This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File:                     ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier:          paMSNAeIlFySeu8gOOcOXV2XVaSCTFa/uauHz0BAms0=
Subject key identifier:   4E:B9:B1:3B:8F:65:77:CD:FA:0C:AE:1B:92:34:8D:B4:66:3B:20:85
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer:       /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial:       019AF2ADA60C4D5C2687FB4EA9A95BA654FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number:          1779
Signing time:             Sat 06 Dec 2025 08:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:57 +0000
Files and hashes:         1: L1ShoUFH_3QzKX_ke8HAX0Fww6c.roa (hash: FUc2MDD+4o/7JlgpFpcB29tfev/YxELBDTuLaAO672I=)
                          2: ZrX8NZOF_lteMSM3oZka22ZVn3E.roa (hash: cAb9eZ4FePRwUO0ACpP0sUggRm8S5e53qPUlHsPvg2Q=)
                          3: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: zAmJ75tPFP8UeseUcLW1SGo0RwBcox2qPtcTjhmx5vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:a6:0c:4d:5c:26:87:fb:4e:a9:a9:5b:a6:54:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
        Validity
            Not Before: Dec  6 08:00:57 2025 GMT
            Not After : Dec  7 08:00:57 2025 GMT
        Subject: CN=4eb9b13b8f6577cdfa0cae1b92348db4663b2085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:8a:ac:9c:ca:19:0b:c6:01:51:6d:7b:0d:
                    f9:2a:09:77:a0:96:5c:98:44:3e:6b:d3:88:b4:08:
                    12:56:ea:5c:8f:fb:af:7e:06:40:8f:0d:46:ea:6a:
                    3d:4d:0c:8b:4d:e4:13:8a:54:86:f5:66:50:09:d3:
                    b7:21:28:9d:42:e9:24:78:c1:1a:56:30:76:d0:11:
                    a2:b8:ae:44:03:32:58:9c:27:d3:7a:ee:19:ea:08:
                    c2:21:a8:84:0b:ef:31:97:26:48:5c:ad:cb:92:6e:
                    56:54:6a:e4:a8:de:90:45:36:e9:f0:54:8e:07:da:
                    45:fd:33:6d:55:4b:87:ff:a3:84:d7:7a:85:36:40:
                    72:47:b3:1a:ed:bc:ae:eb:c2:7d:be:9b:39:a5:68:
                    80:3f:e6:ee:f2:46:2d:d5:5f:33:9d:40:6e:9d:78:
                    52:d2:3a:c9:85:eb:30:f3:b8:c5:5c:f8:fd:49:8d:
                    83:e9:00:c8:8c:e3:64:3d:39:c2:55:d7:04:e6:3b:
                    23:9b:f0:4d:d6:61:ee:e5:3e:1d:e7:28:c9:9e:e5:
                    ef:cd:b4:c3:04:39:3c:7a:50:de:ab:99:9d:68:e7:
                    8e:5c:7e:58:c8:dd:5f:8c:13:67:99:83:d9:54:50:
                    8e:b4:a8:10:80:54:55:af:e0:bb:7e:bb:fe:16:ef:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B9:B1:3B:8F:65:77:CD:FA:0C:AE:1B:92:34:8D:B4:66:3B:20:85
            X509v3 Authority Key Identifier:
                keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:59:b2:d8:c9:11:b4:60:34:62:5f:df:cf:2b:8d:e7:00:0b:
         0d:7e:bb:7b:46:96:97:6d:c0:1b:a8:e0:6c:94:e8:05:8e:cd:
         db:af:c3:3e:06:75:31:19:d6:35:ba:8b:ab:16:d1:c9:b9:41:
         5f:55:8d:66:d8:e2:8b:f4:d2:e7:1f:94:7d:f2:f3:a9:32:61:
         09:d6:08:ab:ce:4d:00:24:ed:07:f7:7b:fb:f8:58:0b:8b:b1:
         8d:61:98:92:48:76:52:5a:0f:60:67:d2:ab:03:38:eb:04:b6:
         b9:f1:ea:88:ab:52:83:be:32:1c:eb:7a:6b:61:ab:fc:88:3a:
         ec:4d:cc:c7:71:9b:29:0f:b9:65:e5:ec:eb:93:fd:43:b8:78:
         df:20:f0:3b:3d:93:31:b0:71:74:58:20:b9:3f:cc:f0:8b:a4:
         a1:93:62:16:ec:e3:0b:8e:be:d5:cc:01:80:b7:f2:d6:7e:44:
         bf:75:cb:21:46:af:6e:55:7a:b2:37:cb:14:2f:8b:dc:89:94:
         6b:c5:66:bc:39:3c:c0:70:05:5e:fa:de:b8:0a:8a:08:a8:92:
         9a:3c:25:85:43:fc:c1:d3:a1:41:0b:c7:21:1b:2b:c3:7b:82:
         6c:32:4b:7f:3d:e9:da:2a:fa:80:56:25:99:0e:41:7e:0d:1a:
         99:ba:79:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:36:29 2025 by rpki-client