This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft File: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json) Hash identifier: /iz33MaTALrOHFz6tlgEsIVj4Gf1kSvcoiijVM/6wjA= Subject key identifier: 15:BD:74:1A:18:2C:EB:1E:B1:BE:40:A8:1F:AE:72:45:B4:E2:9B:99 Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF Certificate issuer: /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff Certificate serial: 019AF19B6A3B60A1582DDA0C649995F4FF65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft Manifest number: 0F6F Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: Z7fNj1YJ8aSn3r_MEyl5vIDYUPE.roa (hash: WsvnlIuXrT6wZCrahcudQBBAK43k6FKEOxnr2kwJ0Ew=) 2: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: BufR+fzO/WLBKxG7yc8zNwJXhTB18yu8nYwg1D/8e+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6a:3b:60:a1:58:2d:da:0c:64:99:95:f4:ff:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=15bd741a182ceb1eb1be40a81fae7245b4e29b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:83:fa:91:ed:db:27:3a:7f:82:75:b3:73: 16:27:86:77:ed:dc:51:8f:cb:9b:94:3a:4f:11:99: 77:e4:6c:57:49:01:b9:69:5f:3a:6e:79:b0:2b:41: 75:aa:17:0c:bc:89:08:eb:1a:96:ee:9e:e7:db:1f: ee:63:be:f0:d2:25:7e:f0:54:3a:5f:33:28:cd:77: e1:48:da:5d:b9:d9:10:ba:63:3d:7a:4d:a6:85:ad: bf:ea:d3:16:f0:a4:30:51:6d:36:2f:2e:b3:6c:1a: 4c:4e:e8:8e:5a:4b:03:0c:f6:62:1f:d1:3d:26:5f: 27:72:4b:62:2c:03:bc:68:e3:56:88:71:b8:8b:74: c3:6a:53:77:b9:4a:fb:43:74:fe:0c:08:3b:31:66: 66:f4:03:30:e6:0f:7a:58:de:4a:64:91:61:cd:85: 8c:2a:f5:b3:15:fb:90:8c:4a:0a:c2:86:13:9c:4b: 3a:61:a9:ab:29:40:42:b8:bb:16:99:f4:52:09:c9: 00:9a:dd:6e:b1:d4:52:f6:7f:84:87:60:f4:bf:fd: 0b:63:74:96:75:0f:1e:e9:10:81:72:25:38:c0:75: e5:2b:c1:db:72:54:61:27:31:66:e4:23:ce:5f:34: 36:be:41:e8:30:c1:99:b6:fd:1f:cd:43:af:d5:1d: 23:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BD:74:1A:18:2C:EB:1E:B1:BE:40:A8:1F:AE:72:45:B4:E2:9B:99 X509v3 Authority Key Identifier: keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0b:ff:46:d7:cf:c9:63:0a:5b:6e:87:18:a7:6f:7b:c5:11: d7:e1:ac:ec:a7:d1:e6:f3:c7:ff:f8:6b:53:77:db:fa:2a:ab: ab:8b:0c:0c:07:81:63:59:63:b8:06:a8:ec:1f:89:85:e4:fb: 96:26:26:cb:d1:08:39:ae:48:8a:bf:ec:98:62:6d:cd:31:c8: ea:33:df:fd:69:42:c6:f6:2a:a4:a8:dc:1a:ed:95:85:71:a1: b9:bf:4a:f0:52:fe:97:23:ff:67:d1:3c:63:bb:74:dd:ed:7b: 03:c1:ee:77:37:c1:6e:6a:7a:4f:2d:00:e2:58:3f:24:14:00: 43:53:e4:d2:58:ea:a6:cb:4f:c2:45:20:26:a0:89:72:51:c7: 0e:1b:2a:dd:e7:9f:31:64:24:fa:40:d1:d9:41:0e:03:cc:07: f9:99:8c:44:a3:15:bd:bd:1c:3a:14:f5:32:5f:fb:0c:1d:e2: 0f:3b:ff:30:00:d0:da:73:fc:7b:06:69:c0:78:aa:83:ab:62: 15:b1:d1:39:bb:01:16:d3:18:8b:b1:ed:f4:25:e6:bb:03:8c: 54:f5:68:61:2e:f5:82:12:7e:2f:d1:46:5e:c9:12:c9:f1:bf: 4c:c7:a1:f7:35:c2:81:75:7c:99:06:19:88:91:93:c6:f9:f5: a2:9d:67:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2o7YKFYLdoMZJmV9P9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YjZjZWFjNWQ0MmE2MzdmMzZiYTFlM2ZkYWU5MGFkNWZl ZTJjZmYwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD EygxNWJkNzQxYTE4MmNlYjFlYjFiZTQwYTgxZmFlNzI0NWI0ZTI5Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1KD+pHt2yc6f4J1s3MWJ4Z37dxR j8ublDpPEZl35GxXSQG5aV86bnmwK0F1qhcMvIkI6xqW7p7n2x/uY77w0iV+8FQ6 XzMozXfhSNpdudkQumM9ek2mha2/6tMW8KQwUW02Ly6zbBpMTuiOWksDDPZiH9E9 Jl8ncktiLAO8aONWiHG4i3TDalN3uUr7Q3T+DAg7MWZm9AMw5g96WN5KZJFhzYWM KvWzFfuQjEoKwoYTnEs6YamrKUBCuLsWmfRSCckAmt1usdRS9n+Eh2D0v/0LY3SW dQ8e6RCBciU4wHXlK8HbclRhJzFm5CPOXzQ2vkHoMMGZtv0fzUOv1R0jeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBW9dBoYLOsesb5AqB+uckW04puZMB8GA1UdIwQY MBaAFHm2zqxdQqY382uh4/2ukK1f7iz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAt NGZlM2Y2MTExMGRlLzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAtNGZlM2Y2MTExMGRl LzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgv/RtfP yWMKW26HGKdve8UR1+Gs7KfR5vPH//hrU3fb+iqrq4sMDAeBY1ljuAao7B+JheT7 liYmy9EIOa5Iir/smGJtzTHI6jPf/WlCxvYqpKjcGu2VhXGhub9K8FL+lyP/Z9E8 Y7t03e17A8HudzfBbmp6Ty0A4lg/JBQAQ1Pk0ljqpstPwkUgJqCJclHHDhsq3eef MWQk+kDR2UEOA8wH+ZmMRKMVvb0cOhT1Ml/7DB3iDzv/MADQ2nP8ewZpwHiqg6ti FbHRObsBFtMYi7Ht9CXmuwOMVPVoYS71ghJ+L9FGXskSyfG/TMeh9zXCgXV8mQYZ iJGTxvn1op1ntg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:17 2025 by rpki-client