This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
File:                     eHA-emIwm_AnwfEFNpJqGbfxSx4.mft (raw, json)
Hash identifier:          ei9clzTjkrzpuGA6ObNS7mDl403OFFkskQxVoN9bOS4=
Subject key identifier:   CA:A3:65:31:58:11:31:B9:03:6E:9E:84:18:52:0B:87:E1:83:90:E6
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Certificate issuer:       /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial:       019AF50BC37CC78A70DBE1628AD785DAB26A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
Manifest number:          1198
Signing time:             Sat 06 Dec 2025 19:02:59 +0000
Manifest this update:     Sat 06 Dec 2025 19:02:59 +0000
Manifest next update:     Sun 07 Dec 2025 19:02:59 +0000
Files and hashes:         1: 9KG_X1JcHTmSDP-JQ2rjaLf8dF0.roa (hash: IJsz7QtJODgr4XlSOlR3sVLiifHafwYANxLLuTbye5I=)
                          2: Hx6NSKxu5GUFdxTnTFkwnz72mIg.roa (hash: SaFnthBgRV8E0/cfedWCGZYSk3klgbcSFK1UnXkwx9k=)
                          3: eHA-emIwm_AnwfEFNpJqGbfxSx4.crl (hash: OGgNt6w5FFEjBkGf5cLKhUInFkKSFcHNGvDcAcF2WnA=)
                          4: gZB-912_d67R6AKpQ4Eg3AExCoI.roa (hash: 20uFVWh/2FSfkkn7jT72yUsHaqZSGC47MPNXDIzH1b0=)
                          5: oJh0B_eYdHNYoIj-eMSg92GtqiU.roa (hash: VT24FOtWQc/ytG8iILX4ZcZUTmQmuSWh5GjQpAKaEDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:0b:c3:7c:c7:8a:70:db:e1:62:8a:d7:85:da:b2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
        Validity
            Not Before: Dec  6 19:02:59 2025 GMT
            Not After : Dec  7 19:02:59 2025 GMT
        Subject: CN=caa36531581131b9036e9e8418520b87e18390e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:d7:d5:b3:3a:e9:f2:ee:79:cf:bb:db:31:
                    1e:fd:90:0f:8e:62:b5:a9:98:b7:85:fd:c6:19:4b:
                    e8:7e:04:17:b8:c7:ee:9f:8d:c9:4d:10:c9:7f:2e:
                    d8:0a:cf:a7:ba:19:f7:38:89:10:f6:5d:e6:70:e5:
                    4d:05:65:b1:18:25:50:03:f5:74:ff:35:9c:8a:7a:
                    67:71:77:15:92:ee:67:52:91:d5:36:8f:e9:a2:97:
                    8d:17:9f:58:df:6d:66:12:50:24:34:9e:a9:80:46:
                    ea:50:26:3c:82:4d:08:9c:73:72:13:f4:15:79:ea:
                    af:90:e1:a0:a5:80:cd:d6:fa:fb:30:d3:28:eb:6e:
                    54:7a:82:87:e5:64:38:3e:4c:fc:79:96:da:1b:2e:
                    e8:a5:ab:50:5e:99:86:3e:7f:4c:b8:14:d3:d4:a5:
                    da:6b:71:27:de:8c:92:ef:30:22:fb:49:89:e8:1a:
                    96:ec:16:e3:61:46:db:0b:cf:af:90:d8:77:f0:65:
                    76:12:3f:59:46:20:3c:5d:ef:af:b7:bb:7e:57:48:
                    28:6c:f3:9b:26:c9:e3:73:31:e6:c1:08:fb:b4:32:
                    dd:73:5d:eb:a8:cb:ba:8e:be:54:8e:81:99:1d:0d:
                    f9:71:37:d5:4a:14:83:c1:54:d6:12:3e:19:d2:9d:
                    0d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A3:65:31:58:11:31:B9:03:6E:9E:84:18:52:0B:87:E1:83:90:E6
            X509v3 Authority Key Identifier:
                keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d5:19:bc:55:9e:81:c5:b1:86:15:9f:94:eb:10:c7:8f:c1:
         22:d7:1a:8d:1b:0e:23:b6:f6:fc:23:85:41:b7:cc:25:18:9b:
         16:b5:97:9f:7f:06:99:24:20:c3:8c:58:cc:f1:e5:f7:c3:2a:
         10:77:0a:99:9e:84:02:f5:30:76:68:84:54:9d:5a:c5:e0:ab:
         47:ec:34:ad:1c:a7:77:d1:75:21:10:4d:3c:2a:dc:9c:4a:87:
         d0:78:13:ea:c1:bb:a7:82:6e:6f:11:9b:61:56:07:0c:fb:d6:
         de:0b:a6:75:88:75:f2:81:50:86:21:ff:ea:59:58:be:87:11:
         f0:77:b0:03:18:60:64:49:33:09:8d:e0:7c:df:8d:4f:cd:cb:
         da:70:47:65:c2:ce:1d:a3:00:35:6b:a6:18:72:d0:6b:db:7c:
         d5:f6:04:0c:2c:5a:d8:c6:9e:7f:26:00:ef:ad:7a:93:43:3c:
         1c:fe:fa:85:5d:4c:32:88:f5:bf:d5:1e:be:20:1d:7a:a4:51:
         9c:f7:8a:93:98:6e:60:d1:c5:5b:85:aa:f6:33:13:61:06:0c:
         75:47:89:4a:8d:97:8a:5a:9d:20:5a:90:33:84:1b:34:58:d3:
         02:22:fb:81:3d:0f:dc:a7:c3:64:ed:43:ef:fd:cc:f3:a6:9e:
         a6:9b:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:29:21 2025 by rpki-client