This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
File:                     eilzR6QNO99Xh8x1OsJALQgkv8s.mft (raw, json)
Hash identifier:          CQ0EHfKfcFRzkH2U+EXhSjkjX0B1/v0p14EnPk6owPY=
Subject key identifier:   D4:E4:46:2F:CE:78:8F:D8:85:A9:2C:BA:E0:22:FC:17:96:F7:D0:78
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Certificate issuer:       /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial:       019B19BBDD2DC2744E990BB337705AEF3A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
Manifest number:          1075
Signing time:             Sat 13 Dec 2025 22:01:40 +0000
Manifest this update:     Sat 13 Dec 2025 22:01:40 +0000
Manifest next update:     Sun 14 Dec 2025 22:01:40 +0000
Files and hashes:         1: N0z9esTkm8sf7IqrP3Uufonx0_k.roa (hash: cRVe0pjyNnhUe4BOiczul9pweEDzxKe03iHv5OQ9WhI=)
                          2: eilzR6QNO99Xh8x1OsJALQgkv8s.crl (hash: t0n1DQY4hhvm1PnNnxnlKRwTvBWXYYwkUAW7pOQc91A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:19:bb:dd:2d:c2:74:4e:99:0b:b3:37:70:5a:ef:3a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
        Validity
            Not Before: Dec 13 22:01:40 2025 GMT
            Not After : Dec 14 22:01:40 2025 GMT
        Subject: CN=d4e4462fce788fd885a92cbae022fc1796f7d078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:45:2c:cf:db:54:d0:6f:a1:4c:af:d6:a7:59:
                    21:3b:bc:1b:48:1a:ca:42:1a:e2:ed:ea:bc:76:ad:
                    ad:02:ff:98:45:d1:e7:c9:92:ac:d9:e3:77:42:cb:
                    3f:7c:f8:23:46:f3:08:19:a0:b8:9e:1e:54:99:5b:
                    29:87:bf:ea:f6:d8:a4:76:fd:c3:d8:cf:66:1e:8c:
                    6e:1f:d2:23:73:67:3a:3d:43:67:8d:b4:e2:af:d8:
                    4e:d6:52:b8:84:7b:c4:98:57:f0:ef:72:7f:d6:ca:
                    72:db:a7:79:8e:b0:00:fd:b9:03:d7:fe:2a:f7:f8:
                    5d:11:13:da:24:62:b6:f2:c0:40:21:d7:d7:16:a4:
                    68:b7:1d:9e:8f:24:dd:06:e8:4f:f7:9a:a9:61:a6:
                    35:67:8e:24:92:3c:b9:a5:f1:7d:4d:7e:ab:0b:59:
                    5a:2b:0c:b1:e6:51:75:b3:2f:2a:27:a1:31:3f:9a:
                    12:84:39:68:e0:6f:2b:5a:c9:f2:0a:ad:ad:84:9b:
                    ef:7d:9e:52:5d:58:28:81:37:13:c2:88:fa:b1:11:
                    15:4b:54:b2:b0:d4:bf:06:21:27:e3:1d:37:7d:44:
                    46:bb:5a:f7:4d:0c:2f:38:3c:0d:c3:ba:10:11:60:
                    1a:0b:28:53:a1:23:c5:a4:e7:4f:3f:20:39:92:4f:
                    da:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E4:46:2F:CE:78:8F:D8:85:A9:2C:BA:E0:22:FC:17:96:F7:D0:78
            X509v3 Authority Key Identifier:
                keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:a7:b3:56:46:bd:dc:ee:86:dc:93:fd:7d:54:0c:e2:2c:
         d4:73:ef:f0:82:c0:a6:f6:6f:d0:e4:0f:74:a8:ae:67:4f:d4:
         4f:61:ed:4d:98:51:d8:d2:79:68:14:4d:c7:e4:3b:03:d3:56:
         fc:13:0a:da:a4:0f:1c:30:ec:df:af:82:8b:bf:4a:c6:44:94:
         d9:be:42:c6:ce:7c:28:af:5b:2a:66:50:90:bc:3a:2e:d3:c0:
         80:93:6c:13:0b:1c:38:e0:2b:7d:2e:a8:01:0a:cc:f4:57:e5:
         a9:d7:c3:d1:de:7b:8f:78:34:ac:82:90:43:05:37:43:82:3f:
         a5:a1:2b:95:b8:f2:54:49:ca:18:fa:b3:3e:de:2e:55:6e:d2:
         c5:f4:f5:f8:e2:e6:76:29:a4:3d:97:0f:31:93:32:30:22:08:
         6a:19:60:85:5c:d3:8b:70:25:b9:57:95:f9:5b:ae:29:46:fb:
         2e:b5:4d:64:9f:b8:a6:0e:07:a0:ed:84:67:7f:21:9e:7a:6d:
         f1:af:1c:79:00:42:27:9c:70:0a:07:61:44:6c:e9:21:92:d3:
         26:69:9d:75:21:5d:9d:06:c6:e6:f9:c9:1b:e1:af:78:b9:ad:
         1e:04:7f:37:96:f5:01:5e:0e:53:e7:2b:08:27:02:04:87:1b:
         19:db:1f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsZu90twnROmQuzN3Ba7zpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMjk3MzQ3YTQwZDNiZGY1Nzg3Y2M3NTNhYzI0MDJkMDgy
NGJmY2IwHhcNMjUxMjEzMjIwMTQwWhcNMjUxMjE0MjIwMTQwWjAzMTEwLwYDVQQD
EyhkNGU0NDYyZmNlNzg4ZmQ4ODVhOTJjYmFlMDIyZmMxNzk2ZjdkMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Usz9tU0G+hTK/Wp1khO7wbSBrK
Qhri7eq8dq2tAv+YRdHnyZKs2eN3Qss/fPgjRvMIGaC4nh5UmVsph7/q9tikdv3D
2M9mHoxuH9Ijc2c6PUNnjbTir9hO1lK4hHvEmFfw73J/1spy26d5jrAA/bkD1/4q
9/hdERPaJGK28sBAIdfXFqRotx2ejyTdBuhP95qpYaY1Z44kkjy5pfF9TX6rC1la
Kwyx5lF1sy8qJ6ExP5oShDlo4G8rWsnyCq2thJvvfZ5SXVgogTcTwoj6sREVS1Sy
sNS/BiEn4x03fURGu1r3TQwvODwNw7oQEWAaCyhToSPFpOdPPyA5kk/aGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTkRi/OeI/YhaksuuAi/BeW99B4MB8GA1UdIwQY
MBaAFHopc0ekDTvfV4fMdTrCQC0IJL/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWlselI2UU5POTlYaDh4MU9zSkFMUWdrdjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jMjAwYjQtOTQ4MS00ZTY3LWFlMTQt
ZjhiNDM5ZDA2NjQ1LzEvZWlselI2UU5POTlYaDh4MU9zSkFMUWdrdjhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jMjAwYjQtOTQ4MS00ZTY3LWFlMTQtZjhiNDM5ZDA2NjQ1
LzEvZWlselI2UU5POTlYaDh4MU9zSkFMUWdrdjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgCns1ZG
vdzuhtyT/X1UDOIs1HPv8ILApvZv0OQPdKiuZ0/UT2HtTZhR2NJ5aBRNx+Q7A9NW
/BMK2qQPHDDs36+Ci79KxkSU2b5Cxs58KK9bKmZQkLw6LtPAgJNsEwscOOArfS6o
AQrM9FflqdfD0d57j3g0rIKQQwU3Q4I/paErlbjyVEnKGPqzPt4uVW7SxfT1+OLm
dimkPZcPMZMyMCIIahlghVzTi3AluVeV+VuuKUb7LrVNZJ+4pg4HoO2EZ38hnnpt
8a8ceQBCJ5xwCgdhRGzpIZLTJmmddSFdnQbG5vnJG+GveLmtHgR/N5b1AV4OU+cr
CCcCBIcbGdsf9A==
-----END CERTIFICATE-----
Generated at Sun Dec 14 03:26:03 2025 by rpki-client