This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File:                     eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier:          cZmqQ2yGhL4CnPv2X6/BH6lYIr8EaA8vVi6CprNQqPI=
Subject key identifier:   3C:7C:FF:36:A5:08:91:7E:32:0F:3C:52:90:3F:53:E2:97:AC:88:79
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer:       /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial:       019AF1D1C751585C891F3B5BA86C483115FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number:          1472
Signing time:             Sat 06 Dec 2025 04:00:48 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:48 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:48 +0000
Files and hashes:         1: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (hash: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=)
                          2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: gYeRZYMAP9YBoYohe2wZvCmFJZuV1Id7CR5LHBMkpqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:c7:51:58:5c:89:1f:3b:5b:a8:6c:48:31:15:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
        Validity
            Not Before: Dec  6 04:00:48 2025 GMT
            Not After : Dec  7 04:00:48 2025 GMT
        Subject: CN=3c7cff36a508917e320f3c52903f53e297ac8879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:db:ae:94:11:9b:ab:78:9a:f4:61:1f:61:53:
                    fe:ba:48:f8:a5:05:83:4b:9c:1d:a0:20:e7:43:6b:
                    9c:27:57:7b:dc:d2:98:40:69:41:3f:16:5a:28:d2:
                    40:72:c1:5b:87:7d:10:36:74:e4:60:e8:ef:da:76:
                    28:6e:65:ce:b5:2f:66:05:4b:19:22:bb:eb:5e:ea:
                    be:20:76:29:8f:88:f1:73:7d:30:f0:9f:bb:49:a9:
                    35:02:8d:13:31:70:69:ca:d0:db:7d:37:d7:82:99:
                    cb:3f:24:2b:b4:01:30:6e:4c:09:04:ba:02:26:50:
                    3e:82:83:60:26:3d:4d:18:19:5a:21:3c:62:de:e1:
                    58:6a:c3:14:10:b1:19:de:63:5a:50:da:13:de:c5:
                    17:a0:4d:ce:c9:f2:72:00:e3:68:7a:b0:2b:cd:a7:
                    95:20:b0:fd:1e:af:7a:95:87:ca:d6:1b:54:10:46:
                    e2:f1:f1:a0:51:2e:4f:01:00:2b:3e:93:95:65:ab:
                    1f:78:bb:0b:5a:6a:5f:aa:f5:62:64:52:45:8b:6e:
                    ae:f6:1d:7c:83:9c:7f:0a:f2:0d:71:b1:74:a0:79:
                    99:f4:04:2e:3f:32:13:c0:0c:c3:e6:96:b3:c1:f8:
                    37:da:15:f3:ce:db:24:55:ae:21:1e:b1:a5:5e:53:
                    b7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7C:FF:36:A5:08:91:7E:32:0F:3C:52:90:3F:53:E2:97:AC:88:79
            X509v3 Authority Key Identifier:
                keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:89:38:ab:c0:3f:68:4a:18:18:7b:c9:e4:dd:a2:7f:e4:e8:
         55:e3:0c:1e:d4:32:66:da:5d:c9:11:b7:0f:7c:05:58:16:b3:
         e3:26:a9:29:e1:c1:10:2d:14:81:e5:57:d2:02:bd:33:8d:95:
         6e:5d:70:e7:51:10:e1:9a:b3:15:14:34:38:c1:cf:67:00:4a:
         4d:fa:05:b5:d0:a9:35:ad:a2:95:71:c7:1f:6b:51:30:d8:f4:
         eb:a4:e7:b1:9c:55:1c:3c:6e:ac:9a:65:05:5f:31:77:ba:f3:
         86:f5:21:54:1f:8c:92:43:ce:1a:02:66:97:ae:76:1b:4f:49:
         00:11:e2:f7:14:32:cb:3d:c8:bf:e9:be:dc:b6:0b:e4:35:ec:
         b7:d2:af:6d:c2:de:1d:30:7d:be:7d:c7:b6:ca:88:b8:e6:6d:
         1a:7e:51:ef:e7:e5:61:ed:fa:66:45:1f:48:6c:37:ae:21:5f:
         94:66:98:b4:f1:07:ff:8b:5c:02:53:ca:f2:08:ef:f1:4a:a1:
         3d:bd:a2:fa:6c:a9:94:d9:04:eb:e1:f4:3f:73:7a:e0:2e:14:
         a1:ac:52:52:fb:c6:13:7e:15:2c:74:50:82:af:fd:74:4b:e4:
         b7:48:f1:09:83:f4:ce:b9:cc:22:24:e3:99:d2:c7:39:39:8a:
         d6:ba:7d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:11:10 2025 by rpki-client