This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft File: EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json) Hash identifier: 1lLAmAHrX4AGtI+AbcgacXATol/co7x/6aHe0E12qIU= Subject key identifier: CC:B6:62:0D:53:42:77:41:67:E6:B9:E0:F9:CD:5E:34:7A:3B:40:1D Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82 Certificate issuer: /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882 Certificate serial: 019AF1648E5CBBF69F68E3463C79F657465E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft Manifest number: 01EF Signing time: Sat 06 Dec 2025 02:01:30 +0000 Manifest this update: Sat 06 Dec 2025 02:01:30 +0000 Manifest next update: Sun 07 Dec 2025 02:01:30 +0000 Files and hashes: 1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: QtVdje5ugyskOYGDkR0cb8uX/YKeFQ4WY1S8Xnhpi2c=) 2: vGF2KAvK3aprRRdgwH5KABdGMAU.roa (hash: RXv+kUD5G+c5aahHL6+Y+Di5kkYa37mIJ1HvrhSMRbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8e:5c:bb:f6:9f:68:e3:46:3c:79:f6:57:46:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882 Validity Not Before: Dec 6 02:01:30 2025 GMT Not After : Dec 7 02:01:30 2025 GMT Subject: CN=ccb6620d5342774167e6b9e0f9cd5e347a3b401d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fb:4f:dd:68:cf:a6:dc:98:f4:c3:9b:58:12: 47:9a:84:01:ef:81:b5:f1:ca:38:e6:6e:26:97:75: 44:33:5f:bf:26:89:ca:ff:8b:5c:3c:e6:d7:f7:b0: a6:78:b9:28:c6:a2:ec:22:0d:d4:49:6f:6c:34:7b: 1c:81:cb:97:3d:01:eb:ba:a6:17:1b:5a:75:2e:6b: 18:e1:cb:cb:d9:91:09:f0:59:46:1d:4a:12:61:f9: bf:da:4d:dd:aa:d1:2a:18:a1:00:45:58:13:a3:d8: e3:cf:2a:b6:3d:ac:ea:70:b1:cf:92:40:c1:ca:39: b7:a0:d6:a2:39:39:b4:a8:31:1d:3c:02:bb:52:c7: be:b9:21:53:c8:b6:c7:48:4e:96:e8:1d:de:f6:00: 09:90:27:fc:f8:70:5d:6c:24:e5:e0:a4:1c:c5:bb: 0d:fd:59:ab:7b:bb:fd:a4:14:e9:80:d8:bc:05:37: 14:93:cb:7f:21:15:fa:fd:9b:73:0b:21:4e:b5:fb: 15:d2:d2:85:8f:6a:ea:10:44:3d:dd:3f:de:63:cf: c2:7c:23:4d:9b:dd:e3:9f:af:08:b9:07:a3:3c:9e: b2:7f:8f:d6:d2:2b:d3:1a:ea:64:25:22:a2:98:1b: c1:51:45:59:3f:40:3c:90:3e:ac:ac:5b:76:f1:2d: 1e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B6:62:0D:53:42:77:41:67:E6:B9:E0:F9:CD:5E:34:7A:3B:40:1D X509v3 Authority Key Identifier: keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:91:2d:f4:b4:85:7f:2e:dd:c0:aa:8b:b2:27:7a:8c:44:40: 28:29:c9:76:98:c1:26:8b:d6:40:e2:8b:9b:44:af:ef:61:a4: 96:9e:99:f7:89:2c:16:20:82:aa:31:f7:ae:73:86:92:e1:18: 09:dc:04:b7:c7:32:aa:7e:6a:60:51:91:62:f5:10:9e:68:86: 6f:4d:d0:d4:59:aa:13:91:25:6e:a2:da:83:96:dc:22:31:0e: e8:65:ee:fc:cf:9e:a8:b6:49:46:8e:46:57:69:db:26:14:a5: 35:24:33:1a:d3:af:a1:e1:06:52:08:3b:e0:85:df:20:40:b6: a8:1e:82:07:fb:6a:cd:f9:f4:a2:f9:c7:b1:82:e7:7f:60:c4: ed:07:a9:50:8a:d2:43:55:46:28:d1:5f:82:a6:f1:9f:95:ac: d3:c9:3c:cf:c8:5c:bc:48:fc:69:7e:2d:88:e8:c0:27:40:69: 7e:59:0b:29:7a:cf:9e:81:30:b6:e4:ff:2b:f0:9c:6d:a2:b0: ba:45:88:c2:2d:06:f3:f0:f3:a0:ce:e4:16:7b:14:31:41:12: 02:ef:39:5a:b7:04:8d:4b:2b:ee:ea:0e:4f:cf:8f:e3:46:b4: 0c:cb:c3:a8:9f:15:f1:f1:b2:e1:43:a6:6c:b1:35:83:71:ab: 93:4f:99:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZI5cu/afaONGPHn2V0ZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjA0OGFhZjViYjQyZjZjNGQ5ZDM4N2FkMjdhN2ViMjE5 ZjM4ODIwHhcNMjUxMjA2MDIwMTMwWhcNMjUxMjA3MDIwMTMwWjAzMTEwLwYDVQQD EyhjY2I2NjIwZDUzNDI3NzQxNjdlNmI5ZTBmOWNkNWUzNDdhM2I0MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApftP3WjPptyY9MObWBJHmoQB74G1 8co45m4ml3VEM1+/JonK/4tcPObX97CmeLkoxqLsIg3USW9sNHscgcuXPQHruqYX G1p1LmsY4cvL2ZEJ8FlGHUoSYfm/2k3dqtEqGKEARVgTo9jjzyq2PazqcLHPkkDB yjm3oNaiOTm0qDEdPAK7Use+uSFTyLbHSE6W6B3e9gAJkCf8+HBdbCTl4KQcxbsN /Vmre7v9pBTpgNi8BTcUk8t/IRX6/ZtzCyFOtfsV0tKFj2rqEEQ93T/eY8/CfCNN m93jn68IuQejPJ6yf4/W0ivTGupkJSKimBvBUUVZP0A8kD6srFt28S0enwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy2Yg1TQndBZ+a54PnNXjR6O0AdMB8GA1UdIwQY MBaAFBGwSKr1u0L2xNnTh60np+shnziCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83YmU5YjItMmUxOS00ZmUwLWIxN2Et NWNmM2U3NmExZWJjLzEvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS83YmU5YjItMmUxOS00ZmUwLWIxN2EtNWNmM2U3NmExZWJj LzEvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJEt9LSF fy7dwKqLsid6jERAKCnJdpjBJovWQOKLm0Sv72Gklp6Z94ksFiCCqjH3rnOGkuEY CdwEt8cyqn5qYFGRYvUQnmiGb03Q1FmqE5ElbqLag5bcIjEO6GXu/M+eqLZJRo5G V2nbJhSlNSQzGtOvoeEGUgg74IXfIEC2qB6CB/tqzfn0ovnHsYLnf2DE7QepUIrS Q1VGKNFfgqbxn5Ws08k8z8hcvEj8aX4tiOjAJ0BpflkLKXrPnoEwtuT/K/CcbaKw ukWIwi0G8/DzoM7kFnsUMUESAu85WrcEjUsr7uoOT8+P40a0DMvDqJ8V8fGy4UOm bLE1g3Grk0+ZWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:30 2025 by rpki-client