This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft
File:                     eBZ92WA7n7evUBVZyzc31HotVDc.mft (raw, json)
Hash identifier:          7vU7z3iUjl0IS4pvL8gTFT05KpRwezQEBmT9+pGYilo=
Subject key identifier:   03:05:11:1C:E6:3E:4A:14:2F:01:D6:C9:C2:28:26:27:9F:C6:A3:9F
Authority key identifier: 78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
Certificate issuer:       /CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Certificate serial:       019AF2ADC7032E6A23B7CBE76F509A5C747A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft
Manifest number:          0A6D
Signing time:             Sat 06 Dec 2025 08:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:06 +0000
Files and hashes:         1: 2Gebd9LuUSgIFGazk2B8jeGpGzM.roa (hash: lhcVXwCnPTOWkOSNYveyHZ5XywyRvkxiUOosibMUqpo=)
                          2: eBZ92WA7n7evUBVZyzc31HotVDc.crl (hash: XHHKmimGSKU/6F65dcq5vnuuSKY9ZwaFLg5N6XarmkY=)
                          3: j37HTrC_dTklyNn2udlv5Naq8yI.roa (hash: RkYOgGdqm1JwmKN+7UnvKpJgw018AubpOXcPMP02ZOE=)
                          4: kfN7a1gaYfFJ6QDXRCAHsUFksqU.roa (hash: 98fchG6ajtruPmSu1iHEitLSbFn7hxKxul3DfeyFstg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:c7:03:2e:6a:23:b7:cb:e7:6f:50:9a:5c:74:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78167dd9603b9fb7af501559cb3737d47a2d5437
        Validity
            Not Before: Dec  6 08:01:06 2025 GMT
            Not After : Dec  7 08:01:06 2025 GMT
        Subject: CN=0305111ce63e4a142f01d6c9c22826279fc6a39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:fd:f1:3e:41:31:fe:f9:70:6f:b9:08:32:
                    bc:6e:a1:5a:5f:1b:6a:d2:93:a3:33:c4:23:b5:dc:
                    79:c1:f3:c2:81:26:f4:0c:b7:06:e2:57:82:97:99:
                    1f:5e:c8:40:8c:6c:38:70:70:87:7f:fd:bf:c3:47:
                    38:9d:ea:24:bb:62:74:f3:31:87:31:61:8f:54:98:
                    58:95:77:15:74:ed:cc:7d:8f:61:1f:a5:ac:98:1d:
                    63:05:db:8d:b8:a9:05:b4:b9:62:7a:1d:93:93:07:
                    92:5f:bd:7f:ed:bd:28:b6:b9:67:3c:d3:9f:f1:2d:
                    63:8d:10:2d:af:41:88:96:6f:32:c4:a4:4a:a1:0b:
                    a4:6a:b4:d0:d4:5b:36:eb:08:bb:3c:5d:45:5f:1c:
                    cc:9c:4f:70:74:16:1c:c0:da:96:81:10:00:96:e2:
                    85:e8:0e:bc:73:4a:d6:13:42:7b:d5:c4:9d:75:d3:
                    37:73:0c:b6:f2:83:e4:f8:4c:ad:43:db:f6:9f:1a:
                    ee:f6:f6:a0:9e:4d:30:75:f4:27:ce:ee:15:0c:6d:
                    88:33:50:a5:0d:24:40:6e:5c:ce:e4:1d:5a:a2:24:
                    f0:50:d4:58:52:96:b3:68:54:9a:fc:db:c6:17:49:
                    c7:1c:5e:ee:27:ad:74:eb:d5:30:07:e1:48:f3:b6:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:05:11:1C:E6:3E:4A:14:2F:01:D6:C9:C2:28:26:27:9F:C6:A3:9F
            X509v3 Authority Key Identifier:
                keyid:78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ef:19:7c:6d:f1:58:06:26:b4:78:08:0e:bf:1a:16:35:46:
         b9:55:0d:c3:9a:a8:63:4a:0b:a3:f9:a9:28:37:0d:40:84:c2:
         5c:9f:7f:e8:14:14:22:d6:e5:59:bf:49:6a:79:69:69:27:9b:
         48:16:dd:81:a8:58:06:ed:cb:72:e1:a9:17:19:1c:45:0f:59:
         36:4b:22:75:b8:31:08:da:4b:6d:93:71:d7:6f:69:c5:f7:54:
         c9:77:6d:81:01:e0:3d:ae:e5:c7:81:d2:ae:8e:9f:88:94:8d:
         9b:27:19:07:09:35:92:43:c6:8c:01:db:79:0b:de:91:71:9c:
         b7:35:c3:c4:58:0d:1b:9c:60:05:8e:85:df:cf:36:b1:dc:06:
         f0:0f:70:0c:94:04:cc:81:73:67:be:58:a8:f6:67:ee:c9:cc:
         c4:d4:06:61:61:04:b7:00:fb:c3:c0:fe:da:eb:b3:73:d6:91:
         b0:9f:17:a0:2a:e8:8e:56:6c:d2:51:c6:be:f1:71:23:71:d4:
         5b:05:57:5e:d5:31:d2:4a:a2:a7:90:4a:8a:31:e2:85:d8:b0:
         5c:e3:5b:9e:b4:1a:a3:6f:02:92:9f:49:79:59:fd:71:3b:f0:
         c7:f2:6a:61:d3:c3:a8:a4:cd:84:7a:ab:26:6a:1a:7e:89:53:
         e7:a9:6e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:43:52 2025 by rpki-client