This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
File:                     EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json)
Hash identifier:          w9pWm6Ean/cTb98C4XrSajSlehURwhXzryynkRCA4zE=
Subject key identifier:   B5:8F:9D:F1:30:0C:B9:BD:24:5A:CE:E8:55:60:5C:0B:DA:FF:F6:09
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Certificate issuer:       /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial:       019AF31CEA2285722E2C0337803BDEC1FEA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
Manifest number:          176B
Signing time:             Sat 06 Dec 2025 10:02:29 +0000
Manifest this update:     Sat 06 Dec 2025 10:02:29 +0000
Manifest next update:     Sun 07 Dec 2025 10:02:29 +0000
Files and hashes:         1: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: PIk6CqlXi7KncLG3ZIHd0ziAJGvPDoVJoCK/wFJ31DU=)
                          2: UxsTUJ3i3bRyx6hBigKTh5V_pzI.roa (hash: hCyMOI3ro18CpyVh9ARwQzWK3Oa2vshWDEi2X+gYh7I=)
                          3: dzRXBpMe0hzBj6HJBEsWN5FaUlQ.roa (hash: n4IPgvg0KMpR1k4kw/tSH+SDBMVI+LIlZxHtSGDn0vM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:1c:ea:22:85:72:2e:2c:03:37:80:3b:de:c1:fe:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
        Validity
            Not Before: Dec  6 10:02:29 2025 GMT
            Not After : Dec  7 10:02:29 2025 GMT
        Subject: CN=b58f9df1300cb9bd245acee855605c0bdafff609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:52:44:47:0c:a1:62:a5:a9:43:c5:d2:84:38:
                    94:fe:58:ad:7f:e3:f9:0b:a9:6e:a9:a0:04:f8:f9:
                    0b:a0:67:48:74:39:4c:72:ba:ab:61:22:e5:4f:bc:
                    85:84:ab:c3:f0:a9:89:c4:ab:37:86:a1:df:03:b9:
                    f4:4e:8c:04:9d:8e:e9:d3:28:c1:ea:46:3e:df:a2:
                    76:2c:66:b3:0d:7b:45:fc:75:c0:d9:cd:6e:e9:29:
                    09:23:d4:b4:2a:9d:26:41:1b:5c:02:09:6c:de:e4:
                    90:9f:43:8d:b0:8c:e0:2c:ce:d2:61:cb:35:eb:d9:
                    b1:4a:98:66:73:48:a9:a4:ff:e8:8b:51:21:6a:54:
                    75:8b:8c:83:b4:57:35:38:b5:c5:cc:ba:75:4c:25:
                    97:1a:42:80:5d:b3:d6:3a:4c:92:6a:34:52:3f:e9:
                    2d:cc:18:bd:b2:9c:40:96:3f:6f:85:fc:bf:77:37:
                    3e:d4:9e:fa:87:51:4b:79:81:b0:d0:76:cd:87:25:
                    04:da:d5:a9:64:1b:04:fc:a0:f2:4f:92:b8:a0:7f:
                    23:d5:7b:6c:87:72:7e:d7:7f:c5:76:58:92:e7:c8:
                    5d:39:39:10:ba:0a:81:44:ac:d2:26:b2:6b:ab:b0:
                    61:ef:4b:36:a5:fc:c4:93:46:ee:6c:2f:7d:0a:c3:
                    63:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8F:9D:F1:30:0C:B9:BD:24:5A:CE:E8:55:60:5C:0B:DA:FF:F6:09
            X509v3 Authority Key Identifier:
                keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e3:37:f0:be:1b:01:48:4f:c8:05:4d:a6:c9:9c:2d:cb:78:
         83:57:0c:05:78:dc:84:a8:4c:29:b3:89:b6:8c:72:f5:66:a4:
         97:42:7d:d9:60:e0:f6:9d:8d:6d:68:87:67:fb:8c:12:5a:20:
         bd:53:b1:68:ee:fb:4a:0a:ec:57:26:bb:7f:72:af:10:b0:23:
         0d:e2:f7:37:19:06:a2:2e:a8:0b:2c:a5:37:a8:a5:f3:ca:da:
         a1:30:0f:ca:32:bc:39:a9:6b:68:44:bf:c6:56:22:f7:2e:79:
         ad:71:4b:68:4e:3a:61:f7:de:c3:2e:69:99:60:4c:e2:8e:c6:
         46:0a:87:be:c1:e9:44:99:fe:f5:f3:0c:57:44:8c:a4:08:a9:
         be:c8:fe:e7:0b:92:d0:5c:67:f7:72:57:29:5c:85:d5:f2:c0:
         c0:81:5a:30:45:b8:fc:cf:ed:8c:f2:ad:8d:8c:61:86:48:5e:
         cb:44:20:e9:ae:c7:8c:d0:db:3e:0b:b4:7f:f6:d8:a3:bc:b2:
         af:3f:29:1e:52:ea:f0:7d:51:48:46:e1:85:8c:4d:b9:5b:2a:
         88:8c:2b:d8:60:9a:0d:6a:70:0c:eb:04:21:fe:9e:c5:58:0c:
         db:32:1f:c8:e0:40:66:b9:26:02:f9:a0:e4:70:83:8f:48:7f:
         80:ef:21:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:33 2025 by rpki-client