This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
File:                     ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft (raw, json)
Hash identifier:          1yzLDsDR31FscR696LIpVjdx2zeX30Ygt6UKcak760I=
Subject key identifier:   ED:14:E5:5D:72:25:16:56:EC:AC:EE:36:A2:F3:73:EC:00:BF:F4:16
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Certificate issuer:       /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial:       019AF31D413F4725E702D2DB03675D710A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
Manifest number:          147C
Signing time:             Sat 06 Dec 2025 10:02:51 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:51 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:51 +0000
Files and hashes:         1: BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa (hash: hSczRhljFIoa/6OnEWTHUCmzoj5N2dcbKHbecT1X5S0=)
                          2: UThfbWvZb2PXAmFnxUbwmcadIvs.roa (hash: SO7N8NAXEb8d0CKRuGu75MSAjtkwodWQ5MaMjLOJVMY=)
                          3: ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl (hash: g9ymrFb2cjsdw56vkxk5TJx9YFzEvQgkzN5Kv/kQDI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1d:41:3f:47:25:e7:02:d2:db:03:67:5d:71:0a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
        Validity
            Not Before: Dec  6 10:02:51 2025 GMT
            Not After : Dec  7 10:02:51 2025 GMT
        Subject: CN=ed14e55d72251656ecacee36a2f373ec00bff416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:49:90:1f:82:58:9c:2e:29:a7:73:b1:3e:
                    0e:d5:16:09:7e:50:e5:fb:fe:3e:0e:65:f9:a9:77:
                    0c:81:68:9e:86:19:98:6f:a2:8a:db:71:f5:88:8b:
                    48:c0:dd:cf:bb:06:05:1a:7f:0d:a6:34:85:28:60:
                    46:8e:11:58:b3:61:56:6f:c2:10:f9:94:96:a3:c0:
                    4e:b0:51:63:62:5b:ae:c0:59:a4:bb:a4:f8:1b:54:
                    3d:64:8c:a3:40:c4:e6:92:d8:d1:c8:f8:a9:33:c2:
                    1c:e7:28:9e:db:d2:c7:49:25:50:bf:8d:cb:81:b4:
                    2d:cf:21:46:7e:4b:66:09:3d:71:e6:30:a9:4c:e2:
                    f4:20:5d:c5:de:87:4e:ac:45:41:1b:40:c4:10:09:
                    a7:49:ed:10:b0:2a:52:ef:db:a8:ef:e9:0b:b8:3f:
                    d2:0c:8b:bd:ee:15:04:ef:9a:f7:b5:24:69:01:2b:
                    59:3b:c3:76:b6:c6:00:6e:6b:40:c7:e6:6f:8a:25:
                    7b:5a:d8:3a:ab:5b:2f:99:29:3f:fe:e9:3c:c0:4e:
                    d4:7e:d2:b4:31:43:1b:9a:8f:66:05:63:d4:cc:2f:
                    96:1a:fa:f1:d7:33:c9:56:03:b9:ec:2c:fe:6c:15:
                    cb:50:91:fe:69:c4:49:a4:86:dc:8c:c1:fa:9d:6d:
                    cc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:14:E5:5D:72:25:16:56:EC:AC:EE:36:A2:F3:73:EC:00:BF:F4:16
            X509v3 Authority Key Identifier:
                keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:28:29:06:ef:08:8c:1c:73:cc:8d:e2:66:24:e8:01:97:4c:
         5c:66:77:e2:a2:e8:df:36:e6:18:b4:4f:b4:c8:81:11:37:eb:
         aa:6d:cb:60:90:39:e3:f0:55:47:18:2d:5b:f1:97:0b:53:2a:
         2e:f7:16:14:2b:ac:ce:83:46:85:ba:09:f4:1f:eb:a4:92:1b:
         cd:e4:d0:12:c0:73:ca:47:40:a6:43:4d:d3:e9:79:f1:96:f0:
         b3:dd:47:00:7c:01:27:fe:28:97:74:c5:cf:11:56:f7:d3:d6:
         f6:30:3f:4b:25:d5:19:33:07:4e:22:35:6a:96:41:17:1e:32:
         7a:da:cf:6f:d2:bd:0d:77:83:56:e3:ef:3d:03:e8:a7:51:be:
         a3:bf:44:d0:6b:91:fa:6d:9f:ba:4f:7c:99:f8:71:38:7a:fa:
         6c:fc:51:46:56:e2:7b:54:fd:4b:48:80:e0:d5:0d:27:64:36:
         94:95:4a:03:58:c1:0f:bb:fe:e2:f4:df:38:e4:31:a9:ad:40:
         bc:4f:08:92:ec:88:d0:25:77:d6:ce:3e:57:fa:aa:db:6f:c0:
         54:92:ad:95:ee:7a:dd:f1:32:58:33:88:8c:f6:7c:32:36:68:
         b7:c0:fc:1f:bf:86:ed:45:28:07:fc:0d:b1:b2:54:43:ec:04:
         dc:29:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:45:51 2025 by rpki-client