This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File:                     78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier:          VTjY8KwWmC9/6xtIxSSCEjEZZrKXDt1kK2MLl2f2gOU=
Subject key identifier:   56:6B:E6:F6:AC:2A:58:86:B3:62:DF:83:AB:D1:DB:C7:08:CC:DE:BA
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer:       /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial:       019AF12E66C03AB3401C353514583181CCA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number:          0AD3
Signing time:             Sat 06 Dec 2025 01:02:21 +0000
Manifest this update:     Sat 06 Dec 2025 01:02:21 +0000
Manifest next update:     Sun 07 Dec 2025 01:02:21 +0000
Files and hashes:         1: 33DDywxXELna01DvyBG6K4OCumY.roa (hash: EsYBtIHA+hqoobRdv5KvY0vtx5XM1QlHRSf1TKnaAQU=)
                          2: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: 7FY9k/SeTrf/a/tFziL8jIXqRiwt9C6vovohIM++T6Q=)
                          3: BtJ6S27OWJSmoj7NYzTUN0_iFUM.roa (hash: WITF2/BxKRtye2S81kXXKd8taTnYKpq4xKx/Xf8lw7Q=)
                          4: nO178ZXZFGT-qdK_Xds7cj8ID2A.roa (hash: R+EUO1OAijizTswHRqjO5HgUg8gwhN35ZvzlFNDGCnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2e:66:c0:3a:b3:40:1c:35:35:14:58:31:81:cc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
        Validity
            Not Before: Dec  6 01:02:21 2025 GMT
            Not After : Dec  7 01:02:21 2025 GMT
        Subject: CN=566be6f6ac2a5886b362df83abd1dbc708ccdeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:82:97:fe:18:0e:5d:6f:44:93:3b:d6:52:36:
                    3f:0b:60:64:cd:54:d1:c2:c8:50:90:1f:29:ce:b2:
                    92:e1:55:bb:89:8f:aa:0c:c8:70:41:68:8a:a9:6f:
                    94:49:0a:5a:87:a2:ef:b4:25:f0:5f:62:bb:41:29:
                    77:d6:3f:cf:b2:9d:74:77:f1:d9:65:ce:32:e9:52:
                    6b:0b:c4:b1:cd:89:5b:18:d8:47:a5:8b:fd:b5:d0:
                    40:83:ad:21:72:9e:96:f2:28:25:bd:a8:9e:e1:85:
                    dc:8a:b3:13:2f:c1:ab:9a:66:64:d6:00:81:1a:32:
                    2a:f2:c4:20:06:fd:41:e4:af:f2:f1:ae:39:71:6c:
                    63:b4:a7:f5:47:d2:52:50:99:09:ac:da:cc:ac:64:
                    06:5b:23:89:8b:cd:e9:ce:c9:09:04:b1:6d:34:15:
                    aa:04:47:e9:a0:7f:b9:2f:36:f9:d7:ab:0c:b4:eb:
                    55:34:0b:87:10:71:31:56:d0:96:82:e2:a0:0d:36:
                    0e:2c:97:05:45:17:75:65:20:7b:af:3b:78:62:17:
                    be:ee:a0:39:45:52:4e:6a:8a:9a:7d:db:4a:1b:23:
                    b9:82:93:9d:07:b7:14:1d:23:86:d8:26:ff:5b:60:
                    d2:e2:cb:01:46:4a:74:82:a0:66:09:53:53:a6:3b:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6B:E6:F6:AC:2A:58:86:B3:62:DF:83:AB:D1:DB:C7:08:CC:DE:BA
            X509v3 Authority Key Identifier:
                keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:08:29:fa:a7:3a:be:4c:4b:9e:ca:96:24:90:b6:41:e9:98:
         d6:6f:24:1a:81:a6:8b:20:61:19:fd:e2:01:c9:5f:73:33:6f:
         c1:71:22:a9:25:30:c6:33:43:c1:1e:ba:79:96:a7:73:6a:3a:
         6d:3c:bc:d3:99:d8:44:0c:3f:22:98:85:1a:de:2a:34:54:14:
         38:db:97:5b:6d:f1:db:5b:26:45:24:e4:49:4c:08:c1:bd:f7:
         c9:c0:8f:fb:89:db:1e:ee:12:8f:51:1d:f3:de:e4:4d:af:09:
         98:33:ff:e9:9e:5e:13:a1:99:c1:2a:16:8f:61:b0:59:72:ad:
         df:cd:50:56:32:55:b7:3d:62:58:2a:ab:88:86:3b:10:b8:d0:
         a7:b1:d0:06:a8:f1:9e:ad:16:e0:52:f2:8f:34:82:18:93:d3:
         66:7e:70:b1:94:5c:fd:b2:9b:cf:08:6f:58:b7:ab:42:20:69:
         0a:60:3d:c6:5e:8c:4e:f7:2c:e9:29:af:89:e8:72:a6:15:de:
         51:22:de:66:3f:d5:72:66:c7:ed:5c:ee:9f:4f:c1:42:b1:9c:
         1c:88:ed:f5:9d:bf:7a:5c:ba:0f:2f:22:a8:fc:26:fc:06:24:
         26:b6:2e:d6:57:5b:4e:c5:b5:7f:77:d2:9d:0c:44:51:48:c6:
         14:65:84:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:00:18 2025 by rpki-client