This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
File:                     ebUTSxH5QJEfD_MVyUjapT9zLuA.mft (raw, json)
Hash identifier:          t4pZ/67Hh+yF+kNXcsVbaBElPUwVcpxHMNiqdkDl5Hs=
Subject key identifier:   E3:44:C0:DA:07:B7:F7:B2:A3:47:EF:6A:23:5B:A0:D2:58:22:5E:62
Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0
Certificate issuer:       /CN=79b5134b11f940911f0ff315c948daa53f732ee0
Certificate serial:       019B3C1000A3334CD2E3847AEAEB725CBEE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
Manifest number:          179F
Signing time:             Sat 20 Dec 2025 14:00:40 +0000
Manifest this update:     Sat 20 Dec 2025 14:00:40 +0000
Manifest next update:     Sun 21 Dec 2025 14:00:40 +0000
Files and hashes:         1: L1ShoUFH_3QzKX_ke8HAX0Fww6c.roa (hash: FUc2MDD+4o/7JlgpFpcB29tfev/YxELBDTuLaAO672I=)
                          2: ZrX8NZOF_lteMSM3oZka22ZVn3E.roa (hash: cAb9eZ4FePRwUO0ACpP0sUggRm8S5e53qPUlHsPvg2Q=)
                          3: ebUTSxH5QJEfD_MVyUjapT9zLuA.crl (hash: SOQb7WvudklYNqTjNSU7NN1t3a3tHtjBPw4JIaF6xto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:10:00:a3:33:4c:d2:e3:84:7a:ea:eb:72:5c:be:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0
        Validity
            Not Before: Dec 20 14:00:40 2025 GMT
            Not After : Dec 21 14:00:40 2025 GMT
        Subject: CN=e344c0da07b7f7b2a347ef6a235ba0d258225e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:79:ec:ba:fe:c6:e5:90:01:7a:b5:bd:02:
                    fc:c0:8b:1b:28:ef:84:9d:44:72:e7:7f:6b:4e:3c:
                    f9:00:37:78:e4:0f:a0:21:3c:c5:5e:1a:53:d8:a0:
                    17:ed:d8:1b:b6:33:b4:64:53:a2:29:46:b4:4d:05:
                    96:7c:b2:f3:44:98:88:f2:54:38:b0:09:f2:b0:dc:
                    16:4e:ea:b2:67:e9:10:11:ee:bb:fd:84:55:4c:79:
                    b8:c6:1f:2b:5f:d2:c3:cc:49:6b:55:29:55:9b:05:
                    41:db:ee:35:e0:ed:3a:24:a6:e6:0e:88:c2:01:0b:
                    d0:7e:dc:4e:96:33:a6:06:70:03:89:1a:b5:83:d1:
                    68:84:c1:03:b2:9f:bb:a0:3c:93:9f:96:fc:1a:f2:
                    cc:41:ac:5d:32:40:39:64:42:9a:82:75:0f:bd:bd:
                    ea:ef:f3:e6:d8:dc:82:ce:e0:28:c2:79:80:1a:cd:
                    dd:12:e5:6e:bf:b9:83:a1:fe:49:be:de:66:0d:a0:
                    3d:22:66:19:2d:94:52:60:b9:b3:3e:18:06:49:4d:
                    19:95:48:a3:3a:00:13:eb:2b:ab:15:78:64:f0:28:
                    ea:50:6d:f7:d9:92:26:0a:75:0a:ee:ac:a3:37:89:
                    d9:c9:2f:be:1f:42:af:60:67:fe:9d:67:6c:59:b3:
                    61:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:44:C0:DA:07:B7:F7:B2:A3:47:EF:6A:23:5B:A0:D2:58:22:5E:62
            X509v3 Authority Key Identifier:
                keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ed:71:57:fe:2c:3b:f7:c0:f7:4a:79:ac:26:f2:63:ea:dc:
         6c:3a:cc:8e:d3:7a:49:74:c9:b7:67:d3:87:b9:fc:a4:dd:e8:
         bc:f3:15:ba:5d:ab:f4:d3:6c:4a:05:97:7a:1c:1d:a0:c4:c7:
         63:96:50:7e:29:98:c1:48:0e:c9:90:0f:cc:d2:94:48:10:15:
         8b:b7:db:f3:93:d9:dd:60:46:6c:fd:ac:f2:b2:6b:56:bc:33:
         88:4f:d3:60:61:0c:71:b4:ca:aa:7d:5d:7b:40:41:22:6b:aa:
         b2:29:24:63:16:16:8a:5d:3a:f2:c4:1e:c9:c1:eb:40:17:c9:
         c5:a0:ec:fa:58:41:f0:b6:b6:bb:37:70:15:46:0e:68:d3:89:
         59:a2:4a:d0:a0:1b:9f:1e:17:56:99:9e:58:0d:2c:fe:fb:f4:
         a3:12:a3:c2:0e:ba:d9:d7:79:f9:36:ab:1b:5a:32:42:ce:29:
         ec:bc:90:6d:87:fc:64:17:41:0d:12:56:62:cf:8b:c4:e7:b5:
         8e:de:f5:7c:2a:bb:f3:7d:e4:f8:0c:c3:a9:cf:2c:ba:03:d7:
         f7:41:7e:5d:fa:05:5a:ba:66:b6:cb:4e:f9:ff:fc:54:fa:ac:
         39:f9:be:49:fb:52:35:92:41:fe:b9:62:4a:a9:12:cb:26:c1:
         ff:db:7f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:32:21 2025 by rpki-client