This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
File:                     eSWRAsFpk85eE7CMumDu2tf5J3M.mft (raw, json)
Hash identifier:          LlQ4AVF17v6h2paJF3PK1oLPPcc+DSFnoMbpScMDjDw=
Subject key identifier:   72:62:62:80:20:4F:49:CA:BA:EE:8F:6E:7C:86:59:FF:E8:15:DD:98
Authority key identifier: 79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73
Certificate issuer:       /CN=79259102c16993ce5e13b08cba60eedad7f92773
Certificate serial:       019AF163D8011E868B80EC33285D801F30F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
Manifest number:          035E
Signing time:             Sat 06 Dec 2025 02:00:43 +0000
Manifest this update:     Sat 06 Dec 2025 02:00:43 +0000
Manifest next update:     Sun 07 Dec 2025 02:00:43 +0000
Files and hashes:         1: 2XnqswJhUp8Q7QKYSg6mYnJtPx0.roa (hash: GVTo7but2rFEi3PE0oMZ20Q2ZfZFSUAgiohCKBnP4LM=)
                          2: eSWRAsFpk85eE7CMumDu2tf5J3M.crl (hash: bbEpQ/Ett9M4qOMcBdZXyAVU+LbWNV8gdYrkTH7BC7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:63:d8:01:1e:86:8b:80:ec:33:28:5d:80:1f:30:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79259102c16993ce5e13b08cba60eedad7f92773
        Validity
            Not Before: Dec  6 02:00:43 2025 GMT
            Not After : Dec  7 02:00:43 2025 GMT
        Subject: CN=72626280204f49cabaee8f6e7c8659ffe815dd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:1f:95:29:f2:f9:54:55:47:0b:19:76:b3:
                    2f:59:c4:b9:da:ec:03:9b:79:7f:93:45:ea:72:2a:
                    7c:e1:31:3c:f5:e9:24:d7:b5:9d:64:af:f6:f1:f6:
                    5b:51:a2:fd:af:c3:cd:b5:41:d8:47:be:2a:bf:02:
                    44:38:c3:31:a9:5f:97:28:25:73:14:56:b7:6c:c0:
                    a0:77:63:17:a6:95:11:5f:6c:43:86:cb:85:1c:e1:
                    43:50:a7:4a:f2:9b:21:9d:29:63:7d:ac:e4:2b:b9:
                    80:cb:aa:32:bf:3d:89:05:e7:4f:98:79:26:8e:b4:
                    64:11:ca:6f:40:e9:f2:ce:20:22:ee:1f:a5:23:b6:
                    c7:61:c5:2f:eb:48:d3:a4:11:d7:e3:52:d4:71:39:
                    9e:d8:85:e7:69:c7:2c:40:89:57:fe:e2:b8:57:7b:
                    e5:62:21:7a:ea:27:5e:ba:a5:d5:0c:82:18:4b:e9:
                    5d:92:35:18:23:96:9e:a5:22:a7:fb:82:1a:da:44:
                    34:e2:8a:7c:f6:d8:ed:ee:ae:aa:16:5f:56:ac:8c:
                    bd:33:22:88:d4:1b:8d:ce:d4:ad:0c:cd:23:2a:93:
                    f0:65:86:c7:79:f8:6b:bb:f2:6f:fe:cf:94:5c:82:
                    64:f4:45:49:c0:e5:cc:40:0a:7b:56:78:53:5d:0e:
                    d3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:62:62:80:20:4F:49:CA:BA:EE:8F:6E:7C:86:59:FF:E8:15:DD:98
            X509v3 Authority Key Identifier:
                keyid:79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:cf:be:53:c6:1a:26:c5:85:db:4e:03:71:59:32:f9:27:d7:
         f2:a8:88:57:9c:d8:d0:a0:89:ab:e5:25:b5:9d:0c:59:53:85:
         64:d9:63:a8:61:b0:7b:45:73:0a:7a:f8:7e:32:64:c1:2b:bb:
         f1:38:c0:c1:0b:94:4b:23:c7:d2:a7:7c:ff:0b:98:d2:b6:67:
         b0:f4:15:b4:ae:15:1e:f4:2a:c7:f4:0e:86:8e:9a:00:a9:6c:
         f2:0f:6e:c1:e7:47:a7:f7:39:61:8b:74:6b:c5:29:29:0c:b9:
         53:08:24:b8:4b:d6:b3:3c:6a:73:0f:a6:ef:0c:02:4b:13:16:
         71:55:1c:47:44:e9:e9:d2:ab:df:7a:a4:f1:7b:b4:14:ac:aa:
         13:26:0e:9d:e1:d0:02:2a:44:27:c7:7b:40:e5:71:d7:4a:2e:
         a9:86:0d:1c:85:58:d8:71:29:99:60:6b:1c:00:17:7a:06:20:
         05:27:ac:71:af:1d:3d:68:45:4b:44:0f:3e:81:1b:39:aa:7f:
         85:c6:ca:c3:4b:ed:7a:b8:64:82:53:24:08:06:2d:6a:93:e4:
         15:73:93:57:f2:1a:13:26:5f:93:ca:6f:44:af:6d:58:97:b7:
         69:81:4c:07:52:f4:40:2d:2e:63:b1:a0:b5:ca:23:5d:3e:79:
         3c:57:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:10:30 2025 by rpki-client