This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
File:                     eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json)
Hash identifier:          r85NezvPT5IN+1Bs2i1oX32QvnHaeTwuPs6eYtAEB64=
Subject key identifier:   30:73:3E:A5:95:E0:07:66:12:48:3F:D0:23:66:63:69:75:C3:07:10
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Certificate issuer:       /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial:       019AF051511F79B7C3E75F89965B582FCA61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
Manifest number:          0E49
Signing time:             Fri 05 Dec 2025 21:00:52 +0000
Manifest this update:     Fri 05 Dec 2025 21:00:52 +0000
Manifest next update:     Sat 06 Dec 2025 21:00:52 +0000
Files and hashes:         1: ENQ20xMkXGryE3-R9yWMozdkmQw.roa (hash: KvgZxgzrzbwhIVZaQOAAyDaKtwhWmv2kX8Vy8zgIZhY=)
                          2: UZ6oBAYvDqEIadhrw2DO49OXd4M.roa (hash: hNLRe7VoLal2kN+aDGwW7RFMXgmWRT2E6T33XzWJ1Fg=)
                          3: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: HqAI6GjgPvRhyY4JPvlkD35IVrniweNe9xib3sQx5L0=)
                          4: ij_jY1B8G7JPOxZEgHI2au9jigs.roa (hash: 9ggbS2YlHgtm+sTyMI/V9GVMhp50lC25Zf0jsvILQrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 21:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f0:51:51:1f:79:b7:c3:e7:5f:89:96:5b:58:2f:ca:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
        Validity
            Not Before: Dec  5 21:00:52 2025 GMT
            Not After : Dec  6 21:00:52 2025 GMT
        Subject: CN=30733ea595e0076612483fd02366636975c30710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:49:a2:8a:7c:de:32:40:cb:a3:21:b2:3d:
                    e1:e3:17:07:40:53:ae:10:08:12:e2:df:35:c9:13:
                    e6:7f:f1:bd:a5:76:00:e7:8c:19:84:d6:ff:b0:fb:
                    f9:60:53:03:fb:5c:42:be:fa:ce:84:5d:d6:8e:d8:
                    4b:91:6a:09:1f:da:fd:4e:29:a1:57:61:67:a8:cc:
                    10:e7:8f:35:10:d8:b1:79:8c:eb:fe:5f:e7:81:4f:
                    fb:1e:e4:61:9f:aa:da:a6:dc:91:dc:58:4b:c7:d1:
                    f3:88:86:d3:2c:36:59:b4:55:e6:68:18:55:bf:25:
                    d2:a9:20:ad:33:b2:b9:13:b3:c8:41:97:54:6a:37:
                    3a:f0:70:12:68:7f:b6:73:60:0d:ef:61:91:41:07:
                    dc:d6:0c:9b:48:bb:90:4a:71:93:d1:d0:47:81:23:
                    37:85:b0:fe:6f:16:38:cd:42:b3:0e:4b:29:e7:c6:
                    82:73:11:7c:fd:d9:8e:ec:c0:a9:1b:d1:c1:46:2e:
                    d9:e8:e6:61:fa:0e:86:9a:81:e3:6d:4e:c3:f4:20:
                    fd:f0:ee:fc:23:54:60:3c:68:2a:e3:0b:eb:05:f6:
                    59:01:53:1e:0b:bb:8d:a2:8d:ce:73:b9:40:75:3b:
                    39:63:28:53:06:52:a6:e5:be:e5:96:c0:ae:da:4b:
