This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
File:                     73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json)
Hash identifier:          cmMC/JXwPRvQCW/N+LgM3EHOw7rpFyPb1HdpOSGdem8=
Subject key identifier:   E2:E4:1D:E7:01:DB:25:9E:26:ED:94:CF:DF:53:90:CE:E2:E7:15:49
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Certificate issuer:       /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial:       019AF208DA07A4F08AD7510177A171438900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
Manifest number:          0D29
Signing time:             Sat 06 Dec 2025 05:00:57 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:57 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:57 +0000
Files and hashes:         1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: c8H6JWRZGNiLC5HJXg8DMPgB0/B/8Q7llSnGNXWdhAo=)
                          2: uuMH9xwnTCchffmAJa-oKrLfAYc.roa (hash: gi00uqlY9uodrepVtMPHWYj2E0gYu71bOvNoVXlRiVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:da:07:a4:f0:8a:d7:51:01:77:a1:71:43:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
        Validity
            Not Before: Dec  6 05:00:57 2025 GMT
            Not After : Dec  7 05:00:57 2025 GMT
        Subject: CN=e2e41de701db259e26ed94cfdf5390cee2e71549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:75:7a:1b:6f:15:1a:9e:1b:e9:61:4d:f2:78:
                    fc:46:0c:64:a6:2d:13:e7:00:67:18:c4:34:31:f9:
                    c8:95:cd:ac:10:79:94:a0:dd:6d:36:fd:59:4a:6a:
                    5a:fe:9f:62:f4:d1:ce:7c:0c:49:29:aa:40:22:71:
                    10:b9:10:c1:f3:07:8d:6e:77:d4:e8:4d:73:de:f2:
                    64:d5:93:11:bc:28:fe:50:5c:ff:71:2c:76:a6:2f:
                    a6:0f:1d:92:7b:57:78:40:c3:8d:87:bd:b8:b5:b4:
                    11:49:18:48:65:53:5d:38:04:26:7e:60:a3:6b:44:
                    a2:52:c0:5f:1d:6e:26:64:99:a3:2a:e1:51:b3:6e:
                    ff:52:d7:0b:ca:68:94:eb:a4:f6:33:5b:68:a5:e6:
                    13:f1:47:d2:9a:0d:57:e6:32:64:eb:07:6b:e8:26:
                    38:8a:22:79:ae:06:36:79:de:ec:e1:63:99:da:aa:
                    44:da:3a:eb:bc:5d:85:61:82:a5:f3:60:00:be:04:
                    3d:7b:83:c8:09:cc:a1:60:60:1a:8e:4d:1f:ad:4a:
                    32:2e:ea:3c:35:c8:ec:3d:b8:65:48:59:64:a9:e0:
                    92:39:8b:db:88:8c:b9:8a:ea:09:bf:27:17:19:46:
                    4f:9e:d5:92:d7:df:42:98:e5:dc:ec:47:55:3b:b3:
                    94:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E4:1D:E7:01:DB:25:9E:26:ED:94:CF:DF:53:90:CE:E2:E7:15:49
            X509v3 Authority Key Identifier:
                keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ac:2a:8e:dd:f5:2c:3e:31:bc:30:6a:fd:f4:d9:e5:f1:25:
         42:7a:a7:51:05:8a:ae:b5:47:e5:21:a3:ba:b9:0f:23:45:a1:
         9c:88:48:5e:91:d4:d6:f4:62:9a:9b:b2:9f:dc:f0:fd:2b:4a:
         fc:7e:9c:a4:07:51:cc:d5:d4:36:c2:74:04:e5:12:a4:5e:7c:
         43:a7:49:ce:76:42:70:64:82:b3:5a:0f:40:83:c1:00:c4:90:
         6d:c8:69:aa:57:7a:c7:a1:ae:c7:e0:48:3a:e6:63:40:66:22:
         d0:c8:92:8b:db:4c:df:9b:b2:6c:f1:ba:71:8c:64:7a:00:03:
         5d:fd:6f:40:f3:0a:8b:83:d8:13:d5:47:41:de:15:e3:0a:0f:
         d7:a3:90:27:f8:e4:a3:fb:91:24:84:d6:60:07:94:9c:d6:f2:
         58:07:e2:fb:d1:96:be:a5:3a:d0:f9:7f:58:50:d2:e9:e3:0e:
         25:f2:18:ae:c4:c6:47:f7:ce:fa:fd:e0:a1:79:cd:66:33:d4:
         33:79:dc:e4:e1:c9:95:3d:98:c3:d9:a6:36:d0:16:03:ed:d0:
         69:c7:8b:43:5d:fa:c2:aa:82:3c:e3:34:29:43:bc:af:63:e2:
         dc:9f:8e:f2:32:e4:a6:3a:1b:4a:7c:1b:59:92:2a:14:94:17:
         fa:7f:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:20:53 2025 by rpki-client