This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File:                     EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier:          UiOkbSOzCH9jhoU8nQYLboWca4qeIumDbxS+QM6CzRE=
Subject key identifier:   23:FE:DD:1A:1B:BB:F0:08:E1:2E:42:36:B3:EE:52:78:9D:CE:7D:EC
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer:       /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial:       019AF38A0602289081B78392980B5C7BA63F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number:          0D0F
Signing time:             Sat 06 Dec 2025 12:01:40 +0000
Manifest this update:     Sat 06 Dec 2025 12:01:40 +0000
Manifest next update:     Sun 07 Dec 2025 12:01:40 +0000
Files and hashes:         1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: NdV4CLERW8OA6eOQG6pVAAzFBq8jtygMF3MhnpU6dtk=)
                          2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
                          3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:8a:06:02:28:90:81:b7:83:92:98:0b:5c:7b:a6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
        Validity
            Not Before: Dec  6 12:01:40 2025 GMT
            Not After : Dec  7 12:01:40 2025 GMT
        Subject: CN=23fedd1a1bbbf008e12e4236b3ee52789dce7dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:64:ef:81:65:37:b3:08:98:c8:f6:a3:ed:32:
                    e5:5d:f2:05:64:e9:13:13:3a:9c:9f:71:fd:ac:51:
                    ca:83:ae:f8:82:35:d4:d5:32:45:cc:a8:80:3c:ab:
                    33:73:1c:9f:63:49:77:2e:f8:fb:4f:d6:a3:6a:5e:
                    54:7f:ea:3c:b8:5d:15:f7:df:f4:25:1f:96:9e:c3:
                    a6:9b:da:c7:3c:85:e1:f9:2d:9a:97:e0:4a:8c:21:
                    c5:39:fd:64:65:81:12:ac:07:2a:a2:b5:20:1b:92:
                    ba:3d:d5:fe:4e:99:de:86:95:e5:72:b8:cb:91:b1:
                    76:4f:0b:9b:d4:20:f6:9e:d6:3c:eb:02:ea:c7:70:
                    e0:14:8f:f7:8b:9f:35:d7:a5:75:9a:c6:c5:04:19:
                    f0:84:5e:4d:f4:bd:3c:44:1e:e5:21:a6:5d:32:88:
                    46:96:f7:91:7e:d6:28:fe:e3:a8:af:9d:ec:7f:4e:
                    85:b8:b8:b6:ea:be:2e:91:9a:f9:87:e0:04:5a:af:
                    4d:c2:59:26:ba:61:aa:04:a4:6e:5b:7e:d9:dc:56:
                    4c:73:22:29:e1:9f:b2:f4:29:02:52:e8:7c:26:38:
                    3d:96:1b:8d:00:8d:6f:91:70:ed:33:05:3e:9f:12:
                    c9:d4:f7:8f:66:91:d3:74:53:6f:c9:4a:7b:2e:9e:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FE:DD:1A:1B:BB:F0:08:E1:2E:42:36:B3:EE:52:78:9D:CE:7D:EC
            X509v3 Authority Key Identifier:
                keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5c:52:b5:cb:bb:22:88:96:1e:88:cd:1e:47:d8:5b:11:88:
         32:46:25:cc:e4:71:9f:f5:38:d0:ef:f3:c4:94:e9:51:cb:00:
         7a:ff:43:da:05:7f:a5:8b:c9:dc:cb:4e:33:63:8c:86:27:5d:
         7e:2f:0b:2f:cf:a0:a1:69:41:3c:cd:9f:7f:7a:0f:d1:62:61:
         f1:cd:0e:cb:8a:77:c3:e3:df:85:eb:60:77:c3:08:15:d9:3f:
         59:36:39:82:d7:07:2e:03:ac:14:bf:e9:74:ee:80:84:79:56:
         77:a8:ef:91:6a:f7:e3:11:0c:ef:58:a2:a3:6f:90:79:41:9a:
         61:13:9a:af:95:12:42:f9:2c:36:f5:38:6b:b4:5d:d4:f7:c6:
         e2:8d:19:71:0b:9d:9a:07:5f:9b:42:54:44:10:22:de:3b:24:
         d5:d9:43:80:47:57:66:30:9d:52:0b:66:cf:7c:1f:d2:18:41:
         a8:27:33:a4:65:9b:e9:b9:b3:28:be:76:40:de:f0:e7:bc:7f:
         98:0c:43:87:db:3b:d0:58:f2:1b:d7:1a:f5:1d:59:de:6d:fb:
         de:57:9a:ab:85:be:b6:b1:c4:c7:2c:87:95:f5:39:f6:6f:dc:
         c1:b1:22:57:96:5b:49:37:5f:9d:bd:42:6c:e2:8e:d8:e4:11:
         e6:33:dc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:47:33 2025 by rpki-client