This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
File:                     e_OebrMTHs883c0MnjeMNS2kH8I.mft (raw, json)
Hash identifier:          g69kang8NEvEJz4Vtf0tpryk9sUXpZTEUy5hGal92e8=
Subject key identifier:   48:B0:CE:BC:82:78:54:92:3C:E8:DB:D3:DD:79:E6:C7:9D:0E:77:CD
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Certificate issuer:       /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial:       019AFCC3500E9ECB623569F4D22F3D00D2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
Manifest number:          10D8
Signing time:             Mon 08 Dec 2025 07:00:49 +0000
Manifest this update:     Mon 08 Dec 2025 07:00:49 +0000
Manifest next update:     Tue 09 Dec 2025 07:00:49 +0000
Files and hashes:         1: UbCWmkTBKtMgqtYfftK4bzNkfjc.roa (hash: 2USUqiqyvmda1iLGBaPyJ2mFdfz8AiGFv7Y7tVUma2g=)
                          2: e_OebrMTHs883c0MnjeMNS2kH8I.crl (hash: L0lulYNZNPV7FH415c8fWmz7CJefRpvxqrw7tGfFzb8=)
                          3: vAhoECj76DxTiQ3yLLf6mu-_BqI.roa (hash: nCQBvqDRV7DEKusg0hBSa9SwoVzc4dU3/3Bre1jok34=)
                          4: xZRqK0ehAUNFfp7bd5x7WM7WU48.roa (hash: RKiSJS4ui6TI89oyaWSjQ9KPJJo62REtrxZnTIi0/mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fc:c3:50:0e:9e:cb:62:35:69:f4:d2:2f:3d:00:d2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
        Validity
            Not Before: Dec  8 07:00:49 2025 GMT
            Not After : Dec  9 07:00:49 2025 GMT
        Subject: CN=48b0cebc827854923ce8dbd3dd79e6c79d0e77cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:8a:25:a2:74:af:7f:9f:a9:f9:eb:ad:88:
                    e9:41:0a:a5:f4:de:ca:09:2c:6c:d0:89:58:88:df:
                    56:80:84:0a:76:37:bf:42:24:2b:9f:b9:1b:8c:51:
                    b2:5d:65:33:05:7d:8c:4e:77:a7:bd:ff:98:7e:2a:
                    7a:78:91:f9:8f:57:08:2a:c3:67:94:ad:39:1d:0d:
                    7b:39:cc:1e:9f:95:ac:d7:9b:60:f9:17:43:9e:a3:
                    03:0f:69:14:3d:12:fc:09:2d:03:35:6d:94:44:d0:
                    f2:5c:d4:3d:ad:93:22:e8:32:ea:b9:9a:ed:81:9c:
                    36:14:c4:44:4e:f1:3b:08:d2:97:63:d7:0d:cd:54:
                    82:2f:9e:51:87:04:7e:45:05:8a:dd:f3:90:b8:e9:
                    af:11:f3:03:58:11:44:89:00:f5:a0:57:f1:93:c4:
                    05:bf:46:4a:e1:db:32:bd:9c:b4:fb:aa:28:1c:9c:
                    51:42:dd:08:3b:28:01:eb:ab:75:a9:a5:90:23:e9:
                    16:9b:59:f7:f8:31:1a:6f:c5:9c:e9:e8:1a:df:09:
                    42:db:be:df:2c:4c:67:82:9b:02:19:ff:f2:08:92:
                    dd:38:e1:f5:0d:bc:20:45:08:a0:56:d0:ad:8d:d4:
                    55:be:fd:00:55:36:f5:6c:1b:22:e8:c2:78:25:b9:
                    d7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B0:CE:BC:82:78:54:92:3C:E8:DB:D3:DD:79:E6:C7:9D:0E:77:CD
            X509v3 Authority Key Identifier:
                keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8e:27:c1:a5:1e:5e:93:ed:ab:06:80:2f:a9:3a:a4:8b:60:
         ba:f4:36:c9:5f:97:a1:c2:9c:03:ce:05:16:b8:51:37:59:b5:
         40:a5:61:76:00:98:ff:52:8a:77:45:32:17:6b:2a:11:5f:fe:
         9e:56:5a:0c:19:6e:f5:17:2d:a1:06:4b:4b:db:e8:0d:a1:b0:
         4d:5a:05:ab:3d:76:07:da:3b:67:e7:1e:de:bf:ef:78:cb:78:
         e4:56:e4:78:0c:b4:67:08:6f:47:cc:c3:5f:50:ad:10:44:1e:
         90:fe:e2:a2:71:95:25:ab:c1:b0:ab:04:fc:b2:4d:58:d3:b8:
         a8:c6:8d:21:38:a1:3e:ea:b4:a3:dc:33:3b:49:4f:e4:1e:10:
         36:87:6e:9f:2d:6c:2d:b4:b5:53:24:10:84:25:23:3c:b1:6d:
         48:56:32:68:b6:a4:b4:2e:95:07:d4:1e:ac:84:f9:4a:0e:05:
         45:2a:ca:07:d1:16:14:bd:40:e1:97:95:64:61:4c:1c:81:5a:
         b2:94:d2:1c:60:4d:84:f7:c9:f7:98:21:21:58:ad:7b:cd:67:
         fe:8d:2d:58:78:48:12:cb:46:1e:18:9c:96:0e:32:d7:e4:a3:
         cc:5c:38:d9:ee:da:b1:50:74:82:12:05:db:8b:e5:8d:28:60:
         96:aa:80:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 11:31:16 2025 by rpki-client