This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File:                     05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier:          +4vD9CX9VJIMoDvjTf3SchRBOLKPlv74nS9XCcTa79E=
Subject key identifier:   2E:3D:F6:BA:07:2C:6E:57:93:91:84:1C:29:CD:74:1D:59:D4:2A:97
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer:       /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial:       019B4A03F46DE3BC13F38BEF83499A2ECA35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number:          087B
Signing time:             Tue 23 Dec 2025 07:02:11 +0000
Manifest this update:     Tue 23 Dec 2025 07:02:11 +0000
Manifest next update:     Wed 24 Dec 2025 07:02:11 +0000
Files and hashes:         1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: keuHR4LuIjToWPmqKeBf513h9JwWGPBRMyH09lqjPZo=)
                          2: ACAbKZCGOdySYGyuoI7JMVLeL_g.roa (hash: R4mTIavVBLK7AnVZngIHkijkl9j+ypSt1m/eE9on3/4=)
                          3: y-31Qg8vN66n2f6X7cBZ6q-z1HE.roa (hash: AlYM9CLcvWsuEg6knMfGAoMvFzW08av73u5AUGfuSb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 07:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4a:03:f4:6d:e3:bc:13:f3:8b:ef:83:49:9a:2e:ca:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
        Validity
            Not Before: Dec 23 07:02:11 2025 GMT
            Not After : Dec 24 07:02:11 2025 GMT
        Subject: CN=2e3df6ba072c6e579391841c29cd741d59d42a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:62:f4:54:a7:88:7c:c2:bd:da:e5:c4:cc:
                    e9:c7:c3:aa:50:d3:06:01:ec:d2:88:6f:61:38:4d:
                    37:7a:34:17:ef:03:26:f9:af:67:4b:01:4e:00:1f:
                    cf:d5:8a:08:a7:c6:af:fe:23:de:c7:f3:39:33:60:
                    2e:c4:52:29:4b:06:25:86:26:fc:4a:ff:b6:b3:67:
                    09:06:17:64:62:c5:59:5d:28:eb:fd:dc:19:14:5c:
                    d7:57:ee:cb:0c:a9:88:76:99:36:2d:46:ac:18:88:
                    c8:dd:88:38:c0:60:36:ef:06:13:ae:1c:b8:e7:d0:
                    51:dc:ed:62:38:00:9c:bc:8e:35:11:05:84:f9:2e:
                    bb:a2:43:60:cd:07:b2:3f:af:ca:a4:02:55:3d:a1:
                    a4:b1:dc:33:c2:40:21:db:93:e8:f6:83:4e:0c:75:
                    cc:0c:99:91:8c:6c:de:f9:9d:4f:d8:30:7f:eb:13:
                    28:83:9c:28:c0:dc:d4:26:a3:30:2d:69:cb:69:9e:
                    df:a9:b4:7a:ac:2d:05:91:25:57:71:e7:62:3e:9a:
                    93:0e:c1:2d:d7:4c:03:5a:4f:07:e9:66:42:47:1a:
                    2f:6d:14:a8:25:6f:c9:da:4c:1b:20:19:6f:f0:b4:
                    9e:b4:a7:25:b6:18:f4:28:6a:94:2c:8a:54:24:72:
                    ec:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3D:F6:BA:07:2C:6E:57:93:91:84:1C:29:CD:74:1D:59:D4:2A:97
            X509v3 Authority Key Identifier:
                keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:19:56:9d:9c:84:8e:08:85:e9:4f:54:20:cd:34:96:a8:
         86:e4:b2:7b:07:91:a3:20:0c:da:dd:e2:56:48:b0:d0:d5:3f:
         9b:fd:00:f1:cf:35:07:5a:26:45:61:b1:3c:16:f9:cf:0b:08:
         01:84:0a:d4:84:cd:f0:f8:a8:9e:98:e0:3f:b2:c2:d5:f3:76:
         3f:a6:34:11:db:f1:33:82:1a:91:bc:6e:94:bd:68:2f:a7:04:
         35:2c:bb:4b:19:31:87:57:72:0e:b6:d7:cb:4d:71:85:75:1e:
         18:70:4e:84:b9:ca:23:4a:3d:41:4c:07:ac:55:b7:10:be:58:
         94:2a:68:52:dc:4a:d3:06:db:08:ae:72:49:8c:b5:8f:d1:91:
         ac:86:30:de:6d:88:d7:98:3f:07:cc:fd:a5:a9:37:88:30:e6:
         1b:92:dd:75:6f:a3:c9:d3:e1:18:8d:d3:67:22:84:22:48:f6:
         4e:33:e8:05:f6:14:31:22:5c:42:4e:e4:4b:55:48:94:45:5a:
         22:e1:ce:df:b5:f9:c1:bb:e3:31:1e:7d:17:16:31:a5:25:72:
         d7:bb:55:83:dc:3a:cc:0b:a5:62:7a:b2:da:f8:94:68:6a:73:
         f4:5f:a0:a1:dc:e4:e4:10:a5:51:9f:7d:5d:80:92:6a:e6:cf:
         46:01:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:31:50 2025 by rpki-client