This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          I6nVrm3A7ngI2kIN/ONEavib6mMj5iL2uoC7NA7m+CI=
Subject key identifier:   87:89:24:79:30:33:85:3B:3D:2D:13:E6:1F:7D:B0:F2:5B:A7:8E:DB
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019B649E9D44D15D69441E1A191F299A0F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          17E6
Signing time:             Sun 28 Dec 2025 11:01:15 +0000
Manifest this update:     Sun 28 Dec 2025 11:01:15 +0000
Manifest next update:     Mon 29 Dec 2025 11:01:15 +0000
Files and hashes:         1: 0gM9nO8aCfkT81wAB6FtCesEwDg.roa (hash: Lfwi2k/qzNFayxWwQOnJuaS4g7hdO3qEEZMxYRqe+is=)
                          2: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: duLmE/MoC6GSR2MrKHiVavswFtsY89mEzfPz5bQtVnI=)
                          4: ETcH2IvsrV9frQQAiGHCydePvXc.roa (hash: vnxbYaqSpCvvPsvgeAGAJuaPg4alEmcLbxdQJvK4GFI=)
                          5: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          6: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          7: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          8: WWtCrJTOa2fdz1x4NrejDaidA4c.roa (hash: bNRJCU/5ggmed8Sa2EXYIbSVMg5Nfmrhzw8GYsZOcgY=)
                          9: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=)
                          10: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          11: f7e24_kc_woNPGchU49zRaiPPtg.roa (hash: rsVGF94CsaYZyejnnB2G7Jx9MOV3cb8+8hyyFUvoFDk=)
                          12: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          13: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          14: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          15: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          16: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          17: w3JXIRcbr6KwnMwme1orx9slU8I.roa (hash: VFCCyy87daugzyIA/V3roqMFDyUsgWDtMgKdLSeZBKc=)
                          18: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:64:9e:9d:44:d1:5d:69:44:1e:1a:19:1f:29:9a:0f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Dec 28 11:01:15 2025 GMT
            Not After : Dec 29 11:01:15 2025 GMT
        Subject: CN=878924793033853b3d2d13e61f7db0f25ba78edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e9:bf:0c:e3:88:22:08:9f:6e:91:b0:b7:86:
                    72:58:0b:ed:c8:43:3c:d7:57:0d:fb:f9:e9:1b:31:
                    49:64:c8:c2:10:86:bf:f3:1f:ac:91:d2:85:27:b9:
                    cd:f1:b1:21:85:bc:46:75:69:2b:85:b6:c1:da:a5:
                    02:50:90:ae:16:d6:a0:10:f9:6f:5c:50:ca:a0:32:
                    2c:f1:e9:a4:f8:fc:cd:4b:04:f1:42:1c:d4:d2:aa:
                    ee:c9:b9:49:a6:03:82:d3:10:f6:19:e6:9c:fe:1a:
                    c5:2b:9f:d3:fe:58:b5:29:dd:92:67:f2:87:89:ef:
                    f6:c5:7e:8b:94:88:f4:cc:9a:e3:6e:58:b9:53:ad:
                    66:3d:16:a5:e8:d4:55:27:cb:62:ce:cb:31:10:23:
                    49:e8:ce:18:97:76:dd:e2:9e:16:a2:0a:ab:95:60:
                    4f:e4:f0:26:8a:7e:30:13:42:69:e5:02:8e:a4:0a:
                    d6:14:6d:49:08:bc:9a:88:58:52:66:48:9a:74:4d:
                    fd:54:51:67:8f:2e:38:af:71:62:88:12:da:33:39:
                    e4:f3:04:ed:2d:19:6b:4f:95:98:83:ef:bf:8d:57:
                    2b:6f:2a:fc:1c:92:17:5c:3a:09:83:6c:42:0c:f4:
                    1d:75:f0:73:df:47:e2:2b:81:59:35:bb:c3:e2:73:
                    a5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:89:24:79:30:33:85:3B:3D:2D:13:E6:1F:7D:B0:F2:5B:A7:8E:DB
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:8e:56:4f:11:4d:64:df:0e:28:03:e1:13:5d:cb:83:84:fd:
         01:d0:14:9b:3a:9b:59:cf:c0:5a:bd:4b:89:d3:8a:1c:b0:be:
         ff:42:9c:2a:b3:72:97:63:f9:53:e2:87:23:f1:c1:1c:77:ed:
         2d:31:05:c4:43:d9:fb:2f:0b:8d:14:69:45:b6:d5:ce:5e:1f:
         e6:dd:3b:0a:1b:e4:0e:13:b8:25:88:47:d9:dd:2d:83:45:22:
         0e:00:93:a2:c1:c4:d8:f2:b6:29:d0:5a:6d:4b:4d:d8:dc:ee:
         90:6a:7c:d0:25:1d:01:bd:8f:ab:b0:8c:91:c7:ec:32:9c:3e:
         1e:3e:68:1d:c8:b5:6c:59:99:64:42:3b:04:d9:3a:29:89:db:
         cd:b9:d6:ba:8e:cf:ad:f2:f7:7d:7c:1a:d5:8b:3e:6d:23:c4:
         0b:00:d6:c7:05:0e:4a:16:47:0c:c5:32:d0:41:9c:ca:a0:4b:
         4e:87:18:37:ca:95:e3:a4:e0:d9:6e:06:e3:a3:1d:4f:ab:f7:
         f4:ea:52:6f:72:7e:3d:76:1f:c4:de:0f:4b:be:b2:fe:f6:76:
         96:58:43:c9:07:18:e0:09:23:a3:4b:90:16:64:1a:fe:4f:ae:
         66:cd:e2:cc:88:1f:80:7a:44:09:a6:bf:6e:73:a3:6f:32:da:
         ed:58:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 18:04:02 2025 by rpki-client