This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          sZNcHkvUOFcMAa8/gtQU/xGLnrVpGPBSXDywl7eaZfQ=
Subject key identifier:   8E:B7:DB:07:56:69:D1:2D:78:C9:4F:81:88:28:F1:EC:AB:95:5B:07
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       019AF35294B78AAB105906CDD01580DF6DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          03B1
Signing time:             Sat 06 Dec 2025 11:01:06 +0000
Manifest this update:     Sat 06 Dec 2025 11:01:06 +0000
Manifest next update:     Sun 07 Dec 2025 11:01:06 +0000
Files and hashes:         1: 0b5iGIeuo2DKMNvHl9YT-o9ecPk.roa (hash: /wSlkj/hp/zdqNdystfvelHxMMMnIXaQ57KuV+lO360=)
                          2: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: ll9hlnRtkts9Cj0HM1bm27T6U/Kry5GriwzmKKNgVmg=)
                          3: FDCz9vFy1afnhYd9FSvc-Bw_UfQ.roa (hash: nX+U0OE3yN8KGFoYzRWDUrILvEVuMqT3N2aNA/PsHZU=)
                          4: ODYY9AlzIZx0ieuJ78ib_t7PzDs.roa (hash: KSKzI9P0WUD8e51fYFO9/Pub+6R71g7f3EQIV1FBw9c=)
                          5: RCUtTKBPBoSKR2wwa8B0W47XWEM.roa (hash: AEJlL4bhsHAgCbizEJxDPTW1T7XXa+3+vQvB/un6vPo=)
                          6: cQH95dkte5Usdju-IQ199DJqvjY.roa (hash: 7+1NXHOiz3SkJ2u53PJnA3DPJ+3khS8O93na/I4cju8=)
                          7: daT_tlHA6Qk4P5c_mAKg_30bQto.roa (hash: 8QeryI1AvWB8IxUm5wUjKihb2jduD7+5c0+oE2ozl40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:94:b7:8a:ab:10:59:06:cd:d0:15:80:df:6d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Dec  6 11:01:06 2025 GMT
            Not After : Dec  7 11:01:06 2025 GMT
        Subject: CN=8eb7db075669d12d78c94f818828f1ecab955b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:7c:28:95:3a:91:42:c0:11:8e:a3:c1:b8:
                    3d:d5:36:88:34:24:2b:71:a7:bf:cf:08:ec:51:33:
                    7b:74:eb:9e:b1:eb:47:96:04:f8:43:17:ad:60:87:
                    2d:6a:be:eb:9a:fd:8b:04:bd:7a:a1:6e:b9:cd:55:
                    8f:c9:85:0b:b9:94:a6:99:5b:bf:07:a1:1a:ef:9f:
                    f9:6b:da:2e:0e:c7:e4:77:fd:87:6f:8b:68:12:fb:
                    ae:86:9b:4e:42:81:9e:33:cc:d3:9a:8f:45:00:5a:
                    34:dd:74:4e:7e:89:56:b9:4e:16:8f:d0:7b:11:5b:
                    a8:55:cd:b5:ee:67:41:16:f1:9e:52:15:d3:a7:3f:
                    47:c7:eb:5e:5b:c5:c0:4c:ab:56:ad:d3:c8:c9:c2:
                    95:2b:1e:11:a4:ac:60:0e:13:15:7c:20:3f:0e:6c:
                    42:f0:5c:c7:73:4f:17:9e:f2:d8:e9:cd:ae:87:82:
                    1f:fd:3f:f6:a4:30:c9:50:af:f6:20:3a:f3:70:f8:
                    09:2d:82:a3:15:b8:7a:63:9d:ea:24:ee:ed:7f:92:
                    ba:a5:dd:51:24:31:d8:41:53:47:43:e0:da:a4:9d:
                    9e:c5:3c:b4:3a:9a:d7:84:cf:a5:ce:2f:2b:d3:82:
                    56:cc:c7:35:47:58:52:66:8c:24:44:af:2c:2e:85:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B7:DB:07:56:69:D1:2D:78:C9:4F:81:88:28:F1:EC:AB:95:5B:07
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5a:39:d9:16:2f:65:06:96:40:bf:76:2d:34:3b:55:92:8b:
         5f:2c:a2:01:9a:7c:7d:6a:34:0d:e9:8c:ea:29:44:4a:1d:6f:
         7f:29:b4:0b:82:4b:81:06:de:ce:19:1d:22:d2:30:e8:9c:da:
         3f:5b:43:45:83:4b:a2:04:c2:f0:73:db:3a:5c:b0:d8:1b:d5:
         db:72:ab:4b:7b:ad:eb:5d:ae:84:8f:25:a9:c8:ac:db:a9:aa:
         e9:59:5e:b9:cc:cd:a9:02:5f:4c:0f:89:80:af:de:eb:c0:31:
         1a:a3:28:c7:44:10:28:ce:0c:fd:1c:b7:e8:72:ea:1c:2c:6f:
         0f:a4:8b:b0:8d:aa:b3:8d:44:32:4f:62:b1:9b:84:d6:16:fa:
         fc:1d:d8:a5:9a:d0:89:99:52:c4:b8:54:d6:8e:55:cf:66:f5:
         20:59:2c:66:db:78:c0:3b:82:4f:d6:78:0c:5a:9c:0a:d1:fb:
         27:87:07:fa:5a:4a:a5:95:85:36:03:fd:46:2c:c7:53:6c:41:
         dd:23:01:d3:5d:b5:b8:05:0e:61:aa:d6:ad:55:f8:b0:e7:72:
         bf:85:59:15:3d:1f:6f:46:c5:82:86:03:50:22:69:75:fd:4e:
         03:5d:cd:e1:f0:80:d6:dc:18:ef:fc:5d:f3:52:af:2e:de:05:
         d3:6c:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:19:19 2025 by rpki-client