This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File:                     EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier:          BWLHUfBYiTp5o1GHfQL7jl9ULa0b3sjNcDXmqzR4/e8=
Subject key identifier:   84:3B:AB:F5:59:5D:9E:13:B4:92:37:36:C3:8C:23:EB:89:D2:F1:59
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer:       /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial:       019AF2095F44790DC5ED6816E06B1D5C442D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number:          1766
Signing time:             Sat 06 Dec 2025 05:01:31 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:31 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:31 +0000
Files and hashes:         1: AVUcMAxEbDhM7vM-FUjcCVxpkZ4.roa (hash: XsWajvBJCQBaQCOPW97TUhH7waI4+kM6mJXjahHInmI=)
                          2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: FQqdPYGWC5BepxTicUreqmQ+AyDF0lPjtN+z0pCEpvg=)
                          3: Pb3BR7I3yypN0jZXyhXVjX7_7qk.roa (hash: Hki992M/vj13WyFzgI/qTd7id5FfrVmsocjjt8H+8YY=)
                          4: SEzIpQlEdNO7qpFJFox8nqfBkU8.roa (hash: DyyJf3v7/p2uLPbLbI0Ax8tgSfmYrSUpfCXMF5ZFV0U=)
                          5: e6QKnd26NFxLpuuhAxML73T_BHw.roa (hash: WvnUhZyvWR50U69T375x8NsElxKc8FKV3YkOrKaAbIs=)
                          6: ilp0a42y4ZM8M4NmpHagTEQmfIY.roa (hash: b8xhghXOeNEICuuPH88EHMI0zu8DkuF/9JKbLv1CD0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:5f:44:79:0d:c5:ed:68:16:e0:6b:1d:5c:44:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
        Validity
            Not Before: Dec  6 05:01:31 2025 GMT
            Not After : Dec  7 05:01:31 2025 GMT
        Subject: CN=843babf5595d9e13b4923736c38c23eb89d2f159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:6d:53:62:e1:a1:35:36:bb:b6:6f:07:52:
                    ac:d8:de:ad:85:56:2a:e7:18:5b:77:55:35:65:e7:
                    11:19:5d:dc:07:67:39:53:4a:0e:b7:d1:29:d3:a7:
                    2e:0c:3f:98:33:27:bc:2a:ac:bf:11:c5:7c:e0:56:
                    42:0a:37:6c:64:7c:c2:c4:c8:5b:40:cf:9b:c6:f0:
                    b0:c9:f8:aa:15:c4:16:98:e4:6b:c7:b3:d3:59:54:
                    58:59:fe:7b:74:30:6b:dd:3d:4e:e0:82:16:d2:20:
                    e5:be:64:bb:0f:f1:40:35:b6:d0:79:6f:5e:1e:3f:
                    fe:6d:e5:d3:c6:9e:2b:7d:8c:eb:61:6b:5e:7f:ea:
                    fd:e9:f3:31:b7:19:ac:a2:71:9e:38:2c:f8:78:48:
                    60:4c:0f:c8:6b:f2:f3:48:93:68:98:95:96:da:e5:
                    39:09:a7:9d:58:3e:44:4b:8b:f0:2e:fb:8b:b7:78:
                    17:9f:15:68:ca:09:65:08:61:8f:36:b6:4a:73:6a:
                    ab:38:53:38:20:8e:74:5b:ad:f9:3e:17:30:da:ba:
                    be:b8:f3:12:b7:4f:77:98:82:21:12:a2:0f:fe:09:
                    5f:ae:04:28:4c:df:3e:e3:bd:2f:2f:83:97:aa:f2:
                    8c:1e:a1:0c:e5:13:87:44:ac:ef:1c:eb:65:cc:05:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3B:AB:F5:59:5D:9E:13:B4:92:37:36:C3:8C:23:EB:89:D2:F1:59
            X509v3 Authority Key Identifier:
                keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:12:21:29:94:db:51:e7:61:2f:de:05:c1:dd:f4:53:0e:25:
         5d:8c:cc:d7:d7:3b:b6:31:7b:a9:64:72:11:0f:ab:cf:4c:7e:
         fd:0a:66:b3:23:3e:ef:6f:c4:6c:e0:78:60:70:ac:04:c7:02:
         f0:7b:6b:cf:4f:04:f3:93:e4:d4:66:89:9e:dc:8f:f6:ce:25:
         c3:a5:29:4d:12:51:fa:a4:5f:8a:83:fd:6a:33:7e:60:45:44:
         3e:ea:ff:79:f0:ca:d8:49:46:f6:2c:7b:b5:d3:77:9c:19:27:
         6f:98:94:ce:aa:8f:c6:e4:2c:13:6f:2f:22:a1:e2:fa:e6:5f:
         4d:c7:0d:aa:b5:e8:23:31:bc:38:84:84:e1:5b:50:b9:f2:cc:
         88:f2:f1:f2:73:f7:bd:a6:31:31:7d:c8:66:e9:c8:9a:3b:8f:
         ac:e6:bb:f8:25:8c:83:f2:4e:9f:3b:89:b0:8d:71:9b:d7:79:
         c1:47:2e:f6:9b:8e:42:c3:09:06:41:45:51:13:44:41:25:8a:
         ad:a3:b1:a1:95:94:80:60:ad:9f:37:e9:90:82:15:f7:6a:b1:
         93:a4:f2:79:99:c4:d1:ba:42:55:e8:91:f3:d3:56:6e:2f:c7:
         ad:f9:3e:c9:52:14:be:5b:01:44:58:cb:75:c6:ac:3d:ea:74:
         38:8f:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:14:46 2025 by rpki-client