This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
File:                     eCa2BPb4wD_p32yY5h856u11VaU.mft (raw, json)
Hash identifier:          x0e/5vpHWAlcz9GFl4NdIvKrIZPtljecy4lwkt9wBpE=
Subject key identifier:   4A:1D:1E:1F:E8:11:0F:33:09:55:2D:2C:12:22:46:8F:CA:C8:97:D5
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Certificate issuer:       /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial:       019AF12D2013985B9942D334FE7BD5B67B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
Manifest number:          1762
Signing time:             Sat 06 Dec 2025 01:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 01:00:57 +0000
Files and hashes:         1: 842mFfTvhpMCx5O_VlnhbyC5DPc.roa (hash: Y0uuEcHUMVeKlkZHSWT3ejEG3c8HH3MwGXKgGUvrUyI=)
                          2: W8WjY9YYv8iljwDY45MThfbAk84.roa (hash: dxrwQI2i6fKiTUhyw6w33TI4PVDbBCXq3QCNhLROPGc=)
                          3: eCa2BPb4wD_p32yY5h856u11VaU.crl (hash: FsNM/B/ZknXQZf1+weIO6nCCjW/rxPxciM9CGJTSiBw=)
                          4: vkWj2nsjhackefLzTv92x4E_mxA.roa (hash: WehOyXDU50Ry7h0fUSMpd4vK4omZPxG7KTOejPEntu0=)
                          5: zHyi0zO0aepoCj3YfwkO2CsuHDk.roa (hash: 64jkIZP0sVFKnl22gW7SzeQyLPkea22pOG/lfDbS5eU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:2d:20:13:98:5b:99:42:d3:34:fe:7b:d5:b6:7b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
        Validity
            Not Before: Dec  6 01:00:57 2025 GMT
            Not After : Dec  7 01:00:57 2025 GMT
        Subject: CN=4a1d1e1fe8110f3309552d2c1222468fcac897d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:c3:6a:0a:64:7a:76:6f:d8:d8:cf:65:34:
                    21:c3:c6:37:b3:79:d2:ab:ae:74:60:ee:cc:31:6c:
                    c2:54:66:45:c1:7d:df:c3:8d:df:96:9f:4a:c3:b8:
                    b1:fd:f8:1f:39:99:c9:b5:a7:8b:7b:fd:36:8d:92:
                    dc:c8:7d:8d:fb:a5:ae:19:1a:49:cb:75:02:da:07:
                    e0:0c:b3:a5:c6:e2:ac:a4:0d:bc:34:fa:67:83:37:
                    77:c8:db:9e:c2:fa:11:f1:32:31:a0:1b:e5:9e:fc:
                    0a:32:37:97:bb:64:89:59:2f:65:aa:bb:c0:e0:fe:
                    63:91:6a:b3:43:a6:57:61:3c:92:3f:3f:52:85:1b:
                    a4:2c:48:49:ae:2e:46:28:46:1d:e1:9b:99:16:13:
                    70:e0:0c:92:d4:28:e2:cd:38:1b:84:00:ee:67:bc:
                    96:6a:ab:ba:e4:1e:86:6f:82:61:61:e7:01:9e:69:
                    3d:d8:3b:c8:84:c1:24:d8:bc:be:10:5d:de:42:72:
                    b6:93:12:f0:fe:2a:3b:84:18:ca:6d:9d:7d:9c:ca:
                    20:75:fe:68:a9:72:a9:76:39:32:ed:35:9b:12:79:
                    86:fa:1a:8a:7c:30:f4:88:df:67:80:af:ff:06:59:
                    30:d8:11:62:9f:97:9a:48:8d:5b:1d:06:06:4d:12:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1D:1E:1F:E8:11:0F:33:09:55:2D:2C:12:22:46:8F:CA:C8:97:D5
            X509v3 Authority Key Identifier:
                keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d4:16:43:21:26:23:98:25:ee:39:4b:ca:1e:0d:60:34:4b:
         75:69:36:cc:4e:ec:3a:77:4c:f3:b4:81:e9:de:85:1d:85:96:
         03:e5:f2:0f:17:20:2b:b2:44:90:81:09:dc:8e:ca:c5:95:ac:
         c8:fd:ea:02:ae:0a:fe:c7:ce:43:02:b0:a5:0e:93:d4:74:2b:
         7e:84:42:75:ab:cd:ab:d4:62:e6:09:de:6e:85:c2:1d:d9:18:
         10:2c:2c:fe:0f:3f:b4:d7:4e:57:b3:d7:1a:74:cc:d8:3c:3d:
         fe:fd:94:5c:ea:0f:74:a7:01:3a:b9:90:b3:d2:bd:cc:24:cc:
         95:cd:24:1f:48:8f:ed:4b:49:2a:04:8e:54:f9:17:20:c6:05:
         cb:00:87:53:6b:80:0d:01:42:5f:02:2c:72:d5:ee:da:7d:c4:
         3f:62:54:84:d6:e7:8f:1d:9f:62:8e:64:99:fa:6e:0c:b7:e9:
         28:cb:fb:de:86:3e:30:95:9d:91:58:f5:cf:da:53:8c:9d:34:
         9c:38:e9:78:a1:07:99:93:88:b7:bc:c2:f9:32:a7:47:d1:8d:
         3f:a4:4c:b6:6b:de:ab:f8:e8:33:f6:d6:7b:a9:b1:6b:c1:a3:
         0b:d7:03:aa:9e:64:27:96:48:57:ea:71:0b:b8:22:79:78:c2:
         37:8f:27:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:25:49 2025 by rpki-client