This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          qeDBAgAv16I7TX/4kYsMMhWv+9Lxmnhjuqk13mG4pWI=
Subject key identifier:   88:B0:3C:FF:64:70:BA:F9:93:80:54:53:F1:3B:AA:35:F5:F2:5E:76
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019B2C9CF88D8F3D848FE1C3129D706D142B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          17C9
Signing time:             Wed 17 Dec 2025 14:00:43 +0000
Manifest this update:     Wed 17 Dec 2025 14:00:43 +0000
Manifest next update:     Thu 18 Dec 2025 14:00:43 +0000
Files and hashes:         1: 0gM9nO8aCfkT81wAB6FtCesEwDg.roa (hash: Lfwi2k/qzNFayxWwQOnJuaS4g7hdO3qEEZMxYRqe+is=)
                          2: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: vmltUUfxFGSy0M20vbxFxN4RVNE173zWlHyVnH5gCW0=)
                          4: ETcH2IvsrV9frQQAiGHCydePvXc.roa (hash: vnxbYaqSpCvvPsvgeAGAJuaPg4alEmcLbxdQJvK4GFI=)
                          5: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          6: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          7: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          8: WWtCrJTOa2fdz1x4NrejDaidA4c.roa (hash: bNRJCU/5ggmed8Sa2EXYIbSVMg5Nfmrhzw8GYsZOcgY=)
                          9: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=)
                          10: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          11: f7e24_kc_woNPGchU49zRaiPPtg.roa (hash: rsVGF94CsaYZyejnnB2G7Jx9MOV3cb8+8hyyFUvoFDk=)
                          12: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          13: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          14: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          15: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          16: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          17: w3JXIRcbr6KwnMwme1orx9slU8I.roa (hash: VFCCyy87daugzyIA/V3roqMFDyUsgWDtMgKdLSeZBKc=)
                          18: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2c:9c:f8:8d:8f:3d:84:8f:e1:c3:12:9d:70:6d:14:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Dec 17 14:00:43 2025 GMT
            Not After : Dec 18 14:00:43 2025 GMT
        Subject: CN=88b03cff6470baf993805453f13baa35f5f25e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:58:73:67:b0:bf:ea:96:13:d3:f1:69:e5:
                    40:c4:ae:f4:c0:ae:14:25:d2:8b:ad:66:d1:a6:3b:
                    2d:c5:dd:16:2d:c4:60:8c:67:43:16:9d:b5:83:bc:
                    df:f2:c7:d2:9c:d5:9c:38:8e:40:db:42:be:e0:bc:
                    a1:1c:c0:00:2d:2c:be:07:7c:c2:a8:a6:0f:c6:e9:
                    e3:77:b3:a2:95:28:64:05:f6:ec:00:dc:ee:c5:b4:
                    71:da:ba:67:ee:39:f5:b0:f2:e7:1c:9a:65:10:b0:
                    81:f4:0b:1a:17:fa:90:19:6b:fd:76:15:7d:7e:7e:
                    08:03:78:e4:9c:98:22:1d:cc:f7:45:3f:8e:aa:77:
                    32:2c:b8:b2:e3:2d:db:10:a3:56:5f:bf:6a:03:41:
                    cd:3e:a5:ca:87:21:12:2e:9e:ce:27:3a:ff:54:70:
                    d4:83:d1:12:17:fb:f5:7e:2b:42:9b:4b:b9:f0:a3:
                    2d:99:d8:66:75:e1:ae:75:f5:f0:f2:29:b0:f8:bd:
                    2b:7e:7e:fb:c6:96:20:ae:bf:f5:6b:eb:75:16:cd:
                    68:f2:6e:06:0e:c9:d6:44:ec:6f:1a:97:ba:2c:43:
                    31:a0:8b:05:5b:da:00:3d:08:20:a1:20:e2:92:fa:
                    f6:6f:11:5a:2f:7c:18:81:9a:a7:db:0f:cd:b1:37:
                    ca:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B0:3C:FF:64:70:BA:F9:93:80:54:53:F1:3B:AA:35:F5:F2:5E:76
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:36:eb:66:a4:38:2a:72:21:13:07:1d:bb:95:86:cf:93:ed:
         50:dc:76:b2:e6:13:af:c8:4b:0e:e7:c9:f1:09:71:db:cf:df:
         8e:60:14:d8:71:e2:a8:6c:29:b8:f6:ce:ee:87:b8:ce:65:09:
         32:b6:34:2e:f0:ef:93:23:58:7f:ba:dc:02:ae:4f:89:25:db:
         4d:ad:ba:ef:1d:8b:28:0f:6e:e9:1a:ec:13:59:d8:47:19:43:
         96:f1:73:74:90:46:e2:84:08:3b:5e:de:43:ad:5c:17:24:7d:
         69:a5:a7:db:7e:81:97:9e:18:e6:2f:c4:6f:51:2e:b6:75:77:
         63:33:6b:4a:e0:79:54:1d:fb:8d:58:43:6f:2d:f3:fd:47:7e:
         e1:8e:41:8d:e6:40:e1:c1:48:0a:ee:00:eb:29:84:2d:07:ec:
         f9:15:b0:fa:c8:ef:2e:25:e2:b2:5a:72:8a:be:7b:63:b1:97:
         8d:83:5c:55:aa:a8:68:71:34:aa:7f:ae:c1:80:bf:3e:8e:70:
         cd:ac:0e:e5:f5:14:24:4f:07:d6:1e:54:74:00:45:bc:bc:59:
         a5:ec:64:c1:b0:4b:11:df:ba:9b:e9:b4:aa:02:d3:b1:a9:a2:
         92:56:95:bc:0f:eb:93:db:9c:48:a4:6e:ea:bd:70:ad:27:8b:
         e8:a1:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:28:17 2025 by rpki-client