This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
File:                     eodGp2zag2kAnSiUHvFWI5xqY6E.mft (raw, json)
Hash identifier:          BSBhX761slnDNGW8pUuK1vw3Hq/wYnMvCFcbdLCl8fs=
Subject key identifier:   9F:DA:1E:E9:82:40:57:43:8B:6D:9D:4A:27:D2:93:82:9C:8B:3B:E1
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Certificate issuer:       /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial:       019AF19AE40A222FB0EA4070E8AD240A167E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
Manifest number:          165D
Signing time:             Sat 06 Dec 2025 03:00:51 +0000
Manifest this update:     Sat 06 Dec 2025 03:00:51 +0000
Manifest next update:     Sun 07 Dec 2025 03:00:51 +0000
Files and hashes:         1: eodGp2zag2kAnSiUHvFWI5xqY6E.crl (hash: zTdMDB7x1YVHZiIUQH5baoUJ794kJc7L7DSX1ayaIVU=)
                          2: f6-FdcoeqJTnaiw6ngh5RM_0u18.roa (hash: ROX2sThoFdWo7peQL8jbU+7iV3RMFzNwV9o3Pvxf5QA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:9a:e4:0a:22:2f:b0:ea:40:70:e8:ad:24:0a:16:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
        Validity
            Not Before: Dec  6 03:00:51 2025 GMT
            Not After : Dec  7 03:00:51 2025 GMT
        Subject: CN=9fda1ee9824057438b6d9d4a27d293829c8b3be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:27:f6:b7:9b:91:e4:29:11:9a:f6:2b:17:08:
                    e9:0e:0c:93:a0:8a:c1:af:ea:3d:22:68:2a:36:00:
                    db:7c:b1:5a:d9:9e:a9:fa:a3:32:78:cb:f0:77:d5:
                    0a:f1:0d:3c:99:de:93:6e:64:97:60:ab:cb:dd:7e:
                    a8:36:a7:54:ec:c8:70:35:f4:63:44:1c:f2:26:e1:
                    69:d2:7e:af:3b:1d:50:18:fd:07:ac:fe:fa:2d:ab:
                    18:03:27:fe:ca:36:33:a2:ac:2a:c8:45:e7:be:31:
                    80:2c:97:38:00:71:c4:0f:1e:5b:c9:8d:b4:98:77:
                    7f:20:6f:b3:ae:4d:26:67:a2:70:33:fb:52:ed:50:
                    97:43:e2:f0:9c:6e:22:9c:61:e8:ce:76:41:c0:d3:
                    ce:29:61:28:99:c6:63:2f:4c:1e:63:72:40:e4:28:
                    d9:4a:06:d5:97:c6:49:2c:d0:cc:94:a9:a2:c9:63:
                    e6:dc:26:fa:1d:44:fb:d9:06:86:52:ff:b4:13:f5:
                    23:00:28:1a:56:ce:98:e4:29:78:7b:86:0e:09:a2:
                    8f:c8:ff:75:60:56:9e:36:88:1a:c8:8e:3a:be:ef:
                    d2:80:75:c0:68:51:8b:ff:03:7a:ce:38:8f:57:fc:
                    5c:00:67:23:f7:35:49:31:e9:48:80:47:16:37:75:
                    39:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DA:1E:E9:82:40:57:43:8B:6D:9D:4A:27:D2:93:82:9C:8B:3B:E1
            X509v3 Authority Key Identifier:
                keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2f:66:5d:d2:a5:88:21:20:6d:d3:be:90:9d:92:52:74:5f:
         38:78:c6:0c:c7:24:73:d0:b4:32:ec:39:11:ab:df:4a:d2:61:
         84:63:86:2a:fc:79:bc:91:e8:aa:f4:95:ed:02:ed:42:be:10:
         b4:7e:af:f8:82:3d:b1:01:53:23:c5:37:17:11:6d:b9:09:0b:
         c6:16:93:64:b8:d7:6d:b4:30:a3:bd:fe:24:92:a5:cf:c3:5b:
         24:9b:ef:fd:d6:74:80:73:ee:9f:c1:b8:b9:89:38:af:83:5b:
         04:50:31:b4:c7:a6:ec:5d:f1:d9:a5:41:33:9d:89:18:f9:b4:
         c4:00:02:16:cf:e6:d4:63:ed:7d:0e:51:24:14:ed:f0:0a:5f:
         2c:3f:9d:0c:59:b8:41:33:7c:0d:13:4f:25:99:42:a6:f4:4c:
         06:ab:c6:a0:ab:c5:db:8f:5b:6c:68:36:f5:1e:8d:2d:19:f5:
         af:4f:04:c0:62:ef:5e:8f:1f:91:c4:4e:fc:f7:c1:b0:09:e3:
         a7:07:cd:ac:e3:c7:9b:26:4c:49:20:b5:8f:9b:b3:df:07:87:
         f1:43:79:0d:51:b9:fd:21:80:a6:d9:97:42:3e:cb:6e:21:fc:
         6a:cf:93:3f:1d:62:4d:eb:ee:e8:aa:41:81:2f:ac:4a:72:4f:
         fb:15:40:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:32:52 2025 by rpki-client