This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File:                     e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier:          eZEzHs4wwKOIzOxkxBkP6R+FBMb95WWj3k9TGMDOKAA=
Subject key identifier:   9E:63:DB:81:16:FA:5F:2E:90:55:1C:2D:83:C9:3B:F8:C1:9E:84:D2
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       019B3A218BA569131BE974EA0D27A7D5F86E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number:          1789
Signing time:             Sat 20 Dec 2025 05:00:35 +0000
Manifest this update:     Sat 20 Dec 2025 05:00:35 +0000
Manifest next update:     Sun 21 Dec 2025 05:00:35 +0000
Files and hashes:         1: 13RmIh6yv-Ml6T8W-vpiSXUZ2gU.roa (hash: K4wrz2vLF42iU9Ok9LM/fxhgKzVbeVXkBRTlsWBsG54=)
                          2: 6GJDe6zJlkyBn7aK1IyaCupQ6-0.roa (hash: iC2qAiefhJNnquIXwdUvF/e3IYlNWXBAKniYmSUPZFU=)
                          3: RvNIPozHEQXs5iokhMWdzTpjJKw.roa (hash: yvOJlvlH/aPFeSnZ5uiNcTe4i5EocSDG2Jgr8QbqyYI=)
                          4: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: ef3oJQDiTjZ8v1DvcCMQqymdOczD2+JsFr/gnoBMdSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3a:21:8b:a5:69:13:1b:e9:74:ea:0d:27:a7:d5:f8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: Dec 20 05:00:35 2025 GMT
            Not After : Dec 21 05:00:35 2025 GMT
        Subject: CN=9e63db8116fa5f2e90551c2d83c93bf8c19e84d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:6c:ec:9e:3f:ee:48:cb:0b:34:13:fb:c9:
                    6e:5e:7d:e9:3a:8e:72:1e:32:29:1c:76:e5:e3:df:
                    17:15:67:d6:c8:c7:11:2e:a4:c9:3e:41:7d:6e:3a:
                    79:87:0e:26:0d:61:d0:74:8a:7a:31:b9:cb:b5:af:
                    47:af:98:c4:ce:92:f1:21:53:9a:53:a5:1a:f1:ba:
                    f6:f6:af:99:50:ef:00:52:d1:8c:dd:7d:69:95:6c:
                    15:6b:42:a3:72:1f:93:d8:d2:31:c0:62:65:b4:32:
                    50:4f:86:d1:2d:a2:c5:c5:45:77:4a:a1:f6:80:b3:
                    96:b3:f7:86:50:9a:95:58:be:7f:07:56:31:34:0a:
                    c1:9f:18:14:bb:ea:bd:23:63:c3:38:cd:eb:ff:2d:
                    b2:e3:58:6d:ec:81:7d:1e:d4:96:aa:5f:3f:c5:5b:
                    08:c8:21:35:9f:3f:23:2b:03:12:c5:4a:59:c7:c1:
                    32:ec:bc:4c:6d:d1:02:e5:1f:53:09:d9:21:8f:21:
                    12:88:ad:03:43:1d:f4:f1:a3:dc:cf:71:0e:01:38:
                    7f:f6:7d:05:9e:76:34:b8:a0:4d:c7:87:4a:25:2f:
                    7c:5d:41:3e:54:6f:45:49:bf:80:4b:5c:34:7b:7e:
                    5b:00:be:67:8d:ef:fb:c8:57:0c:af:a9:6f:36:af:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:63:DB:81:16:FA:5F:2E:90:55:1C:2D:83:C9:3B:F8:C1:9E:84:D2
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:23:79:96:e3:e9:46:ff:cd:4d:d0:68:ef:c6:6d:af:43:b3:
         1b:7c:fe:fa:bc:f1:e1:79:8b:05:9f:1d:0e:23:fc:09:fb:73:
         da:8f:ed:bb:8b:67:2c:22:d3:b2:5d:40:c1:28:97:9a:a3:5a:
         70:88:d1:44:54:59:ed:c2:99:2a:e7:bc:73:15:8c:4c:56:4d:
         32:c5:e8:2d:03:7f:50:e8:b6:58:03:a5:36:ae:24:c5:8f:8c:
         2c:1f:ac:a0:3e:ed:08:e3:44:76:56:d2:8f:3f:8f:b4:6e:6e:
         a4:3c:19:fa:f8:18:58:59:2f:1b:84:6a:99:e1:68:f0:4f:70:
         14:65:32:98:3e:81:f5:0d:94:c1:3e:fd:8b:42:19:3e:de:2b:
         2b:f8:e8:f5:48:9f:ab:40:c5:a7:6f:e8:d4:b8:56:36:19:94:
         78:d4:b8:b5:50:4c:68:de:a0:11:13:7c:92:3d:1b:d1:bc:2d:
         70:1a:19:dc:bd:2f:c5:84:55:59:df:65:12:3a:af:8a:67:26:
         94:b8:d6:fd:8a:3d:f9:06:09:45:f3:bc:d8:28:0d:af:3f:d2:
         28:60:28:9b:ff:6e:e7:a8:f3:0f:93:70:d0:c5:fe:1e:79:6e:
         10:a6:14:ad:b0:36:00:8a:63:2c:77:5b:49:b8:96:00:ea:27:
         b2:f4:de:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:16:04 2025 by rpki-client