This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
File:                     eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft (raw, json)
Hash identifier:          OprzJIQsz9W2o3gyg/WmWRs2Ch3GOW0dwCgxIhCBkj4=
Subject key identifier:   D1:24:9F:83:C2:27:2E:2B:8A:4D:DD:A9:77:32:2F:66:B7:40:F1:91
Authority key identifier: 78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2
Certificate issuer:       /CN=786758bea68f0825cf16e66fb02ee7bca454bae2
Certificate serial:       019AF12DC8E9747A28E89A518C5C526AD9EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
Manifest number:          07D3
Signing time:             Sat 06 Dec 2025 01:01:40 +0000
Manifest this update:     Sat 06 Dec 2025 01:01:40 +0000
Manifest next update:     Sun 07 Dec 2025 01:01:40 +0000
Files and hashes:         1: 21v5q3pMDwpvxT2hARKYBVN9oBs.roa (hash: td2s5WSN+NdDkVRugdr/XPfHV2CBhN3a/Leo5BS5CwM=)
                          2: eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl (hash: tiV29lNh8Q7wU38a8DMFoL7+jRJCjCoZh00d3TNhiB0=)
                          3: nEwu5TmmWrj9UATGJds44UGD1Ts.roa (hash: 5ZaywPLeoC0QnbAlhOsY8aemb2/eQKD5NWLwsAEHpiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:c8:e9:74:7a:28:e8:9a:51:8c:5c:52:6a:d9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786758bea68f0825cf16e66fb02ee7bca454bae2
        Validity
            Not Before: Dec  6 01:01:40 2025 GMT
            Not After : Dec  7 01:01:40 2025 GMT
        Subject: CN=d1249f83c2272e2b8a4ddda977322f66b740f191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:3a:c3:5c:c2:7c:a8:43:fa:09:73:dc:68:
                    9c:86:48:e4:49:5b:d6:7b:b1:f2:14:d1:36:5a:67:
                    34:01:be:6f:9b:ab:84:c6:2a:60:ae:6f:ad:32:a4:
                    72:a1:43:e4:25:3e:4a:17:e4:28:d3:d1:62:09:6f:
                    70:3d:fb:e2:6c:1b:84:25:69:d3:92:06:ee:ed:80:
                    24:b4:71:60:21:0d:ba:30:d5:90:f4:aa:ea:a9:41:
                    58:31:93:eb:0c:43:31:ea:8a:f8:14:70:02:b0:01:
                    11:cc:40:d1:16:d0:2c:a2:28:49:0c:9a:7c:91:53:
                    3a:c7:a9:96:80:2d:21:aa:d3:ea:77:a6:bd:d4:5a:
                    3e:25:5d:60:2b:0b:0c:5e:51:ab:f2:6b:38:b5:aa:
                    47:fb:5b:b1:99:1f:7e:8f:1d:f8:2a:7a:f2:76:0d:
                    18:ba:ee:c8:20:db:71:fa:56:c5:46:02:cc:f6:ee:
                    b5:28:96:2e:97:49:10:26:af:16:d8:f6:1f:44:3c:
                    de:86:ca:14:0d:bb:ad:5a:9f:2b:a5:0a:91:ae:0e:
                    35:c1:57:73:d3:46:01:53:07:c0:5c:cd:d0:b7:43:
                    11:8e:83:6c:42:a1:39:8e:4f:bf:e3:d0:f8:4b:86:
                    52:fb:36:d4:53:ad:cf:ac:c4:b8:88:7d:cf:d0:18:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:24:9F:83:C2:27:2E:2B:8A:4D:DD:A9:77:32:2F:66:B7:40:F1:91
            X509v3 Authority Key Identifier:
                keyid:78:67:58:BE:A6:8F:08:25:CF:16:E6:6F:B0:2E:E7:BC:A4:54:BA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGdYvqaPCCXPFuZvsC7nvKRUuuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/783f52-034d-46d3-b031-eed45c93775e/1/eGdYvqaPCCXPFuZvsC7nvKRUuuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:10:75:a1:cb:89:5c:42:28:f6:ab:53:46:37:fc:49:aa:20:
         b5:d2:24:75:8f:91:07:21:f3:bd:03:4a:fa:f3:68:2b:bc:23:
         75:23:04:c5:3f:59:04:29:38:8e:f5:30:e4:c0:0c:89:6b:76:
         67:59:a3:34:34:8b:f2:ec:eb:fc:18:76:fd:a7:de:59:81:81:
         d5:d2:2a:5d:b3:58:26:e9:5f:99:61:b0:53:44:08:d9:fd:df:
         39:52:94:ea:a5:99:77:78:8e:bf:30:46:75:4e:65:86:e1:a3:
         c4:b7:07:e4:7d:22:f6:5c:eb:58:ba:6c:56:ec:2d:36:6a:89:
         0f:af:2f:f2:0d:b9:91:ac:81:8e:1c:33:4c:6a:a2:1e:9f:41:
         8f:2d:4e:86:4e:fb:47:71:c2:af:28:d6:bf:b2:5c:c0:08:71:
         7f:bf:b8:ac:cd:41:11:69:bd:29:1e:c1:ae:74:a3:b8:f9:8d:
         d1:81:21:cb:22:20:99:1e:bf:02:fb:f9:b2:e1:12:c5:82:0c:
         bd:82:b6:a2:09:91:89:6c:44:7c:16:39:6f:f6:e5:ea:b6:88:
         d0:29:cb:31:a5:8e:39:00:2c:31:8c:a9:dd:0d:6f:b5:c0:2a:
         14:58:f6:30:b2:45:8a:b7:34:7e:62:51:30:5d:48:6e:3a:22:
         12:ed:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:20:43 2025 by rpki-client