This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
File:                     elBBBN9nzv6N7h0YqWhQqaZMLJU.mft (raw, json)
Hash identifier:          yHKDEIQo6szQkpbeKoO27S1Tv4sVxV4icekoiITTx1Y=
Subject key identifier:   A9:95:08:B9:77:7C:24:4F:E5:5F:8A:25:F8:4F:17:C7:18:6D:53:88
Authority key identifier: 7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
Certificate issuer:       /CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Certificate serial:       019AF240138A4782B209AD350CAEFB1E4219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
Manifest number:          0760
Signing time:             Sat 06 Dec 2025 06:01:16 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:16 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:16 +0000
Files and hashes:         1: elBBBN9nzv6N7h0YqWhQqaZMLJU.crl (hash: 2XqqLTfzhzcpqksOATHwP20FW1VOaK36DAJx+XycasE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:13:8a:47:82:b2:09:ad:35:0c:ae:fb:1e:42:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
        Validity
            Not Before: Dec  6 06:01:16 2025 GMT
            Not After : Dec  7 06:01:16 2025 GMT
        Subject: CN=a99508b9777c244fe55f8a25f84f17c7186d5388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:38:84:81:03:63:c2:94:62:d6:5a:95:7f:
                    7b:8f:68:a5:e8:ea:e8:06:08:b6:a3:d4:d9:95:62:
                    c4:a2:c2:35:9a:d6:ae:ed:fc:ef:44:cb:e1:35:d0:
                    c6:24:8c:57:0c:29:6b:c0:be:0f:66:4d:87:b3:02:
                    66:b9:28:de:d8:de:5d:d5:7f:20:62:11:67:69:c3:
                    19:b9:de:75:33:7d:11:48:1d:dc:9f:f6:c0:9a:fe:
                    95:85:58:2b:08:47:7a:94:c1:f0:53:69:41:57:a0:
                    27:c4:b3:82:f5:a6:89:cc:e3:07:ea:74:27:72:fe:
                    44:35:ca:89:a3:04:fd:51:34:47:49:8f:2d:6f:aa:
                    c9:6f:a1:19:fc:7c:27:34:a6:ae:b2:ed:8e:7f:98:
                    91:df:bf:09:f2:98:4d:68:47:84:de:72:0f:30:3e:
                    43:37:fd:12:55:38:46:71:89:7a:b4:7f:dd:e4:2e:
                    98:c4:30:f3:17:e6:c5:eb:f6:be:e7:f5:ef:4f:6f:
                    e1:e7:1e:07:c1:f0:c6:6e:bd:fc:df:21:ee:cc:ff:
                    c5:99:21:a7:00:5e:75:74:bf:41:15:2b:5c:33:13:
                    eb:ef:4e:16:97:58:0a:14:3f:37:f8:6a:89:4c:89:
                    ba:fc:53:08:13:97:e0:e5:cc:8c:81:a1:86:00:da:
                    55:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:95:08:B9:77:7C:24:4F:E5:5F:8A:25:F8:4F:17:C7:18:6D:53:88
            X509v3 Authority Key Identifier:
                keyid:7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c7:42:6e:29:4d:16:87:42:d2:c7:c5:ec:79:c7:b6:55:9b:
         e8:5a:f6:77:58:5a:67:0f:db:56:d7:28:0e:57:ce:ef:7a:96:
         b6:77:f2:9a:38:4e:56:96:83:08:4e:4f:0c:ba:5c:70:d7:d8:
         23:ae:d3:a2:70:9a:09:60:00:da:80:99:9a:dd:24:90:b8:f7:
         47:17:23:2b:80:e2:c8:b0:42:5d:c8:bf:1a:8b:27:0e:d8:a9:
         62:b8:19:f6:72:ee:af:07:44:1b:7a:aa:53:ef:21:6a:bd:fd:
         13:b0:33:d3:db:48:a9:2a:72:22:4c:47:04:c5:ee:6a:ab:a7:
         6c:a7:b2:68:9e:5c:b8:3b:94:27:a3:43:4f:52:22:d0:55:8a:
         68:f7:6b:79:d0:6e:a8:bf:3c:a9:cb:fb:8a:b3:e5:fd:05:cb:
         36:45:78:e4:3d:fc:b6:0d:95:36:74:4d:ba:d5:ad:ff:a4:16:
         06:c7:f2:e2:98:a8:5a:65:6b:b5:45:17:10:2a:50:13:2f:63:
         50:8e:a6:6b:f9:57:b2:74:51:52:94:2c:ff:ed:23:b5:b3:b5:
         a0:01:95:47:d0:73:42:ad:b3:0d:90:f7:2c:c0:8c:11:37:84:
         6e:33:14:67:2f:6c:96:a1:46:24:cc:bb:07:eb:c1:32:89:8f:
         0c:b6:1a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:20:56 2025 by rpki-client