This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File:                     eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier:          NlHHwtLiJ2nsMlhbIBhV2XL4d1QuwSDm78VIjqzjHv4=
Subject key identifier:   05:2E:A7:04:72:97:97:33:02:F5:39:74:73:F6:93:2E:3E:A2:49:42
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer:       /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial:       019AF1D208426012C3F8C7041FBA6BE3BC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number:          175F
Signing time:             Sat 06 Dec 2025 04:01:04 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:04 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:04 +0000
Files and hashes:         1: b0GYLmjWKwhIOi3oAzYrvPVF7ak.roa (hash: j3QKWf4Na6ufdvRpfqdxKfUCQ/5sW3MTiaiymKVZLKk=)
                          2: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: /vLO5syandB+9ynBu/hATDUnzPWss9ZDU3/wCw1Nkxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:08:42:60:12:c3:f8:c7:04:1f:ba:6b:e3:bc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
        Validity
            Not Before: Dec  6 04:01:04 2025 GMT
            Not After : Dec  7 04:01:04 2025 GMT
        Subject: CN=052ea7047297973302f5397473f6932e3ea24942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:26:28:e0:e5:3e:4d:9c:16:16:56:81:e9:
                    8a:a9:e1:2a:3e:28:ef:9d:ae:c6:c8:6d:11:e9:2e:
                    f8:7f:2c:88:a8:c0:11:29:ff:28:ed:2a:b5:69:cc:
                    66:9a:78:24:58:6e:99:60:a5:e4:8d:6f:6b:3a:7e:
                    04:0c:f2:15:e7:ae:be:84:e1:77:90:11:c5:7a:f7:
                    e6:4c:b3:38:48:e4:c3:70:11:6b:3b:fb:ba:99:e2:
                    4a:b6:e5:aa:20:c9:68:31:60:8e:e8:26:7d:8a:60:
                    6e:ef:c1:3b:f0:ba:ed:bb:94:51:39:95:da:b5:2a:
                    30:06:67:11:4c:0b:a1:69:1f:76:0d:86:80:b3:78:
                    51:4a:eb:7e:54:44:b8:41:53:20:c0:a5:24:f9:fc:
                    9a:e5:93:a3:36:72:ea:43:e0:bc:f1:22:09:de:f2:
                    1d:a5:a1:2f:ec:26:ca:5d:fc:39:32:72:5f:00:e0:
                    3c:44:88:a0:a3:c8:fe:ab:0d:a7:50:52:d2:40:5e:
                    d1:45:a7:2c:43:de:f9:28:02:ce:f5:bc:b2:1f:5e:
                    de:a6:1c:13:04:fe:a9:6c:12:e4:27:03:cf:c1:da:
                    57:a0:dd:d3:03:ad:23:e3:39:ec:a8:86:ec:df:8f:
                    7b:a4:91:6d:8d:91:c3:d2:1c:70:f0:d2:17:aa:36:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2E:A7:04:72:97:97:33:02:F5:39:74:73:F6:93:2E:3E:A2:49:42
            X509v3 Authority Key Identifier:
                keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f2:4a:e0:52:f9:64:f5:d4:37:6d:f4:66:70:97:00:e3:d4:
         7a:8a:cb:48:e7:7f:cc:ad:db:ef:e1:43:e1:1f:6a:fc:23:2d:
         30:93:7d:16:62:60:9f:40:40:49:3a:8a:1f:70:34:af:83:a2:
         76:c1:73:a8:91:d9:e9:e7:32:c3:ed:44:05:49:38:5d:2d:fe:
         89:eb:fa:bf:e8:e8:83:20:f8:70:94:1d:7b:b5:98:54:73:6e:
         77:21:56:25:c2:fe:6c:4e:42:2c:28:b4:40:10:c7:1c:8c:e7:
         7f:12:f4:79:5d:ba:35:af:a8:30:53:69:1a:a4:c4:88:67:2d:
         55:f9:77:7e:57:04:31:2d:db:f0:03:c7:5e:8d:b5:6b:2d:c9:
         db:d4:fb:21:0b:e9:68:5e:00:43:82:8b:e9:d4:12:ce:8a:72:
         c2:32:f5:32:a9:4d:8d:9e:88:0f:64:c1:d4:03:f1:c8:0f:77:
         80:30:53:1d:3e:c8:1b:64:6d:e9:77:bf:cb:0a:a6:f4:45:77:
         be:09:28:22:3a:35:00:b8:70:9d:69:91:89:cb:3d:8a:d1:65:
         0a:8f:18:10:80:d1:dd:a7:9a:9d:c3:e9:f3:08:1b:07:1b:f2:
         fe:c4:a3:ca:a1:21:cd:e8:e3:56:f7:30:40:dd:db:c2:97:7a:
         91:27:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:22:27 2025 by rpki-client