This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
File:                     EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json)
Hash identifier:          7FjmQrCvbmr8pMjgMWncYqhO7jSkGqFQUnBLVZRu7NA=
Subject key identifier:   66:84:D5:EA:14:27:F2:3B:41:24:C4:38:EB:01:22:CC:CD:E7:5C:7F
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Certificate issuer:       /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial:       019B5A51EFADDF7298C839EB5753464E3BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
Manifest number:          1798
Signing time:             Fri 26 Dec 2025 11:01:17 +0000
Manifest this update:     Fri 26 Dec 2025 11:01:17 +0000
Manifest next update:     Sat 27 Dec 2025 11:01:17 +0000
Files and hashes:         1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: pP5/HfsUpV2Yh0H8ZacUU6LEsdXfTB6cPFM7PSaQvlk=)
                          2: WTVR86vnYs7BPStSbSDyoGuvJtI.roa (hash: +qhM9WKUBA3B9KCtQwGX3HjXjyrEypbbBCjk+fK/rjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:5a:51:ef:ad:df:72:98:c8:39:eb:57:53:46:4e:3b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
        Validity
            Not Before: Dec 26 11:01:17 2025 GMT
            Not After : Dec 27 11:01:17 2025 GMT
        Subject: CN=6684d5ea1427f23b4124c438eb0122cccde75c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:bf:d2:ac:a7:e8:34:e3:df:89:b4:55:10:
                    70:cf:fa:69:38:43:a9:bf:26:7b:54:c7:19:1b:d4:
                    04:49:cb:b6:9c:87:bf:d7:5a:9b:72:c7:a5:00:6d:
                    7a:23:5d:7d:d5:f9:cc:c0:2c:81:7a:f6:86:18:a4:
                    78:7f:60:39:b0:f2:df:8e:82:e9:bc:ae:43:fc:f1:
                    52:e6:eb:42:be:4b:62:50:4c:30:59:69:e3:ed:f8:
                    db:e1:e6:43:6e:4e:61:49:8f:df:4f:5a:49:ea:44:
                    17:bd:04:f2:aa:ee:96:6d:39:d9:b1:23:dc:a1:e5:
                    c5:43:45:d9:0b:04:b3:81:20:be:f9:25:af:2c:d5:
                    6b:e8:b6:83:2b:17:04:3b:ac:79:51:21:fb:2b:48:
                    2a:7c:73:2b:21:d4:95:26:6e:78:c0:06:2e:60:5e:
                    49:9c:90:ae:00:50:b6:9a:25:0b:09:11:2a:16:a1:
                    53:0a:ba:8c:55:bb:a5:70:3e:15:b4:ae:2a:b9:e7:
                    a4:6c:ec:11:1c:65:42:e4:87:80:1b:24:7b:63:19:
                    9c:b5:20:2d:af:2f:a4:22:c6:db:f5:6a:58:e0:ab:
                    43:99:d6:ef:5b:aa:9f:36:af:a1:0d:bc:73:c4:74:
                    03:7b:15:51:91:9d:20:f0:82:16:b9:d5:c3:57:71:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:84:D5:EA:14:27:F2:3B:41:24:C4:38:EB:01:22:CC:CD:E7:5C:7F
            X509v3 Authority Key Identifier:
                keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b3:b5:ad:b3:85:96:a5:18:88:31:d1:d0:08:07:3c:18:ed:
         16:5b:6e:c9:4d:ff:c5:66:26:8e:9c:75:94:a6:51:0a:4e:d0:
         d6:29:21:e8:c1:f2:6e:c3:6e:76:fe:ac:b6:7c:81:f2:ed:a0:
         29:fc:8f:ef:64:4d:de:a5:db:a6:f9:54:8b:f1:c0:fa:42:19:
         04:cb:65:91:48:b0:77:83:5b:c2:f1:e8:08:0b:1e:81:1e:07:
         8d:33:fc:cb:81:c4:67:4d:ac:c2:79:72:85:3f:a4:c7:4d:a3:
         94:5e:54:e7:7a:86:cf:8e:99:fb:25:b2:65:b0:06:34:f4:2e:
         47:d7:7d:9a:85:e3:aa:f0:2e:3b:9b:cc:84:0a:b0:0e:cc:e9:
         53:1a:eb:8f:ee:98:b3:c6:89:17:b9:d3:1a:db:f2:b3:7b:e8:
         0c:fe:28:c7:93:0a:d7:a9:5e:0a:f5:67:c9:d4:00:67:01:88:
         17:d9:73:f9:27:0f:67:f1:c9:ef:23:11:b0:14:9d:c9:ad:06:
         d8:6d:33:a9:6a:4f:84:3d:09:37:4e:0c:e0:f8:1f:66:54:ec:
         e8:74:fb:c1:2c:be:08:ee:5c:9a:83:c2:0f:8d:5e:76:c0:8f:
         20:7f:2e:a5:96:f9:9a:e3:d2:46:c7:87:20:97:ee:84:c7:e6:
         9a:97:35:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 14:19:41 2025 by rpki-client