This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
File:                     EjujgC-cm_Z1baq9Mk5TJu3kGao.mft (raw, json)
Hash identifier:          6f4Q3u+Y5/ITV9OCbINLsuQLWfoWVzLzCNHYbQ2TlJM=
Subject key identifier:   58:BE:56:32:38:07:4F:49:77:08:C4:9B:D1:05:A2:1D:DE:2B:79:B5
Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA
Certificate issuer:       /CN=123ba3802f9c9bf6756daabd324e5326ede419aa
Certificate serial:       019AF5AEAA246D4C056AFC2F798F6298C6B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
Manifest number:          0FC3
Signing time:             Sat 06 Dec 2025 22:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 22:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 22:00:55 +0000
Files and hashes:         1: 04B5kFR_t_P2nEjasNBAT7tnJqs.roa (hash: CDtvY+ltwTJd4nat+qn/VGqFVOYiDg8maqZV5Y1Ghm0=)
                          2: EjujgC-cm_Z1baq9Mk5TJu3kGao.crl (hash: 7FqSTkkYOouY3J8aPgSp/X/7xCxtaFTrQGGqGE15SGY=)
                          3: JE63iOY_pn4KGRwRQJXw5cNaawc.roa (hash: MxiRl7UzaZKi+99heK7lH0mlebxDgUgaLV/Sp6mBG4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:ae:aa:24:6d:4c:05:6a:fc:2f:79:8f:62:98:c6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa
        Validity
            Not Before: Dec  6 22:00:55 2025 GMT
            Not After : Dec  7 22:00:55 2025 GMT
        Subject: CN=58be563238074f497708c49bd105a21dde2b79b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:25:ad:1c:08:a2:8b:27:20:81:e3:b9:ac:
                    65:cb:c9:f6:89:fd:63:03:eb:ab:b9:ad:a6:c9:cc:
                    e1:bc:7c:7a:a7:ea:d8:08:76:00:b4:39:77:60:b6:
                    44:30:a7:fb:d5:0e:4f:bb:cd:0f:c7:cd:f7:2f:fd:
                    90:bf:8d:76:b6:87:c9:49:31:d4:ab:95:7f:73:d0:
                    09:6c:7b:5d:ae:f0:39:a0:45:cd:4c:cf:85:3b:9a:
                    33:cf:da:51:e3:2b:40:cd:5a:d3:39:08:02:1e:25:
                    ea:08:5d:d0:34:80:5a:e0:ab:fb:17:19:b7:25:44:
                    c3:dd:64:02:d8:6a:0e:06:eb:4d:68:71:b5:97:39:
                    0e:87:9e:ba:d6:08:b1:f8:f6:a9:29:73:1c:8d:46:
                    85:fb:20:9f:16:ef:38:91:9c:e4:bc:5d:54:a6:36:
                    33:bb:53:2d:cd:6c:e1:95:e6:0c:93:42:59:ca:1b:
                    77:8f:f8:66:49:73:e4:4c:f1:53:72:a0:5c:c0:9e:
                    1c:83:59:a4:35:61:95:da:11:3e:db:4b:74:fe:ea:
                    41:06:f8:96:35:29:ae:8a:74:33:c8:59:0f:77:98:
                    7c:e6:77:2f:e7:66:75:d8:59:ec:19:91:42:bf:86:
                    c2:88:af:ba:1c:84:ed:52:3e:00:ec:19:12:aa:66:
                    70:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BE:56:32:38:07:4F:49:77:08:C4:9B:D1:05:A2:1D:DE:2B:79:B5
            X509v3 Authority Key Identifier:
                keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6e:da:2a:9d:7a:b5:bb:07:db:fa:16:c3:14:aa:20:56:bb:
         c7:c5:d8:9b:7c:ad:a8:8d:f9:6d:55:5d:ec:73:d2:36:80:fe:
         67:22:dd:c1:21:0c:2c:25:6e:1d:27:07:84:ad:d5:dd:f9:36:
         53:0d:2f:78:29:83:cd:33:41:29:dd:e5:05:3b:25:7e:c1:07:
         15:13:0d:4c:8a:3c:ef:77:39:6a:c4:46:5f:ea:8c:ec:a2:88:
         88:b4:54:7f:42:87:0e:76:3f:fb:f3:01:fe:87:47:ab:c0:ce:
         7f:9b:d6:8e:29:4d:69:80:4f:9d:92:b9:1e:f3:f9:9f:5c:07:
         08:d6:9b:7f:e5:01:8a:95:6d:df:18:44:87:e4:c5:58:cd:da:
         8d:00:10:7f:bd:a0:9f:ce:5f:2a:4a:32:63:33:85:cc:44:cb:
         e4:2d:5f:54:86:60:43:24:c5:c5:b9:f1:ba:ca:fb:9a:65:45:
         4e:db:a8:ea:de:e1:50:dd:bc:70:25:39:52:8d:32:e1:0c:3f:
         9c:a7:93:fd:de:20:65:9f:e9:4d:b4:d5:39:74:94:04:88:e2:
         8e:d6:4d:b0:1e:9a:c6:ab:de:ab:e6:c7:da:43:80:dc:4e:08:
         a6:72:2e:8a:4c:f1:d7:7d:d0:d4:5c:30:a9:31:c1:71:4f:89:
         31:a5:9f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:34:03 2025 by rpki-client