validity Not Before: Dec 5 22:00:57 2025 GMT Not After : Dec 6 22:00:57 2025 GMT Subject: CN=9a606db81b67fe5ab8687d0005ceb8c0ea756900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:7e:8f:f8:85:50:b0:0a:79:83:6c:0f:cb: 66:30:da:5f:67:fc:88:b3:f4:e0:2f:48:5c:65:84: 18:48:90:be:07:34:1f:a5:2c:d3:e5:e8:1d:c0:e6: 3c:52:37:04:ad:71:07:e1:a3:6a:ee:c7:94:cb:40: a7:d1:72:53:81:7f:7c:71:37:ee:b2:55:6f:66:c1: 38:a7:02:34:ef:f3:43:5c:f0:ee:c4:1f:e0:53:e0: 2b:6c:ea:a8:d8:79:f7:ae:a5:bf:23:11:ee:b3:9b: 65:b8:8d:0f:7c:9c:6e:d7:f5:90:b0:34:57:f3:7b: 2e:35:ae:67:dd:ab:76:76:9c:cf:2d:f8:6c:77:55: fd:a1:26:e6:e1:46:a6:77:1a:c5:7c:c5:fc:85:cf: 19:ec:b8:da:0e:36:b3:33:e0:33:6d:86:1b:e2:49: 95:7d:d1:ae:7c:a6:f9:a6:7b:36:93:fd:7b:31:4f: e0:96:8a:83:28:3d:73:4a:5f:fa:bb:a0:d4:a8:62: 6c:17:c2:80:50:27:78:6e:47:6f:c5:03:03:d4:bc: c7:17:9b:94:fc:50:d5:9e:0a:59:ed:9f:63:73:e9: 9d:4c:31:66:a4:06:49:b5:55:bf:89:0d:22:39:65: 4b:20:db:bd:c1:0f:a3:37:8a:99:dc:05:76:31:4a: 88:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:60:6D:B8:1B:67:FE:5A:B8:68:7D:00:05:CE:B8:C0:EA:75:69:00 X509v3 Authority Key Identifier: keyid:10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:00:b1:fc:b2:67:eb:10:67:f2:2a:38:87:3f:76:36:45:69: 71:b6:cc:51:a4:0c:e0:35:4c:80:b3:d7:be:75:af:1a:fb:ba: 5a:b7:1b:87:a2:86:94:f1:42:5c:0b:b2:69:a0:f2:34:5d:ba: dd:6a:ce:de:c0:52:7e:5d:22:4f:6d:c2:9e:bf:7c:5a:a9:ac: 80:ed:2f:d5:3d:34:0c:fa:7f:60:43:c3:96:65:f0:d8:58:82: 5e:d4:21:21:f0:e6:a5:62:b8:fa:5a:76:52:e7:e4:3e:76:20: 3c:50:f2:3c:43:7d:38:54:d1:0d:1c:a9:10:78:7c:d0:27:b4: 63:c4:b4:21:87:60:b7:7e:15:91:19:f4:cf:51:85:9e:a4:3f: b6:41:7d:46:2f:a5:8b:4b:45:5e:17:61:d2:c9:a3:d8:ac:ec: 83:a0:83:b9:3b:2f:75:b4:b5:06:8a:07:48:4b:34:44:c4:e5: 68:a4:18:7c:3c:46:2b:83:58:fd:34:e6:b0:75:da:77:cd:01: 33:57:ed:30:fe:61:03:c7:35:0f:0f:71:fe:08:67:a6:06:49: d3:83:12:5a:14:b2:7f:e7:fd:3c:6f:59:79:ae:2b:44:7f:4d: 31:ac:0f:70:5d:bb:51:d0:3a:f9:98:42:22:08:03:45:e9:19: b5:af:13:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFTywfCu8OOFF/y0uxaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMTUxMjk5MjFlN2UxNWZhZWY3MzYwMjRhNDMzNzM0MGM4 NTcwNTAwHhcNMjUxMjA1MjIwMDU3WhcNMjUxMjA2MjIwMDU3WjAzMTEwLwYDVQQD Eyg5YTYwNmRiODFiNjdmZTVhYjg2ODdkMDAwNWNlYjhjMGVhNzU2OTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMt+j/iFULAKeYNsD8tmMNpfZ/yI s/TgL0hcZYQYSJC+BzQfpSzT5egdwOY8UjcErXEH4aNq7seUy0Cn0XJTgX98cTfu slVvZsE4pwI07/NDXPDuxB/gU+ArbOqo2Hn3rqW/IxHus5tluI0PfJxu1/WQsDRX 83suNa5n3at2dpzPLfhsd1X9oSbm4UamdxrFfMX8hc8Z7LjaDjazM+AzbYYb4kmV fdGufKb5pns2k/17MU/gloqDKD1zSl/6u6DUqGJsF8KAUCd4bkdvxQMD1LzHF5uU /FDVngpZ7Z9jc+mdTDFmpAZJtVW/iQ0iOWVLINu9wQ+jN4qZ3AV2MUqIFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpgbbgbZ/5auGh9AAXOuMDqdWkAMB8GA1UdIwQY MBaAFBAVEpkh5+Ffrvc2AkpDNzQMhXBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUJVU21TSG40Vi11OXpZQ1NrTTNOQXlGY0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mYzFmYTUtMTI1Mi00OTMyLTk4ZGMt ZWQ5NWY1NmExYTU1LzEvRUJVU21TSG40Vi11OXpZQ1NrTTNOQXlGY0ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9mYzFmYTUtMTI1Mi00OTMyLTk4ZGMtZWQ5NWY1NmExYTU1 LzEvRUJVU21TSG40Vi11OXpZQ1NrTTNOQXlGY0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgCx/LJn 6xBn8io4hz92NkVpcbbMUaQM4DVMgLPXvnWvGvu6Wrcbh6KGlPFCXAuyaaDyNF26 3WrO3sBSfl0iT23Cnr98WqmsgO0v1T00DPp/YEPDlmXw2FiCXtQhIfDmpWK4+lp2 UufkPnYgPFDyPEN9OFTRDRypEHh80Ce0Y8S0IYdgt34VkRn0z1GFnqQ/tkF9Ri+l i0tFXhdh0smj2Kzsg6CDuTsvdbS1BooHSEs0RMTlaKQYfDxGK4NY/TTmsHXad80B M1ftMP5hA8c1Dw9x/ghnpgZJ04MSWhSyf+f9PG9Zea4rRH9NMawPcF27UdA6+ZhC IggDRekZta8T/g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:22 2025 by rpki-client