This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
File:                     0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft (raw, json)
Hash identifier:          di+jb3vhkL//+bYAkaHbELSHBXqNJr4NmNTKn9JwbIk=
Subject key identifier:   4B:DE:89:0B:A8:05:A6:00:A8:58:32:4F:8B:D6:4F:47:98:40:71:50
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Certificate issuer:       /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial:       019AF5AF107A1BC56DF6BB5066EC2820E83E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
Manifest number:          1275
Signing time:             Sat 06 Dec 2025 22:01:22 +0000
Manifest this update:     Sat 06 Dec 2025 22:01:22 +0000
Manifest next update:     Sun 07 Dec 2025 22:01:22 +0000
Files and hashes:         1: 0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl (hash: S55WtDEHH2+zL+TpyG6xSEXpRg5/+IH7uWH+69xZgj0=)
                          2: GzhIxob9bA8Czihl63s_AVDH8xs.roa (hash: WxcqeaBj1wEhDd9uj+K5AOhKzURT0h/j4LhtZQ31WLU=)
                          3: RA-miC4KaEWvGjUqoItCz1hzspU.roa (hash: DKcOTeAksEASWtQOJrZNTefUx03eFEufr+NTo/mhLcw=)
                          4: aAjiTGjBvK-qa1UvGqne8OL4KrA.roa (hash: BjZaYz009qatAltLmOSug4n6bf9uQdN4teDrrkkHNbw=)
                          5: fe1oOTHUFPkwFLaBhSJgtXk18K0.roa (hash: fkkgIxypjSY0trqrdH7vDswC8HMHlpDfymztaFU8S48=)
                          6: mNd-QPrt9oszAh3U8KZHdf_j18g.roa (hash: 20ycN2JcFX9bIn7zpteJmgzlDEk47i2nftsr8SH469o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:af:10:7a:1b:c5:6d:f6:bb:50:66:ec:28:20:e8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
        Validity
            Not Before: Dec  6 22:01:22 2025 GMT
            Not After : Dec  7 22:01:22 2025 GMT
        Subject: CN=4bde890ba805a600a858324f8bd64f4798407150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e0:d5:f2:d4:6c:8e:0e:2a:5b:37:df:c2:40:
                    f2:52:04:36:12:99:f2:1f:ea:cc:8b:45:dd:cf:e6:
                    4b:df:93:df:62:da:21:d6:e8:f4:62:7f:bb:83:6f:
                    45:f7:24:3d:59:d7:aa:31:ec:b5:a7:c4:0b:2b:bb:
                    58:c5:48:25:42:5c:16:ce:96:6c:3c:d5:4a:65:b4:
                    c6:77:7b:3a:52:87:50:ce:fa:7e:9c:3c:f0:f8:d9:
                    f7:af:83:91:44:61:9a:94:14:87:32:0a:94:81:ac:
                    2a:81:fa:32:3b:f4:93:99:e9:47:8f:1a:51:63:2c:
                    23:d5:76:01:f3:d3:b0:6a:30:ed:c0:3a:74:40:d5:
                    8a:c1:c5:5c:87:f5:39:47:84:25:ba:8f:80:03:6a:
                    f7:14:22:1f:a7:36:60:fe:fb:c4:11:bd:23:ef:53:
                    1b:aa:99:58:00:78:13:dd:1c:d0:bc:8b:d9:74:3d:
                    22:25:3d:6e:8e:0f:a4:d4:7f:c5:ae:33:42:ad:4b:
                    98:85:62:f8:6d:9b:3b:34:17:c7:d5:95:88:6e:19:
                    1f:35:21:85:a7:85:d2:30:87:9a:a6:32:6d:2f:cf:
                    26:33:f7:8d:8a:12:54:44:0d:37:29:73:70:e8:db:
                    69:85:0c:ac:36:14:a8:b8:25:52:ef:53:29:83:ee:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DE:89:0B:A8:05:A6:00:A8:58:32:4F:8B:D6:4F:47:98:40:71:50
            X509v3 Authority Key Identifier:
                keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:d7:99:27:cc:83:74:0c:33:8e:a3:af:9b:ff:a8:e2:07:
         f5:84:54:e2:c2:56:80:39:d0:9d:3c:fa:7f:07:25:82:61:29:
         a9:18:dc:74:da:51:d4:94:e9:89:24:00:15:b2:7c:c3:75:05:
         8c:d1:b6:e7:4b:6f:3c:04:83:a4:05:22:d8:53:b1:77:40:4b:
         3c:24:41:f1:40:fe:7d:14:62:2f:86:e0:72:ae:c2:89:c1:d7:
         1e:b2:6a:ef:a2:a2:45:b2:40:cb:09:80:a4:98:4b:24:18:52:
         0a:43:13:ad:34:db:b9:9d:80:66:bb:2b:3b:bc:0d:a8:3f:16:
         71:c6:ca:01:e0:15:17:1e:29:98:2b:ef:58:65:71:31:72:33:
         28:b4:26:aa:52:f1:3a:a8:72:2c:bb:3c:75:06:fe:20:50:7d:
         99:d8:71:4f:4c:23:d0:73:3d:85:f8:1b:21:81:16:22:11:10:
         c9:cf:51:93:73:a5:a5:18:7a:1a:b5:6f:ee:29:cf:3f:35:06:
         1f:89:ab:c6:76:46:02:b9:da:28:5e:27:16:89:d1:9c:ec:ab:
         9f:00:fa:81:14:39:33:ec:76:08:ec:e4:f1:22:a4:fd:ef:e9:
         07:7b:ae:75:ea:14:3a:26:75:ca:40:1b:82:51:ec:ff:be:2c:
         9c:b4:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:34:27 2025 by rpki-client