This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File:                     ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier:          LnFrZlMwvJQuWIOp1SC2BEKnKSmsC49vZIJs/087X/g=
Subject key identifier:   C9:40:46:E9:1B:EE:ED:39:9F:ED:16:D2:9B:CE:16:A8:77:BA:65:6D
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer:       /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial:       019AF3520E050B3D783267996F6428A574E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number:          115C
Signing time:             Sat 06 Dec 2025 11:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 11:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 11:00:32 +0000
Files and hashes:         1: FciP2xwcV3xPRtnXfSiCoZ9ZeYM.roa (hash: qFj6Ki0fNJUUk7+HsdPDeunKpSbjzg1RQIOCqYO9NpQ=)
                          2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: OdUva/bWAvOQWSHO1wzzwYC2YqNbPEFTyMdz4Fkux7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f3:52:0e:05:0b:3d:78:32:67:99:6f:64:28:a5:74:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
        Validity
            Not Before: Dec  6 11:00:32 2025 GMT
            Not After : Dec  7 11:00:32 2025 GMT
        Subject: CN=c94046e91beeed399fed16d29bce16a877ba656d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:99:d6:04:6e:a2:e0:41:73:cc:d3:91:1a:
                    ef:83:7d:a9:d9:d4:da:cb:17:cf:27:5c:bb:cb:b1:
                    61:05:e8:93:b4:d4:1e:01:59:55:7a:ea:cc:37:71:
                    86:fb:a0:e7:59:dd:9b:25:46:87:14:60:b9:f3:2f:
                    54:6c:43:ee:c4:7e:73:2a:d5:77:ba:eb:79:f5:75:
                    91:09:87:f5:c5:7b:8c:43:de:36:01:5f:69:36:c9:
                    1e:4d:3b:a3:55:af:04:22:c1:ef:23:a3:f4:83:d8:
                    64:89:4b:db:15:fe:f9:5b:66:02:90:d8:bd:6d:c3:
                    c9:91:bb:70:04:15:3c:ae:7d:bc:63:ec:e9:71:4f:
                    7b:64:b9:d2:6d:e4:63:d8:91:50:2c:95:d6:04:a2:
                    d8:34:25:51:10:28:56:b2:d1:cf:15:c2:4c:fa:ce:
                    58:bb:eb:bc:d1:50:63:3a:fa:a1:c2:33:5b:af:9b:
                    5f:85:08:44:5e:08:b2:53:09:30:4d:e2:1f:4a:c0:
                    97:4b:28:d2:d7:4b:56:3c:b9:5e:29:e6:a7:17:d7:
                    82:e3:72:41:d0:14:39:7d:c0:e1:df:18:bc:9d:d9:
                    c0:db:f3:2c:60:0f:bb:3c:4e:68:6c:a3:90:61:09:
                    ef:d2:d3:ce:e3:c2:87:6d:60:d6:e2:8f:40:fc:40:
                    b7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:40:46:E9:1B:EE:ED:39:9F:ED:16:D2:9B:CE:16:A8:77:BA:65:6D
            X509v3 Authority Key Identifier:
                keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:bc:b4:cc:17:91:b7:6f:0a:c3:7c:7d:23:2e:f6:e9:ab:6d:
         c7:4d:d4:7c:a4:a8:29:6d:bb:1e:83:a5:d0:81:0c:00:1d:60:
         bd:ec:d3:40:02:2f:b5:99:13:87:35:0f:fc:9a:60:37:40:dc:
         b3:c9:53:6c:79:d0:d3:30:d5:ff:04:68:a7:49:b1:c7:47:62:
         be:76:75:84:7c:3e:1a:d2:ae:31:03:ac:a0:14:ea:99:a6:d4:
         97:54:98:6a:71:05:40:8d:8e:7b:ba:ca:7d:c9:6d:72:aa:ca:
         c3:0b:a7:c1:e6:8b:1c:43:ed:d4:55:b2:4d:87:8a:88:9e:0c:
         bd:84:17:95:2b:d2:07:48:56:c7:df:03:b4:09:78:06:38:6b:
         ec:af:96:11:74:2a:30:bf:88:f4:1a:d0:9c:83:44:7f:63:b2:
         62:2a:3d:9b:2a:93:dd:e1:cc:37:36:bd:15:d7:8e:80:a3:67:
         1c:62:7a:0f:59:75:54:7a:b7:78:26:12:07:f7:f2:b8:da:c6:
         0b:6e:8e:aa:42:c6:74:fa:96:3c:d1:bc:e5:8c:dd:cb:3a:33:
         83:18:25:77:e4:ae:bf:a9:e3:06:14:10:15:fb:40:8e:5c:90:
         03:44:1b:d3:c3:21:c9:2e:f8:fd:7b:6d:73:ff:49:7a:19:9b:
         76:2c:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:06 2025 by rpki-client