This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
File:                     eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft (raw, json)
Hash identifier:          idwNnQC9V0iB2kHz+svMmNVUR/dB6VvaGjnGIYSlPAc=
Subject key identifier:   72:47:97:7D:DA:A4:41:1E:50:5A:CF:61:29:0F:A3:4D:08:2C:70:08
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Certificate issuer:       /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial:       019B2D0C0FB98330BB37FCACD035EFA21B3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
Manifest number:          1186
Signing time:             Wed 17 Dec 2025 16:02:03 +0000
Manifest this update:     Wed 17 Dec 2025 16:02:03 +0000
Manifest next update:     Thu 18 Dec 2025 16:02:03 +0000
Files and hashes:         1: 7MWkDFIvxrvBiYeFXftWIiTBWYo.roa (hash: JH7VCijfXfwxkoNsfjPSzhXBNh6NzlLWZ8enC7rwxNY=)
                          2: 8ALCem6WNzZicaF6OTNthjeQfck.roa (hash: YpH6jIe+TynmU/8cQY6b28ehJOsvk8Ov/8Gxgmlkb/M=)
                          3: BOjqPIb3athrryYMVMll8dWYS_4.roa (hash: A5az/e05jOJtxk+W5sPagGBV8gSZMh6u1LJrjb6cg8k=)
                          4: CsM1Tab_IVjXnkGzn-PwfvJRum8.roa (hash: wdOCJx02c8KAu6BbK3u1hvYDgYH15s1JgslsnvBAork=)
                          5: DLhr9KfIwlyvtn8BdrI8qpAA55E.roa (hash: eJXgFYzDwYu/AVJFRlLxNZ3mj78cD/ZmcSP3FUXg6AY=)
                          6: J0gYCpNrq5uBLAfexZzLlnOmFlI.roa (hash: VLnrMlgxhKPlu3IM8gKgy9DosCGihEAgnKfrS36yU1A=)
                          7: WKpkuG_M2tT9KPbip1eBAkWy0LI.roa (hash: kiiHtTX/QlpfIGAQUeZ2av6ezh1TlPujLY7SBF8U+BA=)
                          8: eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl (hash: 35aVL/6Sd27GH2oS4Wp1pGbWQw7V29eDjQ7JmtNPwic=)
                          9: loeG0A7B5pm9tZpPzSr7eUFiNh0.roa (hash: GinS4WDpw/xi0yTLnwz78knWosKiyyq16OZVyWAvW5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:0c:0f:b9:83:30:bb:37:fc:ac:d0:35:ef:a2:1b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
        Validity
            Not Before: Dec 17 16:02:03 2025 GMT
            Not After : Dec 18 16:02:03 2025 GMT
        Subject: CN=7247977ddaa4411e505acf61290fa34d082c7008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:94:79:06:d1:fe:27:74:b1:ba:67:96:c6:
                    00:24:c3:52:ee:e4:97:33:d0:20:42:e1:f7:24:79:
                    d9:c0:53:6c:05:38:6d:02:b6:45:cb:32:85:c8:48:
                    7e:24:29:1a:dd:54:cf:51:73:f8:b0:9c:78:b6:aa:
                    06:79:a6:62:04:0d:3d:1e:d9:4f:47:e3:b8:93:76:
                    35:6d:5b:ed:60:0a:1e:c2:a6:17:cd:40:a2:f2:d9:
                    7b:f1:6c:16:ec:5f:d1:62:77:62:9b:9e:ee:99:b1:
                    6e:0a:72:21:45:f6:4b:1e:5c:2f:9e:ac:92:10:a8:
                    76:c5:a9:9e:11:52:e3:02:ca:01:19:4d:81:dd:b0:
                    ed:bf:89:cc:b2:6b:6b:1e:cc:26:85:4b:db:c5:6e:
                    f9:61:03:5e:cd:41:55:1c:93:27:f4:67:4a:56:e2:
                    50:dc:7e:05:fa:27:40:7a:31:8d:ed:fd:90:4a:1b:
                    6f:3d:17:b5:07:28:a5:e9:60:c4:7f:e4:2b:d4:4b:
                    f1:20:c2:b4:5b:08:2e:88:88:ab:e3:65:1f:76:bf:
                    73:ee:0f:cb:38:fd:f4:d2:13:7b:60:38:48:96:9b:
                    77:0a:89:d9:7e:91:82:22:7b:78:7b:6f:91:ab:80:
                    08:f7:72:b1:ec:3b:cc:a9:7d:06:4a:df:a9:39:cc:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:47:97:7D:DA:A4:41:1E:50:5A:CF:61:29:0F:A3:4D:08:2C:70:08
            X509v3 Authority Key Identifier:
                keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:dd:a2:9f:f1:5c:d2:aa:93:e9:5f:ab:55:c6:39:d9:a0:55:
         9d:22:87:b1:9e:d5:3a:aa:c5:29:af:dc:9a:7d:40:92:4f:6e:
         6c:ef:db:a9:3b:bc:8d:fe:7a:7c:df:38:6c:09:39:74:ca:6b:
         83:e2:df:9e:36:a2:8b:4b:79:f5:8d:5d:ae:fc:57:d2:83:a5:
         a9:bb:d7:67:60:67:86:0c:e3:82:fe:56:39:0c:dd:c5:3b:cc:
         32:a8:fa:21:30:83:51:7c:b2:b0:0e:71:91:9b:a2:87:ac:f4:
         6f:68:9e:7f:2a:de:9d:9e:ad:e5:bc:62:4a:14:f4:32:6b:10:
         9b:05:18:87:71:b4:ff:c8:95:d2:2d:6a:67:c3:0a:11:83:bc:
         e8:15:e1:60:9c:f3:43:69:7a:a4:fb:17:9b:5b:2b:33:0c:79:
         6b:0a:e7:e6:4c:8b:3b:78:70:00:d3:f9:c1:25:c9:bc:35:a4:
         13:ff:91:1a:e3:7f:4e:b1:52:86:95:ac:35:16:18:df:38:7e:
         15:57:69:ba:c0:bf:16:6b:eb:40:36:9a:0d:a4:59:c2:e3:2c:
         0f:4a:1f:b9:ea:a9:b3:05:0e:44:2b:c3:fe:3b:ee:37:87:b3:
         eb:96:e8:d6:99:ed:73:98:f4:db:2e:c2:bf:72:8d:3f:ca:f3:
         63:b8:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 17:52:17 2025 by rpki-client