This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
File:                     pyEILICrr5X61-pg88XsDgXijtw.mft (raw, json)
Hash identifier:          wklza6Z7ktyTNYNdPw2Sm2l1CGWMFSrBGKGwPQBrfQs=
Subject key identifier:   9B:FE:94:85:7D:E3:AA:0D:80:52:65:1C:AE:A3:55:5B:38:24:AE:AB
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Certificate issuer:       /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial:       019B2219883332B7544937E327CF8584C486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
Manifest number:          0E61
Signing time:             Mon 15 Dec 2025 13:00:57 +0000
Manifest this update:     Mon 15 Dec 2025 13:00:57 +0000
Manifest next update:     Tue 16 Dec 2025 13:00:57 +0000
Files and hashes:         1: 3tu6ClYuvbDBR6KTKvf_i26_sNM.roa (hash: mscne+X+jfLaHAfi9bV23pNVKutqYHuT+pdDSC+aYJQ=)
                          2: pyEILICrr5X61-pg88XsDgXijtw.crl (hash: O6t/SQcJjkOu5d8si1qOhWB5FK1d5W8u/6Y87+9rUsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:22:19:88:33:32:b7:54:49:37:e3:27:cf:85:84:c4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
        Validity
            Not Before: Dec 15 13:00:57 2025 GMT
            Not After : Dec 16 13:00:57 2025 GMT
        Subject: CN=9bfe94857de3aa0d8052651caea3555b3824aeab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:f3:3c:ce:f9:66:3c:f9:d9:3c:9c:b5:04:
                    4f:a9:88:d3:06:38:c0:ae:71:fc:27:de:5b:c1:8f:
                    dd:17:e5:54:ca:bc:cf:dc:db:c9:ea:d2:90:8f:5a:
                    24:d1:c4:92:c1:c7:ef:3f:f3:e2:5a:a8:14:1d:d7:
                    77:e5:7a:09:a4:36:26:e1:fd:2d:0c:f7:0e:f7:40:
                    66:b2:4f:ef:9c:89:85:68:8b:09:82:1d:b0:8b:4a:
                    ef:ad:3f:a2:0f:ea:2c:1b:8a:ce:41:18:e1:68:4d:
                    c0:ef:d4:d3:96:44:82:fd:f2:8e:92:76:e0:0d:0a:
                    7d:9c:20:df:d7:32:6b:17:14:65:0e:09:7e:b6:15:
                    4a:06:be:e1:a3:c6:86:66:db:48:25:35:e5:dc:ac:
                    fc:f1:99:57:0c:ac:02:ad:a6:db:42:0b:47:14:1d:
                    ac:ee:24:60:f8:e0:26:e6:a2:48:06:a7:8e:54:be:
                    92:68:40:5d:e7:f1:1c:fd:f2:c1:01:e1:92:00:92:
                    d9:71:91:19:0e:b0:fe:c8:46:09:dc:cc:9e:29:07:
                    da:2f:6c:dd:fd:24:96:17:76:51:41:2b:9e:8d:56:
                    c6:43:0e:95:cd:cd:c2:0e:93:c4:d0:46:93:da:86:
                    51:8a:6b:6a:b6:23:4a:48:16:0c:44:cd:8b:a9:49:
                    65:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FE:94:85:7D:E3:AA:0D:80:52:65:1C:AE:A3:55:5B:38:24:AE:AB
            X509v3 Authority Key Identifier:
                keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:75:56:a2:35:b3:69:f9:b2:02:06:50:38:ea:3f:d2:58:02:
         9f:49:42:d2:ad:cd:f1:e3:db:93:de:8a:9a:e0:98:e4:9c:87:
         b1:00:50:34:e5:06:ac:8e:01:4c:c5:68:7f:e3:d1:cb:5a:03:
         b5:1d:96:e6:a5:b5:aa:7f:2a:88:15:1b:5a:12:82:03:ff:99:
         9e:9b:87:4c:78:e9:f9:f1:e7:08:d0:22:80:ad:67:c5:ab:b9:
         7b:e2:cf:b6:52:b4:0d:15:08:9a:6d:43:93:40:76:e4:d1:87:
         30:f4:c4:fb:cd:90:99:c3:c5:db:21:e9:a9:a1:ff:f9:6a:1a:
         a7:d3:3b:0b:6d:88:23:a0:03:23:e7:69:16:96:40:f1:bd:dc:
         a0:d4:7a:94:a4:07:e3:03:b6:80:ad:f6:f6:7f:7f:92:cd:be:
         dc:66:9d:2b:ad:ef:92:46:97:fd:9b:06:0a:32:05:74:f9:67:
         cc:a0:fa:f9:b2:13:7b:2a:56:2b:62:70:2c:1d:44:03:30:e0:
         fa:3d:a5:84:75:bd:6f:db:62:46:7f:46:ba:c2:8f:e6:2f:0e:
         7e:a6:28:bc:37:c2:59:8a:ca:2b:01:37:bc:60:6a:aa:36:ee:
         19:2a:30:d2:e1:f7:ce:72:cb:69:07:63:41:d9:df:06:fb:d0:
         45:98:5f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 14:42:43 2025 by rpki-client