This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          CjvMZNYk72dII+4zhf4W++pd6t8v5a+Pwnw9LrgHfc4=
Subject key identifier:   A1:E1:F6:2B:12:55:DF:66:72:D3:D6:29:AB:2F:16:89:19:48:88:04
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       019AF27678C3108208E0393F91E4979A9A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          1769
Signing time:             Sat 06 Dec 2025 07:00:41 +0000
Manifest this update:     Sat 06 Dec 2025 07:00:41 +0000
Manifest next update:     Sun 07 Dec 2025 07:00:41 +0000
Files and hashes:         1: 2vvTx_yFrt5UrJ0WVDTO--gQh60.roa (hash: eB4HsG9FbYTVRCz9S1t9E+zrZDYTm7BTeCXp3dMiZIo=)
                          2: 7JHYrzTxN9asgLqVnNRUfP1LZ10.roa (hash: ChCGPqEl2ro34qpoNR4Xt2LPCuZTPhOJ4X9rWHYGEBA=)
                          3: IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa (hash: z5Pywc8Q1iL9qP7SJuBWFjeFMCxifvSPuK7zriYnBBA=)
                          4: Q0Z-cVwA4XOeztdkNcwehwFNVmI.roa (hash: MwfJgtXJrn1M2+nm68X48C8kqLl8c52QU/MPByryzoA=)
                          5: QvqihRljCm445jweQ6gFK7wXIOs.roa (hash: b6Ii57U4Sye1rJOrny/XLuYZqJiC9WdbHx+cBgoka7I=)
                          6: T-_3CIyQbqlGg305SxQy5ftJI7w.roa (hash: F0s6Ci0GqXXpEL55mUmVrJT+nL7cPcs5GgzPcy37r9s=)
                          7: e71RJyBktjssZjwClroR216iOMA.crl (hash: 9BO+IfefmcQwVDvmdCjqxltUKY09SKTvgg7OM6cuVLQ=)
                          8: huUdoRBrSkw9ERfAbY_K0ms09AQ.roa (hash: /chnp5DKS977ybnp/eJrPNXNv/laADFMHK9MLA974oE=)
                          9: s7qZwF1zjjkn93vRYJKMTeg7njg.roa (hash: pDr3B3csiw+fcAUQmbSFOppqABEiwfJIZfstULKUEoQ=)
                          10: vuOqkJ576TdEaXJp1TfrxOCwRC0.roa (hash: Z+MjMiYxt6MDAWfYglmjvECMwme4DjstDsJyATyGhhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:76:78:c3:10:82:08:e0:39:3f:91:e4:97:9a:9a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Dec  6 07:00:41 2025 GMT
            Not After : Dec  7 07:00:41 2025 GMT
        Subject: CN=a1e1f62b1255df6672d3d629ab2f168919488804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:b9:24:f8:c3:2e:76:06:28:68:e2:89:0e:
                    9a:21:8e:a9:46:ca:93:e2:8e:06:43:08:73:9d:d9:
                    84:2f:5e:c0:1c:e0:e3:98:2b:70:eb:31:af:d9:6c:
                    86:72:74:ea:67:d0:4a:f7:9f:9c:1f:fa:78:af:f3:
                    5a:84:3a:ae:f2:18:3f:2d:25:5e:4b:b6:15:ba:12:
                    b0:06:34:64:a4:36:a0:40:06:21:6d:62:b4:25:24:
                    ce:5d:ec:c1:61:55:2d:97:35:80:a8:91:0d:d9:e2:
                    b8:50:3c:48:48:44:31:f1:f2:e3:58:c2:ad:15:9d:
                    4c:45:b8:14:58:10:f8:f9:03:db:18:eb:68:fa:d8:
                    84:e5:12:7a:cf:5b:e6:3c:15:63:02:0d:25:45:36:
                    9f:db:77:4d:01:7d:45:d8:ca:28:80:85:60:b9:41:
                    ca:a4:00:b8:b0:16:da:c2:df:d8:e5:5d:b7:ea:91:
                    0a:ee:6a:5b:62:20:fa:99:ab:07:a9:92:58:34:58:
                    0d:66:54:43:0d:0b:06:63:04:af:ad:1d:8f:00:bc:
                    a9:c5:4f:e2:a1:a5:a5:03:cb:1a:16:a6:e2:9a:06:
                    35:56:d0:60:b2:d9:ee:56:fe:3f:a5:48:56:f9:a3:
                    18:e4:3a:89:19:6a:36:90:9e:30:b0:be:70:81:74:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E1:F6:2B:12:55:DF:66:72:D3:D6:29:AB:2F:16:89:19:48:88:04
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9d:17:3b:2f:2c:ab:59:63:d5:a7:61:34:a1:fc:72:2c:a9:
         71:9b:05:70:0a:14:2b:e6:10:57:fb:d3:cd:7c:f9:eb:8a:3b:
         81:54:48:fa:d7:03:3a:b4:82:d5:ac:61:36:05:05:e1:aa:f1:
         a4:64:54:ee:bd:e8:2c:0b:ee:86:f0:0d:b8:90:39:79:1a:44:
         3b:c2:f0:fb:bd:f2:09:af:e0:af:00:17:81:0b:84:ca:f3:d1:
         22:d1:e1:41:58:c5:91:64:ad:1f:ca:5a:ac:1b:20:19:52:a6:
         2c:c9:2d:b9:e0:5c:d6:97:58:ed:c3:df:80:30:d0:ab:6b:89:
         ca:35:bc:6d:9a:ac:47:80:01:9c:81:88:53:8d:52:28:b1:83:
         60:2b:3b:15:c3:6d:a4:b2:76:b1:ce:cd:46:95:89:13:12:8f:
         fd:44:17:c4:2a:dd:66:89:42:63:53:43:7a:38:6e:a8:93:e1:
         4a:25:72:5a:dc:5f:93:a6:7d:bd:df:ca:9a:c3:36:7e:52:62:
         16:e5:e4:46:e6:fc:c0:0e:dd:fa:a6:08:32:ac:a6:65:10:31:
         ed:ac:ed:e9:8b:dc:cb:1b:23:aa:c3:9a:8f:67:2a:a8:5c:c3:
         b7:1b:98:26:ef:dd:02:0c:75:7f:e2:fc:db:b3:0f:9d:df:40:
         80:ea:86:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:36:51 2025 by rpki-client