This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File:                     eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier:          siJUcclp4Kvout1aNQvrFvqi5GZqrcY0EG1GFVHAm9I=
Subject key identifier:   D9:23:32:56:CD:69:D2:E7:68:F6:AB:BD:09:5A:B0:85:98:E4:0C:37
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer:       /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial:       019B0F0093A32421820D5D0B429A53D51084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number:          01B9
Signing time:             Thu 11 Dec 2025 20:00:54 +0000
Manifest this update:     Thu 11 Dec 2025 20:00:54 +0000
Manifest next update:     Fri 12 Dec 2025 20:00:54 +0000
Files and hashes:         1: 07Dre1kZ1oyyZdumPkKx6qPgfFY.roa (hash: RR36HXtAKDeJVmCbbh+1KLLcoMylQhGqmF8IKuf7xSg=)
                          2: L9P5jce1CFUQf8kDcRnSKMNRg6Y.roa (hash: y2cI0gHx5iyLsjT9G/msQppoT5m659vB4r+3Psa3q7U=)
                          3: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: z7qvN8lbaQmldmhrQT0MKfEd57RlxeZjuCMCotFgxLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0f:00:93:a3:24:21:82:0d:5d:0b:42:9a:53:d5:10:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
        Validity
            Not Before: Dec 11 20:00:54 2025 GMT
            Not After : Dec 12 20:00:54 2025 GMT
        Subject: CN=d9233256cd69d2e768f6abbd095ab08598e40c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:46:ba:82:e9:33:7d:83:ee:80:9f:ad:66:
                    f7:3c:b1:49:ba:fb:ab:00:b5:b3:ab:3b:4f:e5:17:
                    47:b1:f4:69:a9:fe:7b:8a:9b:aa:de:fa:73:6c:11:
                    3e:69:dc:d4:d9:7f:19:7c:82:d5:1f:cd:11:51:17:
                    39:5f:1c:cd:cd:b2:31:dd:99:16:5a:04:9c:eb:03:
                    30:8d:8c:ba:68:eb:28:ff:21:10:05:08:70:39:2b:
                    6c:c0:8a:ea:cd:b2:57:21:df:df:b0:7a:47:2d:c2:
                    c6:c9:71:e2:2a:ea:8a:0a:a9:74:14:a3:1b:a6:9d:
                    e0:4b:41:55:4f:9c:91:e2:01:65:b1:52:56:29:50:
                    ec:e0:e2:ca:a1:0c:fb:91:de:e4:82:b1:1e:58:07:
                    a4:86:50:dc:46:2a:10:32:c9:d0:d3:6e:f7:8c:80:
                    ac:41:85:04:4b:ca:08:a1:8b:8a:ab:93:83:d8:0d:
                    b7:65:8f:11:5b:75:a4:1e:d4:91:b0:e4:bc:d7:1e:
                    35:40:23:63:53:2d:2d:3b:aa:d0:68:8f:7a:d4:61:
                    5b:79:40:8c:12:12:b7:85:e7:7d:56:49:1c:a7:f1:
                    d2:42:2c:7b:b2:e1:ba:c2:82:0a:0f:83:92:e5:c0:
                    b0:00:6e:cc:ad:49:fe:95:94:bb:2a:ec:4e:3b:da:
                    5a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:23:32:56:CD:69:D2:E7:68:F6:AB:BD:09:5A:B0:85:98:E4:0C:37
            X509v3 Authority Key Identifier:
                keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f8:9e:b3:ad:0e:a6:c4:9e:3d:1c:59:85:3d:0c:d4:63:5f:
         56:1e:a0:fa:b4:80:ba:01:a3:9b:9c:2b:48:33:d4:06:17:ac:
         f6:89:21:fe:28:fd:bc:7f:28:3a:1b:3e:17:f0:5a:79:7b:dd:
         02:4d:71:98:a8:c2:71:45:22:da:6a:5c:a7:a8:32:63:0c:46:
         bc:0f:f8:4c:5c:d2:8d:47:95:f0:82:71:36:3c:e2:d4:b6:2b:
         e4:06:fc:86:72:db:d9:94:8a:08:44:0d:b6:ee:43:33:f4:eb:
         76:53:92:ce:5e:30:e6:68:d9:9d:7f:b4:7c:92:a8:74:cb:be:
         5b:34:50:3f:15:52:4e:bb:d0:69:51:22:21:3d:5e:ee:cf:a7:
         4f:f6:ee:40:34:f7:3f:5a:59:ed:f4:72:1b:2a:d4:53:5f:20:
         75:c6:4b:37:80:1d:5a:5f:2a:e8:86:18:bd:8f:63:08:34:44:
         0b:ee:88:25:8e:2e:3b:fd:c4:56:8d:13:06:0f:4a:05:b9:92:
         b7:72:80:3b:d8:85:02:ba:95:7e:58:a1:4d:b1:d8:bf:f2:93:
         0c:be:3d:cd:db:da:41:23:70:7e:18:5c:1e:9a:ec:eb:f3:ea:
         6d:c8:54:7a:51:35:63:38:59:d6:4a:48:69:39:0a:61:41:19:
         bd:82:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:53:25 2025 by rpki-client