This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File:                     eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier:          /nGnEm8HrtcAhTH80cXOqaDwOFx0g9JpNq24DurriS0=
Subject key identifier:   11:40:B0:4F:7A:8E:F1:A4:1E:7D:91:3B:D7:93:09:61:78:0C:97:4A
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer:       /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial:       019AF38A10EA8F1E484FE422E0A634EC068A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number:          175D
Signing time:             Sat 06 Dec 2025 12:01:42 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:42 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:42 +0000
Files and hashes:         1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: RKOZ4LVvggK7mruKI7pKgSXaSwpaGXHTKjlAMShvbfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:8a:10:ea:8f:1e:48:4f:e4:22:e0:a6:34:ec:06:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
        Validity
            Not Before: Dec  6 12:01:42 2025 GMT
            Not After : Dec  7 12:01:42 2025 GMT
        Subject: CN=1140b04f7a8ef1a41e7d913bd7930961780c974a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:1c:f0:ce:61:86:20:95:77:5a:83:73:f4:
                    06:73:52:dc:a9:d1:0a:6a:8f:da:44:90:23:b6:78:
                    9d:97:39:ac:3b:87:46:f2:30:01:9b:a0:2f:aa:71:
                    dd:21:34:24:f0:16:66:32:40:a1:4c:5f:0d:44:8a:
                    e1:ec:e4:d3:4b:c1:0c:9b:d1:aa:00:cb:d2:72:a1:
                    34:fd:fb:ac:0e:dc:bf:e5:02:cc:84:1f:9d:03:39:
                    ae:ff:15:32:47:c4:11:b6:08:f6:3a:62:b9:03:aa:
                    76:ac:bd:80:94:ef:0b:1d:89:10:0f:41:0e:e5:35:
                    1b:32:dd:84:c0:08:88:f9:8c:3f:c0:8c:10:f7:47:
                    40:b1:ef:8b:55:07:81:63:64:19:60:76:cc:b8:34:
                    ef:71:a2:69:b1:32:56:2b:4b:47:aa:db:06:7a:6a:
                    7b:4d:0b:58:1e:91:00:cc:21:79:8a:b6:14:1d:93:
                    c7:59:d7:fc:2a:21:81:d7:64:a1:85:39:fc:9a:e3:
                    57:5b:88:43:71:74:48:a5:e8:5f:a2:ec:b1:26:ca:
                    2a:d7:fd:9c:eb:a4:16:25:71:7d:d0:e5:6b:7e:7f:
                    f4:94:f9:0e:f6:25:bc:24:8a:71:1d:2e:27:07:b5:
                    dc:7a:de:4a:a5:77:8f:1a:2d:6c:76:b9:12:40:2c:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:40:B0:4F:7A:8E:F1:A4:1E:7D:91:3B:D7:93:09:61:78:0C:97:4A
            X509v3 Authority Key Identifier:
                keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:ea:1a:ca:12:16:09:1b:e9:fe:08:22:c7:71:51:26:12:
         b9:4a:04:4f:56:df:90:e3:dc:cf:16:c9:0c:05:45:c4:59:7d:
         ab:c6:2c:4d:e8:ce:43:2a:4d:f9:9e:01:94:ed:42:5a:39:20:
         34:cd:03:6b:b1:d5:05:2d:44:5f:29:7a:8a:7f:61:9b:2c:71:
         09:4a:c2:a5:8b:17:f5:27:0b:a2:bd:e0:6d:b5:2b:06:26:7c:
         18:17:5d:6c:e1:cf:dc:7c:ed:4b:27:29:11:2c:9a:90:d8:e0:
         c2:6e:ac:eb:8d:cf:0e:11:a2:36:43:f0:1c:66:bd:d6:a1:09:
         a4:59:de:15:53:2f:56:6a:88:0a:b3:04:33:59:e0:6b:c8:aa:
         0d:d8:5d:e1:60:62:76:91:d9:56:8d:31:4c:0b:9c:b0:ba:97:
         f3:86:2e:3c:9d:2a:cc:2b:2c:af:ab:3a:a4:c1:b3:0f:2f:89:
         72:10:a0:25:db:ec:92:99:39:11:6f:2a:0f:ab:bc:06:53:4e:
         9e:15:ba:02:fd:35:75:66:ef:8d:26:ba:e6:c6:4a:95:a0:86:
         0c:31:93:a0:8e:c0:a8:3d:0f:8d:28:9f:21:3e:1f:93:26:88:
         33:68:b7:1f:f1:61:b0:07:9b:6e:47:f6:bb:2a:5d:eb:81:bc:
         e5:c5:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:45:45 2025 by rpki-client