This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
File:                     EIanwN6nPdD5Ti6f4ayatnAbIlM.mft (raw, json)
Hash identifier:          HjT1k20MRTFA+430VGbrt6SBrBsNIA2x1AneDfLkzi0=
Subject key identifier:   00:14:46:03:07:60:87:9B:64:3B:74:F6:B0:DA:D4:C0:8B:3A:9E:41
Authority key identifier: 10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53
Certificate issuer:       /CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
Certificate serial:       019B2D0AE1CECB8EDBD5F96D5F8DC607CFBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
Manifest number:          1781
Signing time:             Wed 17 Dec 2025 16:00:46 +0000
Manifest this update:     Wed 17 Dec 2025 16:00:46 +0000
Manifest next update:     Thu 18 Dec 2025 16:00:46 +0000
Files and hashes:         1: 3wY6oGANv8v5KdwOhq0YCyGCR3c.roa (hash: YTsANZzZhIeMDaKWnAImTcGoqYZxIqqraKwHHW/4AQQ=)
                          2: EIanwN6nPdD5Ti6f4ayatnAbIlM.crl (hash: bKZoJIgAoX5/sBWQj7mfgbwXA7+ADm+YhGBWtsC+gJo=)
                          3: N6mQt4p5LaN2cPNO7YXd-z2Q3Ds.roa (hash: NGM3dzWw+RuSOK1JbfI7JvooWiDasEuAqNb3dRiWmXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:0a:e1:ce:cb:8e:db:d5:f9:6d:5f:8d:c6:07:cf:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1086a7c0dea73dd0f94e2e9fe1ac9ab6701b2253
        Validity
            Not Before: Dec 17 16:00:46 2025 GMT
            Not After : Dec 18 16:00:46 2025 GMT
        Subject: CN=001446030760879b643b74f6b0dad4c08b3a9e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:a8:f1:39:32:ff:39:45:92:94:28:35:b1:
                    1d:00:91:55:2a:37:c3:9e:2e:8b:48:6a:e2:61:8f:
                    e7:d4:35:03:bf:96:24:04:db:1f:f6:e5:08:60:62:
                    ca:c4:52:d5:bc:ef:ca:2e:a6:57:2b:e2:ee:b4:30:
                    14:3e:f1:cb:15:04:9c:04:0a:b7:98:bf:55:ba:f6:
                    7d:cf:ee:44:40:b2:97:d9:e0:23:ed:4c:0f:a4:93:
                    f2:15:e3:d7:54:2c:2b:da:da:0a:5b:07:13:ac:2e:
                    af:1a:50:50:3c:e7:b4:77:b3:ee:8e:63:21:f8:da:
                    c6:2b:28:0a:c3:7d:a2:bb:db:d9:d4:98:a3:b7:45:
                    53:c9:45:3c:ca:60:c8:ac:25:a7:b4:cb:a0:24:36:
                    27:f9:7d:43:f0:33:f2:18:e7:34:22:04:3b:98:25:
                    97:af:0d:02:6b:ab:82:78:d3:f0:54:60:92:27:ab:
                    1e:20:9e:a0:c0:11:40:05:87:7c:43:b1:2e:b3:ea:
                    74:fc:1a:08:c7:82:12:7f:4c:ca:63:11:d6:33:f3:
                    36:93:2b:d6:c1:cf:12:85:96:e5:37:75:19:6f:31:
                    bc:f7:35:47:d1:4a:d8:01:af:b1:f1:dd:5d:00:00:
                    f3:f2:33:a6:06:28:f5:d1:4d:3e:40:35:3a:3f:80:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:14:46:03:07:60:87:9B:64:3B:74:F6:B0:DA:D4:C0:8B:3A:9E:41
            X509v3 Authority Key Identifier:
                keyid:10:86:A7:C0:DE:A7:3D:D0:F9:4E:2E:9F:E1:AC:9A:B6:70:1B:22:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIanwN6nPdD5Ti6f4ayatnAbIlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9690d0-a2ab-4b74-b104-d9e1b81dd1c7/1/EIanwN6nPdD5Ti6f4ayatnAbIlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b1:8b:4b:49:de:dc:31:25:ab:1f:cc:be:aa:1f:43:9d:cf:
         13:7f:28:8a:38:61:30:e4:c4:d6:a9:f7:39:39:da:c6:98:9b:
         66:c6:fd:2d:f3:2f:38:1e:b7:82:ec:40:ed:43:46:ef:2a:bc:
         8b:8f:6c:b1:79:06:a1:9a:3f:74:71:bc:ee:e5:42:64:5f:a2:
         59:22:01:8c:4b:b3:7c:14:2d:ca:05:60:48:86:b2:48:75:31:
         26:ed:53:7c:71:8a:56:48:4e:e7:e3:e4:ba:39:3a:12:e1:b1:
         5b:b5:56:00:2e:00:d9:c9:28:24:89:fe:ab:0d:5b:34:f3:ba:
         0b:6a:f2:73:27:39:d5:b3:2c:2f:8d:f9:35:a8:7e:b8:d8:a4:
         ff:81:cc:61:72:b3:0f:07:44:9b:65:ce:0b:d5:63:27:68:ad:
         2a:6f:89:f4:d2:6d:86:8d:26:fe:c7:33:8c:49:6a:53:d3:a4:
         3a:7b:42:ea:cd:b0:2e:19:fd:db:01:de:e1:7a:95:80:92:43:
         35:31:14:68:5d:ca:5f:6f:75:cc:01:c7:ec:22:75:77:27:43:
         55:f8:0d:5d:cd:e9:8e:23:10:4b:91:29:6c:42:c3:8d:d2:2b:
         68:ee:4c:1e:62:9e:7c:5a:ff:f6:76:52:09:61:70:02:8e:28:
         c1:49:06:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:31:28 2025 by rpki-client