This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File:                     eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier:          iIL3oQApBKcTSTl2BOOXO8oiyzRig/04+LymtSmK+P0=
Subject key identifier:   51:20:C1:8D:CF:6F:FC:D6:63:F1:29:75:BC:C4:74:41:34:2B:6F:D5
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer:       /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial:       019B3B6B74DC0D1C6218478809025A471B02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number:          01D0
Signing time:             Sat 20 Dec 2025 11:00:56 +0000
Manifest this update:     Sat 20 Dec 2025 11:00:56 +0000
Manifest next update:     Sun 21 Dec 2025 11:00:56 +0000
Files and hashes:         1: 07Dre1kZ1oyyZdumPkKx6qPgfFY.roa (hash: RR36HXtAKDeJVmCbbh+1KLLcoMylQhGqmF8IKuf7xSg=)
                          2: L9P5jce1CFUQf8kDcRnSKMNRg6Y.roa (hash: y2cI0gHx5iyLsjT9G/msQppoT5m659vB4r+3Psa3q7U=)
                          3: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: CvJW8B83wB8qFLjfbY4HF4iJWHG8niWh/NXHBSMpFYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:6b:74:dc:0d:1c:62:18:47:88:09:02:5a:47:1b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
        Validity
            Not Before: Dec 20 11:00:56 2025 GMT
            Not After : Dec 21 11:00:56 2025 GMT
        Subject: CN=5120c18dcf6ffcd663f12975bcc47441342b6fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:3a:c7:f4:43:f9:e9:f6:a1:06:b6:7e:41:
                    da:73:32:81:ca:75:7a:b8:79:1e:9c:4f:75:aa:86:
                    5f:c6:53:1e:b4:8f:36:85:0b:32:f9:09:65:a2:81:
                    6a:e7:16:a8:60:f5:c2:6a:e4:6c:d8:f8:ac:6e:7d:
                    e4:54:02:0b:7c:f8:fb:ce:a6:cc:ed:b7:67:bb:a0:
                    fe:cf:12:8e:13:ef:e5:0a:10:06:e5:bf:54:2d:e6:
                    bd:34:6f:6a:e5:5b:34:7b:ff:a8:da:16:b5:54:57:
                    db:87:15:20:f9:e8:07:39:0a:e7:2f:ac:7a:9f:80:
                    aa:4e:bf:b2:a6:9f:bc:36:35:87:3f:d8:95:42:63:
                    4b:8a:3c:8c:2e:ce:07:97:f4:a8:ab:8b:7b:5f:e2:
                    22:f5:92:05:86:8b:5a:1a:10:08:d4:de:0e:09:d5:
                    48:29:5d:44:ef:63:87:6c:f2:47:85:d4:8d:96:99:
                    be:5c:54:d6:a0:bd:56:5e:8d:2c:74:19:52:45:56:
                    6f:22:7e:f5:ee:1f:01:ea:60:6a:3e:b3:ab:39:24:
                    e0:bd:eb:cf:4a:62:c9:ae:64:60:e3:a4:00:66:0e:
                    5d:68:4d:3d:a8:3d:c3:af:32:39:6a:46:06:d2:9b:
                    4a:dc:8d:7f:02:cb:31:97:3c:a6:71:28:b3:2f:13:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:20:C1:8D:CF:6F:FC:D6:63:F1:29:75:BC:C4:74:41:34:2B:6F:D5
            X509v3 Authority Key Identifier:
                keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e9:a7:14:cb:5a:2e:81:c7:ac:5e:4a:21:80:8e:2f:1e:d2:
         4f:9e:b2:1d:ad:c8:72:22:ac:aa:5e:a8:ee:aa:c5:76:53:11:
         de:45:0b:a3:f2:c6:b4:fc:18:08:d6:0d:36:be:38:e3:98:40:
         25:fc:a4:0e:cc:13:8b:33:ce:fd:24:87:4b:f8:43:1b:21:8d:
         1f:e6:5a:02:60:e9:0d:d6:52:5d:0b:74:71:83:73:82:42:ee:
         d9:93:37:f2:f2:e5:be:8a:6c:96:13:9a:b0:ea:9b:69:89:69:
         73:6c:c6:c2:70:6f:15:7f:d0:cd:a4:74:1b:42:2e:42:7b:f3:
         42:9f:5b:30:67:23:c0:a4:9a:ec:f9:2c:03:c5:ed:1c:4d:36:
         3c:21:16:91:e6:e7:b1:a4:d0:e6:5e:a6:fc:62:5c:3b:92:9f:
         7e:42:ec:1a:00:99:07:b8:02:d6:37:45:88:2e:05:a2:5b:b4:
         41:62:d1:36:07:eb:09:92:6f:a5:18:a6:b1:fd:a7:0c:55:e8:
         36:5f:f5:5e:b5:f2:61:76:46:7d:37:a7:e7:79:29:ac:03:7f:
         97:7d:de:e2:9d:05:79:cf:8d:1d:90:97:2b:5e:8a:1a:01:c3:
         ff:d2:10:7d:90:72:aa:95:e8:14:3f:bc:be:03:df:07:17:25:
         af:e6:97:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:55:22 2025 by rpki-client