This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
File:                     ET1egxwzDTy1HUduDBY1QPJeA3I.mft (raw, json)
Hash identifier:          F4OO+JrJxPyXh+4DSnMaBNKT3eZe8u4hTr0jpoDdkSs=
Subject key identifier:   F0:1D:75:C9:73:17:71:13:CE:18:DD:CC:9E:5D:B6:C7:98:80:75:26
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Certificate issuer:       /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial:       019AF2ADB81957819264775812522AA03A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
Manifest number:          0EC5
Signing time:             Sat 06 Dec 2025 08:01:02 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:02 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:02 +0000
Files and hashes:         1: 0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa (hash: vbFOlrrgXdMpjETv1aLsSB82Hd5tfAVSxkqVBCr2Gvg=)
                          2: ET1egxwzDTy1HUduDBY1QPJeA3I.crl (hash: r8Mo7pxEiccfpHh/CxR+j1gD+Pvkhl9lfvBZaj7X+Eg=)
                          3: N8Vz73cBXARwZyBmKjZNIRJqMJ4.roa (hash: 7JAL5BQj0VZ9gyQ5lYPxo8x5psJ8VR/uqd1dUx7XOiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:b8:19:57:81:92:64:77:58:12:52:2a:a0:3a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
        Validity
            Not Before: Dec  6 08:01:02 2025 GMT
            Not After : Dec  7 08:01:02 2025 GMT
        Subject: CN=f01d75c973177113ce18ddcc9e5db6c798807526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c9:30:77:4e:ae:d0:d8:c6:9d:da:78:22:11:
                    7c:d2:25:8e:97:63:f4:fd:5a:9c:1c:77:67:7a:8d:
                    c5:7e:40:b6:b5:d7:3e:4e:13:f8:98:4c:01:ce:0b:
                    53:0c:f5:23:1c:58:34:5e:00:b7:a0:3a:72:95:64:
                    09:b5:e6:a9:c8:2e:08:db:a0:1a:72:68:05:e9:0a:
                    ee:75:f4:95:90:09:1c:aa:bd:41:cd:3d:3d:d9:a7:
                    54:14:61:61:ec:3c:47:cd:1d:de:a9:17:d8:f4:49:
                    70:70:3d:22:e3:8b:a1:20:22:29:d6:b5:be:27:e6:
                    9e:f9:d4:06:0e:a9:c5:34:be:6e:24:08:00:b2:b9:
                    32:9f:ca:7e:1f:17:79:f9:b5:2e:6c:43:7e:64:42:
                    6b:6e:f6:4b:76:08:3d:78:d8:99:bc:c7:bb:67:81:
                    f0:d5:8a:ef:72:fe:46:ab:e7:c5:20:80:d8:df:fd:
                    fb:bb:02:c4:8e:90:1b:07:21:2c:41:72:74:75:9a:
                    00:c5:e9:19:51:92:cb:ef:04:6f:40:9c:89:43:58:
                    ea:87:21:ff:b9:35:de:81:a0:a3:01:be:53:62:29:
                    21:fe:98:51:48:65:72:e3:fa:84:4f:d9:02:ec:07:
                    7b:57:11:fd:07:8c:f8:32:e3:6f:7a:ef:27:fe:2c:
                    e3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1D:75:C9:73:17:71:13:CE:18:DD:CC:9E:5D:B6:C7:98:80:75:26
            X509v3 Authority Key Identifier:
                keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:e0:4e:48:8b:20:2f:2d:fa:43:10:a5:65:42:ef:36:17:
         bc:e4:91:d9:08:61:d4:84:b3:27:c3:30:8c:30:ad:6a:b9:d8:
         fa:3d:cc:ad:13:0c:b3:a8:00:4d:8f:d5:de:2b:3d:84:9b:0a:
         7d:07:d4:42:94:34:00:70:0b:59:a5:04:16:70:f2:e1:ed:66:
         42:6d:5c:85:8c:a7:7a:6e:55:15:ad:c2:dc:da:10:fc:b7:50:
         ae:ee:b0:78:81:7e:ad:c6:91:02:e2:94:0f:24:bd:32:5e:79:
         c3:24:d7:08:36:58:8f:af:ba:52:bf:5c:0c:8c:9e:b7:0e:5c:
         24:a7:da:9f:da:b4:49:1d:4e:b6:84:b5:a7:06:40:0c:a6:e3:
         aa:2e:08:c7:6f:60:fa:72:f2:29:3a:63:2a:3d:4c:bd:84:79:
         f8:a3:ae:4f:05:6a:29:37:79:44:e4:79:3d:bb:16:5f:a6:7a:
         36:13:e7:ce:10:a7:05:a0:79:93:86:cb:76:77:87:fb:e4:8d:
         da:59:54:09:e5:74:dc:42:f4:a9:4e:06:7b:9e:54:71:bb:06:
         7f:b0:fc:2b:87:90:ed:0e:fa:7d:b5:f0:db:a9:ca:12:2b:17:
         52:10:97:05:ac:25:48:c0:97:24:47:92:e4:b2:ef:2e:7a:e3:
         fd:7a:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:27:28 2025 by rpki-client