This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          2nybhMzwjDwll7rm73qVjkGtlP0ntaY8eYc6Usxtb/8=
Subject key identifier:   E2:FB:A5:67:0D:8E:4E:D8:FE:05:DA:36:0A:0D:DA:5A:C4:CD:0B:12
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       019AF2ADE1785E7987F87E3B0BFC179F7AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          06B3
Signing time:             Sat 06 Dec 2025 08:01:12 +0000
Manifest this update:     Sat 06 Dec 2025 08:01:12 +0000
Manifest next update:     Sun 07 Dec 2025 08:01:12 +0000
Files and hashes:         1: 2EE5sI-lHxPW-m95GPnlbkqBGKw.roa (hash: rZX0WbnFMbiHv4Iw7Uo3xd9gD2qfAlVmi5TezkAjKms=)
                          2: 2j0K4TBmylww5994wq6h52DnC4Q.roa (hash: V4EC4v+tPx02lsB25vziwHKMaEgUW7sf5nc1OVwIXxE=)
                          3: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: JF0UykOWAA9N2Li2aznIuTQL55RtdkpSRDBBR+gJdrg=)
                          4: GLpitTLoKfeAEOHv7sg-N2mDyyM.roa (hash: DLCIbqmbMU+kzJKE291B9CWch8SKbQOfjzg4SB+dJMs=)
                          5: JksIp8plt8XHk157IJ1eE1-tvto.roa (hash: wgY/0YYKwrZFlsYl68IwR2OteHvDDcA3JQTOM7ecfhk=)
                          6: UohPfLpYQFWq1aE3FZr-DrIx55E.roa (hash: KnJXUEOwlaB/y/AXpGglu/TyZvgBRRpzdQU4qGeto24=)
                          7: wGte5Are8NpBD8KTHQ531vUjpFs.roa (hash: G9rpZQy7UTdVZ8RG/8ciW3S8lvdFNXdVuqbWWEiXC7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:ad:e1:78:5e:79:87:f8:7e:3b:0b:fc:17:9f:7a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Dec  6 08:01:12 2025 GMT
            Not After : Dec  7 08:01:12 2025 GMT
        Subject: CN=e2fba5670d8e4ed8fe05da360a0dda5ac4cd0b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:3d:54:fa:78:75:19:a3:33:04:65:c5:ba:
                    c0:ec:19:8b:17:08:de:f7:68:cf:63:ee:c8:a5:df:
                    27:36:ec:f3:22:8f:67:49:97:a3:6c:db:ef:20:38:
                    9c:66:1b:e6:7a:ce:b7:c4:69:94:77:23:6b:41:53:
                    bb:b6:9a:47:b6:99:04:4f:03:c1:60:25:0c:6b:4b:
                    70:ae:bd:31:c6:a8:93:de:90:79:1c:a7:59:1c:40:
                    f1:1a:76:64:6b:7a:4b:2f:ba:8c:15:75:8b:aa:09:
                    52:45:6c:5c:e5:ff:87:cc:58:89:3e:c3:bf:70:d3:
                    51:ee:f9:b5:b4:1a:13:8c:51:4c:8e:e5:5d:89:f1:
                    73:10:b1:ed:30:d5:b9:b7:7e:bf:1f:c6:c3:b6:2e:
                    af:b0:59:3a:3b:e1:65:65:df:bd:30:b1:76:9d:6f:
                    d2:c4:a0:27:df:f7:84:49:dc:8e:89:ad:29:fe:f7:
                    53:6e:73:b0:f1:18:d9:16:66:da:9b:a2:54:75:a3:
                    e1:a2:65:b8:02:aa:77:ae:b5:16:df:47:c9:fe:b6:
                    5b:cb:fb:26:6e:ba:8b:6a:92:b2:f7:e5:04:af:12:
                    eb:b6:3b:2f:de:9a:78:43:c2:d1:4b:d1:09:a6:7a:
                    84:35:ab:74:c8:75:3b:dc:24:c0:95:ac:68:79:a4:
                    8e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FB:A5:67:0D:8E:4E:D8:FE:05:DA:36:0A:0D:DA:5A:C4:CD:0B:12
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:cd:7c:36:43:4c:97:da:21:62:cd:7c:ed:5a:12:5e:f5:
         66:ca:9b:87:f8:43:07:e5:56:89:18:ec:8a:18:8a:eb:e0:fa:
         3b:07:e6:8f:4b:a1:eb:39:f5:4f:52:28:aa:09:0f:8b:eb:1b:
         6d:32:70:04:ad:cc:19:46:e2:9e:1a:01:03:b3:b6:2e:c6:22:
         81:1a:18:e7:0f:42:f7:55:12:aa:1e:45:7e:38:53:12:80:65:
         c0:a3:75:47:d2:f8:69:df:0d:66:c2:7f:38:f7:40:cb:a2:00:
         8b:a4:13:61:d2:67:d2:17:d5:e8:48:11:8c:f6:ad:e2:dd:60:
         eb:ab:e5:44:e7:fd:82:37:77:d7:4f:91:69:45:86:20:47:20:
         df:7f:c4:a5:eb:da:10:88:13:6c:f2:d3:22:c5:99:9c:79:c7:
         c2:02:cc:3e:2d:7c:46:d9:dc:a9:39:1e:b4:30:4c:48:57:bb:
         bd:45:c1:e7:5e:89:4f:94:6c:e3:3c:cf:70:7f:9a:86:d6:a9:
         fe:02:53:7b:71:64:51:99:b3:a0:4f:a4:35:06:55:f9:4c:ff:
         eb:a3:be:4b:6a:27:cd:f9:82:27:1c:62:04:41:0b:de:7e:0a:
         b2:3e:75:59:9f:d0:bc:78:a3:1d:1f:9c:4b:27:16:8a:c3:d9:
         00:6b:a6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:53:12 2025 by rpki-client