This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
File:                     eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json)
Hash identifier:          hztxSWVRYkSe74UMYIAGZvokdMS6syoslxHEa5H7bhg=
Subject key identifier:   26:D1:90:34:BB:DD:9B:FB:42:AD:84:42:C9:39:6C:61:20:1C:1E:19
Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45
Certificate issuer:       /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
Certificate serial:       019AF38947AD346C1E58D086D7447553D03B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 12:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:51 +0000
Files and hashes:         1: 94kSZYEi8kZZUVQDGMvt3tM0W5M.roa (hash: Kr7Qvwd5yInhruSYrImp4x8w3L+klGrguBHif+DVLgU=)
                          2: HyefmTBy2OXIxQS41tlTH-MtUgc.roa (hash: bc5pyrKFM8Tanvi0cNUIrBtuFy4XX7WbcgeUMb48Zis=)
                          3: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: +IfSiFF2CKBkWH1dYTffmCKW2kb49QrO3vAx2pSQ1Oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:47:ad:34:6c:1e:58:d0:86:d7:44:75:53:d0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445
        Validity
            Not Before: Dec  6 12:00:51 2025 GMT
            Not After : Dec  7 12:00:51 2025 GMT
        Subject: CN=26d19034bbdd9bfb42ad8442c9396c61201c1e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:d6:c1:f3:f8:4c:53:27:a9:73:c1:8a:48:
                    36:cf:04:b0:67:ba:f3:67:30:f7:63:27:11:c3:dd:
                    fa:d8:86:89:8c:af:ee:bb:73:11:2d:e2:ea:f7:f8:
                    0e:e9:ed:2d:c1:63:c3:84:33:82:50:ff:b9:46:8a:
                    a8:1c:bf:2a:32:af:d6:3f:c0:bc:bc:3b:07:6d:ce:
                    6b:a4:89:bc:97:29:3e:7e:86:fe:55:64:e4:2e:8c:
                    fc:81:3f:f2:1c:fc:85:7d:47:b5:4d:37:d7:63:b9:
                    90:63:e4:ed:85:78:c9:b4:c3:cb:e8:cd:c8:d7:20:
                    44:4d:1c:60:c0:4b:f7:21:bc:2b:69:75:85:b9:22:
                    ba:92:7f:fd:7d:0d:6d:20:d3:d2:99:4a:13:1d:99:
                    2e:03:e5:87:3d:a6:3c:e7:85:90:87:cd:53:75:01:
                    14:64:ae:e4:10:b6:20:45:8c:bd:14:30:5e:d4:6a:
                    64:fd:34:9f:2f:e3:74:8c:b1:16:f4:f4:64:83:3a:
                    36:91:1e:50:de:94:91:a1:a6:23:21:b8:54:4b:0f:
                    bc:22:79:99:a5:bc:ef:d7:3e:c1:e6:89:0c:4a:4e:
                    1c:2f:bd:c7:86:32:cf:1f:bb:3c:a8:57:3b:71:10:
                    1d:b3:4f:d0:f8:af:36:d8:f7:46:17:30:45:14:ca:
                    dc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D1:90:34:BB:DD:9B:FB:42:AD:84:42:C9:39:6C:61:20:1C:1E:19
            X509v3 Authority Key Identifier:
                keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:b2:9e:f6:91:ea:07:94:fe:12:57:45:75:57:04:09:32:
         3f:45:6c:4f:23:f9:be:4f:7d:20:78:61:16:a0:6a:eb:a0:0a:
         78:cb:7f:cd:83:42:38:1c:0c:59:b5:19:c3:e1:5a:e9:77:f5:
         f1:1c:a6:46:e5:3c:f3:d3:1f:16:da:df:1b:e0:9a:2e:90:86:
         ec:38:d6:24:5e:6b:d7:83:ac:aa:21:66:1b:86:a2:f7:19:e0:
         d6:37:26:0a:1c:e7:05:f5:2a:ae:42:cc:73:b4:d8:c3:b3:f3:
         b6:a7:b7:80:cc:90:b0:1f:a9:1f:9c:11:b3:30:3c:11:d5:b5:
         92:ba:62:41:b9:05:6e:ef:11:b4:d4:d0:2d:a1:48:38:18:90:
         07:2d:7a:39:17:eb:db:f7:87:19:8a:45:2c:5b:b8:5e:a1:35:
         12:95:35:c9:1e:e1:b1:19:48:14:3f:51:6d:33:16:01:1c:5a:
         f5:ab:69:f6:d9:b5:6f:35:c6:54:5c:a1:29:4d:3e:56:32:68:
         9c:e3:e4:10:e1:ac:be:6c:6c:bc:a4:10:aa:1f:6a:70:dd:ec:
         0f:5e:80:0b:cd:35:59:ba:71:57:ed:a0:f9:37:e7:2e:52:84:
         00:33:3a:65:49:04:e2:99:3c:35:de:1e:de:0a:87:95:3e:36:
         b3:f7:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:29:40 2025 by rpki-client