This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
File:                     EkTc4rRccfRbr4tTxonr36y6_sM.mft (raw, json)
Hash identifier:          PJmRdZwhLYwfKiRwnA4qzxvKvsSjqMqSPVmNfsesfog=
Subject key identifier:   9E:2D:39:0C:5A:77:73:10:D1:19:C2:CD:A3:4A:77:40:D3:EA:AF:CC
Authority key identifier: 12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3
Certificate issuer:       /CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
Certificate serial:       019B5A5198695FE9C19FF58C8358C6BEF20C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
Manifest number:          0753
Signing time:             Fri 26 Dec 2025 11:00:55 +0000
Manifest this update:     Fri 26 Dec 2025 11:00:55 +0000
Manifest next update:     Sat 27 Dec 2025 11:00:55 +0000
Files and hashes:         1: EkTc4rRccfRbr4tTxonr36y6_sM.crl (hash: xt0jqyTSlZEm7Bm/r/l5PGcHX97AQEWRigrWf/oQ43g=)
                          2: V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa (hash: 6AdRoLcNqCj4S98SDLUI166TyStTtXm58bK7uoecjZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:51:98:69:5f:e9:c1:9f:f5:8c:83:58:c6:be:f2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3
        Validity
            Not Before: Dec 26 11:00:55 2025 GMT
            Not After : Dec 27 11:00:55 2025 GMT
        Subject: CN=9e2d390c5a777310d119c2cda34a7740d3eaafcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:c4:15:a8:d6:fa:2d:ac:e3:32:b5:9f:6e:
                    a8:5e:02:6f:e6:70:69:34:32:ad:a3:e4:46:7d:eb:
                    71:88:cb:59:49:b3:4f:a0:c3:73:17:e4:58:39:86:
                    dc:15:92:7d:3d:11:ad:ec:6d:22:34:27:e4:87:95:
                    8a:82:bd:75:90:a4:8b:3e:fe:f5:00:67:7a:60:77:
                    8a:2c:ae:10:3a:05:97:01:f4:3c:b1:a3:a6:75:59:
                    01:91:38:7c:95:ad:54:56:46:02:8c:7a:e2:15:51:
                    76:ed:56:ab:9e:c8:41:88:33:a3:da:97:b2:ea:05:
                    d6:cb:77:d8:c7:d4:3e:04:84:9b:8e:49:ac:44:6f:
                    2d:f3:5b:ec:61:2c:c1:46:f1:84:84:b2:55:2c:9b:
                    83:7c:a0:12:f9:f6:8f:b2:6c:6f:6f:71:b6:97:f5:
                    26:0a:50:f2:20:79:12:dc:f1:57:8f:7c:07:22:bc:
                    e0:dc:f4:62:80:ad:06:56:3e:f3:d9:22:8b:aa:d8:
                    3e:85:ee:91:df:35:8f:16:86:66:0c:91:dd:86:f8:
                    3c:a7:0c:5d:18:2b:55:19:b9:56:55:6d:f3:f5:d9:
                    77:99:b7:87:68:e3:ed:75:c1:60:ca:49:06:9c:70:
                    b7:f7:f5:43:76:35:df:24:c1:9e:93:c5:f7:93:bd:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2D:39:0C:5A:77:73:10:D1:19:C2:CD:A3:4A:77:40:D3:EA:AF:CC
            X509v3 Authority Key Identifier:
                keyid:12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:be:34:c9:52:30:19:49:2b:b5:d9:be:6c:b4:04:dd:a2:ad:
         60:2d:ea:46:82:a0:29:bd:e2:7e:74:64:f6:5e:e1:8c:0d:af:
         6e:95:14:3f:2c:1f:ab:39:99:32:e8:3b:7e:e3:0f:32:1d:26:
         42:28:a1:ff:63:d0:37:c8:b4:38:57:e3:93:89:6e:cb:7b:0d:
         e2:13:24:0d:f3:2f:a3:7c:d9:8b:12:5e:5b:07:36:c3:7b:26:
         14:f0:c3:d4:01:5a:8d:d4:83:bc:fd:7a:62:7c:6c:73:4e:47:
         90:e0:74:f8:f8:bb:6b:83:e6:cd:3f:88:08:c5:8d:86:79:82:
         d6:ae:54:ef:6e:40:42:79:ec:83:ed:49:3b:fd:dc:6d:15:b7:
         33:c0:78:63:cd:73:3a:3a:b7:2a:83:a9:cf:17:1d:79:6b:12:
         5e:55:64:b9:9f:09:53:6b:b8:d1:1a:0b:0c:60:43:cd:a0:88:
         cb:5b:15:f0:6b:ce:5c:6f:3a:45:1b:de:c2:7c:cf:43:33:a6:
         89:68:d3:58:a1:68:ce:23:a7:29:90:7d:80:7f:d3:38:08:da:
         55:92:98:7a:ff:28:ad:8b:14:0b:47:27:52:64:e2:5c:c8:38:
         5b:54:74:dd:d6:d5:d1:f1:27:92:e5:94:ac:25:d1:03:b5:ac:
         0e:3a:48:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:17:23 2025 by rpki-client