This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
File:                     e_OebrMTHs883c0MnjeMNS2kH8I.mft (raw, json)
Hash identifier:          tXwj+KK9AnK5D+qWnNefpQb5E7qR0HBKYXNUSnsj6BA=
Subject key identifier:   64:5B:7B:C6:EB:CC:84:F2:D3:F4:68:AD:90:CD:91:97:D3:8A:89:06
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Certificate issuer:       /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial:       019AF509B889808F0861D029593701E4A8E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
Manifest number:          10D4
Signing time:             Sat 06 Dec 2025 19:00:46 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:46 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:46 +0000
Files and hashes:         1: UbCWmkTBKtMgqtYfftK4bzNkfjc.roa (hash: 2USUqiqyvmda1iLGBaPyJ2mFdfz8AiGFv7Y7tVUma2g=)
                          2: e_OebrMTHs883c0MnjeMNS2kH8I.crl (hash: +vrBeq+SYw4X0v3++T9nYo5lcUNI4h6SWby/1eno9AI=)
                          3: vAhoECj76DxTiQ3yLLf6mu-_BqI.roa (hash: nCQBvqDRV7DEKusg0hBSa9SwoVzc4dU3/3Bre1jok34=)
                          4: xZRqK0ehAUNFfp7bd5x7WM7WU48.roa (hash: RKiSJS4ui6TI89oyaWSjQ9KPJJo62REtrxZnTIi0/mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f5:09:b8:89:80:8f:08:61:d0:29:59:37:01:e4:a8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
        Validity
            Not Before: Dec  6 19:00:46 2025 GMT
            Not After : Dec  7 19:00:46 2025 GMT
        Subject: CN=645b7bc6ebcc84f2d3f468ad90cd9197d38a8906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3b:c1:b8:92:0a:ad:cc:96:18:f5:6e:b1:5d:
                    a2:d3:5a:72:a1:ae:5e:db:39:6a:ac:db:14:1b:20:
                    76:d5:41:35:52:49:3d:8d:9c:b0:6c:52:ab:32:7e:
                    27:7a:14:4f:7e:38:85:27:d3:b1:a0:3d:54:4e:63:
                    1a:13:6a:6e:a7:3d:92:27:62:da:a0:81:9d:cc:11:
                    d0:c5:3a:54:46:1e:ba:cd:40:8e:4a:12:4e:c6:4e:
                    e7:f3:6a:f7:82:c1:61:3f:e1:db:5c:1f:39:a0:fc:
                    69:76:75:e9:07:cb:aa:7b:38:a9:3e:a3:fd:47:70:
                    a7:3b:0c:d9:aa:be:b5:da:0c:46:1c:c1:02:b0:10:
                    ff:ac:5e:5b:0f:f6:f6:a0:5b:7d:ce:99:df:ed:bb:
                    92:61:c3:30:49:96:be:f2:f2:ff:f0:d6:bf:89:f3:
                    69:4d:0a:0f:84:77:71:6c:eb:4f:54:5d:64:c3:17:
                    24:e6:7e:0f:02:ba:3e:36:87:7d:44:72:c1:83:24:
                    c8:6e:93:d7:23:bb:3a:2d:fa:bc:e7:3d:e7:d0:cb:
                    cd:4f:5f:c1:d9:d1:fa:9f:de:c9:04:62:41:2b:2e:
                    0a:d7:bb:5b:b5:e8:8e:ea:60:fb:31:90:b2:e9:22:
                    13:b2:91:e7:3d:65:44:85:3d:95:ba:eb:7b:82:a2:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5B:7B:C6:EB:CC:84:F2:D3:F4:68:AD:90:CD:91:97:D3:8A:89:06
            X509v3 Authority Key Identifier:
                keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f1:a5:d9:cd:75:61:92:0b:8f:ee:7b:12:4e:bc:70:87:55:
         f3:2d:32:0a:6a:28:ca:71:47:73:e4:79:f1:d7:e6:26:11:97:
         0c:60:67:2a:da:d4:fc:8e:16:38:1b:b6:84:b9:8a:9e:c0:78:
         3a:15:84:7b:d3:61:85:44:30:b2:f8:8f:35:fb:2d:4d:f3:0e:
         95:3c:3a:66:0f:c7:71:f4:6c:05:fe:0d:d6:1f:c6:74:04:a5:
         8e:3f:4b:3e:1a:94:4e:da:69:69:23:d0:d5:55:48:73:05:19:
         f8:cb:fb:c8:15:9d:69:3e:ce:60:b1:aa:55:e0:3d:55:b7:d7:
         b7:36:73:df:b0:8a:ce:8f:04:76:9c:ad:ab:a4:4b:87:59:11:
         f1:1b:2b:e7:20:51:a9:5c:07:f5:84:9b:e3:41:43:ab:62:ef:
         bd:ff:9f:1d:3f:5a:a2:63:17:76:0e:85:53:89:53:3f:3b:d9:
         82:ea:9f:68:9c:a1:bc:e6:a5:fc:d8:05:1a:db:62:a8:b8:c5:
         93:e6:c0:8d:47:95:34:b1:e2:20:08:ff:d7:74:5e:81:ad:ec:
         b5:e7:d5:75:2d:b9:20:1d:bb:1b:9b:a6:95:aa:2d:26:a6:81:
         1e:b6:ce:82:29:b7:0f:5f:32:14:46:c4:64:7a:44:cf:26:f0:
         ca:11:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:09 2025 by rpki-client