This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
File:                     EFQ6UZfrJUREfp02s-vxRFLHd-s.mft (raw, json)
Hash identifier:          xbD1Yftmtz2bPSNewN9AQJ9BhZ+fnTfNK33RETEDu90=
Subject key identifier:   D0:EB:9C:3A:16:64:1A:22:F4:9B:38:16:DF:B3:01:DA:1D:6B:19:04
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Certificate issuer:       /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial:       019AF3F78CCB0438DEAEE296423F81182CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
Manifest number:          1768
Signing time:             Sat 06 Dec 2025 14:01:18 +0000
Manifest this update:     Sat 06 Dec 2025 14:01:18 +0000
Manifest next update:     Sun 07 Dec 2025 14:01:18 +0000
Files and hashes:         1: EFQ6UZfrJUREfp02s-vxRFLHd-s.crl (hash: 8wjUkcdZddaqouGqmoVgDTWcIu8TbiswP00ugEKBpHE=)
                          2: O7lEAqmJ6RVW6ZUznCOtA8Wqr_U.roa (hash: 1bSxYn5Oc7EjOQaFfznp7ul3zLl0SKUWaiYKT6AxWVI=)
                          3: USGB4EfibArvmHzd6YayMlE_4Ts.roa (hash: QP2OBD46ZcKAmd7iDiZKVRRwOA0LwH3cIZJcmun1SiE=)
                          4: dTGUVm0ZrIzwKRyWbL6NbJOPx1Q.roa (hash: RPTvRkUlZkqh3fbuLZ6reC0SCKA0OsgzpyZM/iS5ClM=)
                          5: lnnez22JWNJd2WeZ5gJhM-lXVrk.roa (hash: /nXGCYPW3MVBYSZbtf5SJkkLnnjwK5da+GKvEPkj/WA=)
                          6: ysAe9gPPhCsZkqGLoH8Nd4f8kFU.roa (hash: fpsD9ECkrPIFTg+vtTdi/ySXoJt5P42w1onB70hUeiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:f7:8c:cb:04:38:de:ae:e2:96:42:3f:81:18:2c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
        Validity
            Not Before: Dec  6 14:01:18 2025 GMT
            Not After : Dec  7 14:01:18 2025 GMT
        Subject: CN=d0eb9c3a16641a22f49b3816dfb301da1d6b1904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:6c:cd:82:8f:ec:d6:2b:5e:1e:f6:4e:23:
                    76:c0:dc:a6:8b:bc:0f:7a:7b:9d:12:04:1e:a6:61:
                    44:16:56:2f:92:d4:d1:51:e5:a6:b0:49:ab:72:94:
                    7c:e5:66:61:54:e7:8a:05:34:96:6a:2e:84:23:3d:
                    dc:b3:de:6b:52:15:a9:73:1b:56:a2:9f:16:f4:b9:
                    95:f7:7b:ac:60:fd:89:ad:4c:62:20:a6:aa:04:b1:
                    1f:1f:0c:e8:39:b8:1c:9e:24:bf:a2:b1:cc:a8:15:
                    a8:bb:c8:fd:01:fd:80:e3:1d:48:f1:98:cd:37:fd:
                    eb:aa:55:fd:b2:ee:49:c9:ba:01:ec:8c:40:bf:f2:
                    14:b4:ad:a8:3b:35:6f:4b:7e:eb:5c:b9:f2:29:3d:
                    0d:a7:af:27:13:76:38:50:c9:f9:4e:21:6d:0a:ba:
                    79:ad:2c:f1:84:83:aa:92:0d:38:f8:bc:21:a6:b3:
                    2c:a8:96:0e:c2:f6:37:8f:b6:98:50:8a:13:1b:95:
                    69:c1:85:d3:6e:a6:66:8a:88:18:5a:14:99:1c:c2:
                    cd:23:67:4f:e2:51:f3:3f:fb:a4:cd:7b:a5:e5:24:
                    d4:72:a3:33:cc:13:86:4f:69:db:b1:38:a9:85:a6:
                    8a:05:fd:7d:f3:27:56:36:7b:3b:20:af:c7:e2:98:
                    bf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EB:9C:3A:16:64:1A:22:F4:9B:38:16:DF:B3:01:DA:1D:6B:19:04
            X509v3 Authority Key Identifier:
                keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:0d:d9:12:d3:ab:7e:d3:e0:8c:88:68:3c:7a:97:b8:0e:6d:
         33:6e:1c:de:c2:fe:0d:72:cf:36:d7:21:fc:aa:2f:dd:0f:96:
         06:1d:ca:7e:aa:55:01:95:95:d5:8b:ae:48:b4:31:52:6e:2e:
         ba:89:a7:e7:62:01:31:42:00:78:e5:76:98:69:0f:46:60:f5:
         7c:ed:07:b4:8c:38:83:1f:85:92:c8:1e:4b:35:2a:fa:c6:77:
         d5:af:dd:c1:c0:dc:80:a3:44:b3:d4:74:7f:3f:f5:0d:d0:08:
         cf:9a:88:7a:8b:c9:9d:f1:c4:49:38:47:f4:ea:50:c9:a6:d8:
         4d:f9:a3:4a:d4:bc:46:8d:7f:c5:b4:30:a4:9e:48:9e:8b:34:
         c7:bd:28:09:11:02:79:6a:82:f6:bc:69:7d:07:2e:2e:11:e4:
         49:e1:ac:db:9d:fa:5d:61:45:be:15:51:7a:3b:73:18:f6:97:
         63:2f:c2:f9:df:f9:93:21:dc:7d:4e:f1:3f:b5:36:b4:24:9c:
         b6:43:e1:5c:53:a8:69:c0:99:0b:0b:58:3b:0b:15:3e:ec:63:
         0a:ce:95:95:f6:a9:78:89:bc:e7:0f:72:b7:87:06:be:cd:53:
         27:5a:6c:09:6e:49:fd:3f:c0:d6:cb:33:77:4d:16:6c:02:39:
         19:50:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:19:18 2025 by rpki-client