This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
File:                     eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft (raw, json)
Hash identifier:          IXXHkkzsyJFQwG8NLcwigyEBIoL9UEpjlQutLt96Vcc=
Subject key identifier:   36:F5:01:37:78:86:DD:D1:51:41:ED:B4:1F:05:A0:5B:63:8F:40:B2
Authority key identifier: 79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
Certificate issuer:       /CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Certificate serial:       019B435C35FC834D05D878BB6CFE0103FD40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
Manifest number:          08DF
Signing time:             Mon 22 Dec 2025 00:01:15 +0000
Manifest this update:     Mon 22 Dec 2025 00:01:15 +0000
Manifest next update:     Tue 23 Dec 2025 00:01:15 +0000
Files and hashes:         1: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl (hash: COsA3uizf098NrBn8rLaLn5k8og7cIjFKeP6An2LPSM=)
                          2: mJE_Ax4JDpdyNPeWFMSVsXGju14.roa (hash: t5TGMLR0+nDNKqcsV3Ft/NZxzvRzL5m7zfzdz2TzA60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:43:5c:35:fc:83:4d:05:d8:78:bb:6c:fe:01:03:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e376c8e490d28620c24f97e2b933d62fd0238b
        Validity
            Not Before: Dec 22 00:01:15 2025 GMT
            Not After : Dec 23 00:01:15 2025 GMT
        Subject: CN=36f501377886ddd15141edb41f05a05b638f40b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:ea:54:6e:1d:f4:c8:27:f8:80:d5:78:81:
                    d0:e3:a7:5f:ba:3a:ee:83:10:ca:d8:66:8b:70:7c:
                    64:0e:97:79:d9:a9:24:b6:a8:51:ec:ac:29:33:6b:
                    1b:cf:4b:c7:2a:86:0b:07:27:a3:a5:fd:eb:76:dc:
                    13:05:93:fc:3a:f3:9f:c5:02:01:88:df:00:83:01:
                    a5:eb:08:2f:b2:d7:3d:26:eb:f1:d0:7d:b7:17:46:
                    67:94:4f:26:1a:6b:5a:d0:e3:d5:43:b8:23:22:8a:
                    bd:a2:e6:43:7a:f9:d1:de:59:be:a7:07:55:72:ea:
                    90:84:77:72:7e:65:ac:b6:aa:9c:08:fb:a4:d6:32:
                    8c:7d:02:00:b9:4b:8a:2f:fb:22:51:df:72:3c:10:
                    95:3b:72:f1:8e:04:98:cf:58:44:ce:79:29:f0:5b:
                    ad:66:d9:1a:04:3f:d0:ba:c4:a7:91:f8:49:96:20:
                    26:27:1b:41:7f:5a:6e:05:8d:57:1d:16:d8:46:4a:
                    ae:bc:cc:53:2b:3a:fc:28:48:34:8f:6b:d2:a7:83:
                    43:ad:a5:f4:30:70:0f:6d:6b:9d:67:97:a2:9a:b2:
                    90:a9:1a:e3:62:af:7c:18:65:a8:d6:ec:a5:bc:69:
                    87:ad:85:77:ed:d6:21:1e:1c:5a:dd:0c:19:73:ee:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F5:01:37:78:86:DD:D1:51:41:ED:B4:1F:05:A0:5B:63:8F:40:B2
            X509v3 Authority Key Identifier:
                keyid:79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:92:90:08:51:91:fc:95:7c:da:95:54:54:18:76:9a:b8:
         ad:48:9b:ff:f4:e5:ef:c0:c1:3f:e2:5d:94:c9:1f:bc:e3:b6:
         48:1f:09:fe:88:83:a2:1f:07:2a:89:98:e4:6e:83:8b:39:b1:
         c0:0f:c4:ce:74:8a:e7:d3:3f:81:51:48:3a:3b:01:a5:40:8a:
         04:8d:36:2d:78:07:94:d0:66:13:ea:55:38:5d:24:46:d4:37:
         24:2c:4a:e2:86:ad:33:24:ee:05:07:c3:53:7d:99:69:30:46:
         bc:8e:09:4e:5f:61:5a:c3:94:b0:2d:b0:af:36:9e:cd:a1:37:
         a6:13:7b:a8:61:d9:3d:3e:d3:2b:4a:d9:29:a7:3e:b6:8a:40:
         38:f9:3e:5e:f5:1a:df:25:3d:1d:4f:9f:02:47:10:70:30:33:
         67:74:9f:b3:c3:6b:c0:46:1e:d5:5d:7f:6f:ac:06:58:cc:12:
         c5:cf:f8:7b:ff:a9:ab:27:78:39:ff:50:0d:cb:83:d8:38:4a:
         31:d3:d6:7b:19:11:2c:79:d9:d6:95:c6:80:1a:3d:40:e1:aa:
         f0:f8:8d:b6:c0:8a:7e:9e:65:14:04:f2:77:64:5b:46:5e:c3:
         04:16:2b:1c:4a:4c:e3:14:68:19:70:d2:3a:1f:a3:31:ad:1e:
         a7:08:33:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:05:10 2025 by rpki-client