This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
File:                     B0ejbXdop7MKTuy7aWTIwjfXRAE.mft (raw, json)
Hash identifier:          zJxMr2gPj9ML+NLX8ZC5me3ZyYuFzVuGjfOVz46018Q=
Subject key identifier:   B0:1C:E3:3E:9D:23:44:AC:27:E2:31:22:1B:13:56:B1:89:0A:E3:FA
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Certificate issuer:       /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial:       019AF1640418D864A18121ACC5AD7EA462F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
Manifest number:          1760
Signing time:             Sat 06 Dec 2025 02:00:54 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:54 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:54 +0000
Files and hashes:         1: 2CIwVa2guH9I9mE05PyNSk_zLJw.roa (hash: 6WMXH3mPe6YH5cQJoRqeEOdgwx8H7f+4sGKrej+Vxnc=)
                          2: B0ejbXdop7MKTuy7aWTIwjfXRAE.crl (hash: 1GEve+VQqAwbXbF2UBIJTYzdJmmWkbDW+HCB5vSY4bg=)
                          3: U9ESt7XkFJMxc8hDKsx2ew3J7YE.roa (hash: IAjM9oVyj8oid2QGC8YSaV020xf4N3UKnDXpYd0lkxk=)
                          4: o1r9uGgWSMkBr8TYtqeKLaE5QOE.roa (hash: 7RzPsp3uHfpDYCSJda3tVfo5/SCH0Ae2ssPUnQ5pNnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:64:04:18:d8:64:a1:81:21:ac:c5:ad:7e:a4:62:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
        Validity
            Not Before: Dec  6 02:00:54 2025 GMT
            Not After : Dec  7 02:00:54 2025 GMT
        Subject: CN=b01ce33e9d2344ac27e231221b1356b1890ae3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:9b:f3:03:14:e5:c6:7f:b0:62:bc:92:92:
                    90:6f:bc:26:32:29:04:75:ea:12:e9:f0:ba:ff:a4:
                    31:4f:2f:c4:70:98:47:d4:69:b3:c2:30:5b:55:ad:
                    38:29:40:a4:ef:73:d0:d9:55:f5:57:ac:5b:30:e4:
                    6a:69:fa:29:bb:4f:fb:b5:ce:c3:c2:02:69:7f:19:
                    e7:39:59:70:74:f8:da:61:b8:b6:23:7f:fc:8f:b3:
                    91:03:34:23:bd:36:c1:b8:af:0c:a8:73:86:32:26:
                    1b:1e:4b:84:92:0b:0f:9b:20:e4:f2:3c:4b:f9:60:
                    74:ed:4a:12:3b:9d:4c:b1:3e:11:5f:92:50:e3:e0:
                    4a:03:0d:9e:2b:3a:9b:36:fe:77:5b:56:74:81:a3:
                    e8:55:05:aa:c3:3b:d3:85:d2:56:53:ea:b3:9a:61:
                    3e:58:fc:76:6f:ed:bc:bf:10:95:e5:75:a2:58:b0:
                    4b:6a:7c:08:c1:15:e0:75:82:d8:f7:e7:af:3f:c2:
                    b2:47:0c:32:1d:09:ad:db:90:91:e2:7f:96:99:19:
                    34:62:c9:68:fa:05:34:f5:38:2c:52:73:95:bf:5e:
                    95:c7:c0:1e:cb:2f:3d:ce:fb:f6:80:9f:8d:cc:67:
                    90:74:ba:23:5c:76:04:93:ef:a9:56:0b:8c:97:2f:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1C:E3:3E:9D:23:44:AC:27:E2:31:22:1B:13:56:B1:89:0A:E3:FA
            X509v3 Authority Key Identifier:
                keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9f:4e:cf:36:93:a1:80:91:8c:31:56:d1:eb:94:cc:f3:74:
         d2:c2:87:17:6d:79:6a:f7:29:a4:ef:ba:29:6b:99:bd:1f:f0:
         35:d5:74:2f:28:08:58:05:c3:b8:7b:ce:90:83:19:b3:cf:2a:
         7b:3f:51:c0:39:33:1f:21:bf:d7:d1:85:f7:a2:ef:94:a1:86:
         61:b0:c9:eb:43:b0:1e:43:22:68:c7:57:cd:c2:f1:16:72:96:
         a7:7a:5e:0d:4c:76:95:43:c9:af:e3:63:5a:aa:54:f7:ef:87:
         83:c7:01:5d:c0:ba:c5:62:81:c7:b3:48:7b:06:6d:75:21:ed:
         23:b5:89:0f:82:2f:56:5e:fa:a1:78:7c:e9:66:1f:af:ef:6d:
         84:38:9c:1b:20:ca:dc:68:dc:f2:33:89:65:f4:fa:30:c8:6c:
         fd:34:d5:a4:10:89:45:a2:bc:d7:12:fc:1c:0e:1d:db:6a:99:
         d5:ce:07:ca:b4:45:56:9f:80:58:3f:2b:d5:72:d7:5b:65:4b:
         a9:ae:c9:70:39:0f:99:3c:c2:74:c8:f9:a1:46:93:4f:9d:f3:
         95:17:7f:3f:95:26:ff:79:6d:89:e8:3b:7d:54:5c:cc:23:c8:
         d1:77:82:12:32:02:da:6c:d4:69:b3:f1:41:25:3e:14:ab:85:
         90:9f:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:30:30 2025 by rpki-client