This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft
File:                     E-p4so8FT3L1Imrj7EVJgO0qEMk.mft (raw, json)
Hash identifier:          hFHLc9UMo00vmCAyVk172htk4QkspkeN5xFRVcQTNYs=
Subject key identifier:   1E:E4:3B:72:74:4D:D2:28:BB:02:75:96:C4:04:0E:9C:F5:32:4E:49
Authority key identifier: 13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9
Certificate issuer:       /CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
Certificate serial:       019B24AD2F057FF6C3B46F8C30F7FEED61E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft
Manifest number:          14A3
Signing time:             Tue 16 Dec 2025 01:01:28 +0000
Manifest this update:     Tue 16 Dec 2025 01:01:28 +0000
Manifest next update:     Wed 17 Dec 2025 01:01:28 +0000
Files and hashes:         1: 5KIIVyjGIk4Y46LFCgXlsbG0ceU.roa (hash: Xz1vxoc/2JzTYgWFNLP2b5HhiG4cOh6ASEmZ5MSoawI=)
                          2: 7Cbk56YMtk4eeHszepWGAY95j6o.roa (hash: bEel6cKTonKjgyIxRSSsFeCeLhlbBhq28O8ZUY+SPtI=)
                          3: E-p4so8FT3L1Imrj7EVJgO0qEMk.crl (hash: tCqShTOXNN63W7/UgX5iCbtJPEfcfc/34+nT/MHxkWI=)
                          4: hWX6adi1DHSjSUNi9HMTwr9YdEw.roa (hash: kJxS0MWK94QBq5QtXuWItPMzDt45pJLFeF1GUOWbjzs=)
                          5: qgj31LRN4cWBU3Ai7i2PLzFRJvY.roa (hash: uHmLYi1uCCoCGb9+gbErKo7gEZkoZurGlEJ/eIy9P8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 22:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:24:ad:2f:05:7f:f6:c3:b4:6f:8c:30:f7:fe:ed:61:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
        Validity
            Not Before: Dec 16 01:01:28 2025 GMT
            Not After : Dec 17 01:01:28 2025 GMT
        Subject: CN=1ee43b72744dd228bb027596c4040e9cf5324e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:bd:0c:30:a2:a4:34:df:5e:ac:40:b2:fb:
                    dd:b3:0d:a0:5c:b7:7e:de:eb:a0:97:e1:99:e2:f9:
                    43:ce:08:0d:6e:b9:c9:58:3f:03:8b:bf:09:5a:27:
                    02:ee:e4:f2:e2:7a:03:4b:15:00:06:0f:4f:fc:ba:
                    d5:00:87:f8:47:da:cd:01:d9:e2:ab:1b:ca:60:61:
                    ce:9a:ca:72:cb:07:27:df:e5:80:a5:f9:ff:de:40:
                    d8:8c:74:e9:ad:39:49:1e:c7:3a:c3:db:b6:a2:5f:
                    d8:ee:33:fb:0c:f7:93:50:3f:dd:97:2a:c4:af:71:
                    66:9f:96:b7:76:28:ba:64:34:4f:d1:6c:90:30:3e:
                    36:6c:6d:f0:aa:4a:a8:bc:9d:06:a1:b0:a5:5b:a2:
                    8e:55:66:0b:5a:df:4c:98:d4:56:2c:79:fd:5c:97:
                    d2:98:02:fe:16:a4:01:5d:cc:3e:27:28:f3:19:64:
                    18:4f:ee:fc:82:a0:ff:fe:15:0c:f4:96:f6:f2:56:
                    89:20:22:36:f0:ef:a5:98:c3:61:85:b3:4d:a2:6f:
                    c9:a5:4a:94:cf:5a:f3:6d:32:82:00:c8:f9:8b:9e:
                    af:94:c8:f9:37:df:30:9f:e6:42:03:68:aa:8c:11:
                    74:1a:52:e3:8b:05:59:56:b2:3b:1c:d4:f9:a1:7a:
                    77:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E4:3B:72:74:4D:D2:28:BB:02:75:96:C4:04:0E:9C:F5:32:4E:49
            X509v3 Authority Key Identifier:
                keyid:13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:b9:2e:4b:79:94:66:72:d4:c4:5e:fa:c4:87:a0:1a:ce:cc:
         70:ef:43:aa:d4:50:c3:dd:b1:c1:c1:58:9f:e2:ad:4b:a3:0b:
         a9:da:e0:1f:92:13:f5:36:64:91:9e:95:0a:e1:61:c6:9e:b0:
         6a:71:28:41:05:36:c9:df:04:68:c7:42:6d:2b:70:92:86:67:
         2f:c1:48:48:60:52:46:a5:40:75:1c:52:4d:d3:e7:a1:41:a8:
         bd:97:39:31:f2:b3:31:21:99:bf:52:91:c2:d8:6e:56:cc:c0:
         e1:4f:dd:2f:2e:d1:a3:f8:b2:b4:3a:c3:90:dd:11:a6:94:30:
         ec:fe:d3:b5:c2:2d:21:88:e8:22:86:ce:1d:db:c8:86:94:34:
         3a:e7:36:ac:79:b5:97:48:85:66:34:b6:07:51:7c:b8:b4:7f:
         c0:fe:ae:51:40:4a:59:8a:07:52:8f:8b:54:99:34:08:6f:93:
         d7:3f:cc:ec:49:6c:04:f9:ec:f8:23:34:79:05:2a:03:d0:71:
         fb:a3:42:d8:e9:49:33:87:cb:7f:ed:d9:21:03:ec:87:79:01:
         a3:ae:d8:aa:b1:2f:5b:b7:94:ae:f3:98:27:12:76:04:5d:b9:
         15:a4:02:b9:9d:2c:4e:ed:ef:dc:3a:b6:59:59:34:42:8e:03:
         c4:c1:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:55:55 2025 by rpki-client