This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File:                     eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier:          agZnneH2zlZn50BOEz4qLhVHNuRL8/PXEyibd18nGb4=
Subject key identifier:   A5:E0:FD:51:F4:79:AE:EF:53:53:3E:2F:B8:45:76:E8:6D:EB:30:D0
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer:       /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial:       019AABDE2D5795312B783E3F0840C7A4EA33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number:          173F
Signing time:             Sat 22 Nov 2025 14:00:55 +0000
Manifest this update:     Sat 22 Nov 2025 14:00:55 +0000
Manifest next update:     Sun 23 Nov 2025 14:00:55 +0000
Files and hashes:         1: HCkGRctLJ1ePeWXWFjnQs-P5BH0.roa (hash: tw5rYUuFpBr4QpbNuBNtp2/1hdw23rZNSzLDyhsXnAY=)
                          2: RiNsdcvxD0PdXlr09eZFcKvk8jE.roa (hash: MWTuo9tYK/ZAX1ENyIoJDxzrn+48EPKp/JEGDGVE/Fc=)
                          3: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: opUKhMQ7g9jJmLJum4XyN6eOjsidAr1ohgUMh1Lpdkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ab:de:2d:57:95:31:2b:78:3e:3f:08:40:c7:a4:ea:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
        Validity
            Not Before: Nov 22 14:00:55 2025 GMT
            Not After : Nov 23 14:00:55 2025 GMT
        Subject: CN=a5e0fd51f479aeef53533e2fb84576e86deb30d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:c3:cc:be:d1:f6:15:8c:c3:d5:b8:ad:c0:
                    51:5b:e8:9a:a7:76:50:ad:82:73:33:ca:02:b0:f8:
                    08:aa:6b:9c:89:8c:bf:b6:15:f5:ef:4a:87:0a:c3:
                    96:42:93:f9:fc:78:9a:ae:ae:23:7a:fa:78:d1:b7:
                    6c:73:89:2e:cc:96:1f:37:66:dd:dd:e7:b4:17:b5:
                    6c:91:96:1c:a4:90:1e:83:c4:4e:96:e9:46:13:ac:
                    6b:a5:bc:14:50:38:7d:64:2c:a6:48:0f:18:7f:52:
                    6a:66:91:2c:19:27:1b:be:b9:3c:22:67:14:3e:0f:
                    e9:65:fc:b4:85:5f:e3:29:9b:bf:51:59:df:b5:fa:
                    91:76:fa:22:ae:24:61:d9:a2:b5:0a:42:88:50:37:
                    fe:02:02:b7:4f:ed:75:49:36:e8:7c:7a:83:9b:95:
                    9e:60:08:75:f1:20:6e:5a:0f:ac:cd:0b:ff:a7:4c:
                    93:66:42:23:7b:27:c6:2a:43:25:87:fa:92:73:8a:
                    8f:07:2b:66:ae:e4:2a:e4:eb:c4:e9:f9:9d:4d:2e:
                    4d:30:8d:fd:e6:6c:d8:3e:2a:57:4c:11:b6:dc:6e:
                    12:58:a8:58:01:d6:54:39:df:4b:79:77:f6:40:95:
                    61:10:a5:bf:f4:53:64:5f:c8:20:81:b8:a4:81:8c:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E0:FD:51:F4:79:AE:EF:53:53:3E:2F:B8:45:76:E8:6D:EB:30:D0
            X509v3 Authority Key Identifier:
                keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:53:e9:47:d7:c5:fc:b1:d1:61:ef:8f:f3:35:6a:2d:4a:2b:
         31:de:f7:fc:13:55:76:28:67:8a:7d:e7:c2:7f:6e:a0:ed:89:
         b1:03:4e:e4:b8:9d:fd:e7:f5:8f:0f:ae:4c:6d:87:6c:51:06:
         13:76:af:e9:c4:7f:66:c6:f9:a8:db:aa:68:ea:07:e2:7c:ab:
         37:4e:d6:47:f1:18:12:cb:b3:40:dd:37:28:2f:7a:a5:ef:10:
         a4:c3:68:96:c8:47:43:92:50:9f:b4:98:29:ec:54:dd:53:08:
         b9:7e:89:0e:ce:4b:9c:52:e4:da:3a:69:38:e6:41:b4:65:92:
         5f:86:98:4c:df:95:89:f6:0f:52:da:01:2f:1d:2f:75:87:e8:
         40:16:c3:1f:a1:2b:2b:83:bf:b8:c3:6a:cc:1e:49:14:c5:f4:
         bb:6b:76:17:9d:d5:a4:27:b4:c4:0a:52:7e:6e:cc:6b:5b:62:
         00:b8:0b:90:eb:7b:af:17:3c:66:4d:68:ed:88:63:b0:aa:3a:
         f7:f9:ed:69:83:c2:3e:d3:7b:51:c6:53:5d:6a:97:e0:92:57:
         ee:b3:92:07:61:32:e1:0a:67:0a:e8:3d:14:62:4a:a7:54:3f:
         bd:58:7f:96:2d:db:67:57:d8:4f:31:8b:e2:6e:20:a8:4b:df:
         e9:c8:26:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZqr3i1XlTEreD4/CEDHpOozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MGQxY2E3ODc2MTMxMGFjMzlhNzE0ZmY2MmYzYjkyYjJl
NzdkOGEwHhcNMjUxMTIyMTQwMDU1WhcNMjUxMTIzMTQwMDU1WjAzMTEwLwYDVQQD
EyhhNWUwZmQ1MWY0NzlhZWVmNTM1MzNlMmZiODQ1NzZlODZkZWIzMGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1DDzL7R9hWMw9W4rcBRW+iap3ZQ
rYJzM8oCsPgIqmuciYy/thX170qHCsOWQpP5/Hiarq4jevp40bdsc4kuzJYfN2bd
3ee0F7VskZYcpJAeg8ROlulGE6xrpbwUUDh9ZCymSA8Yf1JqZpEsGScbvrk8ImcU
Pg/pZfy0hV/jKZu/UVnftfqRdvoiriRh2aK1CkKIUDf+AgK3T+11STbofHqDm5We
YAh18SBuWg+szQv/p0yTZkIjeyfGKkMlh/qSc4qPBytmruQq5OvE6fmdTS5NMI39
5mzYPipXTBG23G4SWKhYAdZUOd9LeXf2QJVhEKW/9FNkX8gggbikgYyxnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXg/VH0ea7vU1M+L7hFduht6zDQMB8GA1UdIwQY
MBaAFHkNHKeHYTEKw5pxT/YvO5Ky532KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgt
YjhhZTE2YjM1YzMxLzEvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgtYjhhZTE2YjM1YzMx
LzEvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1PpR9fF
/LHRYe+P8zVqLUorMd73/BNVdihnin3nwn9uoO2JsQNO5Lid/ef1jw+uTG2HbFEG
E3av6cR/Zsb5qNuqaOoH4nyrN07WR/EYEsuzQN03KC96pe8QpMNolshHQ5JQn7SY
KexU3VMIuX6JDs5LnFLk2jppOOZBtGWSX4aYTN+VifYPUtoBLx0vdYfoQBbDH6Er
K4O/uMNqzB5JFMX0u2t2F53VpCe0xApSfm7Ma1tiALgLkOt7rxc8Zk1o7YhjsKo6
9/ntaYPCPtN7UcZTXWqX4JJX7rOSB2Ey4QpnCug9FGJKp1Q/vVh/li3bZ1fYTzGL
4m4gqEvf6cgmqg==
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:55:40 2025 by rpki-client