This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
File:                     ebt3Saveb12k6xxu0cV2gWF4RrA.mft (raw, json)
Hash identifier:          cxDjmF4dif4LJgG0YVMq6VC5CzQDClRvYZ5JmARz52w=
Subject key identifier:   08:96:02:8C:22:84:98:E6:A4:37:D5:B0:1E:C6:43:67:E1:74:80:3D
Authority key identifier: 79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0
Certificate issuer:       /CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
Certificate serial:       019BF7D238C5E80813C02366FD03404B65AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
Manifest number:          09F5
Signing time:             Mon 26 Jan 2026 01:01:48 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:48 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:48 +0000
Files and hashes:         1: AeWx0-fl3_TvDxLG7i61x4Cu7cI.roa (hash: MKkScRWC1oRd8kAjKYwh38bSe/XT+iXgkda09WhWgiw=)
                          2: OLGjOqT5j1PoTYEtyKXUGBIFkbI.roa (hash: DiG4yHrI0kfPeYPN9aDsXIafjZKsHrnExZ+/Ie46DI0=)
                          3: ZQDzbR1tXesEtbaNpTXeR98UNSU.roa (hash: p/CZ3mMgPUysAR/2N4wlvUf4JRvyOPuugh7sAJNEfMo=)
                          4: ebt3Saveb12k6xxu0cV2gWF4RrA.crl (hash: wMpipd/mU3imohiVXv8jr3+AR/fvu3xPxONq8+FxTxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d2:38:c5:e8:08:13:c0:23:66:fd:03:40:4b:65:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bb7749abde6f5da4eb1c6ed1c57681617846b0
        Validity
            Not Before: Jan 26 01:01:48 2026 GMT
            Not After : Jan 27 01:01:48 2026 GMT
        Subject: CN=0896028c228498e6a437d5b01ec64367e174803d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8b:f6:f9:71:c7:89:57:60:3a:78:7f:43:ce:
                    f3:c7:79:11:b5:61:3a:60:19:f1:1a:fe:d1:31:09:
                    36:2f:e2:b7:49:61:67:ce:99:67:1e:03:5d:cc:20:
                    14:61:8d:af:27:1e:f5:cb:77:5c:d3:42:92:da:71:
                    30:59:1e:e0:82:2b:01:17:c3:e5:62:fd:b8:6e:4b:
                    49:65:2d:f3:89:d2:91:a7:40:9e:16:c8:36:5f:8f:
                    ac:a5:ea:3b:47:41:eb:91:79:eb:38:cf:70:fb:09:
                    4b:d6:72:b7:67:30:31:bb:55:4e:fd:fd:c5:93:b0:
                    60:42:61:fc:a1:df:5a:89:dc:54:f5:ad:09:6e:f7:
                    95:b4:bb:9d:c0:c9:72:e6:4d:a0:c1:10:d4:a6:ad:
                    3e:aa:52:e9:f1:d4:ae:c0:25:00:6a:d2:35:58:0c:
                    76:ac:7b:58:28:61:63:9d:d9:04:33:99:4a:26:13:
                    26:d4:33:bd:d7:21:60:28:ac:62:30:e7:34:1b:6c:
                    78:7b:86:23:12:1c:63:a2:af:f0:85:8c:5e:3b:94:
                    58:9c:10:d5:ab:63:b8:d6:bf:d9:c2:94:3f:db:bc:
                    aa:ba:a7:21:e6:15:89:d2:5e:2b:37:2b:0d:4e:a6:
                    dc:2c:38:ac:cc:e0:61:04:34:4f:ba:a6:04:4b:a1:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:96:02:8C:22:84:98:E6:A4:37:D5:B0:1E:C6:43:67:E1:74:80:3D
            X509v3 Authority Key Identifier:
                keyid:79:BB:77:49:AB:DE:6F:5D:A4:EB:1C:6E:D1:C5:76:81:61:78:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebt3Saveb12k6xxu0cV2gWF4RrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/25b7b8-c302-4dda-898a-4825e18d7301/1/ebt3Saveb12k6xxu0cV2gWF4RrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:eb:30:1f:45:37:44:4e:39:a9:3f:da:e2:a7:d0:fa:96:7d:
         41:d3:77:a4:b6:15:1e:23:7d:b8:dd:49:61:c9:64:92:a4:c2:
         a4:0a:ef:9a:64:54:0f:da:a9:03:de:34:03:c7:b8:51:7d:04:
         19:90:85:07:85:b5:d8:91:64:97:5c:33:e0:2a:41:16:49:24:
         fe:b2:f6:61:de:80:1a:11:01:a7:fb:ad:c0:18:50:07:52:51:
         d4:80:ca:c1:13:21:87:7c:be:d5:fb:c2:de:02:0e:92:28:88:
         68:56:ff:59:d3:e2:5b:32:e8:ca:d1:55:48:0f:c5:10:5e:ee:
         84:42:d3:7a:93:04:c3:eb:7e:25:7d:9d:cc:a7:26:16:74:a5:
         e1:cf:85:b3:c6:60:2e:fc:02:68:b5:23:b8:97:a4:aa:4a:f2:
         53:ec:28:31:5d:dc:4a:90:5f:41:91:da:f7:2d:ed:44:87:22:
         6c:44:a3:41:15:a7:24:01:a3:a8:60:9d:f7:48:e9:1a:fd:0f:
         d3:8e:2a:ea:c9:b7:c0:22:07:9c:ab:ae:15:42:97:65:e0:94:
         4f:04:9b:d1:9e:ce:bb:03:1a:f4:8a:a6:02:47:35:03:fd:92:
         26:68:e4:00:56:59:e7:29:9c:93:d1:90:93:70:31:68:09:8e:
         0e:3e:b9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:36 2026 by rpki-client