This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
File:                     e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json)
Hash identifier:          NPmPug3HnYGGThEWb6spS4DUYYMtLnj+92KJzsXIn0A=
Subject key identifier:   11:E9:B6:47:C9:74:5C:AE:91:A0:15:4D:3D:B7:38:2B:3B:FA:EC:71
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Certificate issuer:       /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial:       019AF389EC22E795896B5D22C6842774AD5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
Manifest number:          04BC
Signing time:             Sat 06 Dec 2025 12:01:33 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:33 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:33 +0000
Files and hashes:         1: 5Ks6R6ANPOuqDi6voNhJGuCZMW8.roa (hash: rJBWopYkkYdyW3mSVPW+i2geLeI7RuDFMOG3B57hJQA=)
                          2: DkUOS-7Geo49d0Nh-2-IQuK04LY.roa (hash: U+IaFC9jrzPW5vZBo+Ho3GIYBe2Y+qIpZI+pYfAAT+8=)
                          3: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: K1KTal7UfMOFJmHwHKiCuHRnmOV5EfsUgJTHHUuoH5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:89:ec:22:e7:95:89:6b:5d:22:c6:84:27:74:ad:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
        Validity
            Not Before: Dec  6 12:01:33 2025 GMT
            Not After : Dec  7 12:01:33 2025 GMT
        Subject: CN=11e9b647c9745cae91a0154d3db7382b3bfaec71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d9:20:88:e8:84:65:c2:ab:7a:5e:35:4b:cd:
                    df:d9:83:81:a6:92:aa:61:b1:b0:cd:bd:4e:f3:37:
                    fe:3c:93:3e:f5:95:72:ce:c4:dc:3c:7f:0f:05:bc:
                    f9:51:6c:7f:82:8e:e9:8f:bd:ab:5f:6d:85:e3:d3:
                    ae:e6:da:3c:84:65:33:8d:1a:03:bc:2d:39:d7:35:
                    01:80:c5:14:e9:44:72:07:b2:41:bf:a5:12:28:4d:
                    19:54:8c:b9:3c:c9:4a:49:a7:10:f5:28:e6:89:77:
                    43:32:bf:35:14:10:3d:88:6e:97:f9:8a:81:69:9d:
                    be:85:58:2e:0a:03:b4:74:ec:f8:92:07:e2:8c:dd:
                    ed:49:4e:67:2f:c6:8a:86:e7:5c:ee:38:c1:87:f3:
                    f3:34:18:53:f1:47:43:12:55:5c:e9:d3:e4:14:be:
                    fe:c1:68:82:01:e3:b7:52:4c:18:8e:69:e5:d1:ea:
                    4b:65:a3:62:7b:45:a7:91:32:1e:70:41:26:f9:23:
                    e9:ff:a5:d0:29:d1:45:5e:ee:aa:e8:3a:93:04:02:
                    5c:28:91:3f:89:57:c5:c3:ed:b2:44:35:7e:af:b0:
                    c1:06:26:69:0a:66:58:15:60:a2:0c:7e:47:59:4c:
                    0d:be:4e:9b:e5:8f:4a:a9:26:5d:e4:94:73:44:91:
                    49:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E9:B6:47:C9:74:5C:AE:91:A0:15:4D:3D:B7:38:2B:3B:FA:EC:71
            X509v3 Authority Key Identifier:
                keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:43:69:42:6a:b0:c9:b4:f5:a8:6c:a8:be:a6:d0:a0:00:
         d2:e1:04:5f:f1:67:c5:0b:85:60:9b:e0:33:e5:d4:12:63:b8:
         46:c2:b0:e0:80:d1:49:67:db:b2:ca:bf:35:01:ba:c6:b1:b2:
         93:4e:d6:a8:5e:d3:4a:f4:dd:c7:0a:ff:9c:04:e6:5a:e9:e8:
         eb:11:9a:43:e9:b0:d8:49:b2:f9:bc:49:71:91:66:20:c0:1f:
         c6:67:4a:c2:ba:46:af:35:2d:08:ce:0d:22:39:85:22:32:fa:
         de:14:b7:bc:1a:65:c6:66:0c:31:bf:49:58:7f:39:89:8c:11:
         7e:6b:5a:93:1a:16:65:9d:77:74:1c:81:cd:9d:b7:2c:e7:75:
         88:40:b8:c7:b0:4c:d8:37:51:24:c2:d9:e3:db:96:32:70:dd:
         aa:24:9a:7a:b8:64:c2:c8:3f:27:3d:01:0f:1f:8e:97:52:dc:
         56:fb:42:20:19:20:0f:15:b1:c2:36:33:71:0b:12:cb:98:12:
         c8:96:54:ec:ee:c3:47:76:92:fd:05:3e:e9:6c:8d:7f:9b:50:
         d4:0c:bc:48:ac:bb:39:c9:be:93:9e:fe:6e:aa:5d:95:06:b5:
         19:78:dc:b2:d2:14:9f:b4:7a:7a:fa:a9:10:0d:b7:29:bf:66:
         d2:89:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:51:22 2025 by rpki-client