This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
File:                     63u7_vWVCecmOYb3gFiaseeZhCM.mft (raw, json)
Hash identifier:          AeNligqNTvmLYsx27vUr9DlfIXoJ4rTyx8lDBCkNF+o=
Subject key identifier:   A7:92:19:E5:12:05:A8:EB:E9:B2:7B:A8:EB:D8:4E:B1:F1:F8:6B:B7
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Certificate issuer:       /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial:       019AF2AD689FB57B7FBCB0E89FE222A61929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
Manifest number:          0CC4
Signing time:             Sat 06 Dec 2025 08:00:42 +0000
Manifest this update:     Sat 06 Dec 2025 08:00:42 +0000
Manifest next update:     Sun 07 Dec 2025 08:00:42 +0000
Files and hashes:         1: 2BUGiRoL3RcSi7pY5f5xCjUN0VE.roa (hash: 6n3B6T6zOS7/ZMATij6xHm3dHxmihydJs8pSIyJdQOo=)
                          2: 3vDeAfLkiHCXh_bvB_uIne94H5g.roa (hash: b46TBjcEv5nDO9EWtbqceuM5D9jO8fm++JeI+6HPFkk=)
                          3: 63u7_vWVCecmOYb3gFiaseeZhCM.crl (hash: Ty7t2X1rr4PZDnga30Tyj4M4csWcm3Z9vcpstmp/YZM=)
                          4: JuLc15VQAUmfB5AhoFLPEFJjfOM.roa (hash: O2lLcciXAiORRxhqLiNEE2RffnRd8Q3rIUVOEkgnsXQ=)
                          5: LlVSfF2zbrfiTXsgpEfHg8iUgFg.roa (hash: YW2S4XaDpuDeBAX82B6q2dhsWAkKwz2ghZXjdNsB/3s=)
                          6: _cTjsccOlGfEayp8PXkvdYi_98o.roa (hash: FJYOiN3Fx5xaiccdaHyFz//7kwAj9hCTVSJd74dQwjU=)
                          7: i7e88REZIOCxR1OxendrEYYVqcE.roa (hash: NlgmAK3hiLBR5dH57/MCWPhaMtt4b6Gh+Scb1REySlY=)
                          8: tn6YiE2_z2Bgvd-QfHkeVEmemUU.roa (hash: hY4mdHuIs45tX1gpYMoJmJu5qNi8mSFLm+F2DSiuG10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:68:9f:b5:7b:7f:bc:b0:e8:9f:e2:22:a6:19:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Validity
            Not Before: Dec  6 08:00:42 2025 GMT
            Not After : Dec  7 08:00:42 2025 GMT
        Subject: CN=a79219e51205a8ebe9b27ba8ebd84eb1f1f86bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:21:96:3e:29:8e:48:1b:86:ed:e6:cd:5a:
                    6a:69:de:88:35:59:9c:d4:dd:c5:46:d5:5a:18:aa:
                    7e:72:98:10:33:39:06:2c:aa:ec:a4:c0:d0:c9:44:
                    9e:aa:0d:e1:24:bd:cb:6f:81:8e:c0:d1:45:42:4e:
                    70:ec:dd:5a:16:90:ef:1f:9d:aa:73:77:f1:06:da:
                    c9:2c:ed:06:18:87:dd:61:2c:44:bc:76:e3:d4:c3:
                    21:a1:bc:39:c3:91:29:5d:e9:60:f5:32:bc:6e:ac:
                    36:c4:d5:0a:cb:86:a2:a7:c7:aa:dc:62:10:dc:f1:
                    a7:a1:4c:28:6b:58:c3:3c:1c:b1:0f:b7:9e:fe:c6:
                    53:e8:7d:98:30:2f:1d:a2:87:8f:21:b1:5d:8c:b8:
                    0f:e1:6c:b6:df:d9:b9:d1:c5:fe:c6:46:ba:6e:e2:
                    cc:6a:5d:3b:1e:99:fd:35:bb:47:89:85:c7:8d:3d:
                    94:49:63:b7:df:b7:66:92:e1:bc:f0:3b:5a:12:2a:
                    4d:3a:87:ae:8c:8a:3f:f2:54:77:7c:fe:2e:7d:20:
                    87:79:d3:f3:ed:0c:8c:50:03:6b:fd:13:5a:4f:74:
                    65:17:8d:03:f4:f4:9d:86:de:2e:4e:45:66:88:8d:
                    c7:f0:a0:40:73:85:0d:84:ed:5d:85:cc:0f:77:fa:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:92:19:E5:12:05:A8:EB:E9:B2:7B:A8:EB:D8:4E:B1:F1:F8:6B:B7
            X509v3 Authority Key Identifier:
                keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e6:a6:d0:39:61:3e:c3:6d:f9:21:c1:71:6a:77:c0:c5:04:
         05:89:ab:56:d0:a6:5b:2a:00:b0:1e:3e:3e:74:af:7c:17:e8:
         f7:ad:bf:eb:18:f9:d6:7d:05:0e:8e:02:db:27:23:9a:61:20:
         66:20:66:1b:93:d9:f2:82:26:11:21:c0:38:4d:b7:6b:1a:a6:
         64:f0:34:46:2e:86:99:ea:c8:fb:a3:cd:c4:63:c3:cb:85:91:
         d5:81:01:16:1c:ab:a5:c7:3a:09:10:0d:00:35:f4:05:09:31:
         8d:9d:2a:e1:bc:84:df:e2:38:da:c6:74:0d:ef:67:d2:dd:10:
         27:7b:f6:52:ef:47:7e:8f:f9:77:43:7b:53:f4:e7:56:36:66:
         4b:f2:77:f3:80:ad:b6:fc:a2:e1:54:47:1c:94:56:ef:11:5c:
         af:2e:ae:ac:e4:4b:35:ad:4d:d6:d0:82:3f:3d:e1:5d:d4:64:
         2e:d3:11:b5:a4:ec:7c:8f:3d:e7:3b:5f:dc:4c:6a:10:c4:91:
         cf:ab:4b:77:68:18:43:17:34:42:03:13:8d:32:f1:55:f9:ab:
         c7:16:34:dd:2e:41:29:f0:a8:5b:bc:d1:2a:b3:85:0b:6f:76:
         d9:8d:32:8a:86:48:e1:4b:e3:88:5a:89:52:84:a4:a0:87:4c:
         d9:28:53:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:05:46 2025 by rpki-client