This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          6yvBxxa8iMuDqUg7FtHIlqDICZ2JJ4nIoxVK/PC2Dec=
Subject key identifier:   B6:F9:5F:34:B3:C5:F8:C4:E3:98:6F:96:7B:D9:61:22:43:2D:66:82
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       019B126FE1691D2D8D7B9099FB10CC5E25DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          0E96
Signing time:             Fri 12 Dec 2025 12:01:20 +0000
Manifest this update:     Fri 12 Dec 2025 12:01:20 +0000
Manifest next update:     Sat 13 Dec 2025 12:01:20 +0000
Files and hashes:         1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
                          2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
                          3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
                          4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: 2U3AvNcCk0LogtWf1mEHSibX+muznm48hbtjcyHSXww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 12:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:6f:e1:69:1d:2d:8d:7b:90:99:fb:10:cc:5e:25:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Dec 12 12:01:20 2025 GMT
            Not After : Dec 13 12:01:20 2025 GMT
        Subject: CN=b6f95f34b3c5f8c4e3986f967bd96122432d6682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:69:2d:a2:0f:55:5b:10:81:e3:07:7a:6d:
                    e2:bf:de:53:78:57:a3:3a:c8:67:7e:34:74:b3:47:
                    42:92:e3:c7:15:e6:6b:58:7b:38:5a:2c:9a:d2:f3:
                    cb:c4:26:36:95:20:1e:d2:b2:b2:3b:1b:ba:f0:37:
                    1a:a8:b3:dc:35:31:3f:20:65:1a:7c:6c:e6:19:e4:
                    c5:54:41:a2:ad:18:ec:be:bd:0d:2d:e3:5e:ad:11:
                    3d:9e:1f:44:6d:16:d7:d7:ff:f3:63:59:c7:2c:cf:
                    02:97:e6:e2:9e:b9:a7:4e:f8:45:13:e5:93:8e:b4:
                    5c:cb:5e:13:d2:a1:5e:14:1c:f5:51:a3:78:84:c4:
                    1f:fe:dd:7d:54:01:7d:1d:dd:40:43:4d:8b:9a:4e:
                    09:fa:f9:c8:28:0d:52:92:0d:a8:dc:9b:15:ef:78:
                    84:fc:07:3e:82:39:d1:ce:13:5c:8f:d8:82:35:4e:
                    9f:2d:8d:9b:f9:b6:f7:48:5a:3c:f4:b5:83:55:b0:
                    b8:b3:31:3a:2a:26:42:55:c6:99:fd:d4:ff:aa:43:
                    6f:28:4a:5b:25:52:0e:4b:46:9a:38:1b:46:a9:b1:
                    17:fb:87:e1:90:bc:e9:f9:19:88:b3:ac:68:3f:e4:
                    17:4d:72:72:d9:3f:21:29:b9:a3:9f:ba:2e:11:b0:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F9:5F:34:B3:C5:F8:C4:E3:98:6F:96:7B:D9:61:22:43:2D:66:82
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:8b:aa:17:90:85:b0:b0:62:ea:cd:c7:4e:33:de:96:5a:d6:
         96:1d:a8:e6:5d:51:13:ca:fc:7f:72:8e:df:1c:1d:06:2d:67:
         c3:7c:81:74:4a:c5:23:c5:f0:2e:20:2a:e3:e7:d3:4f:77:58:
         a7:64:c3:89:42:0c:48:00:af:f8:00:b2:5e:b2:58:d0:3a:c8:
         50:83:66:3c:7f:ed:b5:38:97:0e:3d:dc:05:35:28:be:30:d6:
         f6:cc:6d:e4:3c:7a:60:70:4a:92:42:14:a9:95:5f:fb:b3:f4:
         9f:06:cf:a7:8f:f1:24:c1:59:10:e7:0c:21:4e:92:16:3d:ba:
         20:82:b4:91:9d:7d:68:73:21:9a:c1:3e:94:12:18:4d:a8:95:
         c9:e0:86:6f:01:fe:c5:46:a3:f1:43:88:ce:a8:dc:a2:1c:c9:
         95:a6:d1:a9:1e:ce:52:0b:28:e5:c5:4a:99:c9:fe:68:a1:1e:
         0e:1b:f8:9a:ed:cc:71:76:63:ba:36:d8:ae:84:f2:27:04:da:
         6f:f9:ee:c8:60:4f:75:df:13:99:6e:22:de:af:b2:32:1d:36:
         d6:16:cf:ee:0f:68:20:fc:a0:b4:1f:ba:ff:87:02:e0:83:3b:
         3d:e4:8b:1f:1f:a9:39:36:9b:74:0a:7b:e8:a8:3d:61:ed:bd:
         68:60:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 19:30:43 2025 by rpki-client