This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
File:                     e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft (raw, json)
Hash identifier:          bPm7CU7JBZCwLH4jpbBa4WcB3HmB63hGBABDjpyOs54=
Subject key identifier:   E7:91:79:20:A6:6A:32:C2:BD:89:CB:E6:3B:7C:24:23:0D:1F:BE:B0
Authority key identifier: 7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
Certificate issuer:       /CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Certificate serial:       019B3343AD826F5351B24E8CB2C2B009C719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
Manifest number:          1221
Signing time:             Thu 18 Dec 2025 21:00:31 +0000
Manifest this update:     Thu 18 Dec 2025 21:00:31 +0000
Manifest next update:     Fri 19 Dec 2025 21:00:31 +0000
Files and hashes:         1: 1-fJmWKPsbMdUqgYTxdSqBQoJ3cY.roa (hash: FXd1EkC/KOtADwk2h9q6zCHuOQnU/RYSKRv48syIK80=)
                          2: 9KPfrwTfFRVyaYbxKiw1OGZQrSI.roa (hash: UY1UPsGvghj6PCWZfYzuCTpSPNsdGtDSEoWLKHoTyLY=)
                          3: e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl (hash: gtahBl2FxrKR9fNBy15mdwuA2lnWmrMmfPoxhxsCAP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:33:43:ad:82:6f:53:51:b2:4e:8c:b2:c2:b0:09:c7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
        Validity
            Not Before: Dec 18 21:00:31 2025 GMT
            Not After : Dec 19 21:00:31 2025 GMT
        Subject: CN=e7917920a66a32c2bd89cbe63b7c24230d1fbeb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:7b:f3:ad:45:d5:ea:08:cd:20:b2:de:d1:
                    20:c2:5c:f0:e6:ad:e5:e0:64:bb:eb:ca:57:7a:cc:
                    96:b6:43:d3:99:08:18:bc:88:da:66:d1:99:22:d1:
                    7d:5e:8a:66:0a:f5:34:1d:2a:cf:be:c0:09:3e:f1:
                    3d:15:ac:a4:7f:d3:56:fd:bd:61:1e:c8:5e:9e:f2:
                    46:32:90:bd:f4:33:84:95:16:ee:bb:f2:f0:ae:9e:
                    02:f3:ee:94:c6:2a:af:61:2e:06:41:8f:95:88:d9:
                    c6:72:72:0c:83:25:f6:9e:02:84:3e:97:61:9a:b1:
                    d2:c3:33:59:04:3f:3e:3c:fa:9e:c9:3a:52:e1:7a:
                    d6:cb:2e:6e:c3:08:23:eb:97:26:57:93:63:39:29:
                    6e:51:54:d3:81:c5:48:86:ed:56:a3:0a:b8:a3:e6:
                    6e:2a:a9:cc:50:82:0d:45:f6:42:18:b9:76:9a:df:
                    4b:9f:5c:5e:3e:8c:6f:7f:3d:5b:a7:ac:67:31:74:
                    74:e7:c7:16:f2:64:bd:ad:8f:41:ad:97:dd:3d:77:
                    e6:9f:69:67:dd:f0:fa:e4:95:c3:6a:d9:fa:00:e0:
                    21:28:d6:2b:0f:1e:db:92:b2:59:fb:e5:61:48:07:
                    ad:bf:1e:06:e7:17:d4:70:bd:b3:c2:2f:e8:23:ea:
                    63:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:79:20:A6:6A:32:C2:BD:89:CB:E6:3B:7C:24:23:0D:1F:BE:B0
            X509v3 Authority Key Identifier:
                keyid:7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:84:d6:46:f9:56:89:47:fd:c2:dd:93:a5:57:f3:3b:47:f5:
         33:b3:81:c3:2f:ef:05:60:c0:cc:59:a0:20:8b:15:53:41:6d:
         d4:84:6b:4d:fd:af:57:1a:1d:32:2b:64:03:8e:06:20:87:72:
         78:30:8e:3d:46:bd:4d:ba:d8:43:51:7f:b8:d1:7a:ce:fc:05:
         b3:b9:33:18:92:62:a9:20:96:e0:45:96:c7:45:2f:ee:05:ad:
         a5:77:a0:38:13:8a:cd:ca:68:be:61:f6:8a:f2:0d:1d:a0:c0:
         77:36:28:25:78:52:f5:bc:44:99:c6:bc:c7:70:b3:53:fa:42:
         3c:0c:ed:d1:f4:9f:28:5d:f2:91:fe:dd:55:fa:fb:d7:a8:13:
         f5:36:95:72:05:b1:82:5a:5d:4c:be:f7:9e:41:2a:66:be:b6:
         7b:1b:f9:e7:0f:6f:38:2b:13:d0:95:f7:67:7d:b5:c4:8b:2d:
         d8:fb:44:55:3e:63:64:03:3e:1a:cc:7b:bf:71:75:f8:4b:ec:
         5f:9f:72:20:b4:ca:fa:a5:3f:59:05:18:d7:9a:5e:2d:30:0c:
         ac:1c:27:65:52:27:20:d3:0e:e1:f3:c3:82:25:14:d2:9e:24:
         7b:4e:f5:e7:49:c7:a3:08:c4:ad:2d:f4:71:26:7e:f2:e6:36:
         0a:16:64:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:40:44 2025 by rpki-client