This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
File:                     iBeayQUvaUGzlTW3_SHiqrCNWHg.mft (raw, json)
Hash identifier:          p0bLr/y3NE+s9NSLy5jK8UKmA/wfwz/XjgMA9wQjd6w=
Subject key identifier:   76:5C:36:3F:62:E2:FE:0A:1A:CD:01:D3:5A:B2:0A:DE:70:EA:05:FC
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Certificate issuer:       /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial:       019B2740D99D4A5741464B58C6FF1CD21268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
Manifest number:          0B82
Signing time:             Tue 16 Dec 2025 13:01:59 +0000
Manifest this update:     Tue 16 Dec 2025 13:01:59 +0000
Manifest next update:     Wed 17 Dec 2025 13:01:59 +0000
Files and hashes:         1: Z_OLWZ6W9BJiFacNzeW_BCTt8Gc.roa (hash: Zv3WTepDDuaUMOjNvNkUTX961SONZOKhWmA3prVMCew=)
                          2: dHQ6Roue5q9X2_27RVBRZx-M-bQ.roa (hash: t+ioWkczf1JQly8pemKFH02i8Om48BMCFauXqqk2WAE=)
                          3: iBeayQUvaUGzlTW3_SHiqrCNWHg.crl (hash: LssqHEIgxfAid/UvnYh8eMq7kVlXwPBwgwxZml9qCJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 13:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:27:40:d9:9d:4a:57:41:46:4b:58:c6:ff:1c:d2:12:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
        Validity
            Not Before: Dec 16 13:01:59 2025 GMT
            Not After : Dec 17 13:01:59 2025 GMT
        Subject: CN=765c363f62e2fe0a1acd01d35ab20ade70ea05fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:23:3c:32:43:21:29:91:a4:3a:86:b6:be:
                    73:a8:39:32:e1:26:7e:96:20:dd:11:5f:c4:b2:bd:
                    f9:65:58:c3:dd:e0:c6:6c:b7:81:3b:78:f9:f1:44:
                    0e:ce:e0:c2:8d:15:18:01:22:74:f8:f0:04:ef:11:
                    40:de:35:85:7d:84:94:c0:d0:84:1f:41:0c:58:86:
                    59:67:91:d4:ee:30:5a:83:51:94:29:23:96:7f:a5:
                    74:15:e1:c3:1d:97:26:e0:33:a8:cb:c1:b1:45:cd:
                    9a:43:ed:46:f7:1a:b1:dd:e0:21:0b:bf:0b:9d:ab:
                    1b:7d:a9:c3:84:a6:17:10:8c:17:ec:91:62:e2:fc:
                    f7:34:38:52:5c:9b:fa:e3:d9:13:51:1a:ac:ca:7a:
                    45:dc:e4:b7:1e:6c:0c:e1:51:07:f6:ef:4e:8d:b1:
                    60:1e:03:40:40:c6:9c:1b:2e:05:be:c8:a8:39:f8:
                    16:6c:c3:b0:e0:42:6e:9a:3c:12:8a:4f:8b:ae:2d:
                    9a:c3:04:73:c8:31:f6:81:76:11:6a:2a:c8:7a:99:
                    0d:2e:01:de:0f:d2:d3:f5:d3:ad:42:42:1e:d1:f7:
                    79:a2:99:4d:c8:fd:30:f0:28:6e:b2:03:4a:aa:30:
                    d1:b5:de:74:08:b3:1d:02:30:1b:0f:96:02:b6:2f:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5C:36:3F:62:E2:FE:0A:1A:CD:01:D3:5A:B2:0A:DE:70:EA:05:FC
            X509v3 Authority Key Identifier:
                keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:91:d0:df:4e:42:c5:75:ea:51:c6:00:65:89:79:91:74:4c:
         be:ef:db:40:d6:f3:fe:98:98:24:a8:8f:98:24:06:96:5b:a3:
         31:57:e5:b4:83:6a:a9:a8:cf:74:54:55:00:c8:4f:74:aa:23:
         c5:1e:11:cb:c3:24:9e:75:eb:50:16:55:fb:17:50:8a:37:aa:
         71:7b:6c:2b:f4:35:0e:d2:2a:88:db:61:3a:7b:60:36:cd:65:
         7f:df:d8:73:e0:2a:6e:4d:ce:9f:c8:f4:6c:75:88:d9:66:d6:
         6f:3b:ed:65:e3:70:ff:32:15:71:af:74:56:c3:57:d2:3b:5a:
         a8:e5:43:ad:eb:43:c4:84:01:72:bf:ad:85:0d:6f:8b:2e:44:
         4f:1e:04:d6:3e:94:5e:15:e4:42:b2:62:07:ce:6c:9d:27:0c:
         b8:36:ac:09:81:a2:37:6e:c0:48:d1:7c:d3:5a:f2:ce:c7:42:
         b5:fc:ce:de:e5:f7:0d:a2:2c:1d:d9:ef:f5:fd:7c:3f:39:8f:
         a7:cd:1c:f3:5c:e5:00:97:96:6e:87:fc:c3:33:5d:6a:5c:eb:
         30:55:d6:5d:f6:d5:d8:48:47:b0:cc:99:3a:d8:9b:30:ba:1e:
         32:46:9c:84:b3:7a:ba:b7:fc:3e:0d:a3:5c:f0:f8:8c:e5:2b:
         e9:fb:93:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 20:03:56 2025 by rpki-client