                    7d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:73:3E:A5:95:E0:07:66:12:48:3F:D0:23:66:63:69:75:C3:07:10
            X509v3 Authority Key Identifier:
                keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7f:2d:1e:19:92:f2:94:da:9d:7f:cc:47:45:cc:84:5e:15:
         8d:25:22:5c:0a:a8:25:56:7f:5f:8d:89:b8:aa:1d:c7:b3:06:
         c9:74:eb:67:31:ce:0a:3e:c5:ae:69:cb:e0:60:e2:47:d4:a0:
         aa:26:0d:0d:59:f3:de:3d:78:11:13:63:7b:b5:26:69:4f:d1:
         f7:32:33:7c:74:66:ab:71:e1:ad:d1:94:d5:07:a0:67:fd:3b:
         75:fa:92:24:df:8a:54:ea:1d:0d:25:2c:fe:10:b9:68:16:68:
         dc:7b:4a:8c:9e:88:9c:26:8c:76:22:b1:19:7d:8b:57:06:d1:
         49:2e:f4:ab:23:9f:70:7e:02:88:2f:68:22:9f:eb:3f:d9:69:
         c4:be:46:99:22:83:e6:71:6e:c0:42:f6:6a:0f:09:08:1c:9d:
         df:b4:4f:56:c5:09:a6:07:71:42:5f:dd:65:3d:dc:a4:d0:03:
         db:f9:c7:fe:b4:4e:8c:15:63:37:c3:e8:bf:b6:7f:73:3b:61:
         38:a1:d5:f2:8d:9d:4d:54:09:55:cf:6c:56:77:ab:4f:b7:a0:
         ec:c1:1a:3d:ba:52:7b:87:82:3d:98:39:01:1c:24:21:21:40:
         30:48:63:cc:2b:d7:45:ed:6b:4f:2f:2b:05:40:19:25:ff:8c:
         35:f6:e2:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrwUVEfebfD51+JlltYL8phMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NWVmNGJkMjk3NmJmMjkyYWI3MzMwNDkwN2Y1MTBjZDAw
Y2M4YTIwHhcNMjUxMjA1MjEwMDUyWhcNMjUxMjA2MjEwMDUyWjAzMTEwLwYDVQQD
EygzMDczM2VhNTk1ZTAwNzY2MTI0ODNmZDAyMzY2NjM2OTc1YzMwNzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunpJoop83jJAy6Mhsj3h4xcHQFOu
EAgS4t81yRPmf/G9pXYA54wZhNb/sPv5YFMD+1xCvvrOhF3WjthLkWoJH9r9Timh
V2FnqMwQ5481ENixeYzr/l/ngU/7HuRhn6raptyR3FhLx9HziIbTLDZZtFXmaBhV
vyXSqSCtM7K5E7PIQZdUajc68HASaH+2c2AN72GRQQfc1gybSLuQSnGT0dBHgSM3
hbD+bxY4zUKzDksp58aCcxF8/dmO7MCpG9HBRi7Z6OZh+g6GmoHjbU7D9CD98O78
I1RgPGgq4wvrBfZZAVMeC7uNoo3Oc7lAdTs5YyhTBlKm5b7llsCu2kt9nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBzPqWV4AdmEkg/0CNmY2l1wwcQMB8GA1UdIwQY
MBaAFHhe9L0pdr8pKrczBJB/UQzQDMiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUY3MHZTbDJ2eWtxdHpNRWtIOVJETkFNeUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xOGU4ODItOTdkNy00MWRkLTllZmIt
N2Q0ZmE0Y2RjN2EyLzEvZUY3MHZTbDJ2eWtxdHpNRWtIOVJETkFNeUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xOGU4ODItOTdkNy00MWRkLTllZmItN2Q0ZmE0Y2RjN2Ey
LzEvZUY3MHZTbDJ2eWtxdHpNRWtIOVJETkFNeUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH38tHhmS
8pTanX/MR0XMhF4VjSUiXAqoJVZ/X42JuKodx7MGyXTrZzHOCj7FrmnL4GDiR9Sg
qiYNDVnz3j14ERNje7UmaU/R9zIzfHRmq3HhrdGU1QegZ/07dfqSJN+KVOodDSUs
/hC5aBZo3HtKjJ6InCaMdiKxGX2LVwbRSS70qyOfcH4CiC9oIp/rP9lpxL5GmSKD
5nFuwEL2ag8JCByd37RPVsUJpgdxQl/dZT3cpNAD2/nH/rROjBVjN8Pov7Z/czth
OKHV8o2dTVQJVc9sVnerT7eg7MEaPbpSe4eCPZg5ARwkISFAMEhjzCvXRe1rTy8r
BUAZJf+MNfbiEg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:10:44 2025 by rpki-client