This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File:                     e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier:          O1kKvSDp3Rg/PlAJxkJD1W4uW1iaqxsc1jjEjhIwqUY=
Subject key identifier:   9B:8D:92:84:19:4F:A5:E6:48:9B:A1:1C:37:A1:BC:A5:92:AC:8E:CB
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer:       /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial:       019AF276D44F0E18DB294BFA309BDB823331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number:          0BBE
Signing time:             Sat 06 Dec 2025 07:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 07:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 07:01:05 +0000
Files and hashes:         1: 67OzM8ECZbyoq_BnZX1dgSdsSqE.roa (hash: g9PYZvAqU4JsF+aihO2ckiHQRSBgUe4u8ImvTFXc4Uo=)
                          2: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (hash: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=)
                          3: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: iQBYnFLA8fzRN4Zq+Lt+M2pIYVjIQOlqs3T+KS5xxiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:d4:4f:0e:18:db:29:4b:fa:30:9b:db:82:33:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
        Validity
            Not Before: Dec  6 07:01:05 2025 GMT
            Not After : Dec  7 07:01:05 2025 GMT
        Subject: CN=9b8d9284194fa5e6489ba11c37a1bca592ac8ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:30:b3:59:6a:3d:2d:1d:04:21:35:9d:65:
                    94:a1:5a:84:20:0f:77:b4:86:ab:77:cb:22:bf:ab:
                    2a:b1:f4:55:51:fb:5f:dd:de:fc:54:8e:bc:78:18:
                    d6:67:fc:ef:4d:7e:9a:7c:be:99:6e:24:9f:81:fd:
                    ed:82:39:18:9d:f2:70:57:16:a7:fe:96:8b:b7:0c:
                    59:ce:64:43:9c:8f:d2:c4:bf:b4:93:00:d9:e5:17:
                    ec:3b:5b:74:59:a5:34:ad:bc:32:8a:c0:26:8a:49:
                    15:07:7f:6e:bb:c4:2e:50:3f:34:73:b2:65:40:d1:
                    fb:80:54:97:a3:e4:e4:69:0a:70:c2:88:29:a8:6a:
                    8b:80:a4:99:69:1f:d3:7f:44:9e:04:96:c5:7c:55:
                    6c:d6:af:eb:e8:3c:a5:14:31:7e:7f:21:60:66:7c:
                    9d:d0:44:fb:e0:a2:45:a8:01:9d:bb:be:d3:4d:dc:
                    58:9a:f3:1d:45:67:e8:9b:4d:d2:5e:ef:c9:aa:a5:
                    c1:5a:77:20:46:ef:69:72:0f:07:10:05:3e:c2:55:
                    6b:b6:ae:e1:b3:28:4b:fe:f5:63:6f:ef:1e:65:80:
                    e4:d1:03:dd:0b:9e:cc:d6:77:fd:46:1e:6e:47:51:
                    fa:75:a0:e0:3a:22:5a:0d:a7:db:92:67:44:bb:25:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:92:84:19:4F:A5:E6:48:9B:A1:1C:37:A1:BC:A5:92:AC:8E:CB
            X509v3 Authority Key Identifier:
                keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:32:6f:16:c7:fb:2d:85:4d:37:55:cb:5f:9a:42:24:1a:5f:
         af:e2:87:bf:62:11:57:85:29:07:14:5b:f0:45:35:da:07:11:
         47:97:68:c3:75:fe:bc:37:d5:b1:28:12:2a:08:97:fd:b9:63:
         c3:e0:09:6a:c9:7c:f4:0c:bf:d5:c8:e6:3e:ae:38:79:95:fe:
         05:48:0b:77:4c:d3:a5:72:0c:b8:41:a2:b0:92:1b:4f:2b:59:
         d4:a9:e9:0c:7c:d4:b4:ec:5f:64:4a:82:66:e9:19:47:30:bf:
         9f:f0:13:7d:43:3c:18:fb:50:78:9c:a3:de:58:f5:8e:6a:19:
         36:83:8a:31:2c:bb:c7:c0:3c:d9:29:66:68:f9:df:d0:bd:cf:
         39:17:8a:05:79:ec:d1:8c:74:65:ba:45:e7:af:af:81:7a:86:
         26:63:2a:a5:c7:cd:0b:4c:a5:41:28:1b:3f:e8:90:f0:e3:15:
         9a:34:e2:c1:c1:96:59:44:54:7a:00:4b:e2:1b:dd:83:56:9a:
         a9:ce:c2:55:d1:76:6a:5e:62:98:9f:da:cd:01:ee:af:09:c4:
         c6:43:9e:bc:ef:1a:0a:6d:c4:78:84:5e:ed:f8:41:5b:8b:28:
         7c:86:92:8d:78:fc:08:5b:34:b7:8d:ba:70:f2:75:e2:64:89:
         8d:0c:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:36:01 2025 by rpki-client