This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
File:                     eLHb4vrypuffpXTOVRkJYwFfHFM.mft (raw, json)
Hash identifier:          ipSABzfLAU88Rr8wYEU7R6y8rpel9f4TJTme/7EnQC4=
Subject key identifier:   24:9C:6B:43:1B:C7:8A:CF:DE:E5:3B:71:21:27:B2:9C:B2:FA:E4:62
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Certificate issuer:       /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial:       019B23D0C6392DA4B762A2BD8C38B98030FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
Manifest number:          1769
Signing time:             Mon 15 Dec 2025 21:00:43 +0000
Manifest this update:     Mon 15 Dec 2025 21:00:43 +0000
Manifest next update:     Tue 16 Dec 2025 21:00:43 +0000
Files and hashes:         1: WzTLOTiHe9vB3hAqlAy8pw18Doo.roa (hash: OSj0Xgv5CShMqmpg0KY2bWpFRvfkFgflayWsnGxuzf8=)
                          2: eLHb4vrypuffpXTOVRkJYwFfHFM.crl (hash: qzEgzgwe9IAaeTkwCwFwrHHFaA0j536HEuBCrAZ9bj0=)
                          3: fEhR-lCUkZVEdMm1RQIIE8pgNCo.roa (hash: o0vAsrKSY0T4tLyGeQ8NwF7vCi/bDXk5djLv/i3XQL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:d0:c6:39:2d:a4:b7:62:a2:bd:8c:38:b9:80:30:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
        Validity
            Not Before: Dec 15 21:00:43 2025 GMT
            Not After : Dec 16 21:00:43 2025 GMT
        Subject: CN=249c6b431bc78acfdee53b712127b29cb2fae462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:fa:67:87:e2:3c:d7:56:a3:fe:76:01:21:
                    70:42:31:f9:e0:ed:e0:e8:b8:25:5c:d5:85:eb:7e:
                    50:5e:81:a3:be:a3:86:dc:e3:0d:08:a0:f7:20:46:
                    84:e0:ba:b9:40:9a:a9:1e:18:11:49:72:b5:7a:d4:
                    30:96:ba:02:81:a1:84:b4:12:95:52:61:ad:5c:cb:
                    65:85:02:c2:db:be:79:5d:82:b4:6e:b0:0d:aa:36:
                    1a:b3:70:11:2b:85:41:5f:ce:c5:77:87:54:34:46:
                    c6:05:01:db:49:21:22:d6:66:d5:90:2e:52:f1:48:
                    25:91:1d:3c:35:43:71:9c:29:bb:07:25:19:12:97:
                    a6:7e:c4:60:14:b3:0f:68:99:09:97:83:7a:e0:ad:
                    7e:3e:86:fb:b5:58:df:ab:8d:59:26:24:02:c5:46:
                    c8:73:03:b2:35:e5:1a:eb:69:c9:a3:55:ce:42:d0:
                    30:a9:22:7a:1f:b5:b1:62:06:40:6b:da:2f:59:75:
                    c2:06:24:37:c0:06:a5:10:4b:0d:9c:51:a0:60:88:
                    a3:51:78:de:7d:42:94:d1:dc:bc:18:10:d9:3d:db:
                    97:69:3b:49:87:4b:25:35:bd:26:93:d8:82:6b:ad:
                    c6:28:24:3e:76:dc:00:3d:a4:08:ca:26:53:be:90:
                    70:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9C:6B:43:1B:C7:8A:CF:DE:E5:3B:71:21:27:B2:9C:B2:FA:E4:62
            X509v3 Authority Key Identifier:
                keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4d:51:99:50:84:f1:e0:31:94:f5:94:40:8d:fb:bb:f9:35:
         23:be:d1:70:11:9f:f9:10:e7:d3:f3:09:06:01:44:6d:1a:28:
         62:ed:9a:7c:c9:15:a9:74:be:51:1a:38:b6:7e:dc:8e:cd:34:
         87:be:b7:96:d8:47:9a:02:12:86:c6:3c:98:d7:30:d8:a2:69:
         8f:1d:46:d1:a6:3f:c2:fe:bb:0f:4e:a2:61:7d:da:33:6e:32:
         8b:86:14:6f:a8:e9:01:d5:8d:1b:93:cd:df:8f:d1:f3:d7:de:
         04:64:1a:de:6a:2d:3b:a1:18:96:e5:8d:6f:6f:f9:f6:01:c4:
         2c:e9:6d:50:c1:ce:ef:6c:73:36:d8:56:81:38:33:f8:d4:45:
         e5:11:e0:4c:71:f7:85:b6:86:f9:08:59:8e:3b:eb:7b:d3:05:
         3f:09:5c:67:76:89:e9:85:63:1e:ff:a0:62:4e:ff:43:53:fb:
         90:a7:b6:c0:39:e9:50:ce:07:6e:ac:4a:50:96:0a:eb:e1:91:
         95:54:6f:77:b4:01:ed:ab:c9:77:4b:b6:92:b7:fe:e3:e1:ae:
         f5:97:0f:91:d4:4a:85:aa:84:68:90:e0:21:6a:a9:68:a4:32:
         ab:ad:16:85:ce:73:ce:0f:c5:a6:9c:0e:67:66:b1:ff:6f:0d:
         35:1c:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:25:00 2025 by rpki-client