This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
File:                     eJJmn4GevY3S67qT8t0tPhonwjE.mft (raw, json)
Hash identifier:          M6tyyjaJro1qpikHIuzPa1ZDiAxATvCEzOb6iOiynoc=
Subject key identifier:   ED:1D:86:FB:31:C6:F2:33:49:F4:40:99:78:13:3B:D4:41:5A:DF:EE
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Certificate issuer:       /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial:       019B15A723CCF3A3618802845BF0A61BCCA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
Manifest number:          0A28
Signing time:             Sat 13 Dec 2025 03:00:33 +0000
Manifest this update:     Sat 13 Dec 2025 03:00:33 +0000
Manifest next update:     Sun 14 Dec 2025 03:00:33 +0000
Files and hashes:         1: 1RsOc1yR94fLSIN7RSYKbs-UV5E.roa (hash: JvuB+fj7uwNhBJutx6Epbo+jH2P6sNnioKWN+1JAw2E=)
                          2: YsAD0xYI7fSatmxxWy_MtAq3uA0.roa (hash: +cmsgKhF+fbBw56PZtc3rlBguWm90CrfqJ6VEbk7b+k=)
                          3: ZUR3BAP_7QG_ADM2oChuL6mE8nQ.roa (hash: QC0NJCXzeiGu8pGCymaMWOTKZLqngTi+89jFQkLRMjU=)
                          4: eJJmn4GevY3S67qT8t0tPhonwjE.crl (hash: ne3pSDcGO/GXrWcjU50dceJdIWmNNZxBT9kZQmFKV1k=)
                          5: vijUo-1OjT7vzMvb4RvZKsG7aPY.roa (hash: cH5H5sB4I0MW9+cJs76Nq2CGqjMRYzxzdgNA4qe2C1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 00:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:15:a7:23:cc:f3:a3:61:88:02:84:5b:f0:a6:1b:cc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
        Validity
            Not Before: Dec 13 03:00:33 2025 GMT
            Not After : Dec 14 03:00:33 2025 GMT
        Subject: CN=ed1d86fb31c6f23349f4409978133bd4415adfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:da:7c:a9:50:05:4f:2e:25:2d:a2:db:50:
                    1e:a8:a2:c2:bd:b2:0c:e4:1d:64:6c:e9:62:c0:33:
                    ab:d4:8f:56:73:91:94:6b:c1:14:b4:55:ce:a5:4a:
                    39:cc:d0:60:2a:c1:41:08:32:07:58:27:cb:ba:e4:
                    e3:39:ad:f8:1d:47:5e:ad:bd:33:2f:3f:0d:42:c7:
                    ac:ac:56:43:e4:e1:08:4c:18:71:de:2a:35:06:5d:
                    59:ba:2a:2e:22:20:ec:f8:35:00:08:0d:66:b5:8c:
                    36:1c:0c:09:77:a5:63:55:39:1d:91:8e:cb:42:05:
                    d7:56:f7:ea:9e:0c:42:8c:20:2a:75:bf:77:66:9a:
                    bf:80:02:05:79:b9:5c:c2:0e:89:af:59:28:da:a7:
                    f1:26:79:27:7d:a2:c7:b9:23:78:34:75:16:dc:41:
                    9f:86:39:16:77:9b:76:28:5d:07:2b:51:2d:c0:5e:
                    c2:48:d7:f7:0e:de:a7:45:c6:bb:b0:78:05:1e:7d:
                    47:e3:3b:72:fc:ba:56:55:22:d2:d3:ed:d5:ae:48:
                    cd:ca:3d:9d:0b:ac:51:bc:0d:1b:7e:a7:89:3f:7c:
                    5e:ae:29:8e:cc:ee:27:54:dc:5d:a0:39:43:fc:d9:
                    45:c4:a7:7e:8f:1c:8e:bd:e6:1f:70:ce:0e:2c:ed:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1D:86:FB:31:C6:F2:33:49:F4:40:99:78:13:3B:D4:41:5A:DF:EE
            X509v3 Authority Key Identifier:
                keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c8:c7:5e:fb:23:2f:4b:62:6b:60:a8:9f:d6:5a:a6:9a:45:
         8d:5c:08:b6:8c:1e:8b:f7:d6:3f:4d:5c:10:f0:eb:75:6e:df:
         5f:ca:7b:84:b7:c0:3d:ce:fc:f5:26:ed:62:0e:bb:d9:7d:5a:
         15:a2:18:0a:a9:54:d8:0d:4e:1b:1f:b7:2e:b1:ae:33:95:a4:
         4d:8c:62:35:10:15:60:24:c6:6c:70:bf:62:58:1a:22:8e:09:
         e1:4e:b9:9b:e2:c5:ec:f8:38:73:8d:a4:40:e8:7c:d4:1d:52:
         a6:8f:38:f9:1e:77:c0:7a:72:6b:ac:3f:b6:a7:c1:0d:e2:43:
         56:02:98:c8:41:aa:cc:99:42:ae:b0:53:af:53:f9:cc:71:37:
         5f:b4:9d:62:96:c8:bc:88:19:ac:d7:2b:79:3e:7c:64:57:5a:
         e3:4c:8c:e1:9d:22:f2:d8:31:04:f5:35:cd:0b:68:59:ce:6a:
         e9:7b:26:39:d2:6e:e8:69:4c:2d:cb:e6:25:ea:9b:2a:61:b1:
         48:8a:c2:26:4b:03:7a:9a:bd:3c:d7:eb:81:f7:ce:f2:73:d8:
         5b:17:d1:cc:b0:eb:53:87:34:56:41:34:93:89:ce:92:d2:75:
         1c:bf:10:f6:02:9b:7c:41:59:86:3b:fc:20:a2:f7:dd:d3:fe:
         fd:90:e3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 06:28:29 2025 by rpki-client