This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          5wkz/P5XkDRxnK6SYGirUaoaPCE+enZkNcTN/34mWAI=
Subject key identifier:   EC:A9:A6:24:48:B8:03:ED:0C:0E:07:28:1C:A3:2D:5A:2C:F4:F8:F3
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       019B3BD9907EC2D055868E8CE813831D03F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          178F
Signing time:             Sat 20 Dec 2025 13:01:12 +0000
Manifest this update:     Sat 20 Dec 2025 13:01:12 +0000
Manifest next update:     Sun 21 Dec 2025 13:01:12 +0000
Files and hashes:         1: 2vvTx_yFrt5UrJ0WVDTO--gQh60.roa (hash: eB4HsG9FbYTVRCz9S1t9E+zrZDYTm7BTeCXp3dMiZIo=)
                          2: 7JHYrzTxN9asgLqVnNRUfP1LZ10.roa (hash: ChCGPqEl2ro34qpoNR4Xt2LPCuZTPhOJ4X9rWHYGEBA=)
                          3: IB9Yu1asQTPPy0ngjtpUTQR_Ivw.roa (hash: z5Pywc8Q1iL9qP7SJuBWFjeFMCxifvSPuK7zriYnBBA=)
                          4: Q0Z-cVwA4XOeztdkNcwehwFNVmI.roa (hash: MwfJgtXJrn1M2+nm68X48C8kqLl8c52QU/MPByryzoA=)
                          5: QvqihRljCm445jweQ6gFK7wXIOs.roa (hash: b6Ii57U4Sye1rJOrny/XLuYZqJiC9WdbHx+cBgoka7I=)
                          6: T-_3CIyQbqlGg305SxQy5ftJI7w.roa (hash: F0s6Ci0GqXXpEL55mUmVrJT+nL7cPcs5GgzPcy37r9s=)
                          7: e71RJyBktjssZjwClroR216iOMA.crl (hash: GKKIYQNHPGwyQ/I5eHjeN4EnK5FeLFtiPbMo1i3Fva4=)
                          8: huUdoRBrSkw9ERfAbY_K0ms09AQ.roa (hash: /chnp5DKS977ybnp/eJrPNXNv/laADFMHK9MLA974oE=)
                          9: s7qZwF1zjjkn93vRYJKMTeg7njg.roa (hash: pDr3B3csiw+fcAUQmbSFOppqABEiwfJIZfstULKUEoQ=)
                          10: vuOqkJ576TdEaXJp1TfrxOCwRC0.roa (hash: Z+MjMiYxt6MDAWfYglmjvECMwme4DjstDsJyATyGhhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3b:d9:90:7e:c2:d0:55:86:8e:8c:e8:13:83:1d:03:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Dec 20 13:01:12 2025 GMT
            Not After : Dec 21 13:01:12 2025 GMT
        Subject: CN=eca9a62448b803ed0c0e07281ca32d5a2cf4f8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:7b:06:68:4c:82:c9:52:3b:7c:92:b2:c4:
                    a4:0a:31:88:2c:fa:df:69:18:b0:49:8f:6f:c0:9f:
                    61:8e:8f:db:a8:ac:4c:c4:7e:67:1b:33:e9:49:f5:
                    6d:b2:da:e9:5f:cf:08:70:c0:fb:af:49:55:be:68:
                    1d:7a:47:8f:85:58:76:11:b2:32:2a:5f:87:c1:a4:
                    e4:be:46:0a:b9:96:5f:c7:10:5f:88:8a:9f:e1:cf:
                    15:52:ba:ee:81:28:e2:ed:d1:80:9f:06:cd:76:40:
                    32:94:db:a6:10:b7:16:14:a9:10:96:64:21:12:bf:
                    a9:48:3a:ac:5d:e9:64:02:58:78:af:29:e3:c2:7a:
                    cb:80:d3:4d:09:b2:c2:a9:ab:1c:76:fa:5e:1f:af:
                    b4:fa:7b:57:ea:65:54:f4:aa:c3:05:cf:ab:a2:ed:
                    b3:91:0b:c1:8b:dc:c3:b4:92:9c:0d:f4:90:b4:3d:
                    38:68:37:79:10:9f:24:74:94:59:e0:52:ab:53:9b:
                    33:d8:ad:44:ca:b8:96:41:1e:6e:4a:9e:56:3e:f1:
                    0d:71:2b:2f:58:8d:1b:d1:2f:d6:ac:f6:19:78:53:
                    9d:59:76:c6:f4:a1:00:be:8c:72:11:73:8a:75:f5:
                    df:dd:9e:07:e2:1f:95:00:c2:d1:79:35:bf:db:1a:
                    95:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:A6:24:48:B8:03:ED:0C:0E:07:28:1C:A3:2D:5A:2C:F4:F8:F3
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:54:b3:5c:bf:3a:f8:ed:98:81:1f:eb:3d:4c:6f:06:fb:e4:
         8d:82:ce:8d:92:1b:c5:32:61:c9:cd:cc:07:81:9d:dc:38:7f:
         37:a6:15:3f:28:67:95:e8:ab:4b:60:46:6d:52:38:b2:6d:5e:
         f8:aa:c0:24:0e:90:03:39:1f:f2:da:80:a3:7a:a1:d1:7c:43:
         1c:cc:b6:83:fa:c1:e7:fb:ea:34:0a:d4:8d:b5:b1:38:a4:54:
         d4:2d:9a:f7:00:23:08:3b:60:3b:88:09:5c:a5:02:f9:e2:47:
         2a:e3:78:44:a8:d1:7a:04:27:4a:fe:23:53:e4:42:90:7c:78:
         bf:14:63:5a:15:c4:fb:64:4c:e2:bc:0f:28:97:4a:61:d8:b9:
         4d:d5:7d:2c:ef:bc:a5:ce:df:7d:b2:55:41:45:97:f9:ec:d4:
         25:8c:8f:fe:30:3b:91:b2:53:58:e2:0a:46:1d:f9:89:42:3d:
         f1:fa:9b:62:49:76:92:1f:f6:6b:f3:a4:44:f4:47:4a:da:06:
         8b:46:8a:60:9b:50:3e:75:0a:48:fc:81:aa:8b:77:08:a3:61:
         e7:27:d9:53:82:0c:be:fd:e5:09:e3:67:fc:fc:db:bf:9a:5f:
         3f:e4:1f:dd:07:a1:e0:46:a6:9c:26:ea:f5:71:b6:8a:73:01:
         66:28:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:46:45 2025 by rpki-client