This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
File:                     ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft (raw, json)
Hash identifier:          xX7Tf2mV6Gh/unkr4/T/JzpfzvvhsUb6QZLRDF5MURQ=
Subject key identifier:   8E:D3:B9:53:93:82:F6:B9:BC:38:37:FC:4D:10:C0:50:D6:1A:10:EC
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Certificate issuer:       /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial:       019AF12D416E30E6203A488B73F06DC3F402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
Manifest number:          0D04
Signing time:             Sat 06 Dec 2025 01:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:06 +0000
Files and hashes:         1: ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl (hash: zb32yNw/cCz0bhUAAb9gCw/wQcTt15Qlv/wD1yD0KzU=)
                          2: qVppuHbTn9DMOoC7WIpn_md_R6o.roa (hash: gTYaxERGDbyCNzsbpsusObI12oPDpaR995HLMG2pUvc=)
                          3: zPHnCBVUs92hfFEc7nhs1RWC7pA.roa (hash: DNCZUIotstuuxpKQuNHdweWIP6EDyIOTVHCxU5Ttn/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:41:6e:30:e6:20:3a:48:8b:73:f0:6d:c3:f4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
        Validity
            Not Before: Dec  6 01:01:06 2025 GMT
            Not After : Dec  7 01:01:06 2025 GMT
        Subject: CN=8ed3b9539382f6b9bc3837fc4d10c050d61a10ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:3c:bb:04:42:d0:04:de:28:e7:ee:e6:00:
                    c6:da:8f:9e:44:ac:05:4a:7d:da:a2:9d:72:80:7c:
                    6c:fb:7a:1b:fd:69:1c:e7:ff:1d:b5:de:34:2b:aa:
                    7a:29:e0:93:eb:19:a6:a5:65:e3:b1:9c:08:11:cb:
                    5c:81:ce:f2:4e:24:3f:a7:95:5f:88:10:cf:d4:70:
                    6c:db:82:a0:f0:5c:e2:d4:99:60:eb:bd:96:ac:8b:
                    ac:b1:51:bc:18:62:e6:00:8e:f5:9a:e7:1b:d0:0c:
                    6d:26:91:38:83:2a:92:ad:59:ba:7c:c6:f4:9c:dc:
                    08:bd:b2:f6:5c:86:e3:21:0e:84:3e:86:e0:12:94:
                    d2:a0:d5:d2:aa:fe:d8:91:d5:7a:9e:d8:84:46:c4:
                    68:60:76:9c:c1:68:7c:8f:2a:2a:36:4e:9b:33:f0:
                    42:c4:5f:3f:83:33:8a:39:37:7e:e1:e4:10:97:ab:
                    ff:48:76:f6:83:e9:90:59:23:9c:7a:6e:48:a6:a6:
                    7a:b7:45:bc:11:0e:96:d6:a8:20:a7:82:81:18:2c:
                    c7:56:ef:8f:50:28:52:f8:9c:53:8d:99:93:f5:d0:
                    ad:ba:43:0c:97:6a:b6:06:68:d5:0a:bf:52:4d:3b:
                    c7:7f:c9:c2:c4:de:5c:4a:5e:04:09:26:c2:fa:28:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D3:B9:53:93:82:F6:B9:BC:38:37:FC:4D:10:C0:50:D6:1A:10:EC
            X509v3 Authority Key Identifier:
                keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:33:9e:8c:68:0d:62:70:54:a0:b4:af:27:ef:63:42:81:c1:
         dc:a3:b4:34:c6:de:f8:9e:61:79:6e:b9:3d:2b:d5:e9:fc:ed:
         c9:d2:9f:e2:f6:56:c3:13:ff:6e:e9:c4:24:8c:c5:e7:8c:a9:
         35:21:ac:32:11:e3:25:3a:29:f5:e7:95:93:94:00:b9:49:ce:
         04:4a:e7:d7:44:5a:25:96:3a:b2:43:05:ca:29:2a:1e:1d:b6:
         f2:e8:a9:61:65:91:06:b8:60:e1:4e:06:0c:24:69:de:5c:60:
         a5:a9:36:6e:16:8b:df:0e:94:fe:a4:1d:19:fc:b9:a5:5f:75:
         1b:1a:af:88:e3:28:22:a6:ef:96:7d:bd:33:91:1a:de:67:87:
         92:fc:6a:12:3e:1d:9a:93:42:9e:8c:55:6e:01:ae:a4:f2:00:
         b8:28:22:dd:31:77:a2:8a:d8:d3:8d:ff:c1:c1:b3:35:8c:0a:
         0d:67:42:e6:9c:5c:25:ec:ba:a8:ca:b1:24:fa:60:69:bb:80:
         99:87:bd:2f:1b:1f:60:bc:d5:03:fa:f3:a8:f9:29:29:75:b4:
         e3:55:b6:a7:a7:35:3b:20:e2:5a:dd:0b:01:ef:ca:71:f2:5b:
         93:4d:ec:db:62:e8:ab:20:8d:cd:bb:6a:90:d1:4c:33:0b:84:
         51:86:87:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxLUFuMOYgOkiLc/Btw/QCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzYyZDc4MzI4NDY1OWRjMDRlZWRhZjhiOGE2ZmU2ZTkz
MGJkMjcwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD
Eyg4ZWQzYjk1MzkzODJmNmI5YmMzODM3ZmM0ZDEwYzA1MGQ2MWExMGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKE8uwRC0ATeKOfu5gDG2o+eRKwF
Sn3aop1ygHxs+3ob/Wkc5/8dtd40K6p6KeCT6xmmpWXjsZwIEctcgc7yTiQ/p5Vf
iBDP1HBs24Kg8Fzi1Jlg672WrIussVG8GGLmAI71mucb0AxtJpE4gyqSrVm6fMb0
nNwIvbL2XIbjIQ6EPobgEpTSoNXSqv7YkdV6ntiERsRoYHacwWh8jyoqNk6bM/BC
xF8/gzOKOTd+4eQQl6v/SHb2g+mQWSOcem5IpqZ6t0W8EQ6W1qggp4KBGCzHVu+P
UChS+JxTjZmT9dCtukMMl2q2BmjVCr9STTvHf8nCxN5cSl4ECSbC+ihcWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7TuVOTgva5vDg3/E0QwFDWGhDsMB8GA1UdIwQY
MBaAFHo2LXgyhGWdwE7tr4uKb+bpML0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQt
ODY1MDMxZmEwYmY3LzEvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQtODY1MDMxZmEwYmY3
LzEvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzOejGgN
YnBUoLSvJ+9jQoHB3KO0NMbe+J5heW65PSvV6fztydKf4vZWwxP/bunEJIzF54yp
NSGsMhHjJTop9eeVk5QAuUnOBErn10RaJZY6skMFyikqHh228uipYWWRBrhg4U4G
DCRp3lxgpak2bhaL3w6U/qQdGfy5pV91GxqviOMoIqbvln29M5Ea3meHkvxqEj4d
mpNCnoxVbgGupPIAuCgi3TF3oorY043/wcGzNYwKDWdC5pxcJey6qMqxJPpgabuA
mYe9LxsfYLzVA/rzqPkpKXW041W2p6c1OyDiWt0LAe/KcfJbk03s22LoqyCNzbtq
kNFMMwuEUYaHvA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:49 2025 by rpki-client