This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File:                     EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier:          G4IAcRcTCLn9kTqoE9PJAXOHTXbtjObhcgRZgaftBg8=
Subject key identifier:   BA:52:9A:AA:CB:5C:AC:75:3D:B0:F4:03:94:74:0F:12:95:9B:C5:A6
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       019B24081617A910E7FDAC2DFB46DA1CC8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number:          179A
Signing time:             Mon 15 Dec 2025 22:01:08 +0000
Manifest this update:     Mon 15 Dec 2025 22:01:08 +0000
Manifest next update:     Tue 16 Dec 2025 22:01:08 +0000
Files and hashes:         1: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: ZsXR9UaYSnJTuMFRw+eXve6hAHs2V7ik69wr9ISxzaE=)
                          2: HvEy6S3Ot5506jaubdhYUPInfR8.roa (hash: +uwLnIF4Ta57G3IvwprmDCNh2cynoTtS6b+z70i12zs=)
                          3: RtFkcQWnyl0eaibrPpjcyJQVmQ8.roa (hash: YgjUDnpDx+gs6FXBtdlBFjgKFgPz6ZlzO+NWFvR2njc=)
                          4: Tp0auhJCmeeWmWKmCzIKG_vEZP4.roa (hash: 90pnLgqjS54drkkCBOnFNNLX5/NGGoYmxkCs4EGSwIc=)
                          5: bHI4QTonk3m080h4RB4RhN5M5CM.roa (hash: JmOuSUaL5aO6eJWDHsSKGkEflmXUZDl4Xm6SOZx0COY=)
                          6: mh9lIMJaI3H1RJqde6saqnmgfvE.roa (hash: T7iu0Z++bA+ic9xBY/awoTn5K/2Jk9xBYmpN5iNezhs=)
                          7: t1EepmAv0dwDhiBnrHwtKtXN_Yc.roa (hash: VYM0YIWjbegizmnVX9b/V1dVjXFx+63jBlM9wmcRlpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:08:16:17:a9:10:e7:fd:ac:2d:fb:46:da:1c:c8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Dec 15 22:01:08 2025 GMT
            Not After : Dec 16 22:01:08 2025 GMT
        Subject: CN=ba529aaacb5cac753db0f40394740f12959bc5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:00:ee:88:86:36:c6:86:eb:6b:e2:3b:e6:
                    39:91:9c:fa:f0:18:3d:26:f1:17:30:82:85:b6:df:
                    04:6a:6c:64:62:e1:67:09:c2:96:ef:ef:e4:57:60:
                    4d:bb:e9:19:93:de:f6:18:8f:29:d2:af:d7:4d:33:
                    9d:85:50:d7:80:1b:6e:6e:70:ea:00:a8:0e:47:05:
                    14:76:c5:f2:8a:1c:a3:22:26:d1:19:2b:61:bc:c1:
                    a8:b3:26:4c:2a:f0:c3:cd:4e:fd:b7:64:91:fb:e5:
                    ca:fd:b2:a2:5e:31:e4:b8:29:4c:bb:87:0f:0b:d5:
                    bf:0b:9e:09:02:11:49:8d:ff:eb:90:bb:bd:ab:56:
                    03:f6:a0:32:4a:f5:8f:77:9f:ce:bd:46:e2:2b:f3:
                    36:5d:16:cc:ff:3e:5f:97:49:d3:17:05:da:33:7c:
                    f5:92:34:0f:ad:5d:d1:04:de:e3:29:a5:b2:2e:31:
                    31:eb:cc:73:34:4c:22:da:22:21:60:a3:f2:9e:a8:
                    15:3d:81:61:2d:8d:1d:32:ac:53:98:2a:25:1b:f4:
                    26:4a:20:3f:bb:ce:4d:bb:7f:2b:db:b2:1d:9d:fb:
                    13:83:23:d2:f5:35:07:b7:2f:0b:f7:78:7d:d1:94:
                    ca:cd:c3:1b:17:7b:9d:f5:e3:eb:33:b9:c9:1d:b8:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:52:9A:AA:CB:5C:AC:75:3D:B0:F4:03:94:74:0F:12:95:9B:C5:A6
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:67:24:7c:1b:1a:6c:8f:20:35:30:ef:32:0d:88:2f:45:
         4b:93:28:ca:e0:56:fd:3f:11:e2:a2:be:c9:09:67:4a:c9:40:
         f7:ed:a7:e0:97:17:32:1a:a4:18:0c:70:db:85:58:d4:79:5a:
         b5:62:a3:f5:cb:ca:81:69:e2:8d:b7:10:97:56:72:36:d1:05:
         2e:6d:6d:cb:38:62:6d:9d:b8:99:88:fd:23:78:c7:a8:78:44:
         95:97:66:c5:31:31:0f:61:79:45:23:37:cb:76:98:42:d5:ad:
         68:eb:fa:d7:e1:cf:e6:5d:3d:12:8f:99:71:52:bf:02:02:8a:
         75:7e:76:af:7f:6b:5d:45:8b:6a:07:dd:3e:b0:47:4f:1a:ad:
         99:17:49:26:43:f8:2d:07:f4:96:07:66:da:78:ab:a7:eb:30:
         98:2c:07:a8:06:68:e8:4b:f1:58:0c:dc:c8:0b:4f:fd:0c:f7:
         a9:79:d2:8f:51:6a:0a:6d:26:40:fb:39:7a:47:dd:d9:0a:67:
         36:e1:10:aa:90:f9:97:96:c4:5f:38:4a:07:f6:2f:6e:ef:e4:
         ce:2d:20:ee:e4:94:ad:86:c8:02:1b:51:68:0c:f7:49:ec:f3:
         07:12:45:e7:61:7a:0d:05:5e:c9:3a:36:67:26:b1:59:64:2d:
         35:1d:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 02:35:41 2025 by rpki-client