This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
File:                     eaMEujS2GhXjeX_9TRrowhjBx78.mft (raw, json)
Hash identifier:          tifV1mpSS8t6vn0N8W+Uy3ri7CuHEhZLsy1x+kta5To=
Subject key identifier:   D7:8B:BD:1A:88:B2:60:42:51:24:57:A7:7D:1F:3D:52:BC:4B:52:DA
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Certificate issuer:       /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial:       019AF389573243AA8528AEC6F3611D6C100E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
Manifest number:          0E71
Signing time:             Sat 06 Dec 2025 12:00:55 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:55 +0000
Manifest next update:     Sun 07 Dec 2025 12:00:55 +0000
Files and hashes:         1: 1-NdTr5SG40wO4Kbvwy1COocgFrk.roa (hash: oe54LaKxNplT5wDF3qIUM33hwicykogi4I92CR9BK78=)
                          2: IyMj_GgdqYfdqdX928jtCKAmPjs.roa (hash: kUwftms8VyuATJuEC4wOr9dtfJWaE40ItFucwi9PLeA=)
                          3: WMIHYk8xvDaFM74QNnIJJvo_0c4.roa (hash: VnzFTov/2fcaAAWs7Jv52Wdrro3t3T/GLjVSPHCgVtY=)
                          4: eaMEujS2GhXjeX_9TRrowhjBx78.crl (hash: 1/ed22Pc6Y7mpJJfxjdDlWPkBCIOoTE1UlELNbSmXX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:57:32:43:aa:85:28:ae:c6:f3:61:1d:6c:10:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
        Validity
            Not Before: Dec  6 12:00:55 2025 GMT
            Not After : Dec  7 12:00:55 2025 GMT
        Subject: CN=d78bbd1a88b26042512457a77d1f3d52bc4b52da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:1b:3d:25:ee:07:fd:b8:9e:5c:13:91:77:
                    09:92:0a:be:62:bc:12:05:8c:ca:d4:67:29:80:b6:
                    58:b6:e6:d8:3f:8a:85:53:c5:5e:d5:1f:b9:53:fc:
                    0a:6c:27:96:ee:77:e4:90:d7:99:f0:59:89:b3:81:
                    99:6e:08:3f:8e:e1:61:95:48:aa:fb:0e:ba:b0:25:
                    fa:62:02:37:34:c8:3b:e0:4d:e3:77:33:ce:ad:78:
                    4d:cf:df:d4:36:f5:9a:9b:c1:38:ff:8e:bb:f0:32:
                    2b:80:6a:63:b6:3a:bb:27:f0:a1:18:ac:ae:db:80:
                    3c:03:ff:dc:1b:fb:fc:7b:69:e0:e5:22:b6:54:81:
                    45:70:38:d0:89:ba:fc:2e:f1:fa:0d:8f:a2:12:d9:
                    5c:61:d5:8a:84:3c:01:e3:38:e5:3c:9f:0f:5e:96:
                    60:f4:89:28:83:ff:96:55:a8:1e:a2:b2:17:b5:77:
                    3c:25:6c:3a:16:c4:88:ef:91:75:05:e8:e2:7e:9b:
                    97:5e:bf:79:d6:b8:f3:31:a2:6d:62:6d:82:a4:23:
                    7c:5e:f0:0f:4b:f8:5e:67:26:96:8b:f1:d9:66:8e:
                    fd:47:2c:b0:44:e9:44:ce:d4:94:b9:72:95:59:7a:
                    07:b0:00:18:0a:39:fe:c4:49:20:45:02:e9:c6:89:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:BD:1A:88:B2:60:42:51:24:57:A7:7D:1F:3D:52:BC:4B:52:DA
            X509v3 Authority Key Identifier:
                keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:db:20:8b:e3:71:e7:cb:b7:63:24:5e:a7:98:d8:0d:8a:47:
         33:c9:b4:f4:65:b7:88:36:dd:fc:d7:06:fa:e7:ea:97:df:2c:
         fc:64:c1:2a:f2:92:af:cc:7c:cc:39:28:da:a8:f4:e4:10:db:
         a5:93:44:87:c3:44:bf:c4:de:07:bd:b2:09:db:d2:06:c9:16:
         86:11:0c:5f:97:fc:4d:55:f4:ad:fa:dd:5a:61:2b:d4:36:8d:
         06:39:dd:c4:ad:0b:18:a4:61:e8:da:ee:bd:d4:c5:ec:31:c8:
         43:55:e2:60:67:74:a9:bd:85:70:2e:8c:0a:73:ce:a1:be:f0:
         54:62:cb:26:9e:15:33:e9:a7:68:ce:26:03:62:29:3a:40:6b:
         bf:39:ae:a3:d0:da:27:15:2e:46:fa:a6:e3:63:45:ec:da:d1:
         6b:dc:9d:fa:a2:46:88:c4:d8:76:3c:25:02:08:db:f0:46:97:
         7d:57:35:cf:88:f7:cb:a6:2b:a9:3e:20:95:a5:88:05:4b:56:
         2c:a7:70:8b:05:ae:e8:7a:0b:33:f0:39:d5:ed:62:93:cc:e1:
         14:ec:d0:e2:f2:6e:9b:78:6b:e1:8b:41:42:89:09:01:56:3e:
         79:bb:9d:85:b8:11:61:cf:48:4b:fb:3a:c5:5f:d0:24:5a:cc:
         ec:c0:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:22:24 2025 by rpki-client