This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
File:                     eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft (raw, json)
Hash identifier:          7IAw6NswO1ZRARsC7vrNov/MbLVnefTxSnMilTwsTX8=
Subject key identifier:   BE:99:7C:7B:11:EB:5D:F3:44:D2:6A:42:AE:CC:89:7C:9F:B4:CF:44
Authority key identifier: 78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
Certificate issuer:       /CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Certificate serial:       019AF6538ABCD6127795F196AAF389BE42AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
Manifest number:          0BAD
Signing time:             Sun 07 Dec 2025 01:01:01 +0000
Manifest this update:     Sun 07 Dec 2025 01:01:01 +0000
Manifest next update:     Mon 08 Dec 2025 01:01:01 +0000
Files and hashes:         1: 0U0iwiffVettO-vogpqMch7csq4.roa (hash: uPiED/FamX8UNur9ecAQaLp7MXQZVhIJRf73CMOjMOY=)
                          2: eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl (hash: lUyeIktUtrFbfow6pMb1/DMShG02owst+PetpYjdM9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f6:53:8a:bc:d6:12:77:95:f1:96:aa:f3:89:be:42:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
        Validity
            Not Before: Dec  7 01:01:01 2025 GMT
            Not After : Dec  8 01:01:01 2025 GMT
        Subject: CN=be997c7b11eb5df344d26a42aecc897c9fb4cf44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:9e:ac:09:c7:04:23:91:7d:77:42:78:1c:
                    d2:19:aa:5b:d1:49:b2:63:17:81:97:66:83:75:50:
                    00:a1:a9:f3:db:8a:87:34:a9:7f:17:c6:4b:16:cd:
                    c5:03:86:08:ba:83:5c:dc:48:5f:06:01:9d:a1:ce:
                    72:57:12:05:21:22:86:86:b2:50:f1:c2:ed:3c:4e:
                    b2:da:99:15:05:a5:1a:bb:42:f3:92:6f:7d:23:f0:
                    72:54:5b:d8:cc:f6:9c:04:c2:32:bf:0e:b6:c2:d2:
                    ca:07:af:49:04:5a:80:2b:31:f1:4e:97:ee:1d:2c:
                    17:31:08:14:0c:e5:11:8d:3c:4b:e2:56:d7:c9:96:
                    5a:17:a2:03:be:e4:94:b5:b3:1e:a9:b0:62:ac:92:
                    0f:b6:96:00:70:d7:81:75:ea:9c:59:54:c4:72:07:
                    ba:e5:9c:11:d2:21:aa:eb:6f:03:9d:af:68:63:23:
                    44:fa:75:8d:48:0a:22:8d:e1:90:26:5c:6d:24:0a:
                    cd:e8:e3:95:55:11:fb:ac:e2:a2:c7:6d:cf:3d:53:
                    3d:f9:95:96:97:fa:a9:14:24:45:9c:4c:43:c1:20:
                    d8:c4:31:a8:58:e6:34:61:94:c3:27:d3:1d:64:b7:
                    79:ac:d1:4b:f2:af:82:1a:bb:44:77:29:d0:09:92:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:99:7C:7B:11:EB:5D:F3:44:D2:6A:42:AE:CC:89:7C:9F:B4:CF:44
            X509v3 Authority Key Identifier:
                keyid:78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7f:2b:c9:e5:2a:d5:4c:3a:a6:cd:44:dc:50:57:df:50:d7:
         be:d4:1f:12:73:9c:de:8e:1d:ad:9e:eb:7d:4a:ce:66:a8:49:
         7d:c7:69:87:18:2f:f0:b0:1a:57:52:ae:e8:8c:f4:26:46:8e:
         55:31:5b:fc:a2:79:5c:95:37:7b:3a:ac:02:2f:57:f0:fb:7a:
         2f:29:07:0f:29:e2:ba:9f:60:00:29:e7:07:8d:19:14:4a:50:
         79:1e:fd:bf:60:3c:7d:05:f8:d5:05:b0:5e:17:87:4e:38:b1:
         c0:56:67:03:41:ea:cd:a1:06:b9:d3:31:8c:f0:65:22:e5:be:
         6e:bc:1e:dd:e2:72:96:10:1a:16:a7:b5:0e:24:50:85:e8:a2:
         c1:43:43:79:27:44:54:89:4c:82:db:6c:63:01:fa:1c:53:2f:
         60:cf:c3:57:d7:5c:d4:15:75:c4:0c:e4:94:f3:26:e2:37:ce:
         7c:8a:98:88:cd:f3:9f:5f:5b:b1:dd:56:57:39:72:ce:83:01:
         01:99:5e:e9:99:72:2e:60:79:cb:35:84:40:dc:a2:86:c8:a3:
         78:d5:dd:5f:fe:ba:58:30:ba:7e:80:d6:78:4b:c9:40:26:cb:
         45:0f:2f:59:70:64:a5:cc:5f:63:4d:0f:bd:a3:ce:5c:8c:c3:
         96:0a:10:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:34:36 2025 by rpki-client