This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
File:                     eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json)
Hash identifier:          YGT6a3MvgeLCVqG+4r+X6pKee4U4FTIK+r7b5hbslHw=
Subject key identifier:   1A:11:3A:14:AA:D6:8C:C5:82:EA:E2:BB:43:4D:13:74:4C:6B:2C:9F
Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A
Certificate issuer:       /CN=794f253abffa3214cda8dc99599e5e7c664abf4a
Certificate serial:       019AF209B0EEA5EDEFA2148E6BC991FC6335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
Manifest number:          03AD
Signing time:             Sat 06 Dec 2025 05:01:52 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:52 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:52 +0000
Files and hashes:         1: VFj5aKDFYxJGvJI6tYAdBkRUUKI.roa (hash: gWEnNe9T8U6TtdthLKRFfDmS/LnKXxsDWRpdZGNSQs4=)
                          2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: yH1Lf2gFsSxPRJuuTsvM4sa9PtWwV06tP+IzWU7joI4=)
                          3: pCSKhYNkTR7SxUskaAwpFx35Lys.roa (hash: XnHKJyo6BAhxQvWoTo8yVgwue3aegX0njca6tfTmGRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:b0:ee:a5:ed:ef:a2:14:8e:6b:c9:91:fc:63:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a
        Validity
            Not Before: Dec  6 05:01:52 2025 GMT
            Not After : Dec  7 05:01:52 2025 GMT
        Subject: CN=1a113a14aad68cc582eae2bb434d13744c6b2c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:fc:5a:79:87:11:28:4f:d4:3f:14:57:38:
                    e3:f3:66:3b:1c:ad:3e:84:69:1c:51:e8:4e:72:89:
                    72:da:02:0e:1a:42:1a:d4:6d:21:cb:8a:dd:54:b4:
                    b1:f7:47:d5:fd:c6:93:2f:19:28:59:3c:33:05:f8:
                    2e:4c:1c:39:2a:6f:76:75:00:8e:27:7d:79:8a:9e:
                    91:0a:43:70:7e:16:af:d1:34:66:87:a2:32:52:9d:
                    fb:61:5f:d5:96:e0:59:c4:d2:44:05:58:d2:90:93:
                    1a:af:a9:01:e5:c7:42:bd:d6:4e:cc:3d:b1:43:5e:
                    78:ac:e4:c6:d1:b5:f7:e5:1d:4b:72:6f:e4:b7:46:
                    30:b7:53:ab:f1:2c:98:c5:a6:da:e7:75:c9:f1:09:
                    9a:c6:b5:49:d5:7e:da:ec:8d:c0:ab:04:ea:72:1a:
                    db:c4:aa:74:eb:49:b0:1c:a9:b7:5f:f7:6b:17:58:
                    da:56:a2:05:2c:dd:f5:14:f6:8b:70:f3:5e:d7:a4:
                    91:3a:4e:44:4e:72:f6:8d:0e:86:22:7f:64:c8:5a:
                    df:46:cf:ed:9f:24:22:ee:df:d5:20:2d:f1:e2:b9:
                    64:1b:ba:f6:9f:f2:bd:63:2e:dc:7d:cb:cd:cb:51:
                    9f:d1:45:78:7d:96:a3:90:3e:78:e3:81:3a:62:38:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:11:3A:14:AA:D6:8C:C5:82:EA:E2:BB:43:4D:13:74:4C:6B:2C:9F
            X509v3 Authority Key Identifier:
                keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:00:a3:2c:f2:d1:aa:c3:9f:9d:db:d7:0e:51:a5:58:73:4c:
         d4:8f:b9:86:36:83:dc:1c:26:46:bf:06:c5:82:47:b5:ab:e3:
         f1:07:16:1c:19:a3:74:ae:c2:2e:c2:ca:e6:4d:48:d6:ff:0d:
         60:90:fb:f7:95:31:25:62:85:82:33:6d:5b:1e:f6:ad:1e:2e:
         23:24:48:d4:7e:ad:7e:05:1f:b3:0d:e7:9d:11:66:f2:2b:66:
         30:91:df:43:45:8b:72:c0:5e:16:cb:74:1a:21:ca:0f:69:15:
         00:a0:dc:89:f8:d8:cc:a9:b9:15:00:82:f0:b8:6d:91:6b:d2:
         99:2a:11:ff:42:6d:0b:14:e0:52:25:3c:59:f5:13:46:34:cb:
         70:6a:68:cf:7b:16:3e:2c:1d:db:6d:e7:0f:16:01:85:18:0b:
         74:a3:e9:53:d1:a9:e0:15:8c:e5:6d:0f:7f:cc:6c:c3:a4:e0:
         0e:03:9a:07:da:24:43:c1:ae:64:f4:e2:1d:10:0a:aa:09:68:
         20:26:96:bc:84:13:24:1a:6b:a4:a5:e4:7e:a3:ce:5e:d7:fa:
         26:29:04:05:b4:f7:55:0b:1c:4f:ce:a0:51:e2:95:83:f3:bc:
         a1:a8:41:82:1b:02:d2:8a:b3:fd:c6:4f:91:e4:ce:c6:bd:ca:
         c1:5b:ff:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:53:27 2025 by rpki-client